Adding a new Datto SaaS Protection organization

IMPORTANT  This article does not apply to Backupify customers.

Adding (onboarding) a new Datto SaaS Protection organization to your environment is an easy and straightforward process. This article describes the steps you perform to add a new organization to a subscription.

IMPORTANT   It is recommended that you review this article in its entirety before performing the required tasks as you may need to obtain information from the organization to complete certain steps.

To add a new Datto SaaS Protection organization:

  1. In the Datto Partner Portal, select Status > SaaS Protection Status.
  2. Click Add SaaS Protection Organization and the following dialog box will appear:

NOTE  The Add SaaS Protection Organization button is available only to Admins. If you wish to make this function available to a technician at your company, contact Datto Technical Support.

  1. In the Add SaaS Protection Organization dialog box, in the Select or create organization list, do one of the following:
    • Select an existing organization. If one of the products (M365 or Google Workspace) is currently being backed up for the organization, the following information is prepopulated and cannot be changed:
      • Region Where Data is Stored:: Same region as the product currently being backed up.
      • Select Which Product will be Backed Up: The product that is not currently being backed up is selected automatically.
      • Select Commitment Term and Retention Type: Same subscription terms as the product currently being backed up.
      • Who will Manage this SaaS Protection Organization: Same as the product currently being backed up.
      • Skip the remaining steps in this section and perform the steps in the Organization Management section below (step 1 will be completed by default).

      The following information can be changed:

      • Select Retention Period: Select the duration of retention for the backups under the prepopulated retention type.
    • Select Create New to create a new organization account. Important: You must select Create New. The box above Create New is a search box that allows you to search for an existing organization.

      1. In the Create Organization box, enter the organization's name.
      2. For Is this a Not for Resale account, No is selected by default. If applicable, select Yes.
      3. Continue to step 4.
  2. In the Region Where Data is Stored list, select the region where the organization's backups should be stored. The organization may have policies regarding this. Datto's cloud servers are located in each of the regions listed.

NOTE  You cannot change the organization's storage location after the account has been created.

  1. For Select which product will be backed up, select Google Workspace.
  2. In the Select commitment term and retention type list, select the applicable subscription combination. If applicable, complete the Select retention period fields. For subscription information, see the article Understanding the pricing model.
  3. Perform the steps in the Organization Management section below.

In the Organization Management area of the form, you select whether you (partner) or your organization will manage the SaaS Protection organization account. The selection you make determines who authorizes and creates the organization account. If you will be managing the account, in the following table, perform the steps in the partner-managed column. If your organization will be managing the account, perform the steps in the organization-managed column.

Partner-managed Organization-managed
  1. For Who will manage this SaaS Protection organization, verify Partner is selected.
  1. For Who will manage this SaaS Protection organization, selectOrganization Only.
  1. For Do you have super admin credentials for the Google Workspace domain you are protecting, select one of the following:
    • Yes: If you select Yes, you will complete all steps required to authorize and create the organization account.
    • No: In the Email box, enter the email address of the appropriate organization staff member who has super admin credentials. An email will be sent to this address with instructions to authorize and create the organization account.
  1. Complete the fields in the Create Organization User area of the form. All fields are required.
    In the Organization Email field, enter the email address of the appropriate organization staff member who has super admin credentials. An email will be sent to this address with instructions to authorize and create the organization account.
  1. Perform the steps in theLicense Management and Acknowledgment section below.
  1. Perform the steps in the License Management and Acknowledgment section below.

In the License Management area of the form, the Users Auto-Add feature allows backups to be performed automatically and a license fee to be charged for each user the organization adds to its environment. To make managing user licenses easier, it is recommended the Users Auto-Add feature is left enabled, its default status.

This feature is especially useful when adding a new organization. Each of the organization's end users are immediately protected when the account is authorized and created. If the Users Auto-Add feature is disabled when you add a new organization, the organization is required to enable protection individually for the desired users. Or, the organization can upload a comma-separated values (CSV) file containing the user data.

IMPORTANT  If the organization will be managing the SaaS Protection organization account, it is recommended that you explain the Users Auto-Add feature to the organization prior to performing the steps in this article. Whether Users Auto-Add is enabled or disabled should be the organization's decision, but you select the status of the feature when setting up the account. After the account is created, the organization can change the status at any time but it will only apply to new users that are added going forward.

