Restrict users from sharing outside domain

As an admin you need to restrict sharing outside your organization for several users, while continuing to share Drive files outside the domain for a selected group of users in the domain.

Note: This scenario focuses on an organization where there is no previous Sub OU or child organizational units have been previously set up and all the users remain part of the top OU.

• Drive

1. Create a Sub organizational unit (UO) so you can split your users in two sets. Follow the instructions outlined in Add an organizational unit.
2. Change the settings on the new OU so it blocks sharing outside your domain. 
3. Sign in to the Admin Console.
4. Navigate to Apps > Google Workspace > Drive and docs > Sharing Settings > Sharing options.
5. First select the new OU on the left side-panel.
6. Change the settings from Sharing outside of your organization, from On, to Off.
7. Review the option Allow users in your organization to receive files from users outside of your domain, and either leave it on or off as desired.
8.  Click Save, to save your changes.
9. Move all the users that should not have access to sharing outside your domain to this new OU. The users that need access to share should be kept on the original (top) OU.

Note:

• Review Manage external sharing for your organization to get all the details about the Google Drive settings in the Admin console that control sharing outside your domain for reference.
• The instructions to move users to another OU are outlined in Move users to an organizational unit .

The customer needed the ability to provide outside file sharing to some users, while restricting it for others.