Employee role change Google Drive access: how to find what the old team left open
Someone moves from Sales to Operations. HR updates the title, IT updates the group, and everyone congratulates them. Then you open the old Sales folder, click Share, and their name is still on the list with edit rights.
That is employee role change Google Drive access in practice: the person changed teams, but Drive never noticed. This guide shows why the access stays, how to find and remove it by hand, and how to review it by email in bulk when a manual check takes too long.
In this guide
- Why access survives a role change in Google Drive
- Step 1: List what the person should keep and lose
- Step 2: Check shared folders and files by hand
- Step 3: Remove or downgrade the old access
- Step 4: Move ownership of files the old team still needs
- Step 5: Make the review a habit at every role change
- What to do when you cannot remove access
- Employee role change Google Drive access: review by email with Wistorix
- Frequently asked questions
Why access survives a role change in Google Drive
Employee role change Google Drive access is a gap by design. Google Drive permissions are tied to an email address. They are not tied to a job title, a department or an org chart. When a person moves teams, their email stays the same, so every folder and file that was ever shared with that address stays shared.
Nobody gets a prompt either. A role change in your HR tool does not ask Drive to review sharing, and the old team rarely thinks to check. The access just sits there, quietly, for months.
The risk is not only a stranger reading a file. It is also an Editor who can still rename, move or delete files in a folder the new team has never seen. Old access also makes audits harder, because the Share list no longer matches who actually works on the project.
| What changed | What Drive does | What you must do |
|---|---|---|
| Job title or department | Nothing | Review the old team's folders |
| Email address stays the same | All existing shares stay | Remove or downgrade each one |
| Files the person owns | They stay under that owner | Decide whether to transfer ownership |
Step 1: List what the person should keep and lose
Before you remove anything, agree on the target. Removing access too fast can block someone who still supports a project, and a blocked colleague will message you within the hour.
Ask the old manager and the new manager one question each: which projects does this person still support? Send it in Slack or email so you have a written answer.
- Write down the folders, shared files and Drive links tied to the previous team.
- Mark each one as keep, downgrade or remove.
- Flag any file the person owns that the old team still needs, because those need an ownership change before access is closed.
Keep the list short and specific. A line like "Q3 pricing folder: downgrade to Viewer" is easy to act on later. "Sales stuff" is not.
Step 2: Check shared folders and files by hand
Start with the folders you already know. Open the team folder in Drive, right-click it, choose Share and read the list under People with access. Look for the employee's email address and note the role next to it.
Then search for the rest. Per Google's help page on searching Drive, the to: operator will "find documents you shared with a specific person or group or documents shared with you," and owner: will "find documents owned by a specific person." Type them into the search box with no space after the colon:
- to:person@company.com lists files shared with that address.
- owner:person@company.com lists files that person owns.
Search is useful, but it has limits. It shows files, not a clean access report, and a single file shared on its own looks different from a folder that passes access down to everything inside it. Note which is which, because the fix is different.
Step 3: Remove or downgrade the old access
Work through your list from Step 1 to clean up employee role change Google Drive access one item at a time. For each folder or file, open Share and decide whether the person needs any access at all.
- If they only need to read, change Editor to Viewer or Commenter.
- If they have no reason to open it, choose Remove access and save.
- If the item sits inside a shared folder, check whether the access comes from the parent folder before you edit the child.
That last point matters. According to Google's page on stopping sharing or changing permissions, "When you share a folder, all files and subfolders inside it inherit those same sharing permissions." So removing a name from one file does nothing if the folder above still includes it.
Confirm every change. Reopen the Share list and check that the name is gone or the role is lower. For sensitive folders, ask the employee to open the link and confirm it now asks for access.
Step 4: Move ownership of files the old team still needs
Employee role change Google Drive access is not only about sharing lists. Access is only half of the problem. If the employee owns files that sit inside the old team's folders, those files go where the owner goes. Search owner:person@company.com and look for anything in the previous team's area.
Decide who should own each file, usually the team lead or a shared team account. Then transfer ownership before you close any access, so the old team never loses a file it relies on. Our guide to transferring ownership in Google Drive walks through the steps, and the ownership transfer page covers moving many files at once.
After the transfer, ask the new owner to open the file and confirm it works. Only then remove the previous owner's extra access.
Step 5: Make the review a habit at every role change
A one-time review of employee role change Google Drive access helps, but the same gap reopens at the next move. Build the check into the process you already use for internal transfers.
- Add a line to your internal move checklist: "Review Drive access for the old team."
- Keep a short table with four columns: person, old team, date, items reviewed.
- Set a calendar reminder to repeat the check a few weeks into the new role, when the old project work has fully wound down.
If your team already runs exit checks, reuse that routine. The Google Drive offboarding guide covers the full leaver process, and a role change is a lighter version of the same job.
What to do when you cannot remove access
Sometimes the Share dialog will not let you finish when you fix employee role change Google Drive access. Three causes cover most cases:
- The permission comes from a parent folder. Change it at the parent level. Google says you cannot give someone less access to a file than they have to its parent folder.
- Someone else owns the file. Only the owner or a person with enough rights can change sharing, so ask the owner to do it.
- The folder is in a shared drive. This guide does not cover shared drives, which follow their own membership rules.
When in doubt, write down the file, the cause and who you asked. That note saves you from checking the same item again next month.
Employee role change Google Drive access: review by email with Wistorix
The manual route for employee role change Google Drive access works well for one person and a handful of folders. It gets slow when a team has hundreds of files, or when several people change roles in the same quarter. This is where a scan helps.
Wistorix is a Chrome extension for Google Drive, and scanning is free. After a scan, you can review by email: enter the address of the person who moved and see which files that email has been given access to. You then revoke or change access in bulk, but only after you review the list and choose the items yourself. Nothing runs on its own.
Wistorix reads sharing details only, such as file names, sizes, owners and permissions, and never file content. It lists who currently has access, not who edited a file. For a wider view of your Drive, see the sharing risk scan, or read how in-house teams use it. Scan your Drive free and check one email address today.
Frequently asked questions
Does a role change remove Google Drive access automatically?
No. Drive permissions follow the person's email address, not their job title. Unless someone removes the share or changes a group, the old access stays after the move.
How do I see which team folders an employee can still open?
Open each team folder and check the People with access list, then search Drive with to:person@company.com. For a faster view across many files, review by email with a scan.
Should I remove all old access or only edit rights?
It depends on the work. If the person still supports the old team, downgrade Editor to Viewer or Commenter. If they have no reason to open the files, remove access fully.
Can Wistorix show who edited a file?
No. Wistorix shows who currently has access to a file, not who edited or viewed it. Edit history lives in Google Drive's own activity and version history.
sharing publicly?