Restrict editor download drive file

[Aadinath]

As of now workspace does not allow you to restrict editors of files to download or share or copy,  file on their personal computer which can lead to data breach ( data leak) 

If We don’t give edit option to employees then all data has to be entered by myself which does not help . 

if I give edit option to employees then they can access file remotely , can download file on their own computer ( without authorisation) then can leak or sell that data . 

due this problem I am unable to use cloud space . 

what use is convenience when data leak can happen on cloud .   

[Penelope]

You are right that the only thing that editors can be prevented from doing is sharing the file and then to prevent also the downloading, then the person has to be a commented or a viewer (https://support.google.com/a/users/answer/9308868?hl=en). And then even for a shared drive, you can prevent commenters and viewers from downloading https://support.google.com/a/users/answer/9310251#4.3 but editors would still be able to do that and to prevent sharing outside of your organization, you can ensure that setting is set correctly. 
Never hesitate to submit feedback within Google Drive concerning wanting more features to keep files safe. 

[Aadinath]

Dear Penelope

i tried your suggestion but i am afraid person with editor right can download file on personal computer .

its being assumed that person who has is given editor right can do no wrong related to data leak . 

[Penelope]

Hey aadinath, as I tried to indicate you can not prevent editors from downloading a file. If you want to prevent the person from downloading, change the person to viewer or commenter and make sure the preventing download option is enabled. Read https://support.google.com/a/users/answer/9310251#4.3.

Submit feedback to Google about this from within the Google Drive product. 

[icrew]

Hi @Aadinath :

Two ideas:

1. Check out Google's Endpoint Management tools, at https://workspace.google.com/products/admin/endpoint/ . I'm not at all an exert, but as I understand it, it would allow you to exercise a fair bit of control over the devices being used to access Workspace at your organization. There are also third-party tools that (based on my limited understanding) are even more sophisticated than Google's tools in this space.
2. You could instead/in addition put your Google Workspace behind an SSO solution like Okta, which could then give you more control over where and when your users were permitted to access Workspace.

Hope that helps, at least a little,

Ian

[juankav89]

Hi all,

Issue persists? I try to prevent editor download file without successfully result.

[Penelope]

That is a feature that is not available. The preventing download feature that Google Drive has available to its users is if the user is a viewer or commenter meaning does not extend to editors. 

Check out Ian's (icrew) response as well. 

[SergioAlvarez]

-- You can enforce Chrome usage and you can disable the download of files directly from Chrome:

Option under-- 

• Block all downloads—No downloads are allowed.

This will prevent your users from being able to download anything. Now, if the user is not part of your environment you might want to change the share setting to commenter and allow the person to comment the necessary changes.

[krishnandy]

Hello Sergio,

How can you enforce only chrome usage? how do we disable access to google sheets in other browsers?

As an admin, I can create a chrome profile for my employees, and will 'block all donwloads', but once they start using the profile, can they disable it again?

[icrew]

Check out https://support.google.com/a/answer/9539506?hl=en and https://support.google.com/a/answer/12645308

Hope that helps,

Ian