Visual Permission Change Logging for Access Control
When file permissions change, a visual log in Telegram makes it easy to track access changes. Every permission grant is documented with a screenshot.
Trigger
File Shared (Permissions Added)
Triggers when new sharing permissions are granted to a file or folder. Uses Drive's `changes.list` endpoint with inline `permissions` in the `fields` mask so each change carries the file's current permission set provider-atomically. We diff that against `seen_permission_keys` to identify newly added grants. Drive page tokens are the primary cursor; if Drive rejects a stored token, the trigger raises `PollingTriggerError` without clearing state rather than silently re-baselining and dropping events. Limitation: truly ephemeral permissions (added and revoked between two polls without any other file modification in between) are not detected. Drive Activity API would catch those but requires an additional OAuth scope and a different payload contract.
Action
Send Photo
Send photos to a telegram chat using the bot api.
Why this helps
Permission changes happen silently, and there's no easy way to audit who has access to what. A visual log of permission changes in Telegram creates an audit trail and ensures transparency.
- Maintain a visual audit trail of all permission changes
- Quickly see who has access to which files
- Track sharing history for security and compliance
- Catch unintended permission grants with a documented log
Setup
Build it in a few focused steps.
- 1Connect Google Drive and Telegram to Notis.
- 2Create an automation: 'When file permissions change, capture a photo of the permission details and send it to my Telegram audit channel'.
- 3Set the trigger: Google Drive File Shared (Permissions Added) event.
- 4Choose the Telegram channel to receive permission-change photos.
- 5Share a file with someone new and verify a screenshot of the permission appears in Telegram.
- 6Review the visual log regularly to monitor access patterns.
Questions about this workflow
Does the photo show all permission details like email addresses and access levels?
Yes. Notis captures the file name, who was granted access, their email, and the permission level (viewer, editor, etc.).
Can I automatically revoke permissions if something looks wrong?
Not in this automation, but Notis can create a separate automation that revokes permissions based on criteria you define.
Can I send the log to multiple Telegram channels?
Yes. You can configure the automation to send permission-change photos to an audit channel, a management channel, or both.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Google Drive to Telegram. A trigger fires from one place; an action lands in another.
Google Drive triggers
Telegram actions
Comment Added (Docs/Sheets/Slides)
Triggers when a new comment is added to Google Docs, Sheets, or Slides.
Answer Callback Query
Use this method to send answers to callback queries sent from inline keyboards. the answer will be displayed to the user as a notification at the top of the chat screen or as an alert.
File Created
Triggers when a new file is created in Google Drive.
Delete Message
Delete a message, including service messages, with certain limitations.
File Deleted or Trashed
Triggers when a file is moved to trash or permanently deleted in Drive.
Edit Message
Edit text messages sent by the bot.
File Shared (Permissions Added)
Triggers when new sharing permissions are granted to a file or folder. Uses Drive's `changes.list` endpoint with inline `permissions` in the `fields` mask so each change carries the file's current permission set provider-atomically. We diff that against `seen_permission_keys` to identify newly added grants. Drive page tokens are the primary cursor; if Drive rejects a stored token, the trigger raises `PollingTriggerError` without clearing state rather than silently re-baselining and dropping events. Limitation: truly ephemeral permissions (added and revoked between two polls without any other file modification in between) are not detected. Drive Activity API would catch those but requires an additional OAuth scope and a different payload contract.
Export Chat Invite Link
Generate a new primary invite link for a chat; any previously generated primary link is revoked. the bot must be an administrator in the chat for this to work and must have the appropriate administrator rights.
File Updated
Triggers when a file's metadata or content changes in Google Drive.
Forward Message
Forward messages of any kind. service messages can't be forwarded.
Google Drive Changes
Triggers when changes are detected in a Google Drive.
Get Chat Info
Get up to date information about the chat (current name of the user for one-on-one conversations, current username of a user, group or channel, etc.).
New File Matching Query
Triggers when a new Google Drive file matches a provided query. This is the legacy query-centric trigger: it preserves Drive API query config such as ``corpora`` / ``driveId`` aliases and emits the historical ``file_matching_query`` event type. ``FileCreatedTrigger`` covers the broader "new file" case and emits ``file_created``.
Get Chat Administrators
Get a list of administrators in a chat. on success, returns an array of chatmember objects that contains information about all chat administrators except other bots.
Get Chat History
Get chat history messages. note: this uses the getupdates method with specific parameters to retrieve historical messages.
Connect any two apps with Notis in the middle.
Not just Google Drive and Telegram. Any combination from 985+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7 days free trial with 20$ free usage included.
No card. Works with personal or business Telegram.