To backup Google Workspace domain data, such as Gmail and Drive, a user needs to register Vembu Backup for the Google Workspace application on Google Cloud and generate the application ID and secret key.
Google recently changed the Google Cloud Platform console and here are the updated steps to register Vembu Backup for Google Workspace in the Google Cloud.
The registration can be done with five steps,
- Creating a project
- Enabling APIs for the project
- Creating a service account in the project to access APIs
- Authorizing the client ID in the Admin console
- Add Google Workspace Organization in the BDRSuite Backup Server web console
Let us have a detailed look at each step in this blog
Step 1: Create a Project
- Sign in to the Google Cloud Platform account using the super administrator credentials. Once signed in, you will be redirected to the Dashboard page
- Click on the Menu icon on the top left and select IAM & Admin -> Manage Resources option
- Click the Create Project button which will open the New project page
- Enter a Project name and select the organization you want to backup. Then click on the CREATE button
- Once the project is created successfully, you need to select the newly created project to proceed
- You can click on the SELECT PROJECT button on the notification box displayed near the project (or) Go to the Dashboard page under APIs & Services and click the project selection dropdown at the top of the page. Select your project from the selection window modal dialog
Step 2: Enable APIs for the project
- Click on the Menu icon on the top left and select APIs & Services -> Library option
- Use the search box to find each API listed below. Click the API name which will redirect to its respective API page. Then, click the ENABLE button
- Admin SDK API
- GMail API
- Google Drive API
- Google Calendar API
- Google People API
- Note: Please confirm if all the above-mentioned APIs are enabled as they are required for backup & restore operations
Step 3: Create a service account in the project to access APIs
- Click on the Menu icon on the top left and select APIs & Services -> Credentials option
- Click the Create Credentials button and select the Service Account option from the dropdown
- On the Create service account page, provide a name for the service account and the service account description is an optional field. Then, click the CREATE AND CONTINUE button
- Next, choose the Owner option from the ‘Select a role’ dropdown and click CONTINUE
- Lastly, click DONE and you will be redirected to the Credentials page
- Under the Service Accounts section, click the email address of the service account you created which will redirect you to a new page
- On this page, select the KEYS tab at the top of the screen, and click the ADD KEY dropdown box and choose to Create a new key option
- On the Create private key dialog box, choose the key type as JSON and click CREATE. This will download a file to your computer which contains the private key
Note: Save the file because the private key can’t be recovered if lost
Step 4: Authorize your client ID in the Admin console
- Sign in to your Google Admin console with super administrator credentials. Once you sign in, you will be redirected to the Home page
- Click on the Menu icon on the top left and select Security -> Access and data control -> API controls
- On this page, under the Domain-wide delegation section, click MANAGE DOMAIN-WIDE DELEGATION button
- On the Manage domain-wide delegation page, click Add new. This will open the Add a new Client ID dialog box
- On the Client ID field, enter your service account’s client ID which is available in the JSON file downloaded when creating the service account
- In the OAuth scopes field, copy and paste the following comma-delimited list of scopes:
- https://mail.google.com/
- https://www.googleapis.com/auth/drive
- https://www.googleapis.com/auth/calendar
- https://www.googleapis.com/auth/contacts
- https://www.googleapis.com/auth/admin.directory.user.readonly
- https://www.googleapis.com/auth/admin.directory.user.security
- https://www.googleapis.com/auth/admin.directory.domain
- Once you have added all the scopes, click the Authorize button
Note: Please confirm if all the above-mentioned scopes are added as they are required for backup & restore operations. To confirm, select the new client ID and click View details. If any scope is missed, click Edit, enter the missing scopes, and click Authorize.
Step5: Add Google Workspace Organization
To add the Google Workspace organization in the BDRSuite Backup Server, you need the following:
- Client Email and Private key – “client_email” and “private_key” are available in the JSON file downloaded when creating the service account. You must copy and paste the entire content enclosed within double quotes of the respective fields
- Admin Email – The Email Address you use to sign in to the Google Admin Console
Once the required details are available follow the below steps to add the Google Workspace Organization in the BDRSuite Backup Server web console.
- Log in to your BDRSuite Backup Server web console and go to “ Backup -> Google Workspace” and Add your Google Workspace Domain to backup
- Enter the generated Application ID, Secret Key, and domain name and click on ‘Add domain’ to add the domain and configure backup later or ‘Add domain & Configure Backup’ to add a domain and configure backup immediately
Google Workspace domains added to configure the backup are listed on the Add domain page.
Note: To edit the domain details, please click on the Edit Domain button.
Download to try our 30-day free trial!
Protect your Google Workspace data with Vembu Backup for Google Workspace now!
Download the full-featured 30-day free trial of our latest version Vembu BDR Suite v5.0 and experience modern data protection for your Google Workspace environment.
Learn about Vembu Backup for Google Workspace here.
Follow our Twitter and Facebook feeds for new releases, updates, insightful posts and more.
