Setup¶
This guide explains how to regrant the Afi application access and enable Google Directory backup for your Google Workspace tenant.
If your Google Workspace tenant has been added to Afi before October 17, 2024, the Afi application needs to be granted the additional permission scopes to access your Google Directory. For tenants added on or after this date, permissions regrant is not required.
Grant permissions¶
To regrant the Afi application permissions, please go to the Apps → Google Workspace Marketplace apps → Apps list → Afi G Suite Backup page in the Google Workspace Admin panel and click on the Grant access button.
Trigger a resource synchronization and protect Google Directory¶
After additional permissions are granted, please return back to the Afi portal and click on the refresh icon in the top-right corner of the Service → Protection screen to trigger a resource synchronization with Google Workspace.
After the synchronization is performed, assign a backup SLA policy to the provisioned Google Directory resource:
Info
In rare cases it can take up to 24 hours for the newly granted permissions to take effect on the Google Workspace side so it might take some time before Afi can verify the access and the Google Directory resource is provisioned in your Afi tenant.
Permission scopes for Google Directory backup and recovery¶
| Date | Scope | Description |
|---|---|---|
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.directory.user | View and manage the provisioning of users on your domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.directory.group | View and manage the provisioning of groups on your domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.directory.orgunit | View and manage organization units on your domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/cloud-identity.groups | See, change, create, and delete any of the Cloud Identity Groups that you can access, including the members of each group |
| 17 Oct 2024 | https://www.googleapis.com/auth/apps.groups.settings | View and manage the settings of a Google Workspace group |
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.directory.rolemanagement | Manage delegated admin roles for your domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.reports.audit.readonly | View audit reports for your Google Workspace domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/admin.directory.userschema | View and manage the provisioning of user schemas on your domain |
| 17 Oct 2024 | https://www.googleapis.com/auth/gmail.settings.basic | See, edit, create, or change your email settings and filters in Gmail |
| 17 Oct 2024 | https://www.googleapis.com/auth/gmail.settings.sharing | Manage your sensitive mail settings, including who can manage your mail |