#Configure Protected Scope

To configure the protected scope, follow the steps below:

1. Click Protection on the left navigation. The Protection page appears.

2. If your organization has multiple modules, select your desired module by clicking the Google Workspace, Vault, Google Classroom, or Google Directory tab.

   *Note: If your organization installed the AvePoint Cloud Backup app before August 2023 release, to protect Google Classroom data, you must navigate to the Google Admin console > Apps > Google Workspace Marketplace apps > Apps list, click the AvePoint Cloud Backup app, and click Grant access to add the required permissions to the app. For details on the required permissions, refer to the section in the AvePoint Online Services user guide.

3. Under the following modules, click the tab based on the container type where you want to configure the protected scope:

   • Google Workspace module – Click the User services (include Gmail, Calendar, Contacts, Drive, and Chat services) or Shared drives tab.

   • Google Directory module – Click the Users or Groups tab.

4. On the Protection page, the table under each tab will list all containers. The icon of a protected service will be colorful, and the icon of an unprotected service will be grey. If you want to search for desired containers, you can click Filters or use the search box.

   *Note: With a trial subscription, you can protect up to 5 items across the following container types: user, group, shared drive, and classroom.

5. If you want to view items in a container, click the xpand button next to the container.

6. To configure the protected scope for one or multiple containers, select the containers. If you want to select all containers at a time, click Select all.

7. Click Configure protected scope. The Configure protected scope pane appears on the right of the page.

8. Select the services that you want to protect. Note the following:

   • For each scanned shared drive to be backed up, ensure there is at least one member with the Manager permission. Otherwise, the shared drive cannot be successfully backed up.

   • If your organization has enabled the Multi-Geo function, you can configure the Data region setting for the following containers:

     • Google Workspace module – user and shared drive containers

     • Google Directory module – user and group containers

   • If your organization wants to enable protection for the Chat, Vault, or Directory service, it is necessary to configure a custom Google app. For details, see Custom Google App.

   • Vault protection does not back up the drafts in Gmail (Vault), to avoid duplicate drafts generated by the Google Vault.

9. Click Save. The new protected scope will take effect in the next backup job.

   *Note: For the Vault protection, you can select services and click Back up now to start a backup job. For additional details, see Vault Data Protection.