📂 Google Drive Access Manager Bot

A powerful Telegram bot for managing Google Drive folder permissions at scale

Built with Kurigram · Motor · Google Drive API · MongoDB

Features • Quick Start • Deployment • Packages • Documentation

📖 Overview

Google Drive Access Manager Bot is a full-featured Telegram bot that lets admins manage Google Drive folder permissions entirely from chat — no manual Drive UI needed. It supports multi-mode grants, timed expiry with auto-revoke, bulk import from Drive scans, analytics dashboards, CSV exports, and more.

Why Use This Bot?

Problem	Solution
Managing 100s of folder permissions manually	Bulk grant/revoke with smart selection
Forgetting to remove access after projects end	Auto-expiry with background scheduler
No visibility into who has access to what	Analytics dashboard + CSV exports
Duplicate access grants causing confusion	Database-level unique index enforcement
Cloud deployment credential headaches	In-bot OAuth via `/auth` command
Searching through 1000+ folders manually	Folder search + pinned favorites for instant access

✨ Features

🎯 Access Management

Three Grant Modes

Mode	Description	Best For
👤 Single Grant	One email → One folder	Quick individual access
📂 Multi-Folder	One email → Multiple folders	Power user onboarding
👥 Batch Grant	Multiple emails → One folder	Team setup

All grant flows include email validation, role selection (Viewer/Editor), duration picker, and duplicate detection.

Duration Options

1 hour · 6 hours · 1 day · 7 days · 30 days · ♾️ Permanent · ✏️ Custom (e.g. 59d, 91d, 12h, 2d12h)

Folder Management

Browse folders with A-Z group picker — jump directly to any letter/number group
Smart natural sort (numeric-aware)
View all users with access and their expiry times
Change role (Viewer ↔ Editor) with one tap
Remove individual or all access per folder
Configurable folder cache with adjustable TTL

📌 Pinned Folders (`/favorites`)

Pin frequently used root folders for instant access — no more scrolling through hundreds of folders.

⭐ Pin any folder from Manage → folder view
📁 Browse sub-folders of a pinned root folder directly
🔑 Grant access to root or any sub-folder in one flow
📌 Unpin anytime from the same folder view
Up to 20 pinned folders per admin

Flow:

Manage → Open Folder → ⭐ Pin Folder
/favorites → Leo AD 2500 → Hero / Villain / Scripts → Grant

🔍 Folder Search

Search folders by name instead of scrolling through the full list.

Type any keyword (e.g. AD 2500, Hero) — results appear instantly
Available from Grant Access flow → 🔍 Search Folders button
Searches across all Drive folders using Google Drive API
Shows top 25 matches, ordered by name

⏰ Expiry System

Expiry Dashboard

View all timed grants with live countdown timers
Unlimited pagination
Extend access inline: +1h · +6h · +1d · +7d · +30d
Quick revoke with confirmation prompt

Auto-Expire Scheduler

Runs every 5 minutes in background
Automatically revokes expired viewer access from Drive
Full audit trail logged for every auto-revocation
Zero manual intervention needed

🔍 Search & Revoke

Search grants by email or folder name, then selectively revoke:

✅ Select All — bulk select everything instantly
☐ Unselect All — clear all at once
🔢 Live Counter — "X selected | Y total"
🎯 Individual Toggle — click any item to toggle

📊 Analytics & Reporting

Expiry Timeline — Urgent (<24h), This Week, This Month, Later
Top 15 Most Accessed Folders
Top 15 Users by Grant Count
CSV Export — full data in Excel-compatible format with IST timestamps
Statistics Dashboard (/stats) — daily/weekly/monthly activity metrics

📥 Bulk Operations

Full Drive scan with live progress indicators
Before/after import report
40-day expiry auto-assigned for imported viewers
Skips owners, editors, and duplicates automatically

📝 Activity Logs

Structured log types: Grant, Remove, Role Change, Auto-Revoke, Bulk Import
Paginated view
CSV export
Soft delete — no data loss

📢 Channel Integration

Broadcast grant/revoke events to a Telegram channel
Auto-detect channel ID via message forward
Daily status summaries and error alerts

🗂️ Quick Commands

Command	Description
`/start`	Open main menu
`/grant`	Grant Drive access (3 modes)
`/manage`	Manage folder permissions
`/search`	Search grants by email or folder
`/expiry`	View & manage timed access
`/favorites`	Pinned folders for instant access
`/analytics`	Analytics dashboard
`/stats`	Activity statistics
`/info`	System health monitor
`/settings`	Bot configuration
`/logs`	Activity log viewer
`/auth`	Connect Google Drive (OAuth)
`/revoke`	Disconnect Google account
`/authstatus`	Check auth status

🔑 Authentication System

In-bot OAuth — no file uploads or manual token management needed.

