Allow external sharing with only trusted domains

Help for Google Workspace users and Classroom teachers

Supported editions for this feature: Business Starter, Standard, and Plus; Enterprise; Education and Enterprise for Education; Nonprofits; G Suite Business; Essentials (domain verified).  Compare your edition

Let your users share files with only certain organizations outside of your business or school. Add the organization's domain to a list of trusted domains, and then choose sharing setting for your users.

Services that work with trusted domains

  • Drive, Docs, Sheets, Slides, and Sites: To share files with your organization, users in the trusted domain must be signed in to their Google Workspace account.

    To share with users who don't use Google Workspace, you can require a PIN (Personal Identification Number) to verify their identity. Learn more about settings for Drive and Sites.
  • Classroom: When you put a domain on your allowlist, your users can join classes in that domain and their users can join your classes. Learn more.
  • Data Studio: Learn about Data Studio sharing permissions

Managing the allowlist

  • You create one allowlist that includes all trusted domains.
  • If you have Enterprise, Education, Nonprofits, G Suite Business, or Essentials (domain-verified) edition: You can turn the allowlist on or off for a group or organizational unit. With Business Starter, Standard, and Plus, the allowlist applies to your entire organization.
  • In the allowlist, you can add a primary or secondary domain, domain alias, or subdomain. For example, if you want to share with users at sales.solarmora.com, add this subdomain to the allowlist.

Add a trusted domain to your allowlist

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Domains.
  3. Click Whitelisted domains.
  4. Click Add new.
  5. Enter the domain or multiple domains separated by commas. You can add up to 200 domains at time.
  6. Click Add. Repeat to add more domains.
  7. Click Save.
  8. To confirm that a domain is a Google Workspace or Education edition trusted domain, check the allowlist in the sharing settings for Drive.
    1. From the Admin console Home page, go to Appsand thenGoogle Workspaceand thenDrive and Docs.
    2. Click Sharing settingsand thenSharing optionsand thenView configured whitelisted domains.

      Organizations that aren't using Google Workspace are listed as incompatible. Your users can't share files with these domains.

Give sharing access to domains on your allowlist

Remove a domain from your allowlist

To stop sharing between the domain and your organization, remove the domain from your allowlist. Users do not receive notification of the access change.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Domains.
  3. Click Whitelisted domains.
  4. Point to the domain name and click Remove.
  5. Click Remove from whitelist. Changes typically take effect within minutes, but can take up to 24 hours. To confirm the changes, check your Drive sharing permissions or Classroom class membership.
Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue