Home > User Guide > User Management
Export to PDFUser management provides centralized management of security groups, which controls what standard users can restore/export in Cloud Backup for Google Workspace. You can configure security groups with different permission scopes assigned, and then add standard users to security groups. Standard users added to a security group will be granted permissions of the security group, and they can restore/export objects contained in the security group.
To manage security groups, navigate to Settings > User management. All configured security groups are listed on the User management page. The Administrators group is the built-in group and cannot be deleted. The Administrators group has all permissions and containers, and you can only manage users/groups in this group.
*Note: The users who have been designated as application administrators of Cloud Backup for Google Workspace will be automatically synchronized to the Administrators group. If a user is demoted from an application administrator to a standard user, it is recommended to remove this user from the Administrators group. If service administrators contain groups, you must manually add the groups into the Administrators group when needed.
On the User management page, you can take the following actions to manage security groups:

Follow the instructions below to create a security group:
Navigate to Settings > User management.
Click Create security group. The Create security group pane appears on the right of the page.
Security group name – Enter a name for the group.
Description – Enter an optional description.
Invite users/groups – Enter users or groups that you want to add to this group. Note that the entered users and groups must exist in your tenant and they must have access to Cloud Backup for Google Workspace.
Grant permissions – Grant permissions to this security group by selecting desired options from the following:
Restore the data to its original location
Restore the data to another location
Export
You can refer to the information in the table below when you grant permissions to a security group.
| Object types | Restore options | Restore options | Restore options |
|---|---|---|---|
| Object types | Restore the data to its original location | Restore the data to another location | Export |
| User services > Selected items:GmailCalendarContactsDrive > My Drive | Supported | Supported | Supported |
| User services > Selected items > Drive > Shared with me | Unsupported | Supported | Supported |
| User services > Selected items > Chat | Unsupported | Unsupported | Supported |
| User services > Full account | Supported | Supported | Unsupported |
| Shared drive | Supported | Supported | Supported |
| Users | Supported | Unsupported | Supported |
| Groups | Supported | Unsupported | Supported |
| Classroom > Selected items:AnnouncementsClassworkPeople | Supported | Unsupported | Supported |
| Classroom > Selected items > Grades | Unsupported | Unsupported | Supported |
| Classroom > Selected items > Drive | Unsupported | Supported | Supported |
| Classroom > Whole class | Supported | Unsupported | Supported |
7. Select permission scope – To select permission scope for a service type, turn on the toggle in the Type column, and then click the Select container button in the Action column. In the pane, select desired containers and click Save. If you want to go back to the last step without saving changes, click Cancel. In each security group, you can configure permission scope for more than one object type.