> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/best-practices/google-labels/leverage-google-labels-in-docontrol.md).

# Leverage Google labels in DoControl

You can now leverage Google labels in DoControl inventory and workflows to prevent external sharing of sensitive files based on the file’s classification label, and boost your Google Drive data security beyond its standard capabilities.

DoControl uses Google labels with HR, IdP (identity provider) and other SaaS application metadata to provide cohesive context.

{% hint style="warning" %}
If you are an existing customer and want to leverage Google Drive labels, you need to [re-integrate DoControl with Google Workspace](/docontrol-user-guide/integrations/integrations-google-drive/define-scopes.md) by defining scopes.
{% endhint %}

## Labels in DoControl asset inventory

When your Google Workspace is integrated with DoControl, all your asset labels are automatically displayed in DoControl’s asset inventory. DoControl automatically updates Google Drive file metadata based on user activity events as well as Google label activity.

Leveraging Google labels, customers can filter through DoControl’s asset inventory and correlate between Google labels, sharing status, data ownership, external collaborators, file activity, file inactivity, and more. From there, customers can apply bulk remediation actions, such as cleaning up external sharing, and transferring data ownership.

<figure><img src="https://2285563887-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ8EVaJEzDNNBVDXvFrLt%2Fuploads%2FRjb2hCkRAZn4uHHufVFe%2Fassets%20Google%20Drive.png?alt=media&#x26;token=dc33dff8-8dba-4a80-97f8-d49ae75ee633" alt=""><figcaption><p>DoControl’s asset inventory gives you full visibility into Google labels for each asset</p></figcaption></figure>

## Labels in workflows

You can leverage Google labels in DoControl workflows to mitigate file exposure for assets with specific labels.

{% hint style="success" %}
Tip: Once your workflow is set up, you can run a [bulk remediation](/docontrol-user-guide/workflows/bulk-remediation.md) action to automatically remove all sharing links for any files in your Google Drive estate that have a specific label, such as sensitive.
{% endhint %}

DoControl’s automated workflows are triggered by user activity events, periodically scheduled dates, or on-demand by DoControl users. Workflows are granular, scalable, and sophisticated enough to allow for a range of threat model mitigation.

Workflows combine Google Drive labels, HRIS employment status, IdP group membership, and end-user business context to narrow down the scope of risky events and solve critical use cases with high confidence.

**To leverage labels in workflows, all you need to do is:**

1. [Set up Google Workspace DLP to support labels](https://support.google.com/a/answer/13127870#dlp) - DoControl recommends leveraging Google Workspace DLP to optimize the label feature
2. [Re-integrate Google Workspace with DoControl](/docontrol-user-guide/integrations/integrations-google-drive/define-scopes.md) - Define scopes with Google labels, create a key file in Google Workspace, and upload the key file in the DoControl integration wizard
3. [Leverage the Get file metadata step in workflows](/docontrol-user-guide/workflows/define-workflow-settings/action-settings/query/get-file-metadata.md#leverage-google-drive-labels-in-workflows) - Automatically mitigate file exposure for assets with specific Google labels

<div align="left"><figure><img src="https://2285563887-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ8EVaJEzDNNBVDXvFrLt%2Fuploads%2FiI6s68h31rCPIq0QchPS%2Fworkflow%20labels.png?alt=media&#x26;token=1f21282d-4b7f-4381-88a4-6bcd34c2ea2b" alt=""><figcaption><p>A DoControl workflow automatically removes sharing links from a file that’s labeled as sensitive</p></figcaption></figure></div>

DoControl retrieves your Google labels via the **Get file metadata** step, and displays these labels in the execution details for the specific workflow.

<div align="left"><figure><img src="https://2285563887-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ8EVaJEzDNNBVDXvFrLt%2Fuploads%2FkCKU5HANRCXxLBTEZaDX%2Flabel%20metadata.png?alt=media&#x26;token=6a22803b-23dd-4991-bd6f-93e0e50dcae1" alt=""><figcaption><p>DoControl retrieves Google label metadata in the Get file metadata workflow step</p></figcaption></figure></div>

{% hint style="info" %}

* For more information, see the [Get file metadata](/docontrol-user-guide/workflows/define-workflow-settings/action-settings/query/get-file-metadata.md) step.
* It might take up to 4 hours for label data to be displayed in workflow executions.
* It can take up to 2 days to display Google label data in DoControl's asset inventory.
  {% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/best-practices/google-labels/leverage-google-labels-in-docontrol.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.