Get Started with Microsoft 365 / Google Workspace Backup

This chapter describes the first steps for creating your first Google or Microsoft Office 365 backup. Read this to get your first impression on how it works:

Enable Microsoft 365 / Google Workspace

To start working with Microsoft 365 / Google Workspace Backup, proceed as follows:

  1. In the Management Console, select M365/Google, then select General.
  2. Select Enable Microsoft 365 / Google Workspace backup check box.
  3. Specify alias. This alias will be used for your Microsoft 365 / Google Workspace dashboard URL.

Dashboard URL example as shown on the image: buka.apps.mspbackups.com

  1. In case you want to use your custom domain for Microsoft 365 / Google Workspace dashboard, specify it in the DNS field, then point this domain name to the following IP address: 52.6.7.137. To configure your custom domain please purchase Advanced Rebranding & Custom SSL license first. This feature requires licensing.
  2. Once you are done, click Save.

Add a Storage Account

In case you do not have a storage account or intend to use a new storage account for Microsoft 365 / Google Workspace needs, add a new account. To learn how to add and manage the storage account, refer to the Manage Storage Account chapter.

To Add New Storage Account

  1. On the Storage menu of the Management Console, select the Storage Accounts
  2. Click Add Account

Add a Backup Destination

To Add New Backup Destination

  1. On the M365/Google menu, select Destinations, Licenses, and Domains.
  2. Click Add Backup Destination.

  1. Specify the storage account, bucket, and storage limit for Office 365 / G Suite backup. To learn more about storage accounts and storage limits, refer to the Storage and Billing section.

Long-Term Storage Usage

In case your storage destination is a long-term one (this can be S3 Glacier, S3 Deep Archive, or Azure Archive storage classes), note that these storage classes have several limitations.

  • Lingering retrieval time of a backup content (depends on storage provider). Thus, the restore plan that requires data retrieval from the cold storage classes can take up to 48 hours (for AWS Glacier Deep Archive storage class)
  • Retrieval costs. Basically, the data retrieval operations are not free and can be costly depending on the retrieval type and the amount of data to be restored.

Manage Licenses

Check whether you have enough available licenses for your Microsoft 365 / Google Workspace users using ** Microsoft 365 / Google Workspace Licenses** area of the M365/Google > Destinations, Licenses, and Domains. Check whether you have a SharePoint/Teams/SharedDrives license in case of you are planning to back up the following collaboration tools for the domain: Microsoft Teams, SharePoint, and Shared Drives. If necessary, you can purchase licenses using Buy Now links

Refer to Licensing for details.

Add Domain/Users

Add domains or separated users to the backup and restore routines.

To Add Domain or Users

  1. In the M365/Google menu, select Destinations, Licenses and Domains.
  2. Click Add Domain / Users.

  1. Specify the domain names and the storage account for domains.

Learn syntax for domains and users:

  • Google domains and Microsoft 365 domains are added by specifying domain names: for example mydomain.com, alternatedomain.com
  • Google users are added by full email addresses: for example googleaccount@gmail.com, anothergoogleaccount@gmail.com
  • Home Office users are added by the full email with the following suffix (MSFT): for example homeuser@outlook.com(MSFT), anotherhomeuser@outlook.com(MSFT) or googleaccount@gmail.com(MSFT), anothergoogleaccount@gmail.com(MSFT)

To separate users or domains, use comma.

  1. Check whether you need to change the default settings. The following licensing options are available:
    • Automatic. The required number of licenses from the global pool will be shared automatically
    • Manual. The number of licenses will be specified manually.
  2. Specify global admin access.
    • On. A user is granted with a global admin role to view backup contents
    • Off. Backup content viewing is restricted for the user with a global admin role.
  3. Specify the Office 365 / G Suite access to collaboration tools
    • On. Access granted
    • Off. Access restricted (default)

Google Shared Drives (formerly known as team drives) are shared spaces where teams can store, search, and access files from anywhere and any device.

