Google Workspace · Permissions

See who can access what across all your Shared Drives

DriveScope is a permissions dashboard that scans your Google Shared Drives and shows you a complete map of who has access to every file and folder. Answer questions like "What can Jane access?" or "Who can see this folder?" in seconds — not hours.

🔒 Privacy-first: We only read permission metadata. Your file contents stay private.

Join the waitlist How it works No file contents stored — metadata only
DriveScope concept: tree, permissions and AI suggestions A visual of shared drives hierarchy, users connected to folders/files, and an AI bot proposing fixes. Shared Drives Finance Engineering Marketing Vendors Permissions · Engineering/Specs Principal Access Source [email protected] Editor Inherited [email protected] Viewer Group [email protected] Viewer Direct Anyone with link Viewer Link DriveScope AI Suggestions 2 public links detected — make private? Vendor access on 4 folders — reduce to Viewer Weekly audit ready — export CSV/Sheets
Simple concept

What is DriveScope?

Think of DriveScope as a permission map for your entire Google Workspace. Instead of clicking through folders one by one, you get a complete view of who can access what — all in one dashboard.

Scans Everything

Connects to Google Drive, scans all Shared Drives, folders, and files, and reads who has access to each item.

Builds a Map

Creates a searchable graph showing every permission: who has Viewer/Editor/Manager access, where it came from (inherited or direct), and which items are risky.

Answers Questions

Search by user ("What can Jane access?") or by resource ("Who can see this folder?") and get instant answers across all Shared Drives.

Example: Offboarding an Employee

Without DriveScope: Manually check each Shared Drive → folder → file. Takes 4+ hours and you might miss something.

With DriveScope: Type "[email protected]" → see all 47 files/folders she can access → export list → remove access. Takes 5 minutes.

Product preview

See your permission map in action

After connecting, DriveScope builds a complete map of your Shared Drives. The dashboard shows:

Left panel: Tree view

All Shared Drives → folders → files in a navigable hierarchy. Click any item to see its permissions.

Right panel: Permissions

Who has access, their role (Viewer/Editor/Manager), whether it's inherited or direct, and risk flags.

Search & filter

Type a user email to see everything they can access, or search for a folder to see who can access it.

AI insights

Automatically flags risky shares (external domains, public links) and suggests improvements.

Shared Drives
  • Finance
  • Engineering
  • Marketing
  • Vendors
Permissions · Engineering / Specs
Principal Access Source Risk
[email protected] Editor Inherited
[email protected] Viewer Group
[email protected] Viewer Direct External
Anyone with link Viewer Link Public
DriveScope AI
  • • 2 public links detected — make private?
  • • Vendor access on 4 folders — reduce to Viewer
  • • Weekly audit ready — export to Sheets
Why now

The problem with Google Drive permissions

Google's built‑in UI works for one file, but breaks down at scale. Permissions are scattered across drives, folders, and links — making audits slow and risky shares invisible.

Google Drive's scattered view

Click each file individually
Right-click → Share → View permissions (one at a time)
No cross-drive search
Can't find "what can Jane access?" across all Shared Drives
Hidden public links
"Anyone with link" shares buried in nested folders
Result: Hours of manual work, missed risks

DriveScope's unified view

One dashboard, all permissions
Tree view shows every drive → folder → file with access lists
Instant user/resource filters
Type "Jane" → see everything she can access across all drives
AI flags risky shares
Automatically highlights external domains and public links
Result: Complete audit in minutes, not hours

Real-world pain points

  • No holistic visibility

    Permissions live on drives, folders, links, and files — scattered across Google's UI. No single view shows the full picture.

    Example: 12 Shared Drives × 50 folders each = 600+ permission checks
  • External & public links go unnoticed

    Risky shares drift in over time. "Anyone with link" and external domains hide in nested folders, invisible until you dig.

    Example: [email protected] has Editor access on Finance folder
  • Audits take forever

    Manual clicking through folders doesn't scale. A quarterly audit can take days, and you still miss things.

    Example: 4 hours to audit one Shared Drive manually
What you get

Our solution

Purpose‑built for Shared Drives. DriveScope turns scattered ACLs into a single, searchable map and guides you to least‑privilege with AI.

