Audit users ability to create new shared drives

보통레벨 1수동 검토google-workspace

설명

Organizations should determine if all users should have the ability to create new shared drives. Organizations should allow users to create shared drives only if it is allowed under your organization's DLP restrictions and meets your organization's requirements. By default, when a user account is deleted all the data in their personal drive is deleted as well. In this case, administrators should transfer ownership of a user's files to another user. Note: See additional information on transferring files.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Ensure Prevent users in <Company> from creating new shared drives is un-checked

조치 방법

조치 방식: 가이드 또는 인프라 패치

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Set Prevent users in <Company> from creating new shared drives to unchecked 7. Select Save

속성

운영 체제: 모두
태그: google-workspaceloggingsaas
참고 자료: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.1 Audit users ability to create new shared drives