Adding new admin settings to control Google Form responses

What’s changing

Following last year's announcement of form creators being able to limit Google Form response access to specific users, groups, or target audiences, we’re introducing granular admin controls for form responses. 

Specifically, admins can now independently control two distinct settings: 
  • Whether users in their domain can respond to forms created externally. 
  • Whether users in their domain can share forms with external recipients. 
This new setting may help minimize data exfiltration risks by enabling admins to implement specific security measures for Forms, independent of existing Google Drive sharing restrictions. 

Getting started 

  • Admins:
    • The Forms specific admin override will be ON by default for external sharing of forms created in the domain and for responding to forms created externally. 
    • There are two distinct override settings to control if forms created inside a domain can be shared externally for responses and whether users inside the domain can respond to external forms. These overrides can be applied to organizational units, similar to other Drive sharing policies. 
    • To control whether form owners can get responses from users outside their domain, go to the Admin console > Drive and Docs settings > “Form responses > “Allow forms owned by users in [your organization] to accept responses from anyone with the link outside [your organization], even if external sharing isn't allowed.” 
    • To control whether users in the domain are permitted to respond to forms created outside of the domain, go to the Admin console > Drive and Docs settings > “Form responses” > “Allow users in [your organization] to submit responses to forms from users or shared drives. outside of [your organization], even if receiving external files isn't allowed.” 
      • If ON, users in the domain will continue to be able to respond to external forms. 
      • If OFF, the admin setting to control whether external Drive documents can be shared into the domain will apply to Forms and form responders in your domain could be blocked from responding to external forms 
    • Visit the Help Center to learn more about managing external sharing for your organization.
  • End users: There is no end user setting for this feature. 
new admin settings to control Google Form responses

Rollout pace

Availability 

  • Available to all Google Workspace customers 

Resources