Configure Google Drive file sharing for Assignments LTI™/Google Drive LTI™

This article is for Google Workspace administrators.

If you allow users from external domains to access your domain’s Drive files or share Drive files with your domain, you need to allow file sharing outside of your organization. Google Workspace administrators for both domains need to make changes in their Google Admin console.

Turning on file sharing for external domains also allows your users to share files with users outside of their domain. You can allow file sharing with any external user or only with domains on an allowlist. For your users, you can make the same sharing rules for everyone. Or, only allow certain groups or departments.

Option 1: Allow file sharing with any external user

To allow files owned by users in your domain to be shared with anyone outside of your domain:

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsGoogle WorkspaceDrive and Docs.
3. Click Sharing settings  Sharing options.
4. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

5. Under Sharing outside of your domain, select On. 
6. Check the Allow users in your domain to publish files on the web or make them visible to the world as public or unlisted files box.
7. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

Option 2: Allow file sharing only with domains on your allowlist

When you apply settings to a domain on your allowlist, they apply to the whole organization. There are not separate allowlists for each organizational unit. For details, go to Use an allowlist for trusted domains.

To allow file sharing with domains only on your allowlist:

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsGoogle WorkspaceDrive and Docs.
3. Click Sharing settings  Sharing options.
4. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

5. Under Sharing outside of organization, select Allowlisted Domains.
6. Optional: To remind your users when they are sharing outside of your domain, check the For files owned by users in organization, warn when sharing with users in allowlisted domains box.
7. Optional: To let your users get files from users in domains not on your allowlist, check the Allow users in organization to receive files from users outside of allowlisted domains box.
8. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).