You can set a limit for the total number of licenses allowed for the organization using the Enable User License Cap feature. If the cap number is reached and the Users Auto-Add feature is on, whenever a new user is added to the organization environment, either automatically or manually, backups will not be enabled for the new user. Hence, a license fee is not charged for the new user.

An email is automatically sent to you indicating SaaS Protection recognized that a new user was added to the organization's environment, but due to the cap, the user cannot be added to the backup process.

After the License Management area of the form is the Acknowledgment area, where you agree to the licensing terms.

To complete the License Management and Acknowledgment areas of the form:

  1. Users Auto-Add is enabled by default. To disable it, turn the toggle Off.

    To re-enable it, toggle the toggle On.
  2. To Enable User License Cap:
    1. Select the check box.
    2. Enter the cap number.
  3. In the Acknowledgment section:
    1. Review the acknowledgment statement, the partner agreement, and terms of use document.
    2. Select the acknowledgment statement check box.
  4. Perform the steps in the Authorize and create the organization account section below.
  1. At the bottom of the dialog box, click Add SaaS Protection Organization.
  2. Do one of the following:
    • If you are adding a organization that you are fully managing and for which you have super admin credentials, go to step 3.
    • If you are adding a organization account that you are fully managing but you don't have super admin credentials, go to step 4.
    • If you are adding a organization account that will be managed by the organization, go to step 5.
  3. If you are adding a organization that you are fully managing and for which you have super admin credentials:
    1. In the Validate Account dialog box, click Install the Backupify Application.
    2. Log into the Google Workspace AdminConsole.
    3. The Backupify Google Apps Backup app should already be selected in the Google Workspace Marketplace app. Click Admin Install.
    4. Click Continue.
    5. In the dialog box:
      1. Review the list of data permissions for which you are granting Backupify Google Apps Backup. For information about permissions, see the article Partner-managed, organization-managed accounts.
      2. Leave Everyone at Your Organization selected as the users for whom the app should be installed.
      3. Read the terms of service and privacy policy documents then select the check box.
    6. Click Finish.
    7. When finished, the Backupify Google Apps Backup web app will appear On for everyone.
    8. In the Validate Account dialog box, enter your super administrator account email address and click Validate.
    9. You are redirected to the SaaS Protection Status page where the organization is now listed. If Users Auto-Add was On when adding the organization, the Seats and Backup Success Rate (24 hrs) fields begin to populate. In the SaaS Defense Status column, Unavailable means SaaS Defense is not available for Google Workspace accounts.

NOTE  The duration of the initial data backup depends on the amount of data being backed up. For example, backing up six to eight terabytes of data takes approximately three to four days.

  1. If you are adding a organization account that you are fully managing but you don't have super admin credentials:
    1. Datto SaaS Protection automatically sends the organization an email with instructions and a link for authorizing and creating the account. The authorization link expires in 24 hours.
    2. You are redirected to the SaaS Protection Status page where the organization is now listed. In the Details column, Check Authorization is displayed.

    3. If the organization authorizes and creates the account within 24 hours and Users Auto-Add was On when adding the organization, the Seats and Backup Success Rate (24 hrs) fields begin to populate.
      In the SaaS Defense Status column, Unavailable means SaaS Defense is not available for Google Workspace accounts.

      Note: The duration of the initial data backup depends on the amount of data being backed up. For example, backing up six to eight terabytes of data takes approximately three to four days.

    4. If the organization does not authorize the account within 24 hours:
      1. In the Details column, click Check Authorization.
      2. The Account Creation in Progress message is displayed and indicates when the organization was sent the email with the authorization instructions. If you want to resend the authorization email to the organization, click Resend Email.
  2. If you are adding a organization account that will be managed by the organization:
    1. Datto SaaS Protection automatically sends the organization an email with instructions and a link for authorizing and creating the account. The authorization link expires in 24 hours.
    2. You are redirected to the SaaS Protection Status page where the organization is now listed. In the Details column, Check Authorization is displayed. This icon means the account is organization-managed.

    3. If the organization authorizes and creates the account within 24 hours and Users Auto-Add was On when adding the organization, the Seats and Backup Success Rate (24 hrs) fields begin to populate.
      In the SaaS Defense Status column, Unavailable means SaaS Defense is not available for Google Workspace accounts.
    4. If the organization does not authorize the account within 24 hours:
      1. In the Detailscolumn, click Check Authorization.
      2. The Account Creation in Progress message is displayed and indicates when the organization was sent the email with the authorization instructions. If you want to resend the authorization email to the organization, click Resend Email.