Active Backup for Google Workspace: Preparing Google Workspace for backup

Active Backup for Google Workspace: Preparing Google Workspace for backup

Purpose

This article will guide you through the required steps to create a backup task in Active Backup for Google Workspace.

Resolution

1. Configure Drive SDK API

  1. Sign in to Google Admin console with the credentials of the domain you wish to back up.
  2. Go to Apps > Google Workspace.
  3. Click Drive and Docs.
  4. Click Features and Applications.
  5. Click on the Drive SDK section and tick Allow users to access Google Drive with the Drive SDK API. Click SAVE.

2. Create a service key

  1. Sign in to Google Developers Console as a domain super administrator.
  2. Click Select a project and hit NEW PROJECT in the upper-right corner of the pop-up window.1
  3. Enter a project name and click CREATE.
  4. Open the project you just created.
  5. Click Navigation menu and go to APIs & Services > Library.
  6. Search for the following APIs and enable them one by one: Admin SDK API, Google People API, Gmail API, Google Calendar API, and Google Drive API.
  7. Click Navigation menu and go to IAM & Admin > Service Accounts.
  8. Click + CREATE SERVICE ACCOUNT.
  9. Enter a Service account name as you please and click CREATE.
  10. Select Project > Owner as the role and click CONTINUE.
  11. Omit the optional fields and click DONE.
  12. You will automatically jump to the page listing service accounts. Find the newly created account. Click under Actions and select Manage keys.
  13. Click ADD KEY > Create new key.
  14. In the pop-up window, choose JSON as the key type and click CREATE.
  15. The key will be automatically saved to your computer. Click CLOSE.2
  16. Go to DETAILS and copy the Unique ID to your Notepad.3
  17. Sign in to Google Admin console with the credentials of the domain you wish to back up.
  18. Go to Security > Access and data control > API controls.
  19. Click MANAGE DOMAIN WIDE DELEGATION at the bottom of the page.
  20. Click Add new.
  21. In the pop-up window, enter the following information and click AUTHORIZE:
    • Client ID: Paste the unique ID that you copied in step 16.
    • OAuth scopes: Copy and paste the following:
      https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.domain.readonly, https://www.googleapis.com/auth/drive, https://mail.google.com, https://www.googleapis.com/auth/calendar, https://www.googleapis.com/auth/contacts, https://www.googleapis.com/auth/contacts.other.readonly, https://sites.google.com/feeds, https://www.googleapis.com/auth/tasks
  22. Now you can use the locally-stored key (generated in step 14) to create a task in Active Backup for Google Workspace. This article will guide you through the steps.

Notes:

  1. It is suggested that you create a project specifically dedicated to Active Backup for Google Workspace to ensure privacy.
  2. The key exported here will be the service key for your backup domain. It contains a private key that grants access to all users in your domain. Please make a copy and store it in a safe place.
  3. The unique ID will be used to delegate domain-wide authority to your service account.
Purpose
Contents
Resolution
1. Configure Drive SDK API
2. Create a service key