Allow external sharing with only trusted domains

For IT administrators of Google Workspace Google for Education

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; Nonprofits; G Suite Business. Compare your edition

Let your users share files with only certain organizations outside of your business or school. Add the organization's domain to your allowlist of trusted domains, and then choose sharing settings for your users.

Google services that work with trusted domains

  • Drive (includes Docs, Sheets, Slides) and Sites:
    Users can share files only with the domains on the allowlist. Learn more about sharing settings for Drive and Sites, and how to share with non-Google Accounts.
  • Classroom:When you put a domain on the allowlist, your users can join classes in that domain and their users can join your classes. Learn more.
  • Chat: Users in a trusted domain can chat with your organization. Depending on your Google Workspace edition, your users can create or join 1:1 messages or rooms that include users in a trusted domain. Learn about external chat options.
  • Looker Studio: Learn about Looker Studio sharing permissions.

How the allowlist works

  • You have one allowlist that includes all your trusted domains. Drive, Sites, Looker Studio, and Classroom settings use the same allowlist.
  • If you have Google Workspace Business Standard or Business Plus: The allowlist applies to all your users. Your users can share externally only with trusted domains.
  • If you have Google Workspace Enterprise, Education, Nonprofits, G Suite Business: You can turn the allowlist on or off for a group or organizational unit.

Domains in the allowlist

  • You can use a primary or secondary domain, domain alias, or subdomain. For example, if you want to share with users at, add this subdomain to the allowlist.
  • Trusted domains that use Google Workspace Essentials must be domain-verified (not email-verified) to receive Drive file shares from your users.
  • Google service accounts (domain name ends with "") can't be used as trusted domains. Learn more

Set up a trusted domain

Open all   |   Close all

Add a trusted domain to your allowlist
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. In the Admin console, go to Menu ""and then"" Accountand thenDomains.
  3. Click Allowlisted domains.
  4. Click Add domain.
  5. Enter the domain, subdomain, or multiple domains separated by commas. You can add up to 200 domains at time.
  6. Click Add. Repeat to add more domains.
  7. Click Save.
Give sharing access to trusted domains
Remove a domain from your allowlist

To stop sharing between the domain and your organization, remove the domain from your allowlist. Users do not receive a notification about the change.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. In the Admin console, go to Menu ""and then"" Accountand thenDomains.
  3. Click Allowlisted domains.
  4. Point to the domain name and click Remove.
  5. Click Remove domain. Changes typically take effect within minutes, but can take up to 24 hours. To confirm the changes, check your Drive sharing permissions or Classroom class membership.

If you can't share with a domain on the allowlist:

  1. Go to the Sharing settings for the service, such as Drive or Classroom.
  2. Below Allowlisted domains, click View configure allowlisted domains.
  3. Check for domains with the alert, "Incompatible with allowlisted domains"

  1. Check the reasons that the domain isn't on the allowlist:
  • The domain name might be misspelled.
  • The domain is a Google Service account (name ends in ""), which isn't supported as a trusted domain. Learn more
  • For Classroom: Sharing isn't available because the domain isn't using Google Workspace Education Fundamentals or Google Workspace Education Plus.

  • For Drive: The domain isn't using Google Workspace. Follow steps to allow sharing with non-Google accounts Or the domain is using an email-verified Google Workspace Essentials edition. Only domain-verified editions can be used in the allowlist.
  • For Looker Studio: Check the sharing settings for Looker Studio.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Clear search
Close search
Google apps
Main menu
Search Help Center