Clear
Group Ownership
Fewer
Open Shares
Faster
On/Offboarding
The Challenge
As teams grew, Drive shares multiplied: “anyone with the link,” leftover accounts after exits, and no consistent group structure. Collaboration worked — until someone left or a sensitive folder leaked into the wrong inbox.
The Approach
- Org model — Department groups as the default for Drive and Calendar, not ad-hoc emails.
- Sharing defaults — Tightened external sharing and required explicit review for broad links.
- Lifecycle — Joiners get role-based groups on day one; leavers lose access the same day with a checklist.
- Admin hygiene — Periodic audits of dormant users, external shares, and admin roles.
Results
Onboarding and offboarding became predictable. Sensitive folders stopped travelling via random links. Teams still collaborated quickly — but through owned groups instead of personal sprawl.
Takeaway
Workspace is infrastructure. Treat permissions like ERP access: least privilege, named owners, and a review cadence.