 Hi guys, welcome back to Daniel Starkworld on Medium YouTube and at danielrosil.tech. So today's video continuing the setup and discovery process on this exciting new Synology DS920 Plus network attached storage device, I'm just going to log into that quickly, is looking at the active backup set of tools. So there's a few, I actually have put them all on with package manager, which is found in DSM and DSM for those new to Synology and I by no means a Synology veteran, in fact the opposite, I'm a newbie that is just learning what all these interesting things do. So there's three active backup tools that are in the main packages screen, they're not beta packages which is a smaller list, just all packages and you have active backup for business, active backup for G Suite and active backup for 365, off of 365. So the two that I'm going to be taking a look at are active backup for business and just to jump into that for a second, there is an agent you can run on a Windows target. So what I'm interested in doing is just seeing if I can use this guy to back up my Windows VM, my virtual machine which I keep in VMware. I do actually have a Windows bare metal installed but I would need a fixed grub and to be honest I'm not I'm not tempted to back that up, I would like I would be much more interested in protecting the VM because to be honest I almost never use the Windows bare metal anymore but the one to look at today is active backup for G Suite, I'm not interested in 365 because I don't use 365 but I do use G Suite, in fact I have two current active G Suite accounts. So the first thing after I've opened it up is asking for authorization. It's telling me firstly that active backup for G Suite supports backing up multiple domains so that's good news I can back up the two but I'm just going to firstly set it up on my on my primary account. Alright so I put in the domain I'm backing up and I put in my domain administrator email address which is just me and now it's looking for a thing called a service key. So I've just gone ahead and taken a read through Synology's documentation how to obtain authorization for Google for using active backup for G Suite and just to quickly run through that process login to as you would expect G Suite admin console features driving docs. Now bear in mind that I'm just I'm coming at this I'm coming at this for the first time so I'm just trying to see exactly what this backs up. Now my main backup that I currently use for G Suite is Google Takeouts. Now I've looked at a few of the options on the market for for taking you know these automated G Suite backups so you have a lot of them and you can just search for G Suite backup and for that matter 365 backup and there is an entire industry of providers. Acronis have a tool backupify have a tool spanning a lot of tools covering G Suite and covering 365 cloud to cloud backup. So typically they'll automatically go into your G Suite and they'll back it up. Now my first question is what are you backing up in G Suite? So if I do a Google Takeout and Google Takeout is like the automated engine for backing up G Suite or for extracting your data I'm not going to go into the semantics of what's a backup what's a snapshot what's an archive but Google Takeout is very very granular and what I like about it is you get everything. So for instance this YouTube video which I'm currently recording is going to go up to YouTube obviously. Now using Google Takeout I can pull out all my YouTube data because YouTube is part of the Google you know online services in my G Suite and on the negative side that'll make my takeouts heavy because MP4 is a relatively heavy files. On the plus side I know that when I'm running a takeout I'm getting absolutely everything out of Google. So that's why these guys haven't attracted to me that much because they typically focus on some G Suite functionalities such as Gmail, Calendar, Contact Strive. The kind of things to be honest you'd expect would be of interest to an enterprise environment where you might have a few hundred users on a G Suite installation and you know in that kind of a backup scenario it wouldn't really be appropriate to be backing up the YouTube videos on everybody's account that's just not something that wouldn't really be a business tool. So I'm just curious to see what this is going to actually do and we are going to shortly find out. So I'm just going to have a look at this documentation and get things running on the G Suite site. Alright so we're this far in the setup journey so far now it wants to be I've gone into my Google admin over here I've gone into Google Drive and it wants me to to allow users to access Google Drive with the G Drive SDK API. So if you look at Drive API for SDK for the Drive SDK specifically that's already turned on so I can skip this step. Next thing the instructions have asked me to do is go into Google Developers console. I'm just going to activate this it looks like my Google Cloud I still have some time remaining. Now select a project hit new project and call the project active backup for G Suite. So I've gone ahead and done that project name is active backup for G Suite it's in my organization it has a project ID and I'm just going to click the create button. Okay so it's told me to go into the project so I've gone ahead and clicked into my project in Google developer console. Please select a project you created go to library and search for the API's list as follows admin SDK contact API Gmail API. Alright so this is pretty much telling me what's going to be backed up if these do the API's we'll be needing. Admin contacts Gmail calendar Drive and it tells it asked me to enable them one by one so I'm just going to go ahead find those API's in the library for this project and I will enable them. So I'm pretty much mirroring the screenshots in the in Synology's documentation right now couple of clicks took me to this landing page welcome to the API library and I don't see a better way than just searching for each API and just enabling them one by one so that is the methodology I'm going to use. This is what you do you search for them one by one there's an enable button and I'm going to take a take a guess that you click the enable button something you might want to do just a quick tip to save time rather than going back and forth is just to duplicate this tab so I can actually duplicate it. I've done admin one two three one two three four four remaining API's I'm just going to duplicate this tab four times so that I don't need to constantly be shuffling back and forth and I will resume the video once I have enabled all these API's. Alright so that should be it I've gone ahead and enabled those four API's. Okay after enabling the API's in the upper left corner of the console go to IAM and admin service accounts create service account. Okay it says enter service account name as you please and then so you're just going to call this Synology backup as you please service account ID is going to be the same at that at your API and then click on create. Next I need to assign the right permissions to this account and its owner permissions you can see here so you have service account permissions by default that's not going to have permission so I want to make it the owner of this project the backup project so just the first one is project and the third option down is full access to all resource click on that and then press on continue. Next thing in the documentation is it's told me to create a key so I actually needed to get out of that window in order to get to this but I can see here it's not hard to work out service accounts we can see the Synology backup service account that I just created and if I click on to actions the third option in the drop down will be create key so I'm going to go ahead and create that key. Options are for JSON which is recommended or P12 backward compatibility was code using P12 format no idea what P12 is never heard of it but I do know that Synology was looking for a JSON file so that is fine so I'm going to create the JSON key. All right and as you can see a key file called .j with the extension .json a private key has just downloaded and that's going to be on my desktop so I think that is all that is required because I know that Synology is looking for my key so I hope that's the access credential but let me see what else Synology recommend. Indeed there are unfortunately more steps so step 11 is click show service wide show service domain wide delegation take the checkbox and click active so I'm just going to do that too. So I just clicked on the email address in order to get back into service accounts you can see there's a nice drop down here called show domain wide delegation going to click on that and you can see that it was not enabled by default so I'm going to enable that so my mind could not rest without enabling this checkbox so I was able to find this at this stack overflow thread and this Learon here says if you don't see the checkbox it mean you don't need to enable it you can get the client ID from the UI or by looking at the JSON private file and you use that to authorize your scopes in the admin console so I'm going to take a look at the JSON and see if there is indeed a client ID in that or else if not I'll try find that from the UI. So indeed as Learon on stack overflow said or Learon I should say I presume he's Israeli and that's how you say Learon in Hebrew is that weird r-signed so I have got that client ID now on my notepad so I can proceed with the installation. Alright hopefully getting close now to the end we're on step 12 was getting the client ID which we've done it's now on my notepad from the JSON and 13 login to your Google admin console we are already in there go into security advanced settings manage API access okay so we have manage API access towards the bottom of the security settings in the G Suite admin okay so for the client name it's asking for the client ID we just pulled out from step 12 and then you're gonna have to copy and paste one by one the different APIs this guy's supposed to have access to so I'm gonna go ahead and do that process the nice thing about this is that it allows you to copy them in comma delimited format and Synology has got a little comma at the end of each so I'm hoping this will just parse directly but we will quickly find out when we click the authorize button. Indeed it is my lucky day and we can see that the new API client has been added and the permissions to the various Google APIs are there so I must say to Synology's credit that their documentation so far cannot be faulted it's very good alright now it says it may take some time to export the key but when it is ready please use the locally stored key generated in step 8 to continue I'm pretty sure it just means that JSON we created a key yeah we took it out in JSON so I'm not sure why it says it'll take a while because we got it so I've gone back to DSM I'm gonna take my chances that that wasn't the JSON file and put it up alright JSON file is here and we're gonna try to upload this now alright we're gonna try proceeded it has been uploaded alright it says connected to the cloud and I so far so good it appears to have connected so now it says task name backup destination and backup list and you can see one user is is backed up and we have as I suspected the option includes just drive mail contacts and calendar enable active backup I guess that means we're occurring task so backup destination I presume it's gonna look through my folder shares in which case I am going to go ahead and create a dedicated folder share indeed as I suspected the backup destination it's one of our buckets they've gone ahead and given it the unimaginative name of G sweet backup DR I like to keep all these various backups in different shares just that while I'm testing things out at least and I'm gonna call it Daniel's Daniel G sweet backup account discovery settings are good so I can click next and look at these lovely options we can go for a continuous backup manual backup or scheduled backup now I don't like the idea of continuous backup because we can see what it says any modifications backed up in a few minutes yeah I don't I don't need my NAS continuously pooling all my small changes to G sweet so just adding contacts schedule backup will be more than good enough for my needs so you can set it to now here's one thing I don't like about Synology DSM I don't know why they don't have simply daily monthly yearly whatever their options and scheduling options are always seem a bit weird to me like weekend is not how I would really think of it I like I can configure a seven-day interval or every 10 days to me that's a bit weak but let's say let's run it on a Sunday and not on a Saturday why not the start of the week first runtime midnight is fine actually I like to do I like to do all backup things in the middle of the night while I tend to be sleeping just in case it causes any slowdown or whatsoever so 4 a.m. depends how nocturnal you are for me 4 a.m. lately is not such a safe bet but for most people on a normal circadian rhythm 4 a.m. is good so I'm going to just select that as frequency and that is fine gives me a little summary that it's going to be back up to juice we back up to you are the task name etc and it looks like I'm ready to just finally click apply alright so it's applied that and it's given me the option to take the backup now I'm gonna head gonna go ahead and let it run its first backup so things are sort of happening this is this is raw I've never done this before I did not set it up and trial it before I made this video so whether this works or not I'm not clear of I'm hoping it works and if it does work how do I rate that set up job a little bit more difficult than I would like and that many users would like obviously if you do this in enterprise environment and you're an IT professional those steps would not be too troublesome and even for me it wasn't overly troublesome but nonetheless it was still a 14 step process that required going into Google dev console and setting all that stuff up so I'm gonna go ahead and put minimize this on my DSM over here and I'm gonna just see gonna go try and cheat a bit and see if stuff is running so there's a few screens in active backup for G Suite you can see the summary you have a log activities over here one user one drive and not really much a ton of detail but you can imagine if you're using this as I said again for many many different users this would be useful so I've navigated into my file station and I always take a sneak peek at backup jobs before getting my hopes too far up and you can see G Suite backup DR well it's done something it's created a folder called active backup for G Suite it's created I can go into Drive and it's in the process from what I can see of building out the backup but it does look to me as if it's run I'm gonna go ahead and call this a success I will check back and update the video description but that is essentially the set a process for setting up G Suite backup to your Synology as I said a 14-step process which you know might seem like a lot depending on your level of comfort with technology but it did it did allow me to set this up and I can also configure a syncing schedule and that's pulling down from G Suite onto my NES clicking into this and we can see it's effectively building stuff up the backup and if I go into the voice notes voice notes setting I am down to the level of individual files and I can download these so I can just now verify that the backup has been successful and it's running thanks again for watching