GDrive shared permissions on folders and docs have all changed on the weekend and it's a disaster!

[dalkesm]

What happened to GDrive!?!?

They must have enacted a "shared permissions" change on the weekend, b/c all of a sudden ALL of my shared permissions have changed and it's a massive disaster for me as I literally have thousands of shared permissions that now have to be re-done!  What happened?  None of my cohort can access their folders and documents any more!!!!

[KevinApodaca]

Hi, 

You should have visibility into the changes from the Security Investigation Tool, you may query the Drive Log Events data source and leverage attributes such as new publish visibility value and visibility change, among others to get a log of what happened. 

That should provide some insight into what happened, affected files, as well as what (if any) actors were involved

[dalkesm]

Whaaaat?  This is gibberish to me.  I need specific instructions and I have no idea where these tools are to begin with.

[icrew]

See https://support.google.com/a/answer/7575955?hl=en for more about the Security Investigation Tool and how to do the searches @KevinApodaca mentioned.

(Or, if you're not the administrator of the Google Workspace instance you're using, that's what you need to ask your administrator to do. This is a community of Google Workspace administrators, so the general assumption is that everyone here is an admin when folks answer questions...)

Hope that helps,

Ian

[dalkesm]

Maybe you are referring to the "Workspace Developer" area? 

I posted this in the "Workspace Q&A" which I always do.  And have never been told that this is a space limited to administrators.  In fact, if they are indeed administrators, the people who have responded to my queries in the last year, have been more than detailed and helpful with their information - as if I was a dummy - and I appreciated their patience and detailed instructions.

[icrew]

I'm not saying it's limited to administrators, just that the folks who participate here are generally administrators of their Workspace instances. So generally speaking you're going to get responses here that assume that you're also a Workspace Administrator. 

If you're not a Workspace admin, in this particular case for your original question, the best route forward would be to talk to the Workspace admins for your organization so that they can help figure out what happened.

Hope that helps,

Ian

[dalkesm]

I've talked to the workspace admins - and they have no idea what happened with the new shortcut change in share/permissions.  And by the time I go through a second and third party, instead of here, I've wasted a week's worth of my time.  It's shorter to cut out the middle man.  Do you know if there's an "emergency" place to contact Google for major disruptions in the normal functioning of their GDrive platform?  I need them quick!

[icrew]

Our Workspace instance here at the University of California, Berkeley has over 250,000 active users. We haven't gotten any reports of this sort of an issue, nor have I seen any mention of such a thing on the boards and mailing lists I'm on, so I'm pretty confident it's limited to your Workspace instance or account.

The steps @KevinApodaca and I discussed about 6 hours ago to get a report of user activity from the Security Investigation Tool would be the next steps for your Workspace admins to look at to see what happened. 

Your workspace admins can also open a support issue with Google. See https://support.google.com/a/answer/1047213?hl=en for how they do that. Non-admins don't have the ability to contact Workspace support.

Hope that helps,

Ian