#Configure Default Google App Profiles

Default Google app profiles:

In Management > App management, the Tenant Owner and Service Administrators can click Create and follow the steps below to create an app profile.

1. Select services – Select a tenant and select services for which you want to create app profiles. Click Next.

   *Note: Before you create an app profile, you must ensure that the tenant has been connected to AvePoint Online Services. For more details on connecting tenants, refer to Connect Your Google Tenant.

2. Choose setup method – Modern mode is the recommended mode for all AvePoint’s default apps. In this mode, the related apps are listed in a service-based view, and you can consent to apps separately for the selected services.

3. Consent to apps – To consent to an app, click Consent next to the app. For a Google tenant, creating an app profile for the service app used by the Cloud Backup for Google Workspace or Fly service requires the consent of a Super Admin account.

   *Note: For the app used by Cloud Backup for Google Workspace, ensure that the Super Admin account has been assigned with the required licenses:

   • The Google Workspace module requires licenses for the Gmail, Calendar, Contacts, Drive, and Chat services. The following additional licenses are only needed for managing specific services: Shared drive for shared drives and Vault for Vault matters.

   • The Google Classroom module requires licenses for the Classroom service.

4. When you finish creating app profiles, you can click Finish to exit the Create app profile wizard.

#Permissions Required by Cloud Backup for Google Workspace

The following permissions requested by AvePoint Online Services should be accepted when you install the AvePoint Cloud Backup app from the Google Workspace Marketplace. These permissions will be used to ensure the AvePoint Online Services and Cloud Backup for Google Workspace functionalities work.

Scope	Purpose
https://mail.google.com/	Back up emails and labels in Gmail for future recovery.
https://www.googleapis.com/auth/drive	Back up folders and files under My Drive and shared drives for future recovery.
https://www.googleapis.com/auth/calendar	Back up calendars and events from Google Calendar for future recovery.
https://www.googleapis.com/auth/contacts.other.readonly	Back up Other contacts data.
https://www.googleapis.com/auth/contacts	Back up contact groups and contacts from Google Contacts for future recovery.
https://www.googleapis.com/auth/admin.directory.group.readonly	Retrieve groups in your domain.
https://www.googleapis.com/auth/admin.directory.user.readonly	Retrieve users in your domain.
https://www.googleapis.com/auth/admin.directory.customer.readonly	Retrieve organization information to segment operations and settings for different organizations and isolate tenants.
https://www.googleapis.com/auth/admin.reports.usage.readonly	Retrieve organization subscription usage for backup admins to monitor their subscription in the app.
https://www.googleapis.com/auth/admin.directory.orgunit.readonly	Retrieve groups to add users to the app through organization units.
https://www.googleapis.com/auth/userinfo.email	Retrieve user email information when users log in to the app.
https://www.googleapis.com/auth/userinfo.profile	Retrieve users’ publicly available properties to identify users through our application.
https://www.googleapis.com/auth/apps.licensing	Retrieve users’ license information, including product SKUs. This information would be used when backup admins set policies for which users to include or exclude in certain backup scopes. This enables admins to set different backup policies.
https://www.googleapis.com/auth/drive.admin.labels	Retrieve all information of labels on files in Drives for backup and restore.
https://www.googleapis.com/auth/drive.labels	Back up and restore properties of labels on files in Drives.
https://www.googleapis.com/auth/classroom.courses	Back up and restore classes.
https://www.googleapis.com/auth/classroom.announcements	Back up and restore announcements in classes.
https://www.googleapis.com/auth/classroom.coursework.me	Back up classwork in classes.
https://www.googleapis.com/auth/classroom.coursework.students	Restore classwork in classes.
https://www.googleapis.com/auth/classroom.courseworkmaterials	Back up and restore classwork materials.
https://www.googleapis.com/auth/classroom.rosters	Back up and restore students and teachers in classes.
https://www.googleapis.com/auth/classroom.profile.emails	Retrieve email addresses in classes.
https://www.googleapis.com/auth/classroom.topics	Back up and restore topics in classes.
https://www.googleapis.com/auth/classroom.topics.readonly	Retrieve information of topics.
https://www.googleapis.com/auth/classroom.guardianlinks.students	Retrieve guardians of students in classes.

#Permissions Required by Fly

The table below lists the permissions that should be accepted when you authorize the AvePoint Fly Migration app.

#API Requirements

API Requirements	Google Scopes Permission	Purpose
Gmail API	https://www.googleapis.com/auth/gmail.readonly	Retrieve mails and labels, including data and properties.
Gmail API	https://www.googleapis.com/auth/gmail.settings.sharing	Used to enable email forwarding.
People API	https://www.googleapis.com/auth/contacts.readonly	Retrieve contact groups and contacts.
Google Task API	https://www.googleapis.com/auth/tasks.readonly	Retrieve all tasks.
Admin SDK API	https://www.googleapis.com/auth/admin.reports.usage.readonly	Retrieve size usage of users.
Admin SDK API	https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly	Retrieve resource calendars.
Admin SDK API	https://www.googleapis.com/auth/admin.directory.user.readonly	Retrieve source users.
Admin SDK API	https://www.googleapis.com/auth/admin.directory.group.readonly	Retrieve source groups.
Google Calendar API	https://www.googleapis.com/auth/calendar	Retrieve calendars and events.
Google Drive API	https://www.googleapis.com/auth/drive.readonly	Retrieve event attachments.
Photos Library API	https://www.googleapis.com/auth/photoslibrary.readonly	Retrieve Google Photos information.
Enterprise License Manager API	https://www.googleapis.com/auth/apps.licensing	Used to retrieve license information.

#Admin Account Permissions

Type	Admin Account Permission	Purpose
Gmail	Users > Read	Migrate Gmail mailboxes.
Gmail	Calendar > All Settings > Buildings and Resources > Room Insights	Migrate Gmail mailboxes.
Gmail	Groups > Read	Migrate Google groups.
Gmail	Reports	Retrieve source data.
Gmail	Make changes to events permission to the calendar, or assign the Super Admin role to the Admin account.	Migrate private calendar events in the resource mailbox.
Google Drive	Users > Read	Migrate user drives.
Google Drive	Drive and Docs > Settings	Migrate shared drives.
Google Drive	Content manager of Shared Drive	Migrate shared drives.*Note: If you do not want to give the content manager access to the Admin account, you can ignore this requirement, but there must be a content manager or manager in the shared drive.