Visual permission map

  • • Live tree: Drives → Folders → Files
  • • Inherited vs. direct access indicators
  • • Source of access: group, link, direct

Filters that matter

  • • By user: “What can Jane access?”
  • • By item: “Who can see this folder?”
  • • Export CSV / Google Sheets

AI‑assisted remediation

  • • Detect external/public links
  • • Suggest least‑privilege changes
  • • Generate audit‑ready reports
Real scenarios

When DriveScope helps

Common situations where DriveScope saves hours and prevents security risks.

Employee Offboarding

Problem: Jane is leaving. You need to remove her access from all Shared Drives, but don't know where she has permissions.

DriveScope: Search "[email protected]" → see all 47 files/folders → export list → remove access systematically. Saves 4+ hours.

Security Audit

Problem: Quarterly compliance audit requires a complete list of who has access to what. Manual process takes days.

DriveScope: Run scan → filter by risk → export to Google Sheets → share with auditors. Complete in 30 minutes.

Find Risky Shares

Problem: Need to find all external users and "Anyone with link" shares across dozens of Shared Drives.

DriveScope: AI automatically flags external domains and public links → review flagged items → fix risky permissions. Find all risks instantly.

Compliance Reporting

Problem: Need to prove to auditors that sensitive folders are properly secured. No easy way to generate reports.

DriveScope: Filter sensitive folders → export permission list → share CSV/Sheets with compliance team. Audit-ready reports.

Onboarding New Team

Problem: New team member needs access to Engineering Shared Drive. Need to understand current permission structure first.

DriveScope: View Engineering drive → see who has what access → understand inheritance → grant appropriate permissions. Make informed decisions.

Least-Privilege Cleanup

Problem: Many users have Editor access when they only need Viewer. Hard to identify and fix at scale.

DriveScope: AI suggests over-permissions → review suggestions → reduce access levels systematically. Improve security posture.

Results

Why DriveScope works

See the difference DriveScope makes in real-world scenarios.

4+ hrs
Without DriveScope
5 min
With DriveScope

Time to audit one Shared Drive

600+
Manual clicks
1 search
With DriveScope

To find "what can Jane access?" across 12 Shared Drives

Hidden
Risky shares
Auto-flagged
With DriveScope

AI detects external domains and public links automatically

Before DriveScope

  • Click through each Shared Drive manually
  • Right-click each file → Share → View permissions
  • No way to search across all drives
  • Easy to miss external shares in nested folders
  • Export requires manual copy-paste

With DriveScope

  • One dashboard shows all Shared Drives at once
  • Click any item to see permissions instantly
  • Search by user or resource across everything
  • AI flags external/public shares automatically
  • One-click export to CSV or Google Sheets
Simple setup

How it works

Three steps to complete visibility. Connect once, scan automatically, get insights instantly.

  1. 1
    Connect with Google

    Secure OAuth2 connection with read‑only Drive scope. We never access file contents — only metadata (IDs, names, paths, permissions).

    Scope: drive.readonly
    No file content access
  2. 2
    Scan & map

    We enumerate all Shared Drives, folders, and files. Build a permission graph showing who can access what, from where.

    Automatic scanning
    Incremental updates, scheduled runs
  3. 3
    AI insights

    DriveScope AI analyzes the permission graph, flags risky shares (external/public), and suggests least‑privilege improvements.

    Smart detection
    External domains, public links, over-permissions
Capabilities

Features

Everything you need to audit, visualize, and secure your Shared Drive permissions.

Available Now

Core features

User & resource filters

Filter by user email or resource path. Find "what can Jane access?" or "who can see this folder?" instantly.

External/public link detection

Automatically flag external domains and "Anyone with link" shares. See risk levels at a glance.

CSV / Google Sheets export

Export filtered results to CSV or directly to Google Sheets for compliance audits and reporting.

Incremental scans & scheduling

Only scan what changed since last run. Schedule weekly or monthly audits automatically.

Role-aware permission viewing

See Viewer, Editor, Manager roles clearly. Understand inherited vs. direct permissions.

Hierarchical tree view

Visual tree structure showing Shared Drives → folders → files with expand/collapse navigation.

Coming in v0.2+

Future features

In-app permission editing

Add/remove users, change roles directly from DriveScope with full audit logging.

Alerts & notifications

Email alerts for new external shares, public links, or sudden permission changes.

Plans

Simple, transparent pricing

Start free, upgrade when you need advanced features. All plans include secure OAuth and metadata-only scanning.

