The announcement that landed in the wrong inbox
Google's Workspace Updates blog posted "Enhanced external sharing insights now available in Drive Inventory Reporting" in August 2026, rolling out from 14 August. If you run a Business Standard domain, someone has probably forwarded it with "can we get this?" The honest answer is no, not on your edition – but the question it answers is one you can still answer with the tools you have. Here is what the new fields do, who gets them, and what the rest of us do instead.
What the new fields actually do
Drive Inventory Reporting is Google's export of Drive file metadata – size, labels, who each file is shared with, not content – into a BigQuery project you own. Weekly by default, daily if you turn that on, each export overwriting the previous one.
The August change adds what Google calls "granular external sharing fields", which work by "automatically consolidating direct permissions, group memberships, and public links into clear signals" that a file is exposed outside the organisation. Three things are new in practice:
- One field to say a file is externally exposed, whatever the route – a direct share to an outside address, membership of a Google Group that has an outside member, or an anyone-with-the-link setting.
- A distinction between human users, service accounts, and files published to the web, so a share to an integration's robot account is not counted the same as a share to a person.
- Cross-referencing with Data Loss Prevention metadata, so you can ask "which externally exposed files also match a DLP rule" in one query.
That is genuinely useful. The group consolidation in particular closes a hole every manual audit has: a file shared with an internal group looks internal until you check who is in the group. Google notes that large Google Groups can extend processing time, which tells you how much work that step is doing.
The three conditions – all of them apply
First, the edition. Availability is Enterprise Standard and Plus, Education Standard and Plus, Frontline Plus, Enterprise Essentials Plus, and Cloud Identity Premium. Business Starter, Standard and Plus are not on the list, because Drive Inventory Reporting itself is not on those editions.
Second, a BigQuery project with billing enabled. Google's sizing guidance is roughly 1.5 GB per million files, and the queries you run against it are BigQuery queries, billed as such. Google also says the export may miss some files.
Third, it is off. Google's getting-started line: the feature "will be OFF by default and can be enabled via the 'External sharing calculations' setting under Drive inventory report settings in the Google Admin console." Rollout is gradual, up to 15 days, on both Rapid and Scheduled Release tracks. Even an Enterprise Standard admin has to find the setting, switch it on and wait for the next export before there is anything to query.
On Business Standard, that is three doors and the first one is locked. Our edition-by-edition table of Drive reporting tools covers the rest of what sits behind it.
What a Business Standard admin can do today
The question the new fields answer is "which files are exposed outside the organisation, by any route, right now". Here is how far Business Standard takes you.
Sharing policy. Menu → Apps → Google Workspace → Drive and Docs → Sharing settings → Sharing options. Off, allowlisted domains only, or on with optional warnings, per organisational unit. It does not find existing exposure, but it stops the number growing while you audit.
Sharing history. Menu → Reporting → Audit and investigation → Drive log events. Filter on the Visibility change attribute, widen the date range from the seven-day default to the six months Google retains, and export to Sheets. It is a history, not a current map, and public-link viewers appear as anonymous – but it tells you which files and users to look at first.
Shared Drives. Menu → Apps → Google Workspace → Drive and Docs → Manage shared drives. The admin view lists every shared drive, filters for drives with no members or no managers, and lets you change membership, access levels and per-drive sharing settings. Outside members with Google Accounts show up in the member list.
My Drive, one user at a time. There is no admin-side search across other users' Drives from the Drive UI. Each user can run sharedwith:external owner:me and sharedwith:public owner:me, or use the People filter chip and pick "Anyone with the link", on their own Drive. That is a request to every user, with a deadline. The external sharing report guide has a template for that ask.
Groups. The one thing the new fields do that the steps above do not is unfold Google Groups. By hand: list your groups with external members, then treat any file shared with those groups as external.
Where native tools stop on Business Standard
That gets you policy, history, shared-drive membership and a stack of per-user search results. It does not give you one current-state list of every externally exposed file across every My Drive and every Shared Drive – which is precisely what the new BigQuery fields produce, and what your edition does not include.
The org-wide answer without the BigQuery bill
Drive Guard for Admins is built for that gap. A Workspace admin installs it once from the Marketplace and it deploys to every user; nobody installs anything. It scans every user's My Drive and every Shared Drive and shows public links, external shares and legacy access on one dashboard, with exports. No BigQuery project, no per-query cost.
It reports; you fix, in the sharing dialog or Manage shared drives – revoking from inside the tool is on the roadmap, not live today. It does not do the DLP cross-reference Google's new fields do; if you need that, Enterprise Standard plus BigQuery is the route. For the full manual method, start with how to audit Google Drive access across the organisation.
Sources
- Enhanced external sharing insights now available in Drive Inventory Reporting – quotes ("granular external sharing fields", "automatically consolidating direct permissions, group memberships, and public links into clear signals", the OFF-by-default line and 'External sharing calculations' setting name), rollout pace (gradual, up to 15 days, from 14 August 2026), availability list, large-groups note. Post is dated 17 August 2026 on the page; rollout start is 14 August 2026.
- Export your organization's Drive inventory – what is exported, weekly/daily, overwrite, BigQuery billing, ~1.5 GB per 1M files, may miss files, edition list
- Drive log events – path, 7-day default, Visibility change attribute, anonymous external users, export to Sheets/CSV
- Data retention and lag times – 6-month retention
- Manage external sharing for your organization – sharing options path and choices, per-OU
- Manage shared drives as an admin – path, filters, member management
- Find files shared with "anyone with a link" (Stanford UIT) – People filter chip method
- Google Drive search operators –
sharedwith:public owner:me,sharedwith:external owner:me. Re-read 2026-09-09.