Remove organization access

173 views
Skip to first unread message

Dena Szpilzinger

unread,
Feb 6, 2023, 9:20:20 AM2/6/23
to GAM for Google Workspace
Someone accidentally changed the share setting on a lot of folders to be accessible by anyone in the organization. How can I revert it all back to "restricted"?

It looks like the person who did it had editor access to folders across a few users...so I am chasing my tail trying to shut this breach down quickly.

Thanks for the help.
Dena

Dena Szpilzinger

unread,
Feb 6, 2023, 9:21:44 AM2/6/23
to GAM for Google Workspace
Also, is there a way to pinpoint who probably made the change with GAM?

Ross Scroggs

unread,
Feb 6, 2023, 10:49:53 AM2/6/23
to google-ap...@googlegroups.com
Dena,

Get the File ID for any one of the folders; replace <ID> with the actual ID below
gam report drive query "doc_id==<ID>" event change_user_access


gam user ow...@domain.com show drivefileacls <ID>
Look for a section like this:

    Domain Name (2/3)

      id: 168709166716663006xyz

      type: domain

      domain: domain.com

      role: reader

      allowFileDiscovery: False


For each file do this (a CSV file can be used)

gam user ow...@domain.com delete drivefileacl <ID> id:168709166716663006xyz


 

Send Meet/Zoom invitation to discuss details,

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/d1f2f37b-7cf0-447d-9887-4d11a993f11an%40googlegroups.com.


--

Dena Szpilzinger

unread,
Feb 6, 2023, 12:28:41 PM2/6/23
to google-ap...@googlegroups.com
Thanks, I am on zoom

https://zoom.us/j/3823931181

-- 
Dena Szpilzinger
Director of Technology
Manhattan High School for Girls
154 East 70th Street
New York, NY 10021
212-737-6800, x121


You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/YLXT9fpib5c/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS_prQUVvs_gC-M3hqnfeHF6%2BECj3ZwQkw2i_xEGXXaHxA%40mail.gmail.com.

Ross Scroggs

unread,
Feb 6, 2023, 12:37:14 PM2/6/23
to google-ap...@googlegroups.com
Dena,

I'm on another call, will join soon

Ross



--

Dena Szpilzinger

unread,
Feb 6, 2023, 12:37:58 PM2/6/23
to google-ap...@googlegroups.com
Great, thanks.

-- 
Dena Szpilzinger
Director of Technology
Manhattan High School for Girls
154 East 70th Street
New York, NY 10021
212-737-6800, x121

Reply all
Reply to author
Forward
0 new messages