Teams, SharePoint, while available on Office 365, is a collaboration tools that integrates with Microsoft Office. SharePoint, which can be configured for a company's usage, allows an enterprise to store, retrieve, search, archive, track, manage, and report on digitized documents.

  1. Click OK. If necessary, you can edit the domain to change the default settings.

Edit Domain/Users (Optional)

To Edit Domain/Users Properties

  1. In the Management Console, select M365/Google.

  2. Select Destinations, Licenses, and Domains.

  3. In the Domain to Backup section, select domain to edit.

  4. Click Edit.

  5. Edit domain/users properties. The following options are available for editing:

  • License mode
    • Auto. Select this option to share automatically the required number of licenses from the global pool
    • Manual. Select this option to specify the number of licenses manually.
  • Global admin access
    • On. Select this option to grant a user with a global admin role to view backup contents
    • Off. Select this option to restrict backup content viewing for a user with a global admin role.
  • SharePoint/Teams/Shared Drives
    • On. Select this option to grant the Microsoft 365 / Google Workspace Backup access to collaboration tools
    • Off. Select this option to restrict the Microsoft 365 / Google Workspace Backup access to collaboration tools
  • **Storage limit
    • Off. Select this option if you do not intend to set the limit for the domain
    • Total limit for all services. Select this option to set the total limit for all services associated with this domain. Specify 0 in case you are not planning to set the limit
    • Service-specific limit. Select this option to set the limit for SharePoint/Shared Drives and other services associated with this domain. Specify 0 in case you are not planning to set the limit for the service
  1. Once you are done with editing, click Save.

Now you are ready to sign in to Microsoft 365 / Google Workspace dashboard and configure your backup.

Sign in to Microsoft 365

To Sign In

  1. In the M365/Google menu, switch to the Destinations, Licenses and Domains tab
  2. Click Dashboard button in the grid in the required domain to backup entry

  1. Confirm the transition to Dashboard. Consider, the provider has full access to the backup management, but does not have access to the backup data. To access the backup data, after the transition, sign out and then sign in using an account that has the required administrative permissions in this domain

  2. In the browser tab, select Office backup

  3. Select the required Microsoft 365 edition (business or personal), then click Sign in with Office.

  4. Specify your credentials for Microsoft 365.

  5. Grant required permissions for apps.mspbackups.com requested by Microsoft Office: select the Consent on Behalf of your Organization check box, then click Accept.

  6. The dashboard is accessed. You can configure your backup services using Configure Backup button. Turn on the services you want to create backup for. Click Save. By default, the backup is scheduled to run at least twice a day automatically.

Refer to Microsoft 365 backup section for instructions on how to manage your Microsoft 365 backup.

Sign in to Google

  1. Configure trusts for apps.mspbackups.com requested by Google as described:

    • Sign in to https://admin.google.com/ with your super administrator.

    • Click Main Menu > Security > Access and data control > API Controls > Manage Third-Party App Access

    • Add two MSP Google Apps Backup web applications with the following OAuth Client IDs to the trusted applications: 101545705208641292657
      76254656058-ue8d5fkuicrfjjhd8c1qngd2goaq3ngs.apps.googleusercontent.com

      The following access type should be selected for both applications: Trusted: Can access all Google Services

      After you have added both applications you can see them in Connected apps grid with Trusted status

  2. In the M365/Google menu, switch to the Destinations, Licenses and Domains

  3. Click Dashboard button in the grid in the required domain to backup entry

  1. Confirm the transition to Dashboard. Consider, the provider has full access to the backup management, but does not have access to the backup data. To access the backup data, after the transition, sign out and then sign in using an account that has the required administrative permissions in this domain.
  2. In the browser tab, select Google Backup.
  3. Select the required Google edition (business or personal), then click Sign in with Google.
  4. Specify your credentials for Google.
  5. The dashboard is accessed. You can configure your backup services using Configure Backup button.Turn On the services you want to create backup for. Click Save. By default, the backup is scheduled to run at least twice a day automatically.

Refer to Google backup section for instructions on how to manage your Google backup.