Gemini Mastery Pro+ ~9 min read New · July 2026

Workspace governance: Gemini reveals your sharing habits.

Gemini in Workspace answers from what each user can access — which means it operates your Drive sharing model at full speed. If that model has years of 'anyone with the link' sediment, AI is about to make it searchable. The fix is hygiene, and it's overdue anyway.

01 The flashlight problem, Google edition

Same structural truth as every workplace AI: Gemini respects permissions perfectly — the problem is your permissions don't say what you think. The salary sheet shared to the whole domain in 2024, the client folder with a public link, the offer letters in a loosely-shared Drive — before AI, protected by nobody looking; now, one innocent question away. This isn't a Gemini flaw; it's your Drive telling you the truth at last.

02 The hygiene pass

Hunt the hotspots with the tool itself: "find documents shared broadly that mention salary, offer, SSN, bank, password, termination." Fix what surfaces: re-permission, move, or delete.
Kill link-sharing as a default. Specific people, specific access. 'Anyone with the link' is for genuinely public things, and almost nothing is.
Know your two Geminis: Workspace Gemini operates under your organization's data terms; consumer Gemini on a personal account does not. The rule for the team: work content goes through work accounts, full stop. One sentence, big consequences.
Use the admin controls you already have: Workspace admin lets you scope which users get Gemini features and how data is handled. Ten minutes in the console beats a policy nobody enforces.
The quarterly red-team

Ask, as a normal employee would, the five questions you'd hate answered: pay, departures, the acquisition folder, customer lists, the dispute. Every answered question is a permission bug found free. Calendar it; hygiene that isn't scheduled happened once.

03 Two lines for the policy

"AI answers are permission-based, not permission-granting — finding it doesn't make it yours to share." And: "if Gemini surfaces something that looks over-shared, report it like an unlocked door." That second line deputizes the whole team as your audit — the cheapest security program ever shipped.

04 The payoff

Done right, Gemini becomes your sharing model's permanent auditor instead of its exploit — and your team gets to use Workspace AI at full speed with confidence that's earned, not assumed. Least glamorous lesson in the track; highest stakes per minute.

Try it now

Run the first three red-team questions against your own Workspace right now. Whatever answers, that's today's priority; if nothing does, enjoy the rare feeling of audited confidence.

Open Gemini →

This week's challenge

Full pass this week: hotspot hunt, link-sharing purge on the sensitive folders, the two-account rule announced, admin console reviewed, red-team scheduled quarterly. An afternoon of governance buys years of confident speed.

Up next in Gemini Mastery

Rolling Gemini out to a team

Seats, recipes, and the adoption rhythm — for the shop that lives in Google. Read the lesson →