This article explains how to diagnose and resolve the "Domain Drive sharing policy must be set to allow sharing outside of the domain to migrate Google Drive items." when migrating from Google Drive.
1. Symptom
When migrating file data from Google Workspace, you encounter the error message: "Domain Drive sharing policy must be set to allow sharing outside of the domain to migrate Google Drive items."
See Google's help centre information for more: Manage external sharing for your organization
2. Cause
This error indicates that external sharing for Google Drive is disabled within your Google Workspace environment. This can be configured either domain-wide or at an Organizational Unit (OU) level.
External Drive sharing is generally required for Google Drive migrations because CloudM Migrate utilizes destination users to facilitate the data transfer from the source to the destination.
If external sharing is not enabled for your organization, you can proceed with the migration by whitelisting your destination domains in the source Google Workspace, but an additional setting needs to be changed in CloudM Migrate to facilitate this.
3. Resolution
There are two primary approaches to resolve this issue:
Option 1: Enable External Drive Sharing
The most straightforward solution is to enable external sharing for Google Drive within your source Google Workspace admin console.
Google Workspace Admin Console Path:
- Navigate to Apps.
- Select Google Workspace.
- Choose Drive and Docs.
- Locate Sharing settings (the exact path may vary slightly based on Google's updates).
- Ensure that the policy is set to allow sharing outside of your domain.
Note: This setting needs to be applied at the domain level.
Option 2: Whitelist Destination Domains and Disable External Sharing Check
If enabling external sharing is not feasible for your organization, you can proceed with the migration by whitelisting your destination domains in the source Google Workspace and disabling CloudM Migrate's external sharing check.
Steps:
- Whitelist Destination Domains in Google Workspace:
In your source Google Workspace admin console, add the destination domains to your approved list for external sharing. This allows sharing specifically with users in these whitelisted domains, even if general external sharing is restricted. Refer to Google's documentation for precise instructions on whitelisting domains. - Disable External Drive Sharing Check in CloudM Migrate:
- Within your CloudM Migrate batch configuration, navigate to Source settings > Document.
- Disable the option Check external drive sharing.
Important Consideration: This CloudM Migrate setting only checks whether external sharing is generally enabled at the source Google Workspace. It does not verify if domain whitelisting has been configured. Therefore, if you choose this option, it is crucial that you have correctly whitelisted the destination domains in your Google Workspace.