Google Workspace backup guide
Connect and back up Google Workspace
A clear guide for Google Workspace super admins: sign in once, authorize Backup247 in the Admin console, choose users, and keep Gmail, calendars and contacts recoverable.
Last updated
You do not create a Google Cloud project, service account or key. Backup247 operates one service account. A super admin signs in to prove they manage the domain, then authorizes Backup247's client ID with a fixed list of permissions under Domain-wide delegation. Backup247 stores only your domain, customer ID and the admin email used to connect.
Who can connect
The person connecting must sign in with a super admin account of the Google Workspace domain you want to protect. Connecting normally takes about two minutes.
Personal Gmail accounts cannot be connected. Nothing is installed in your domain; you only authorize Backup247's access.
- Use a super admin account of the correct Google Workspace domain.
- Make sure the users you want to protect have a license that includes Gmail.
- Suspended and archived users cannot be backed up — Google doesn't allow API access to them.
- If you are not a super admin, use “Copy instructions for my IT admin” on the connect screen.
Step-by-step connect
Open Backup247, go to Connectors, choose Google Workspace and follow the three steps.
The connect screen guides you through:
- 1. Sign in with Google. Use your Google Workspace super admin account. Backup247 only reads your name, email address and domain.
- 2. Open the Google Admin console. Click “Open Google Admin console”. The Domain-wide delegation page opens with Backup247's client ID and permissions already filled in. Click Authorize. If the fields are empty, copy them from the connect screen: Admin console → Security → Access and data control → API controls → Manage domain-wide delegation → Add new.
- 3. Verify the connection. Return to Backup247 and click “I've authorized — verify connection”. Google can take a few minutes to apply the change; if verification fails, try again in a minute.
- 4. Choose users. Pick individual users or the whole domain on the schedules page.
The permissions are chosen once for both backup and restore, so you never need to authorize Backup247 again: read the user directory, Gmail (read, insert and labels — never permanent delete), Google Calendar and Contacts.
Choosing users
| Choice | Best for | New users |
|---|---|---|
| Individual users | A fixed, limited set | Select them manually |
| Whole domain | Protecting every active user | Included automatically |
Suspended and archived users are shown with a label and skipped by Whole domain. A user without Gmail in their license fails with a clear message instead of being silently skipped.
What is backed up and what is not
Each user is backed up independently. You can browse every snapshot and download it as a ZIP with standard .eml files.
Gmail
Every message — including Spam and Trash — as the complete original message with its attachments, plus all labels. Messages that already exist in an earlier backup are not downloaded again.
Calendars
Every calendar the user owns, with all events. Attachments on events are links to Google Drive and are kept as links.
Contacts
The user's contacts with all their details and contact groups. Contact photos are kept as links.
Not included
Google Drive, Chat, Keep, Sites, Groups, “Other contacts”, calendars shared by other people (they are backed up from their owner), and messages larger than 30 MB (listed as a warning on the backup).
See the connector details on the Google Workspace connectors page, or compare plans on pricing.
Restoring
Open a completed backup and click Restore, or open a single message on the Browse page and click “Restore this message”. Restores always go back to the user the backup came from and into new containers, so nothing existing is ever changed or deleted. You choose Mail, Calendar and/or Contacts, and optionally which labels.
- Mail. Messages return under a new label “Restored from <backup date> — <time> (Backup247)”, with sub-labels for Inbox, Sent, Drafts, Spam, Trash, All Mail and your own labels. They keep their original dates, read/unread and starred state, and do not land in the Inbox.
- Calendars. Each calendar is restored as a new calendar named after the restore label. Attendees are not re-invited: the original organizer, attendees, meeting link and Drive attachment links are listed at the top of the event description.
- Recurring and special events. Recurring series are restored with their rule; individually changed occurrences are not restored separately. Focus time, out of office, working location and events created from Gmail are skipped. Both are counted in the restore summary.
- Contacts. Contacts are restored into a new contact group named after the restore label (without photos).
- Not restored. Gmail filters, signatures, delegates and other settings, the Drive files behind event attachments, and messages larger than 30 MB that were not in the backup.
Revoking access
- Open the Google Admin console → Security → Access and data control → API controls → Manage domain-wide delegation.
- Find the Backup247 client ID and delete it. Future backups stop immediately.
- Optionally delete the connector in Backup247. Existing backups stay available until your retention removes them.
Troubleshooting
“Use a Google Workspace admin account, not a personal Gmail account”+
You signed in with a personal Google account. Sign out and sign in with your Google Workspace super admin account.
“You need to be a super admin”+
Your account is not a super admin of the domain. Ask a super admin to connect, or send them the instructions from the connect screen.
Verification says Backup247 is not authorized yet+
Google can take a few minutes to apply domain-wide delegation. Wait a minute and try again. Check that the client ID and all permissions were saved exactly as shown.
A backup says domain-wide delegation was removed or is missing a permission+
The Backup247 entry was deleted or changed in the Admin console. Authorize it again with the client ID and permissions from the connect screen.
“This user has no Gmail service”+
The user's license does not include Gmail, or Gmail is turned off for them. Assign a license with Gmail or turn the service on, then run the backup again.
A suspended or archived user cannot be backed up+
Google doesn't allow API access to suspended or archived users. Reactivate the user if you need a backup.
Protect your Google Workspace
Connect your domain, choose the users that matter, and verify your first Gmail backup.
