Allow external sharing with only trusted domains

For IT administrators of Google Workspace & Google for Education

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Standard, Teaching and Learning Upgrade, and Plus; Nonprofits; G Suite Business; Essentials (domain verified).  Compare your edition

Let your users share files with only certain organizations outside of your business or school. Add the organization's domain to your allowlist of trusted domains, and then choose sharing settings for your users.

Google services that work with trusted domains

  • Drive (includes Docs, Sheets, Slides) and Sites:
    Users in a trusted domain can share files with your organization. Learn more about sharing settings for Drive and Sites, and how to share with non-Google Accounts.
  • Classroom: When you put a domain on your allowlist, your users can join classes in that domain and their users can join your classes. Learn more.
  • Chat: Users in a trusted domain can chat with your organization. Depending on your Google Workspace edition, your users can create or join 1:1 messages or rooms that include users in a trusted domain. Learn about external chat options.
  • Data Studio: Learn about Data Studio sharing permissions.

How the allowlist works

  • You have one allowlist that includes all your trusted domains. Drive, Sites, Data Studio, and Classroom settings use the same allowlist.
  • If you have Google Workspace Business Standard or Business Plus: The allowlist applies to all your users. Your users can share externally only with trusted domains.
  • If you have Google Workspace Enterprise, Education, Nonprofits, G Suite Business, or Essentials (domain-verified): You can turn the allowlist on or off for a group or organizational unit.
  • In the allowlist, you can add a primary or secondary domain, domain alias, or subdomain. For example, if you want to share with users at sales.solarmora.com, add this subdomain to the allowlist.
  • Google service accounts (domain name ends with "gserviceaccount.com") can't be used as trusted domains. Learn more 
     
1. Add a trusted domain to your allowlist
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Domains.
  3. Click Allowlisted domains.
  4. Click Add new.
  5. Enter the domain, subdomain, or multiple domains separated by commas. You can add up to 200 domains at time.
  6. Click Add. Repeat to add more domains.
  7. Click Save.
2. Give sharing access to trusted domains

Remove a domain from your allowlist

To stop sharing between the domain and your organization, remove the domain from your allowlist. Users do not receive a notification about the change.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Domains.
  3. Click Allowlisted domains.
  4. Point to the domain name and click Remove.
  5. Click Remove from allowlist. Changes typically take effect within minutes, but can take up to 24 hours. To confirm the changes, check your Drive sharing permissions or Classroom class membership.

Troubleshooting

If you can't share with a domain on the allowlist:

  1. Go to the Sharing settings for the service, such as Drive or Classroom.
  2. Below Allowlisted domains, click View configure allowlisted domains.
  3. Check for domains with the alert, "Incompatible with allowlisted domains"
  1. Check the reasons that the domain isn't on the allowlist:
  • The domain name might be misspelled.
  • The domain is a Google Service account (name ends in "gserviceaccount.com"), which isn't supported as a trusted domain. Learn more
  • For Classroom: Sharing isn't available because the domain isn't using Google Workspace Education Fundamentals or Google Workspace Education Plus.

  • For Drive: The domain isn't using Google Workspace. Follow steps to allow sharing with non-Google accounts.

  • For Data Studio: Check the sharing settings for Data Studio.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false