Command	Description
`/auth`	Start Google Drive authorization
`/revoke`	Disconnect your Google account
`/authstatus`	Check current authorization status

🔐 Security

Unique MongoDB indexes prevent duplicate grants
Email normalization (auto-lowercase) prevents injection
90+ admin-protected handler endpoints
Super admin role for system commands (/info)
Input sanitization and type validation on all inputs
Complete activity log with soft delete (data retention)

⚙️ Settings (`/settings`)

Setting	Options
Default access role	Viewer / Editor
Folder page size	3–10 per page
Notification preferences	Toggle on/off
Channel configuration	Set/clear broadcast channel

🖥️ System Monitor (`/info`)

Bot uptime and version
Python and Kurigram versions
Service health: Drive API, MongoDB, Telegram
Auto-expire scheduler status
RAM, CPU, Disk usage

🚀 Quick Start

Prerequisites

Python 3.11+
MongoDB database (Atlas free tier works)
Google Cloud Project with Drive API enabled
Telegram Bot Token from @BotFather

Option A — Docker 🐳 (Recommended)

git clone https://github.com/muhammedadnank/Google-Drive-Access-Manager-Bot.git
cd Google-Drive-Access-Manager-Bot
cp .env.example .env
nano .env   # fill in your credentials
docker compose up --build -d

Check logs:

docker compose logs -f bot

Option B — Python Direct

Step 1 — Clone & Install

git clone https://github.com/muhammedadnank/Google-Drive-Access-Manager-Bot.git
cd Google-Drive-Access-Manager-Bot
pip install -r requirements.txt

Step 2 — Google Drive API Setup

Go to Google Cloud Console
Create or select a project → Enable Google Drive API
Create an OAuth 2.0 Client ID → Web application
Add authorized redirect URI: http://localhost:8080/oauth/callback
Copy Client ID and Client Secret into .env

Step 3 — Configure Environment

# Telegram
API_ID=your_api_id
API_HASH=your_api_hash
BOT_TOKEN=your_bot_token

# Database
MONGO_URI=mongodb+srv://user:pass@cluster.mongodb.net/dbname

# Admins (comma-separated Telegram user IDs)
ADMIN_IDS=123456789,987654321

# Google Drive OAuth
G_DRIVE_CLIENT_ID=your_client_id.apps.googleusercontent.com
G_DRIVE_CLIENT_SECRET=your_client_secret

# Optional
CHANNEL_ID=-1001234567890

Step 4 — Run

# Development
python bot.py

# Production (with health check server)
python server.py

Step 5 — Connect Google Drive

Send /auth to your bot and follow the link.

📁 Project Structure

Google-Drive-Access-Manager-Bot/
├── bot.py                  # Main bot + background schedulers
├── server.py               # Flask wrapper + process manager
├── config.py               # Environment config loader
├── requirements.txt
├── .env.example
├── Dockerfile              # Docker support (v2.2.3)
├── docker-compose.yml
├── .dockerignore
├── Procfile                # Heroku
├── render.yaml             # Render
│
├── plugins/                # Feature handlers
│   ├── start.py            # /start, /help, main menu
│   ├── auth.py             # /auth, /revoke, /authstatus
│   ├── grant.py            # 3-mode grant system
│   ├── manage.py           # Folder management
│   ├── expiry.py           # Expiry dashboard & bulk import
│   ├── analytics.py        # Analytics dashboard
│   ├── search.py           # Search + smart selection revoke
│   ├── stats.py            # /stats dashboard
│   ├── info.py             # /info system monitor
│   ├── settings.py         # Bot settings
│   ├── channel.py          # Channel integration
│   ├── logs.py             # Activity logs
│   └── csv_export.py       # CSV export utilities
│
├── services/
│   ├── database.py         # MongoDB operations (Motor)
│   ├── drive.py            # Google Drive API + cache
│   └── broadcast.py        # Telegram channel broadcasts
│
├── utils/
│   ├── filters.py          # Admin + state filters
│   ├── states.py           # Conversation state management
│   ├── validators.py       # Email validation
│   ├── time.py             # IST timezone + safe_edit helper
│   └── pagination.py       # Pagination + sorting + ButtonStyles
│
└── docs/
    ├── Changelog.md
    ├── UI_GUIDE.md
    ├── DEPLOYMENT.md
    ├── DATABASE_MAINTENANCE.md
    └── DUPLICATE_PREVENTION.md

