Google Workspace: Connect Source Workspaces
Who can use this feature
Anyone with these permissions: Manage source connections
This article explains how to connect a Google Workspace source workspace so Eon can discover and back up Google Workspace data.
Connect a source workspace
In this procedure, you’ll authorize Eon’s service accounts to read your workspace, then identify the workspace you want to back up. Google terms this authorization domain-wide delegation: you grant a service account permission to act on behalf of your users, scope by scope.
You can connect a source workspace from the SaaS applications page, by clicking New Connection and selecting Connect Google Workspace.
Before you start
Before you connect a Google Workspace source workspace, make sure:
-
You know the primary domain of the workspace you want to back up.
-
You have a dedicated account in the workspace for Eon to impersonate, with super admin privileges. Use an account created for this purpose, not an administrator’s personal login. See Google’s domain-wide delegation best practices.
-
You can sign in to the Google Admin console as a super admin to authorize Eon’s service accounts.
Authorize Eon's service accounts
Eon displays two service accounts — a Discovery service account and a Backup service account — each with its own Client ID and Scopes.
-
Sign in to Manage Domain Wide Delegation as a super admin.
-
For each service account Eon displays, click Add new, paste the Client ID and OAuth Scopes copied from Eon, then click Authorize.
Identify your workspace
-
In Primary domain, enter the primary domain of the workspace, such as
company.com. You can find this in the Google Admin console, under Manage domains. -
In Delegated admin email, enter the dedicated account Eon impersonates to read your workspace.
-
In Workspace display name in Eon, enter the name you want to identify this workspace by in Eon.
Eon discovers the users, groups, and shared drives in the workspace, and adds them to your inventory. To start backing up the workspace, assign it to a Google Workspace backup policy.