Free
$0 /month

Perfect for trying DriveScope

  • Read‑only permission audit
  • Hierarchical tree view
  • Permission map visualization
  • Up to 1 Shared Drive
Get started free
Most Popular
Pro
$19 /month

For teams that need advanced auditing

  • Everything in Free
  • User & resource filters
  • CSV / Google Sheets export
  • Scheduled scans (weekly/monthly)
  • Unlimited Shared Drives
  • AI risk detection
Start 14-day trial

No credit card required

Enterprise
Custom

For organizations with advanced needs

  • Everything in Pro
  • In-app permission editing
  • Admin dashboard & RBAC
  • Email alerts & notifications
  • Self-hosted option
  • Dedicated support & SLA
Contact sales

All plans include: Secure OAuth2 (drive.readonly), metadata-only scanning, no file content access, and Google's OAuth verification.

Need help choosing? Contact us

Trust

Security & Compliance

Your data security is our priority. We use minimal scopes, store no file contents, and follow Google's strict verification standards.

OAuth2 (read‑only)

Secure OAuth2 connection with drive.readonly scope only. We never request write access or file content permissions.

✓ Google verified
Following Google's OAuth verification process
Privacy‑first

We only store metadata: file IDs, names, folder paths, permission lists (ACLs), and scan timestamps. Zero file content is ever accessed or stored.

✓ Metadata only
No file contents, ever
Enterprise options

Optional Admin SDK integration for group/user resolution. Self-hosted deployment available for maximum privacy and control.

✓ Self-hosted available
Deploy on your own GCP project

Compliance & Standards

Google Verified

OAuth app verification

Read-Only Access

drive.readonly scope

No File Content

Metadata only

Self-Hosted

Enterprise option

Our Security Promise

We never access, read, or store your file contents. We only process permission metadata to build the access map. All connections use Google's secure OAuth2, and we follow their verification requirements. Your files stay private.

OAuth2 verified Metadata only Self-hosted option
Early Access

Get early access to DriveScope

Join the waitlist and be among the first to visualize your Shared Drive permissions. We're rolling out access gradually — you'll get an invite as soon as we're ready for your domain.

Secure OAuth (read-only)

Google-verified OAuth2 with drive.readonly scope only

Metadata only — never file contents

We only process permission data, never your files

AI-powered insights

Get AI suggestions for least-privilege and risk detection

No spam, ever. We'll only email you about your waitlist status and early access updates.

Request early access

Takes less than a minute

Questions

Frequently asked questions

Everything you need to know about DriveScope, how it works, and what it does for your Shared Drives.

What is DriveScope and how does it work?

DriveScope is a permissions visualization dashboard for Google Shared Drives. It connects via OAuth2 (read-only), scans your Shared Drives to build a permission map, and displays it in a visual tree format.

How it works: After you connect with Google OAuth, DriveScope enumerates all your Shared Drives, folders, and files. For each item, it reads the access control list (ACL) — who has Viewer, Editor, or Manager access. It then builds a searchable graph that lets you filter by user ("what can Jane access?") or by resource ("who can see this folder?").

Think of it as Google Drive's native "Share" dialog, but for your entire organization — all in one place, searchable, and with AI-powered risk detection.

Do you read or store file contents?

No, absolutely not. DriveScope only processes permission metadata. We never access, read, or store your file contents.

What we store: File and folder IDs, names, folder paths (hierarchy), permission lists (who has what access level), and scan timestamps.

We use Google's drive.readonly scope, which explicitly excludes file content access. Your documents, spreadsheets, and files remain completely private.

Do I need Google Workspace admin access?

For basic Drive scanning: No admin access required. Any user with access to Shared Drives can connect and scan the drives they can see.

For enhanced features: Admin SDK integration (optional) requires admin access and provides richer context like resolving Google Groups to their members and better organization-wide visibility.

Most users start with Drive-only scanning (no admin needed) and add Admin SDK later if they want group expansion.

Can I edit permissions directly from DriveScope?

MVP (v0.1): Read-only auditing. You can view and export permissions, but changes must be made in Google Drive.

Coming in v0.2+: In-app permission editing with add/remove users, change access levels, full audit log, bulk operations, and confirmation prompts.

For now, DriveScope excels at finding permission issues. Soon, it'll help you fix them too.

Still have questions?

We're here to help. Join the waitlist and we'll answer any questions during onboarding.

Join the waitlist
Join the waitlist today

Ready to bring clarity to your Shared Drives?

Start with a safe read‑only scan. Get AI‑powered insights in minutes. Export clean audits and upgrade to editing when you're ready.

Privacy‑first
OAuth: drive.readonly
Metadata only