📦 Packages

All dependencies are in requirements.txt.

Core

Package	Version	Purpose
kurigram	latest	Telegram MTProto bot framework — Pyrofork fork with `ButtonStyle` support
TgCrypto	latest	Fast C-extension encryption required by Kurigram

Database

Package	Version	Purpose
motor	3.7.1	Async MongoDB driver built on PyMongo — used for all DB operations

Google Drive

Package	Version	Purpose
google-api-python-client	2.115.0	Official Google Drive API client
google-auth	2.27.0	Google OAuth 2.0 token management
oauth2client	4.1.3	Legacy OAuth credential flow helper
httplib2	0.22.0	HTTP client used internally by Google API client

Web Server

Package	Version	Purpose
Flask	3.0.0	Web server for `/health`, `/status`, `/metrics`, `/oauth/callback`
gunicorn	21.2.0	Production WSGI server used in Procfile and Render

Utilities

Package	Version	Purpose
python-dotenv	1.0.1	Loads environment variables from `.env` file
psutil	5.9.8	System metrics — CPU, RAM, Disk for `/info` command

`requirements.txt`

kurigram
tgcrypto
google-api-python-client==2.115.0
google-auth==2.27.0
motor==3.7.1
python-dotenv==1.0.1
Flask==3.0.0
gunicorn==21.2.0
psutil==5.9.8
oauth2client==4.1.3
httplib2==0.22.0

🚀 Deployment

Render (Recommended)

Fork this repo → Create a new Web Service on Render
Connect your GitHub repo
Configure:
- Build Command: pip install -r requirements.txt
- Start Command: python server.py
- Health Check Path: /health
Add environment variables
Deploy → send /auth to connect Google Drive

Docker (VPS / Self-Hosted)

git clone https://github.com/muhammedadnank/Google-Drive-Access-Manager-Bot.git
cd Google-Drive-Access-Manager-Bot
cp .env.example .env && nano .env
docker compose up --build -d
docker compose logs -f bot

Supported: DigitalOcean, Hetzner, Fly.io, Railway, Coolify, any VPS.

Railway

Fork repo → New Project → Deploy from GitHub → Add env vars.
Railway auto-detects Dockerfile — deploy starts automatically.

Heroku

heroku login
heroku create your-app-name
heroku config:set API_ID=... API_HASH=... BOT_TOKEN=... MONGO_URI=... \
  ADMIN_IDS=... G_DRIVE_CLIENT_ID=... G_DRIVE_CLIENT_SECRET=...
git push heroku main

VPS (systemd)

sudo apt update && sudo apt install python3.11 python3-pip git -y
git clone https://github.com/muhammedadnank/Google-Drive-Access-Manager-Bot.git
cd Google-Drive-Access-Manager-Bot
pip3 install -r requirements.txt
cp .env.example .env && nano .env

# /etc/systemd/system/gdrive-bot.service
[Unit]
Description=Google Drive Access Manager Bot
After=network.target

[Service]
Type=simple
User=ubuntu
WorkingDirectory=/home/ubuntu/Google-Drive-Access-Manager-Bot
ExecStart=/usr/bin/python3 server.py
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable gdrive-bot
sudo systemctl start gdrive-bot

📊 Project Stats

Metric	Value
Python files	30+
Lines of code	5,400+
Protected endpoints	90+
MongoDB collections	6
Grant modes	3
Expiry durations	7
Architecture	100% async/await

