For a private Google Drive file, sharing with a named person is usually a clearer choice than enabling access for anyone who has its link. Keep General access restricted and grant the recipient only the role needed for the task.
Identify the file and recipient
Open Drive in your authorized account, select the correct original, and open Share. Check its owner and existing access before adding anyone. Enter the recipient’s exact Google Account address or the address approved by your organization.
A familiar display name is not enough to distinguish personal and work accounts. Confirm the address through an established channel when the material is sensitive. Visitor sharing is a separate option for eligible organizations and should not be assumed to work for every non-Google address.
Grant the minimum useful role
Choose Viewer for reading, Commenter for feedback where supported, or Editor for actual changes. Decide whether to notify the recipient, then send or save the invitation. Check that General access remains Restricted unless a broader audience is intentional and authorized.
Folder inheritance, group membership, or an existing organization-wide setting may already grant additional access. Adding a restricted invitation does not remove those other routes.
Confirm access without broadening it
Ask the recipient to open the link using the account you invited. If they see Request access, compare the signed-in address with the invitation before changing permissions. For a work or school file, external sharing may be blocked by policy. Give the administrator the relevant file and recipient details rather than publishing the file as a workaround. Keep the original link and review access when the collaboration ends so temporary participation does not quietly become permanent.
References
- Share and manage access to files and folders in Google Drive
- Learn more about access to Google files
Reviewed against the linked official product guidance on November 3, 2026. Features, limits, screen labels, and access can vary by account, platform, region, and organization policy.