Save Google Workspace with Acronis on Swiss Backup

This guide details how to save a Google Workspace (Gmail, Google Drive, Google Calendar, ...) with the help of Acronis on Swiss Backup the backup solution in an independent Swiss cloud.

It is also possible to save other types of data.

Prerequisites

• Possession of space Swiss Backup Infomaniak with an available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to save):
  
• If necessary, increase the aircraft quota Depending on your needs.
• Add device to Manager Infomaniak in order to receive login identifiers.
• Create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator:
  
• Take note of the Acronis documentation in this regard:
  1. What does Google Workspace protection mean?
  2. Creating a personal Google Cloud project
  3. Add an organization Google Workspace
  4. Discovery of Google Workspace resources
  5. Configuring the backup frequency
• Allow 20 to 30 minutes to configure everything.

Allow Acronis to access Google Cloud Platform

In the Google Cloud Platform console:

1. Select your new project.
2. From the navigation menu, select APIs and services‍ > API and enabled services:
   ‍
3. Disable all APIs enabled by default in this project one by one:
   1. scroll the page Enabled APIs and services
   2. Click on the name of an enabled API.
   3. On the page API/Details Service which opens, click on Disable and confirm:
      
   4. Go back to the previous page and do the same with the next API.
4. From the navigation menu, select APIs and services‍ > Library.‍
5. In the API library, activate the following APIs, one by one, using the search bar to find the required APIs:
   
   1. Gmail API
   2. Google Drive API
   3. SDK Admin
   4. Google Calendar API
   5. Google People API
6. Click on his name and then on Activate.
7. To search for the next API, go back to point 5.
8. From the Google Cloud Platform navigation menu, select APIs and services > OAuth consent screen.
9. In the window that opens, select Internal for the user type, then click Create:
   
10. In the field Name from the application, specify a name for your application.
11. In the field User Support E-mail Enter the address of the super administrator.
12. In the field Contact information of the developer Enter the address of the super administrator.
13. Leave all other empty fields, then click Save and continue.
14. On the page Scopes, click on Save and Continue I don't want to change anything.
15. On the page Executive summary, check your settings and click on Back to the dashboard.
16. From the Google Cloud Platform navigation menu, select Identifiers‍ > Service account.‍
17. Click on Create a service account:
    
18. Specify a name, a description and click on Create and Continue:
    
19. Don't change anything in the steps Provide this service account with access to the project and Provide users with access to this service account.
20. Click on Completed ; page Service accounts Open up.
21. Select the new service account, then under Actions, click on Manage the keys.
22. Under Keys, click on Add a key > Create a new key, then select the type of JSON key:
    
23. Click on Create ; a JSON file containing the private key of the service account is automatically downloaded to your machine: Keep this file in a safe place because you will need it to add your Google Workspace organization to the Cyber Protection service as described below in this guide.
24. From the Google Cloud Platform navigation menu, select Identifiers‍ > Service account.‍
25. In the list, look for the service account you created, and then copy its customer ID which appears in the column OAuth 2.0 client identifier (OAuth 2.0 Client ID):
    
26. Click here in order to access Google's administration interface as a super administrator.
27. From the navigation menu, select Security > Access and Data Control > API Controls:
    
28. Scroll the page API controls then under Domain-wide delegation, click on Managing domain-wide delegation‍ ; page Domain-wide delegation‍ Open up.
29. On this page click on Add:
    
30. The window Add a new client ID Open up.
31. In the field Customer ID Enter the customer ID of your service account.
32. In the field OAuthscopes add the following "scopes":
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. Click on Allow.

Your new Google Cloud project can therefore access data from your Google Workspace account.

Creating Backup Space

To configure the Google Workspace backup with Acronis:

1. Click here in order to gain access to the Console Acronis with the identifiers obtained following the addition of the device (Need help?).
2. Click the device addition button to add a device of type Google Workspace:
     
   
    
3. Enter the address of a super administrator in your Google Workspace account (no matter if the two-step check is enabled for the super administrator's email account).
4. Search JSON file which contains the private key to the service account you created in your Google Cloud project (or paste the content of the file into text).
5. Click on Confirm:
   

Your Google Workspace organization will then appear under the tab Devices of the service console: