Google Drive Security Audit Automation

This workflow is ideal for:

• IT Security Teams: To regularly audit and manage file permissions in Google Drive.
• Compliance Officers: To ensure adherence to data protection policies by identifying overly permissive file sharing settings.
• Project Managers: To monitor access to project-related documents and maintain control over sensitive information.
• Small Business Owners: To keep track of shared documents and prevent unauthorized access to critical business data.

This workflow addresses the challenge of managing file permissions in Google Drive by automating the process of auditing recently modified documents. It identifies files that are shared publicly or with external users, which could pose security risks. By generating a daily report, it helps organizations maintain better control over who has access to their documents, reducing the likelihood of data breaches and ensuring compliance with internal policies.

1. Scheduled Trigger: The workflow is set to run daily at 6 AM, automatically initiating the audit process.
2. Create New Sheet: A new Google Sheet titled audit-YYYYMMDD is created to store the results of the audit.
3. Get Recently Active Documents: The workflow retrieves documents modified in the last 24 hours from Google Drive, including their permissions settings.
4. Filter Documents: It filters out documents shared with anyone or external users, focusing on those that may require review.
5. Normalize Fields: Relevant fields such as file_id, file_name, user, and role are extracted and organized for reporting.
6. Aggregate Results: The workflow aggregates the filtered data into rows for easy insertion into the Google Sheet.
7. Append to New Sheet: The aggregated results are appended to the newly created Google Sheet.
8. Send Email Report: Finally, an email report is generated and sent to a designated recipient, summarizing the findings and including links to the audited files for review.