Vault Action in Externally Shared Drives
For files stored in My Drive, access is managed by the file owner unless the file or folder is specifically shared with others.
For shared drives, when the drive is shared externally, the permissions set on the drive apply to all files within it.
Note:
If a drive is shared externally, the standard Vault process may not function as expected. It is not possible to revoke access from individual files as they inherit permissions from the shared drive.
To restrict external access, the permissions of the entire drive must be modified. However, customers often prefer to limit access to a specific files flagged by a Data Loss Prevention (DLP) policy without impacting the entire drive.