IDrive^® Google Workspace Backup

Create a new Google Cloud project

To create a new Google Cloud project, follow the below instructions.

1. Sign in to the Google Cloud Platform (console.cloud.google.com) as a Super Administrator.
2. Next, Select a project > New project on the Google Cloud Platform console.
3. Name your new project.
4. Click Create to create your new Google Cloud project.

Enable the required APIs for this project

Follow these steps to enable the required APIs for this project,

1. Select your new project in the Google Cloud Platform console.
2. From the navigation menu, select APIs and services > Enabled APIs and services.
3. From the navigation menu, select APIs and services > Library.
4. In the API library, enable the following APIs, one at a time:
   • Gmail API
   • Google Drive API
   • Admin SDK
   • Google Calendar API
   • Google People API

You can utilize the search bar to find the necessary APIs. To enable an API, click its name > Enable. To search for the next API, return to the API library by selecting APIs and services > Library from the navigation menu.

Configure the OAuth consent screen

Follow the below steps to configure the OAuth consent screen,

1. From the navigation menu in the Google Cloud Platform, select APIs and services > OAuth consent screen.
2. In the next window, select Internal for user type, and then click Create.
3. Define a name for your application under the App name field.
4. Enter the Super Administrator email under the User support email field,
5. Enter the Super Administrator email under the Developer contact information field,
6. Leave all other fields blank, and then click Save and continue.
7. On the Scopes page, click Save and continue, without changing anything.
8. Verify your settings on the Summary page, and click Back to dashboard.

Configure the service account for IDrive^® Google Workspace Backup

To create and configure the service account for the IDrive^® Google Workspace Backup service,

1. Select IAM & Admin > Service Accounts under the navigation menu in the Google Cloud Platform,
2. Click Create service account.
3. Name the service account.
4. Provide a description for the service account.
5. Click Create and continue.
6. Do not modify anything under the Grant this service account access to the project and Grant users access to this service account steps.
7. Click Done.
8. On the opened Service accounts page, select the new service account, and then under Actions, click Manage keys.
9. Under Keys, click Add key > Create new key, and then select the JSON key type.
10. Click Create.

A JSON file with the private key of the service account will be automatically downloaded to your machine. Store this file securely because you need it to add your Google Workspace organization to the IDrive^® Google Workspace Backup service.

Grant new project access to your Google Workspace account

Follow the below instructions to grant the new project access to your Google Workspace account,

1. From the navigation menu in the Google Cloud Platform, select IAM & Admin > Service Accounts.
2. From the list, find the service account that you created, and then copy the client ID shown in the OAuth 2.0 Client ID column.
3. Sign in to the Google Admin console (admin.google.com) as a Super Administrator.
4. From the navigation menu, select Security > Access and data control > API controls.
5. Scroll down the API controls page, and under Domain-wide delegation, click Manage domain-wide delegation.
6. On the Domain-wide delegation page that opens, click Add new. The Add a new client ID window will open.
7. In the Client ID field, enter the client ID of your service account client.
8. In the OAuth scopes field, add the following scopes:
   • https://mail.google.com
   • https://www.googleapis.com/auth/contacts
   • https://www.googleapis.com/auth/calendar
   • https://www.googleapis.com/auth/admin.directory.user.readonly
   • https://www.googleapis.com/auth/admin.directory.domain.readonly
   • https://www.googleapis.com/auth/drive
   • https://www.googleapis.com/auth/gmail.modify
9. Click Authorise.

Your new Google Cloud project can now access the data in your Google Workspace account. To backup the data, go back to the IDrive^® Google workspace Backup interface and link this project using the JSON private key downloaded in the previous step.

Revoke access of your Google Workspace account to the IDrive^® Google Workspace Backup service

To revoke the access of your Google Workspace account to the IDrive^® Google Workspace Backup service, and respectively the access of the Cyber Protection service, delete the API client that your project uses.

To revoke access of your Google Workspace account,

1. Sign in as a Super Administrator in the Google Admin console (admin.google.com).
2. From the navigation menu, select Security > Access and data control > API controls.
3. Scroll down the API controls page, and under Domain-wide delegation, click Manage domain-wide delegation. The Domain-wide delegation page will open.
4. On the Domain-wide delegation page, select the API client that your project uses, and then click Delete.

Your IDrive^® Google Workspace Backup service will no longer be able to access your Google Workspace account and backup the data in it.