Learn how to use Google Workspace Backup

COURSE OBJECTIVES

Upon completion of this course, you will be able to:

1. Complete all prerequisite configurations before backing up Google Workspace.
2. Ensure account permissions and API settings are properly configured.

PREREQUISITES

Course Prerequisites:

None

OUTLINE

1. Configure Google Drive API

2. Create a Service Account and Key

3. Authorize Domain-Wide Delegation

4. Notes and Reminders

1. Configure Google Drive API

1. Log in to the Google Admin Console (using the domain account you wish to back up: https://admin.google.com/).
2. Go to "Apps" > "Google Workspace" > "Drive and Docs".
   
   
3. Click "Features and Applications", locate "Drive SDK", and check "Allow users to access Google Drive with the Drive SDK API".
   
   
4. Save the settings.

2. Create a Service Account and Key

1. Go to Google Cloud Console (https://console.developers.google.com/) and sign in with a super administrator account.
   
   
2. Create a new project.
   
3. In the new project, go to "Enable APIs & Services" > search for the following services > Enable:
   • Admin SDK API
   • Google People API
   • Gmail API
   • Google Calendar API
   • Google Drive API
   
   
   
   
   
   
   
   
   
4. Go to the Google Cloud Console homepage > click IAM & Admin > Service Accounts.
   
   
5. Enter a custom Service account name and click "CREATE AND CONTINUE".
   
6. Select "Project > Owner" as the role, skip the optional fields, and complete the setup.
   
   
   
7. After completing the previous step, you will be redirected to the Service Accounts list page. Click the action menu (⋮) on the right > Manage keys > Add key > Create new key > select JSON format. Keep the downloaded file in a safe place.
   
   
   
8. 
9. The key will be saved to your computer. Click Close to exit the dialog.
   
10. Copy the "Unique ID" (Client ID) of the service account. You can paste it temporarily into Notepad, as it will be needed later for authorization settings.
    

3. Authorize Domain-Wide Delegation

1. Return to the Google Admin Console (https://admin.google.com/) and go to "Security" > "Access and data control" > "API controls".
   
2. Click "MANAGE DOMAIN WIDE DELEGATION" > "Add new".
   
   
   
3. Enter the following details:
   • Client ID: Enter the Unique ID copied earlier.
   • OAuth scopes (comma-delimited):
     https://www.googleapis.com/auth/admin.directory.user.readonly
     https://www.googleapis.com/auth/admin.directory.domain.readonly
     https://www.googleapis.com/auth/drive
     https://www.googleapis.com/auth/userinfo.email
     https://www.googleapis.com/auth/userinfo.profile
     https://www.googleapis.com/auth/contacts
     https://www.googleapis.com/auth/contacts.other.readonly
     https://mail.google.com/
     https://www.googleapis.com/auth/calendar
     https://www.googleapis.com/auth/calendar.events
   
   

4. Notes and Reminders

• ⚠️ It is recommended to create a dedicated project exclusively for backups to ensure security.
• ⚠️ The JSON key contains authorization credentials for the entire domain. Please store it securely/encrypted and do not share it with others.
• ⚠️ If the setup fails, please verify that the APIs are enabled, the key is properly created, and OAuth scopes are authorized correctly.