Get file permissions list in Google Shared Drive with Apps Script

Question

I'm trying to get folder and file permissions which is located in Shared Drive. All I can get is permissions list for root Shared Drive but trying to run below code on any ID of file or folder inside throw error.

Relavant Facts

1. We are using Google Workspace Business Plus subscription
2. I am domain superadmin
3. I have access to this file in Shared Drive but I expect to have access to every file as an domain admin.
4. Right now I'm calling the below script from web IDE of Apps Script so it is working in my grant scope.
5. I am the script owner
6. Script is on My rive

Script

function getPermissions_(driveFileID, sharedDriveSupport){
  var thisDrivePermissions = Drive.Permissions.list(
    driveFileID,
    {
      useDomainAdminAccess: USE_DOMAIN_ADMIN_ACCESS,
      supportsAllDrives: sharedDriveSupport
    } 
  );
  return thisDrivePermissions;
}

Errors

GoogleJsonResponseException: API call to drive.permissions.list failed with error: Shared drive not found: xxxxxxxx

GoogleJsonResponseException: API call to drive.permissions.list failed with error: File not found:

How can I get the file permissions list in Google Shared Drive with Apps Script?

Answer 1

As superadminin you don't have access to all files by default through Google Drive user interface / Google Apps Script. In order to get access to all files in your domain throught Apps Script you have to make use of domain-wide deletegation of authority.

The "not found" errors might occur because the file or shared drive ids are wrong or you don't have access, do double check that the ids are correct and that you passing the parameters correctly. For this you could use Logger.log / console.log to print the variable values to the execution log or use the Apps Script debugger.

Related

• How to add a Google Drive folder to "My Drive" section to other users
• Take ownership of other users Drive-files using Google Apps Script

Answer 2

If I understand correctly, you need to list all the permissions that a drive file contained in a folder from a shared drive has. To do that, you may check the following script as an example:

function myFunction() {
  var driveFileID = "FILE ID";
  var sharedDriveSupport = true;
  var request = {
      "supportsAllDrives": sharedDriveSupport,
      "useDomainAdminAccess": true,
      "fields": "permissionIds"
    };

  var permissionsRequest = {
      "supportsAllDrives": sharedDriveSupport,
      "fields": "role"
    };
  var permissionsIDs = Drive.Files.get(driveFileID, request);
  
  for(var i=0; i<permissionsIDs.permissionIds.length; i++)
  {
    Logger.log((Drive.Permissions.get(driveFileID, permissionsIDs.permissionIds[i], permissionsRequest)).role);
  }
}

This is how it would display the information, by listing all the permission types from the specified file:

Note that this works because you mentioned you have access to the shared drive, however as Rubén mentioned in his answer Google Workspace admins do not have access to all the files, just to the ones that are shared with them, and if you want to have access you can do it using domain wide delegation and user impersonation.

References:

• Files: get
• Permissions: get