This guide details how to back up a Google Workspace account (Gmail, Google Drive, Google Calendar, …)using Acronis on Swiss Backup, the backup solution in a Swiss independent cloud.

It is also possible to back up other types of data.

Prerequisites

• Have an Swiss Backup Infomaniak account with an available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to be backed up):
  
• If necessary, increase the device quota according to your needs.
• Add the device to the Infomaniak Manager to receive the login credentials.
• Create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator:
  
• Consult the Acronis documentation on this topic:
  1. What does Google Workspace protection mean?
  2. Creating a personal Google Cloud project
  3. Adding a Google Workspace organization
  4. Discovering Google Workspace resources
  5. Configuring the backup frequency
• Allow 20 to 30 minutes to configure everything.

Allow Acronis to access Google Cloud Platform

In the Google Cloud Platform console:

1. Select your new project.
2. In the navigation menu, select APIs & Services > Enabled APIs & Services:
   
3. Disable all APIs that are enabled by default in this project, one by one:
   1. Scroll down to the Enabled APIs and services page.
   2. Click on the name of an enabled API.
   3. On the API/Service details page that opens, click on Disable and confirm:
      
   4. Go back to the previous page and repeat the process for the next API.
4. From the navigation menu, select APIs and services‍ > Library.‍
5. In the API library, enable the following APIs one by one, using the search bar to find the required APIs:
   
   1. Gmail API
   2. Google Drive API
   3. Admin SDK
   4. Google Calendar API
   5. Google People API
6. Click on its name then click on Enable.
7. To search for the next API, go back to step 5.
8. From the Google Cloud Platform navigation menu, select APIs & Services > OAuth consent screen.
9. In the window that opens, select Internal for the user type, then click Create:
   
10. In the Name field for the application, enter a name for your application.
11. In the User support email field, enter the super administrator's email address.
12. In the Developer contact information field, enter the super administrator's email address.
13. Leave all other fields blank, then click Save and continue.
14. On the Scopes page, click Save and continue without making any changes.
15. On the Summary page, check your settings and then click Back to Dashboard.
16. In the Google Cloud Platform navigation menu, select Credentials > Service account.
17. Click on Create a service account:
    
18. Specify a name, a description, and click on Create and continue:
    
19. Do not modify the steps Grant this service account access to the project and Grant users access to this service account.
20. Click on Done; the Service accounts page will open.
21. Select the new service account, then under Actions, click on Manage keys.
22. Under Keys, click Add a key > Create a new key, then select the JSON key type:
    
23. Click Create; a JSON file containing the service account's private key is automatically downloaded to your computer: keep this file in a safe place as you will need it to add your Google Workspace organization to the Cyber Protection service as described below in this guide.
24. In the Google Cloud Platform navigation menu, select Credentials > Service account.
25. In the list, find the service account you created, then copy its client ID, which is displayed in the OAuth 2.0 Client ID column:
    
26. Click here to access the Google admin interface as a super administrator.
27. In the navigation menu, selectSecurity > Access and data control > API controls:
    
28. Scroll down the API controls page, then under Domain-wide delegation, click on Manage domain-wide delegation; the Domain-wide delegation page will open.
29. On this page, click on Add:
    
30. The Add a new client ID window opens.
31. In the Client ID field, enter the client ID for your service account.
32. In the OAuth scopes field, add the following scopes:
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. Click on Allow.

Your new Google Cloud project can now access the data in your Google Workspace account.

Creating the backup space

To configure the backup of your Google Workspace with Acronis:

1. Click here to access the Acronis Console using the credentials obtained after adding the device (need help?).
2. Click the "Add device" button to add a Google Workspace device:
     
   
    
3. Enter the address of a super administrator for your Google Workspace account (it doesn't matter if two-step verification is enabled for the super administrator's email account).
4. Find the JSON file that contains the private key for the service account you created in your Google Cloud project (or paste the file's content as text).
5. Click on Confirm:
   

Your Google Workspace organization will then appear under the Devices tab in the service console: