Auto Discovery for Google Workspace

Edit online

About this task

To manage scan profiles for scanning your Google Workspace objects into IBM® Storage Protect for Cloud, navigate to Auto discovery > Scan profiles. On the Scan profiles page, you can create and edit scan profiles. For details on the other actions of managing scan profiles, see Manage Scan Profiles.

Note: For details of creating app profiles, refer to Create an App Profile and Create Custom Apps.

Procedure

To create or edit a scan profile, refer to the following steps to configure settings in the Create scan profile or / Edit scan profile wizard:

  1. Choose object types – In the Tenant drop-down list, select a tenant for which the scan profile is created. Then, select the object types to be included in a scan profile for Google Workspace.
    The table below lists the services which can scan Google objects:
    Note: For Google tenants, using a modern mode service app may encounter throttling issues caused by Google quota limits. It is a recommended choice to configure a custom Google app for your organization.
    Service Required permissions Scan object types
    IBM Storage Protect for Cloud Google Workspace Custom mode app: IBM Storage Protect for Cloud Google Workspace custom app

    Google user

    Shared drive

    Google Classroom

    Vault matter
    Modern mode app: IBM Storage Protect for Cloud Google Workspace

    Google user

    Shared drive

    Google Classroom
    Note: For Google users, the Suspended users and Archived users are not included in the scan scope.

    Click Next to proceed.

  2. Profile settings – Refer to the following information to configure the profile settings:
    • Name: Enter a name for the profile.
    • Description: Enter an optional description for the profile.
    • Enable daily scan: If you want to run the scan profile every day, turn on this toggle. The default start time of the daily scan job is displayed, and you can customize the start time when necessary.
    • Send an email notification to the following recipients when objects are moved to other containers or removed from any containers: – Objects will be automatically moved to the other containers when they match the container's rules. If you want to enable this notification, turn on the toggle. Then, select an email recipient profile from the Notification profile drop-down list. Whenever objects are moved to other containers or removed from IBM Storage Protect for Cloud containers, the recipients in the selected profile will receive email notifications. If necessary, click Create email recipient profile to create one. For more instructions on configuring email recipient profiles, refer to Email Recipient Profile.

    Click Next to proceed, or click Previous to go back to the previous page.

  3. Configure containers and rules – Refer to the following information to select a scan mode:

    • Express mode scans objects into default containers. This mode is the simplest way to get started.

    • Advanced mode scans objects dynamically to containers defined by business rules you configure. If you select the advanced mode, complete the following instructions to configure containers and rules for each object type:

      1. To add a rule, click Add. The Add rule pane appears on the right of the page.
      2. Select a container - Select a container from the drop-down list. If necessary, click Create container to create a new container. For details on configuring containers, see Manage Containers.
      3. Rule - Select All objects in one container or specified objects in one container as the rule for this container.
        Note: If you have configured criteria for the Specified objects in one container rule, you can click Rule for excluded objects to configure an additional rule for the objects that do not meet the criteria. If you select the All objects in one container rule, you will not be allowed to add other rules.
      4. Rule criteria and values- If you select Specified objects in one container, complete the following instructions to configure Rule criteria and values to define specified objects.
        • To set a criterion, select an option from the drop-down list, and then configure values in the textbox. For more information on the supported criteria, refer to Supported Criteria in Auto Discovery Rules.
        • To add a criterion, click the add () button, and to delete a rule, click the delete () button.
        • With multiple criteria, you must select And (objects that meet all criteria will be scanned into the container) or Or (objects that meet any of the criteria will be scanned into the container) as the logic for the criteria.
          Note: The rules are executed sequentially from top to bottom, for example, ((1 And 2) Or 3).
      5. Click Add at the bottom of the Add rule right pane to add the configured rule.
      6. If you add multiple containers, set a container’s priority by selecting a number from the Priority drop-down list.
      7. If you select the Specified objects in one container option for the condition when the scan profile discovers objects that don’t meet the criteria configured in rules, you can click Rule for excluded objects to configure an additional rule. The default option of the additional rule is Do not add them to any containers. If you change the rule to Add them to one container, select a container from the drop-down list. Then, click Save.
      8. If you want to edit or remove a rule, hover the mouse on the rule, click the more options () button, and click Edit or Remove.

    Click Next to proceed, or click Previous to go back to the previous page.

  4. Have an overview of the settings in the scan profile, and take one of the following actions:

    • If you want to save your configurations in the scan profile, click Save.

    • If you want to run the scan profile immediately, click Save and run.

    • If you want to go back to the previous page, click Previous.