Query Drive or Microsoft 365 with least access

The rate sheet is already in Drive. The thread is already in Outlook. Someone downloads both, provides them into a chat, and asks a question that only needed one file. The provide is now the copy you cannot get back.

The short answer

The sequence below is the control path: same vendor pages, same prompts, product names kept exact.

Connect the account that already has the file, ask about that file, and leave write tools off until you have a written rule. ChatGPT uses connected apps. Claude uses connectors. Gemini uses the Workspace side panel, or Connected Apps on a personal account, and those are not the same door. The tool should only see what that person can already open.

Why the download-and-provide habit spreads

It feels faster than an admin setting. It also puts a customer file into a consumer chat, and it trains the crew to grab "the whole drive" the next time. Connectors are narrower when an admin turns on only the app you need.

ChatGPT apps

ChatGPT can use apps (older menus said connectors) so you ask against files and mail you already have.

• Google Drive app covers Drive files plus Docs, Sheets, and Slides through that app.
• Admin controls for apps: workspace owners enable, restrict, or remove apps. Microsoft apps (Outlook, Teams, SharePoint, OneDrive) need Microsoft Entra admin consent where the help says so.

The signed-in user should not see a folder they cannot open in the browser. Turn on write actions (send mail, create files) only with a shop rule. Default for most shops: off.

Claude connectors

• Google Workspace connectors: Gmail, Google Calendar, Google Drive.
• Microsoft 365 connector: SharePoint, OneDrive, Outlook, Teams. Read first. Write tools are a separate admin consent.

Team and Enterprise owners enable connectors for the org before people authenticate. Consumer users authenticate their own accounts. Access is on demand when someone asks a question that needs it, per Anthropic's connector help. Re-check the article if the menu names move.

Anthropic's Workspace help notes that if you use consumer products and allow model improvement, content you copy out of a connector into the chat may be treated like other chat content. Read the current connector article and the training article before you set the rule.

Gemini: two doors

Door 1, Workspace side panel. Using Google Workspace with Gemini says Ask Gemini in Gmail, Docs, Sheets, Slides, Drive, or Chat works only if the organization supports it. If it does not, ask an admin. Gemini in Drive requires an eligible Workspace or Google AI plan, and you can point it at specific files. Gemini in Sheets can reference Drive files and Gmail when you ask it to.

Door 2, a personal Gemini account with Connected Apps. That path is the Gemini Apps Privacy Hub, not the Workspace training terms. Do not use a personal login to reach company files the admin has not approved.

What staff may ask it to open

Allow: a named folder that role already uses, a template, a job folder with no secrets. Forbid: payroll exports, unrestricted charts, card data, password vaults, and "search the whole company drive." Put that list next to the data rule.

Try one controlled ask

1. An admin enables only the app you need, or you connect a personal test account that holds no customer files.
2. Put one anonymized SOP in a clearly named folder.
3. Ask for an outline of that file only. Require [NEED] for gaps.
4. Check the outline against the file yourself.
5. Leave write tools off unless the written rule says otherwise.

Example (illustrative): a property office

Problem: lease templates get provided into a personal chat. What was built: Drive enabled for the work account, one folder, write tools off. Tools it lives in: Gemini in Drive, or the ChatGPT Drive app, on the work login. Owner still does: the send. Payoff: not measured.

Mistakes and limits

• A personal login as a shortcut to company files.
• Write tools on by default.
• Asking "summarize my whole Drive."
• Trusting a retrieved paragraph without opening the file.
• Assuming the connector grant is the same as your retention settings. Read both.

Doing this inside the tools you already use

If you would rather have this exact job drafted from the software you already use, with you still approving every send, see how a custom build works.

FAQ

Does the tool see every file in the account?

It should see what the signed-in person can open, and only when the question needs it. Admin settings can narrow the apps. Confirm the current help article for the product you turned on. Do not test this theory with a real customer folder.

Can it send the email after it drafts it?

Only if a write tool is on. Leave that off until the shop rule names who may send.

We use both Drive and Microsoft 365. Do we connect both?

Connect the one that holds the file for this job. Add the second when a real job needs it. Each one is an admin decision, especially Microsoft apps that need Entra consent.

Is the Workspace side panel the same as Gemini Apps?

No. The side panel is the work account, if an admin has turned it on. Gemini Apps on a personal Google account are the consumer product.

Keep these

• Admin on for the one app you need. Write tools off.
• The tool sees what that person can already open.
• One named folder for the first test, anonymized.
• Personal logins do not reach company files.

Sources

• ChatGPT Google Drive app
• Claude Google Workspace connectors
• Claude Microsoft 365 connector
• Gemini in Google Workspace

Related reading

• What not to provide or connect
• Save standing rules next to the files
• Draft a quote from the rate sheet