> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/best-practices/bulk-remediation.md).
# Bulk remediation
Best practices to remediate multiple Google or Box assets
As organizations grow and evolve, managing file permissions across your data repositories can become a daunting task. Bulk remediation allows you to effectively address the technical debt challenges arising from permission sprawl.
DoControl bulk remediation at scale is a powerful and unique capability. With bulk remediation, you can apply quick actions in bulk to multiple assets in Google Drive. Bulk actions help to expedite the remediation process when multiple assets are affected.
Before you start to remediate, take a look at our overview of bulk remediation:
* [Remediation at-a-glance](#remediation-at-a-glance)
* [Effects of bulk remediation](/docontrol-user-guide/workflows/bulk-remediation.md#effects-of-bulk-remediation)
* [What are inherited permissions?](/docontrol-user-guide/workflows/bulk-remediation.md#what-are-inherited-permissions)
{% hint style="success" %}
**Ready for DoControl's best practices?**
Follow our [preparations](#prepare-for-bulk-remediation) and [best practices](#best-practices-for-bulk-remediation) to make informed decisions and take action swiftly.
{% endhint %}
## Remediation at-a-glance
Bulk remediation at scale is unique to DoControl, especially the complete and transparent handling of assets with inherited permissions. This infographic explains the steps you need to perform when remediating assets in bulk:
1. **Filter assets** - Use filtering options to create a subset of problematic Google assets you wish to remediate.
2. **Assess and remediate** - When you choose the assess option before remediating, DoControl evaluates the assets and delivers an assessment report with a summary of the asset breakdown.
3. **Analyze report** - Drill-down into the asset summary by inspecting the CSV report.
4. **Refilter assets** - If too many asset candidates for remediation appear in the assessment report, you can refilter your assets.
5. **Just remediate** - Skip the assessment, and send assets directly to workflows for remediation.
6. **Remediate assets** - Choose one option:
* **Remediate only assets with direct permissions** - From the assessment report, you can choose to remediate only assets with direct permissions that were granted by the asset owner.
* **Remediate all assets with direct and inherited permissions** - From the assessment report, you can choose to remediate all assets with direct and inherited permissions, including assets with permissions from parent folders.
{% hint style="info" %}
* You can remediate up to **100,000** Google Drive permissions in a single bulk action. If you select assets with more permissions, DoControl remediates only the first 100,000.
* It can take a few minutes or several hours to remediate assets in bulk.
{% endhint %}
## Preparations for bulk remediation
With bulk remediation, the number of assets that match your criteria could be very high, even hundreds of thousands, or millions. The best way to remediate is to understand your requirements first, and then break them down into a few remediation iterations.
### Export report of exposed assets
DoControl recommends exporting a CSV report of your exposed assets before running a bulk remediation action.
1. In **Assets**, use the inventory filters and export a CSV report of your selected assets.
2. If necessary, refine your inventory filters.
3. Send the selected files for remediation assessment. You’ll receive a report indicating the number of assets and their breakdown, as well as affected folders.
4. Break the filters into smaller batches that you can remediate in iterations, in order to monitor the remediation progress.
**Here's an example of filtering assets for bulk remediation:**
1. You wish to remediate all files with these filters: Sharing status equals `external` and `last modified before 01/01/2023.`
2. Break your remediation into the following batches:
* **My Drive:** Sharing status equals `external` and `last modified before 01/01/2020`
* **Shared drives:** Sharing status equals `external` and `last modified before 01/01/2020`
* **My Drive:** Sharing status equals `external` and `last modified before 01/01/2022`
* **Shared drives:** Sharing status equals `external` and `last modified before 01/01/2022`
### Create a new workflow
1. If you don't have the relevant workflow in place, make sure to use the DoControl playbooks to create a new workflow, such as Remove External Collaborator, to remediate assets.
2. When remediation is complete, you can monitor the progress and results of your action in the [workflow activity](/docontrol-user-guide/workflows/activity-dashboard.md#filter-workflow-executions) screen.
## Best practices for remediating in bulk
DoControl recommends following these best practices to achieve the best results when remediating in bulk:
1. **Define clear objectives and file exposure criteria** - Before initiating the remediation process, it's crucial to establish precise goals and criteria. Identify which files or folders are considered overexposed. Clarity in objectives ensures that your remediation efforts are aligned with your organization's security and compliance objectives.
2. **Review and test the remediation workflow** - Review and test the remediation workflow and its impact on test file permissions. It's essential to test the workflow in a controlled environment to identify any issues or unintended consequences. This step minimizes risks and helps fine-tune the process for optimal results.
3. **Communicate changes to users before remediation** - Effective communication is key to a successful remediation process. Notify relevant users or stakeholders about the upcoming changes in file permissions. Explain the reasons behind the changes, address concerns, and offer support if needed. Transparent communication builds trust and ensures that users are prepared for the adjustments, reducing potential disruptions or misunderstandings.
{% hint style="danger" %}
**Remember**: The remediation process only remediates permissions. DoControl does not edit or delete the files themselves. So bulk remediation should not result in any major business impact. If a permission was removed, it can always be added later on.
{% endhint %}
With our [step-by-step ](/docontrol-user-guide/workflows/bulk-remediation/apply-a-bulk-action.md)instructions, DoControl will enable you to confidently and effectively remediate file permissions, reduce risk, and enhance your organization's data security.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.docontrol.io/docontrol-user-guide/best-practices/bulk-remediation.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
