Backup Google Workspace with Acronis on Swiss Backup

This guide details how to back up a Google Workspace (Gmail, Google Drive, Google Calendar, …) using Acronis on Swiss Backup, the backup solution in an independent Swiss cloud.

It is also possible to back up other types of data.

Prerequisites

• Have an Infomaniak Swiss Backup space with an available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to be backed up)
  
• If necessary, increase the device quota according to your needs
• add the device to the Infomaniak Manager to receive the login credentials
• create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator
  
• read the Acronis documentation on this:
  1. What does Google Workspace protection mean?
  2. Creating a personal Google Cloud project
  3. Add a Google Workspace organization
  4. Discover Google Workspace resources
  5. Configure backup frequency
• allow 20 to 30 minutes to set everything up

Authorize Acronis to Access Google Cloud Platform

In the Google Cloud Platform console:

1. select your new project
2. in the navigation menu, select APIs & Services > Enabled APIs and Services
   
   
   
3. disable each API enabled by default in this project one by one:
   1. scroll down the Enabled APIs and Services page
   2. click on the name of an enabled API
   3. on the API/Service details page that opens, click Disable and confirm
      
   4. go back to the previous page and do the same with the next API
4. from the Google Cloud Platform navigation menu, select APIs & Services > Library
5. in the API library, enable the following APIs one by one:
   1. Gmail API
   2. Google Drive API
   3. Admin SDK
   4. Google Calendar API
   5. Google People API
   using the search bar to find the required APIs
   
6. click on its name and then on Enable
7. to search for the next API, return to step 5
8. from the Google Cloud Platform navigation menu, select APIs & Services > OAuth consent screen
9. in the window that opens, select Internal for the user type, then click Create
   
   
   
10. in the Application name field, enter a name for your application
11. in the User support email field, enter the email address of the super administrator
12. in the Developer contact information field, enter the email address of the super administrator
13. leave all other fields blank, then click Save and Continue
14. on the Scopes page, click Save and Continue without making any changes.
15. on the Summary page, review your settings and then click Return to Dashboard
16. from the Google Cloud Platform navigation menu, select Credentials > Service account
17. click on Create Service Account
    
    
    
18. specify a name, description, and click Create and Continue
    
    
    
19. do not modify anything in the Grant this service account access to project and Grant users access to this service account steps
20. click Done; the Service accounts page opens
21. select the new service account, then under Actions, click Manage keys
22. under Keys, click on Add Key > Create new key, then select the JSON key type
    
23. click Create; a JSON file containing the private key of the service account is automatically downloaded to your machine: keep this file safe as you will need it to add your Google Workspace organization to the Cyber Protection service as described later in this guide
24. from the Google Cloud Platform navigation menu, select Credentials > Service account
25. in the list, find the service account you created, then copy its OAuth 2.0 Client ID displayed in the OAuth 2.0 Client ID column (OAuth 2.0 Client ID)
    
26. log in to the Google Admin console (admin.google.com) as a super administrator
27. in the navigation menu, select Security > Access and data controls > API controls
    
    
28. scroll down the API controls page then under Domain-wide delegation, click on Manage domain-wide delegation; the Domain-wide delegation page opens
29. on this page click on Add
    
    
    
30. the Add a new client ID window opens
31. in the Client ID field enter the client ID of your service account
32. in the OAuth scopes field add the following "scopes":
    
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. click on Authorize
    
    

Your new Google Cloud project can now access data from your Google Workspace account.

Creating the Backup Space

To configure Google Workspace backup with Acronis:

1. log in to the Acronis Console (acronis.infomaniak.com) with the credentials obtained after adding the device — read this guide (click here) if needed
2. click the device add button to add a Google Workspace device
    
   
    
   
3. enter the email address of a super administrator for your Google Workspace account (no matter if two-step verification is enabled for the super administrator's email account)
4. locate the JSON file containing the private key of the service account you created in your Google Cloud project (or paste the file's content as text)
5. click Confirm
   

Your Google Workspace organization will then appear under the Devices tab in the service console.