Audit old Google Drive links and inherited folder access

Drive permissions can outlive the reason you created them. A link in an old message may still work, and a file may inherit access from its parent folder. An audit is about the effective audience, not just the word “Private” in a filename. Start with sensitive folders rather than trying to review every item at once.

Review a folder and its files​

1. Sign in to the intended personal or work Drive account. Pick a folder with invoices, identity documents or old projects. Open Share on that folder and list named people plus General access.
2. If General access says Anyone with the link, decide whether anonymous access is still needed. Change it to Restricted when it is not, and review whether recipients need Editor rather than Viewer access.
3. Open several important files inside the folder and inspect their Share panels. Google explains that folder permissions can apply to contents, and you may need to change the parent folder to narrow a file's audience.
4. Test with a trusted collaborator who should retain access. Record what you changed and warn affected people before removing access to a shared workflow. Repeat for other high-value folders and externally shared items.

Revocation is not recall​

A person who already downloaded or copied the file may still have it. A link alone also does not tell you who has used it. Google's sharing guide explains General access and roles; its file-access guide explains why access requests occur. If a file disappeared rather than being overshared, use our missing-file checklist before changing permissions.