Protecting G Suite data

What does G Suite protection mean?

• Cloud-to-cloud backup and recovery of G Suite user data (Gmail mailboxes, Calendars, Contacts, Google Drives) and G Suite Shared drives.
• Granular recovery of emails, files, contacts, and other items.
• Support for several G Suite organizations and cross-organization recovery.
• Optional notarization of the backed-up files by means of the Ethereum blockchain database. When enabled, you can prove that a file is authentic and unchanged since it was backed up.
• Optional full-text search. When enabled, you can search emails by their content.
• Up to 5000 items (mailboxes, Google Drives, and Shared drives) per company can be protected without performance degradation.

Supported G Suite editions

• G Suite Basic. Only Gmail, Drive, Calendar, and Contacts services.
• G Suite Business. Only Gmail, Drive (including Shared drives), Calendar, and Contacts services.
• G Suite Enterprise. Only Gmail, Drive (including Shared drives), Calendar, and Contacts services.
• G Suite for Education. Only Gmail, Drive (including Shared drives), Calendar, and Contacts services. Classroom service is not supported.

Required user rights

In the Cyber Protection service

In the Cyber Protection service, you need to be a company administrator acting on a customer tenant level. Company administrators acting on a unit level, unit administrators, and users cannot back up or recover G Suite data.

In G Suite

To add your G Suite organization to the Cyber Protection service, you must be signed in as a Super Admin with enabled API access (Security > API reference > Enable API access in the Google Admin console).

The Super Admin password is not stored anywhere and is not used to perform backup and recovery. Changing this password in G Suite does not affect Cyber Protection service operation.

If the Super Admin who added the G Suite organization is deleted from G Suite or assigned a role with less privileges, the backups will fail with an error like "access denied". In this case, repeat the "Adding a G Suite organization" procedure and specify valid Super Admin credentials. To avoid this situation, we recommend creating a dedicated Super Admin user for backup and recovery purposes.

About the backup schedule

Because the cloud agent serves multiple customers, it determines the start time for each protection plan on its own, to ensure an even load during a day and an equal quality of service for all of the customers.

Each protection plan runs daily at the same time of day.

Limitations

• Search in encrypted backups is not supported.
• No more than 10 manual backup runs during an hour.
• No more than 10 simultaneous recovery operations (this number includes both Office 365 and GSuite recovery).