Home > User Guide > User Management

Export to PDF

User Management

User management provides centralized management of security groups, which controls what standard users can restore/export in Cloud Backup for Google Workspace. You can configure security groups with different permission scopes assigned, and then add standard users to security groups. Standard users added to a security group will be granted permissions of the security group, and they can restore/export objects contained in the security group.

To manage security groups, navigate to Settings > User management. All configured security groups are listed on the User management page. The Administrators group is the built-in group and cannot be deleted. The Administrators group has all permissions and containers, and you can only manage users/groups in this group.

*Note: The users who have been designated as application administrators of Cloud Backup for Google Workspace will be automatically synchronized to the Administrators group. If a user is demoted from an application administrator to a standard user, it is recommended to remove this user from the Administrators group. If service administrators contain groups, you must manually add the groups into the Administrators group when needed.

On the User management page, you can take the following actions to manage security groups:

![The "User management" page.](/en/google-backup/user-guide/images/image16.png "The "User management" page.")

- To create a security group, click **Create** **security** **group**. In the **Create** **security** **group** pane, you can refer to the following **Create a Security Group** section to configure settings. - To view details of a security group, click the group name. - To edit details of a security group, click the more actions button and click **Edit** from the drop-down menu, or select the group and click the **Edit** button. - To delete a security group, click the more actions button and click **Delete** from the drop-down menu. You can also select one or multiple groups and click the **Delete** button.

Create a Security Group

Follow the instructions below to create a security group:

  1. Navigate to Settings > User management.

  2. Click Create security group. The Create security group pane appears on the right of the page.

  3. Security group name – Enter a name for the group.

  4. Description – Enter an optional description.

  5. Invite users/groups – Enter users or groups that you want to add to this group. Note that the entered users and groups must exist in your tenant and they must have access to Cloud Backup for Google Workspace.

  6. Grant permissions – Grant permissions to this security group by selecting desired options from the following:

    • Restore the data to its original location

    • Restore the data to another location

    • Export

    You can refer to the information in the table below when you grant permissions to a security group.

Object typesRestore optionsRestore optionsRestore options
Object typesRestore the data to its original locationRestore the data to another locationExport
User services > Selected items:GmailCalendarContactsDrive > My DriveSupportedSupportedSupported
User services > Selected items > Drive > Shared with meUnsupportedSupportedSupported
User services > Selected items > ChatUnsupportedUnsupportedSupported
User services > Full accountSupportedSupportedUnsupported
Shared driveSupportedSupportedSupported
UsersSupportedUnsupportedSupported
GroupsSupportedUnsupportedSupported
Classroom > Selected items:AnnouncementsClassworkPeopleSupportedUnsupportedSupported
Classroom > Selected items > GradesUnsupportedUnsupportedSupported
Classroom > Selected items > DriveUnsupportedSupportedSupported
Classroom > Whole classSupportedUnsupportedSupported
> ***Note**: The protection for Vault service is only available to users in the **Administrators** group.

7. Select permission scope – To select permission scope for a service type, turn on the toggle in the Type column, and then click the Select container button in the Action column. In the pane, select desired containers and click Save. If you want to go back to the last step without saving changes, click Cancel. In each security group, you can configure permission scope for more than one object type.

  1. Click Save.