🗺️ Roadmap

v2.3.0 ✅ Released

v2.4.0

Auto-extend rules (renew before expiry)
Scheduled grants (future start date)
REST API for external integrations

v3.0.0

Shared Drive support
Multi-Drive management
Multi-tenant architecture

📚 Documentation

Document	Description
Changelog	Full version history
UI Guide	Interface walkthrough
Deployment Guide	Platform-specific setup
Database Maintenance	DB management guide
Duplicate Prevention	Prevention system details

❓ FAQ

Q: How do I authenticate Google Drive on Render/Heroku?
A: Send /auth to your bot after deploying. Set G_DRIVE_CLIENT_ID and G_DRIVE_CLIENT_SECRET as env vars and follow the OAuth link.

Q: Do I need credentials.json or token.json?
A: No. The /auth command handles everything through the bot.

Q: How many admins can use the bot?
A: Unlimited. Add all Telegram user IDs to ADMIN_IDS (comma-separated).

Q: How many folders can it manage?
A: No hard limit. Tested with 500+ folders.

Q: Is this free to run?
A: Yes — MIT licensed. Render and MongoDB Atlas both have free tiers sufficient for most deployments.

🤝 Contributing

Fork the repository
Create a feature branch: git checkout -b feature/your-feature
Commit: git commit -m 'feat: add your feature'
Push and open a Pull Request

📞 Support

🐛 Issues: GitHub Issues
💬 Discussions: GitHub Discussions
📖 Bot Help: Send /help inside the bot

📄 License

MIT License — free for commercial use, modification, and distribution.

🙏 Built With

Library	Role
Kurigram	Telegram bot framework
Motor	Async MongoDB driver
Google Drive API	Drive integration
Flask	Health check web server
MongoDB	Database

v2.3.0 · Updated April 2026 · ✅ Production Ready

Built with ❤️ using Kurigram, MongoDB & Google Drive API

⬆ Back to Top

Name		Name	Last commit message	Last commit date
Latest commit History 270 Commits
.github/workflows		.github/workflows
docs		docs
plugins		plugins
services		services
utils		utils
.dockerignore		.dockerignore
.env.example		.env.example
.gitignore		.gitignore
Dockerfile		Dockerfile
Procfile		Procfile
README.md		README.md
bot.py		bot.py
config.py		config.py
docker-compose.yml		docker-compose.yml
render.yaml		render.yaml
requirements.txt		requirements.txt
server.py		server.py

Folders and files

Latest commit

History

Repository files navigation

📂 Google Drive Access Manager Bot

📖 Overview

Why Use This Bot?

✨ Features

🎯 Access Management

Three Grant Modes

Duration Options

Folder Management

📌 Pinned Folders (/favorites)

🔍 Folder Search

⏰ Expiry System

Expiry Dashboard

Auto-Expire Scheduler

🔍 Search & Revoke

📊 Analytics & Reporting

📥 Bulk Operations

📝 Activity Logs

📢 Channel Integration

🗂️ Quick Commands

🔑 Authentication System

🔐 Security

⚙️ Settings (/settings)

🖥️ System Monitor (/info)

🚀 Quick Start

Prerequisites

Option A — Docker 🐳 (Recommended)

Option B — Python Direct

Step 1 — Clone & Install

Step 2 — Google Drive API Setup

Step 3 — Configure Environment

Step 4 — Run

Step 5 — Connect Google Drive

📁 Project Structure

📦 Packages

Core

Database

Google Drive

Web Server

Utilities

requirements.txt

🚀 Deployment

Render (Recommended)

Docker (VPS / Self-Hosted)

Railway

Heroku

VPS (systemd)

📊 Project Stats

🗺️ Roadmap

v2.3.0 ✅ Released

v2.4.0

v3.0.0

📚 Documentation

❓ FAQ

🤝 Contributing

📞 Support

📄 License

🙏 Built With

About

Topics

Resources

Uh oh!

Stars

Watchers

Forks

Releases 1

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

📌 Pinned Folders (`/favorites`)

⚙️ Settings (`/settings`)

🖥️ System Monitor (`/info`)

`requirements.txt`

Packages