Backupify: Required permissions

This article describes the Google Workspace permissions that must be granted to Backupify for it to function correctly.

Google Workspace permissions

Permission Description
See, edit, create, and delete all of your Google Drive files Allows SaaS Protection to backup and restore user files.
See, edit, create, and delete all your Google Sheets spreadsheets Allows SaaS Protection to backup and restore user files.
Read, compose, send, and permanently delete all your email from Gmail Allows SaaS Protection to backup and restore email in mailboxes. This does NOT allow SaaS Protection to send mail from these mailboxes.
See, edit, share, and permanently delete all the calendars you can access using Google Calendar Allows SaaS Protection to backup and restore calendars.
See, edit, download, and permanently delete your contacts Allows SaaS Protection to backup and restore user contacts.
See and download contact info automatically saved in your "Other contacts" Allows SaaS Protection to backup and restore user contacts.
Manage the alias settings of users on your domain Allows SaaS Protection to backup content associated with an alias.
Manage the calendar settings of users on your domain Allows SaaS Protection to backup and restore calendars.
Manage your domain settings Allows SaaS Protection to read relevant domain settings.
Manage groups on your domain Allows SaaS Protection to backup and restore information about groups.
Manage the organizational structure and policies of users on your domain Allows SaaS Protection to identify and backup information about Organizational Units.
Manage the provisioning of users on your domain This allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
View groups on your domain Allows SaaS Protection to backup and restore information about groups.
View organization units on your domain Allows SaaS Protection to identify and backup information about Organizational Units.
See info about users on your domain Allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
View usage reports for your Google Workspace domain Allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
Upload messages to any Google group in your domain This allows SaaS Protection to enable group management features for protection.
View and manage the settings of a Google Workspace group This allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
View and manage Google Workspace licenses for your domain Allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
Manage email messages of users on your domain Allows SaaS Protection to perform backups and restores of email in mailboxes. This does NOT allow SaaS Protection to send mail from these mailboxes.
See your primary Google Account email address This allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
See your personal info, including any personal info you've made publicly available SaaS Protection does not currently make use of this permission but may require it for future features.
Manage your sites Allows SaaS Protection to backup and restore the directory structure of protected accounts.
View your installed application's licensing information Allows SaaS Protection to read data in your organization’s directory, including users, groups, permissions, and applications for SaaS Protection’s seat management system.
View your basic profile info, including your age range and language SaaS Protection does not currently make use of this permission but may require it for future features.
See and download all of your Google Account email addresses Allows SaaS Protection to have the appropriate levels of access to mailboxes for backups and restores.