This guide details how to back up a Google Workspace (Gmail, Google Drive, Google Calendar, …) using Acronis on Swiss Backup, the backup solution in an independent Swiss cloud.

It is also possible to back up other types of data.

Prerequisites

• Have a Swiss Backup Infomaniak space with available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to back up):
  
• If necessary, increase the device quota according to your needs.
• Add the device to the Infomaniak Manager to receive the login credentials.
• Create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator:
  
• Review the Acronis documentation on this subject:
  1. What does Google Workspace protection mean?
  2. Creating a personal Google Cloud project
  3. Adding a Google Workspace organization
  4. Discovering Google Workspace resources
  5. Setting the frequency of backups
• Plan 20 to 30 minutes to set everything up.

Authorize Acronis to access Google Cloud Platform

In the Google Cloud Platform console:

1. Select your new project.
2. In the navigation menu, select APIs and services > Enabled APIs and services:
   
3. Disable one by one all the APIs enabled by default in this project:
   1. Scroll through the Enabled APIs and services page
   2. Click on the name of an enabled API.
   3. On the API/Service details page that opens, click on Disable and confirm:
      
   4. Go back to the previous page and do the same with the next API.
4. From the navigation menu, select APIs and services > Library.
5. In the API library, activate the following APIs, one by one, using the search bar to find the required APIs:
   
   1. Gmail API
   2. Google Drive API
   3. Admin SDK
   4. Google Calendar API
   5. Google People API
6. Click on its name, then on Activate.
7. To search for the next API, return to step 5.
8. From the Google Cloud Platform navigation menu, select APIs and services > OAuth consent screen.
9. In the window that opens, select Internal for the user type, then click on Create:
   
10. In the App name field, indicate a name for your application.
11. In the User support email field, enter the super administrator's address.
12. In the Developer contact information field, enter the super administrator's address.
13. Leave all other fields blank, then click on Save and continue.
14. On the Scopes page, click on Save and continue without making any changes.
15. On the Summary page, check your settings, then click on Back to dashboard.
16. In the Google Cloud Platform navigation menu, select Credentials > Service account.
17. Click on Create a service account:
    
18. Specify a name, a description, and click on Create and continue:
    
19. Do not modify anything in the Grant this service account access to the project and Grant users access to this service account steps.
20. Click on Done; the Service accounts page opens.
21. Select the new service account, then under Actions, click on Manage keys.
22. Under Keys, click on Add key > Create new key, then select the JSON key type:
    
23. Click on Create; a JSON file containing the service account's private key is automatically downloaded to your machine: keep this file in a safe place as you will need it to add your Google Workspace organization to the Cyber Protection service as described later in this guide.
24. In the Google Cloud Platform navigation menu, select Credentials > Service account.
25. In the list, search for the service account you created, then copy its client ID which is displayed in the OAuth 2.0 Client ID column (OAuth 2.0 Client ID):
    
26. Click here to access the Google administration interface as a super administrator.
27. In the navigation menu, select Security > Access and data control > API controls:
    
28. Scroll down the API controls page, then under Domain-wide delegation, click on Manage domain-wide delegation; the Domain-wide delegation page opens.
29. On this page, click on Add:
    
30. The Add a new client ID window opens.
31. In the Client ID field, enter the client ID of your service account.
32. In the OAuth scopes field, add the following "scopes":
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. Click on Authorize.

Your new Google Cloud project can therefore access the data from your Google Workspace account.

Creation of the backup space

To configure the backup of Google Workspace with Acronis:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on the device addition button to add a Google Workspace type device:
     
   
    
3. Enter the address of a super administrator of your Google Workspace account (it doesn't matter if two-step verification is activated for the super administrator's email account).
4. Search for the JSON file that contains the private key of the service account you created in your Google Cloud project (or paste the content of the file as text).
5. Click on Confirm:
   

Your Google Workspace organization then appears under the Devices tab of the service console: