This guide details how to back up a Google Workspace space (Gmail, Google Drive, Google Calendar, …) using Acronis on Swiss Backup the backup solution in an independent Swiss cloud.

It is also possible to back up other types of data.

Prerequisites

• Have a Infomaniak Swiss Backup space with an available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to be backed up):
  
• If necessary, increase the device quota according to your needs.
• Add the device to the Infomaniak Manager to receive the login credentials.
• Create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator:
  
• Familiarize yourself with the Acronis documentation on this topic:
  1. What does Google Workspace protection mean?
  2. Creating a dedicated Google Cloud project
  3. Adding a Google Workspace organization
  4. Discovering Google Workspace resources
  5. Setting the frequency of backups
• Plan for 20 to 30 minutes to complete the setup.

Allow Acronis to access Google Cloud Platform

In the Google Cloud Platform console:

1. Select your new project.
2. In the navigation menu, select APIs and services > Enabled APIs and services:
   
3. Disable each of the APIs enabled by default in this project:
   1. Scroll through the page Enabled APIs and services
   2. Click on the name of an activated API.
   3. On the API/Service details page that opens, click Disable and confirm:
      
   4. Go back to the previous page and do the same with the next API.
4. From the navigation menu, select APIs and services‍ > Library.‍
5. In the API library, activate the following APIs one by one, using the search bar to find the required APIs:
   
   1. API Gmail
   2. API Google Drive
   3. SDK Admin
   4. API Google Calendar
   5. Google People API
6. Click on its name then on Enable.
7. To search for the next API, go back to step 5.
8. From the Google Cloud Platform navigation menu, select APIs and services > OAuth consent screen.
9. In the window that opens, select Internal for the user type, then click on Create:
   
10. In the Application name field, enter a name for your application.
11. In the User support email field, enter the super administrator's address.
12. In the Developer contact information field, enter the super administrator's address.
13. Leave all other fields empty, then click on Save and continue.
14. On the Scopes page, click on Save and continue without making any changes.
15. On the Summary page, check your settings then click on Go back to dashboard.
16. In the Google Cloud Platform navigation menu, select Credentials‍ > Service account‍.‍
17. Click on Create a service account:
    
18. Specify a name, a description and click on Create and continue:
    
19. Do not make any changes to the steps Grant this service account access to the project and Grant users access to this service account.
20. Click on Done; the Service Accounts page opens.
21. Select the new service account, then under Actions, click on Manage keys.
22. Under Keys, click on Add key > Create new key, then select the JSON key type:
    
23. Click on Create; a JSON file containing the service account's private key is automatically downloaded to your machine: keep this file safe as you will need it to add your Google Workspace organization to the Cyber Protection service as described later in this guide.
24. In the navigation menu of Google Cloud Platform, select Credentials‍ > Service account.‍
25. In the list, find the service account you created, then copy its client ID which is displayed in the OAuth 2.0 Client ID column (OAuth 2.0 Client ID):
    
26. Click here to access the Google admin interface as a super administrator.
27. In the navigation menu, select Security > Access and data control > API controls:
    
28. Scroll down the API Controls page, then under Domain-wide delegation, click on Manage domain-wide delegation‍; the Domain-wide delegation‍ page opens.
29. On this page, click on Add:
    
30. The Add new client ID window opens.
31. In the Client ID field, enter the client ID of your service account.
32. In the OAuth scopes field, add the following "scopes":
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. Click on Allow.

Your new Google Cloud project can therefore access the data in your Google Workspace account.

Creation of the backup space

To set up Google Workspace backup with Acronis:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on the add device button to add a device of type Google Workspace:
     
   
    
3. Enter the address of a super administrator of your Google Workspace account (it doesn't matter if two-step verification is activated for the super administrator's email account).
4. Search for the JSON file that contains the private key of the service account you created in your Google Cloud project (or paste the content of the file as text).
5. Click on Confirm:
   

Your Google Workspace organization then appears under the Devices tab of the service console: