Overview
A Profile refers to a collection of settings that are utilized to manage a group of user accounts. If you are an administrator, you may need to establish inSync accounts for individuals who work in diverse departments and roles within your company, and these users may have various types of data that require safeguarding across different data sources.
Using a profile can be highly beneficial as it enables you to establish standard backup configuration settings that can be automatically applied to all users who belong to that specific profile. This makes it easier for you to create user accounts in the future, as you can simply assign a profile to ensure that data protection requirements are consistent across multiple users throughout your organization.
You can create a profile based on the following factors:
Type of data sources such as Laptops & Desktops
Types of Operating Systems such as Windows, Mac, Linux, Android, and iOS
Type of files and applications
Inclusion or exclusion of file types
Backup schedules
Data retention
Data loss prevention
Enable users to modify backup settings
You can create a new profile or also simply choose to create a copy of an existing profile and later modify its properties. Profiles ensure easy management of users because you no longer need to manage individual users. Using profiles, you can manage the following properties:
Administrator Abilities | User Abilities | Others |
|
|
|
📝 Note
The default values have been carefully chosen to provide optimal performance and functionality in most scenarios. You can customize these settings to suit your needs within the specified range.
Procedure
To create a profile:
Go to the Endpoints/Microsoft 365/ Google Workspace console and click Profiles.
Click Create New Profile. The profile creation wizard appears.
Provide the appropriate information in each field as detailed in Steps and click Finish.
Steps:
Step 1: General
The following table describes the fields in the Summary and User Privacy & Access areas of the General page.
Enter the required fields and click Next.
In the Summary section, enter the Profile name, description, and User limit.
Profile Name | Enter a name for the Profile. The name of a profile enables you to quickly identify and assign the profile while creating users. You can set the names based on the departments or operating systems. Example: Engineering, Sales, Marketing & Windows. |
Description | Enter a description for the profile to assist the administrators in identifying the configuration parameters for the users assigned to the profile. |
User Limit | Select one of the following options:
|
In the User Privacy & Access section, select Access Policy, Backup Data Privacy Settings and Logs Privacy Settings to further select the related settings.
Allow restore from web browser | Select this checkbox to enable inSync Web access for users. |
Allow access to inSync web only through public gateway IPs | Select this checkbox to allow users to access inSync Web only when users login in through the corporate network. 📝 Note To enable this setting you need to configure the Geofencing functionality from Druva Cloud settings. |
Allow access from mobile devices | Select this checkbox to allow users to access backed-up data through mobile devices. Allow users to login only through the MDM managed app: Select this checkbox to allow users to log in to Druva Mobile App using the MDM mobile app. Enforce PIN for mobile access: Select this checkbox to make a four-digit security code mandatory for users to open Druva Mobile App. 📝Note Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data |
Login using | Select one of the following options to activate inSync and log on to inSync Client and inSync Web:
Note: Single Sign-On (SSO) option is available only if it is configured in inSync. To configure SSO, see Configure inSync for SSO. |
Backup Data Privacy Settings |
|
Allow admin access to user backup data | Select this checkbox to access the user's data and perform restore activities. |
Allow users to edit data privacy settings. | Select this checkbox to allow users to edit the data privacy settings. If you allow users to edit data privacy settings, users can restrict administrators to
Clear this check box if you do not want users to restrict the administrator to view/download the user backup data through inSync Client. |
Logs Privacy Settings |
|
Allow admin access to logs | Select this checkbox to access the inSync Client logs from user devices, especially for remote users, to analyze and troubleshoot issues. |
Allow users to edit logs privacy settings | Select this checkbox to allow users to edit the logs privacy settings. Note: Users can restrict administrators from downloading log files by selecting this checkbox. |
Set the Data Preservation & Alert duration in the Data Preservation and Backup Inactivity Alert section.
Auto delete preserved users | Select this checkbox to automatically set the duration to delete the preserved users after a particular duration. Note:
|
Backup Inactivity Alert |
|
Alert if user's data is not backed up for | Set the User Backup Inactivity alert if the user's data source is not connected to the inSync Cloud for a certain period. |
Step 2: Endpoints
You can enable and define the settings for Endpoints if you have availed a license for the Endpoints. To enable the settings for Endpoints, select Enable Device Backup.
The following table describes the fields of the Devices page. Enter the required fields and click Next.
In the Laptops & Desktop section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Windows/Mac/Linux | Configure the profile based on the operating systems. You can protect data for Windows, Mac, and Linux operating systems. Click on the Windows, Mac, and Linux platforms for which you want to configure the folders for backup. If you are configuring files and folders for backup on macOS Mojave (version 10.14), see Configuration guidelines on macOS Mojave. |
Add Folders | Select this option if you want to add custom folders for each operating system apart from the folders listed by default. To add a custom folder for backup, refer Add custom folder for backup. Note:
To configure specific folders for backup on user devices, see Configure folders for backup.
|
Folder display name | Type a name for the custom folder you want to add for backup. Note:
This name is used as an identifier for the custom folder by inSync. |
In the Smartphones/Tablets section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Enable Mobile Backup | 📝Note Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data |
Add Folders | Select the folders that you want to back up. You can select the folders for both Android/iOS operating systems. Note: Druva does not back up all drives that use non-NTFS file systems. To back up the drives that use the non-NTFS file system, you must configure the drives individually in the profile. To configure specific folders for backup on user devices, see Configure folders for backup |
In the Backup Schedule & Retention section, set the backup schedule and retention period for Laptops/ desktops.
Laptops/Desktops |
|
Backup Every | Set the time interval for scheduled backups to start backing up data automatically on user devices as per the set frequency. Note: The time in this list indicates the gap between two consecutive backups. For example, if the frequency for backups is 4 hours and a backup ends at 10:07 A.M., the next backup starts at 2:07 P.M. |
Preferred backup window | Set the preferred time frame within which the data backup from user devices starts. The scheduled backups are triggered on the user devices as per the selected backup frequency. Any backup triggered during this period will continue until completion, even past the end time. If you do not want any restriction on triggering a scheduled backup, type the exact start and end times. Example: 12:00 AM - 12:00 AM Note:
inSync follows the time zone of the user device if the Use admin time zone check box is not selected. |
Use admin time zone | Select this checkbox to synchronize device backups to your time zone. Example: If the administrator's time zone, who updated the profile, is New York (EDT) and the backup schedule is at 08:00 A.M., backups will start from 05:00 AM for user devices in Los Angeles (PDT). Note: If you select this check box, the configuration specified in the following Preferred backup window and Blackout window fields act accordingly to your time zone. |
Backup at logoff/shutdown | Select this checkbox to backup device data whenever a user attempts to log off/shut down the device and ensure data backup. Note: This option is applicable only for Windows. |
Retention |
|
Retain all Snapshots for | Set the duration in days to retain all the daily backups. Example: If you set the duration to retain snapshots for five days and the backup is completed on January 5, it will delete the backup data from the storage on January 10. For more information about the retention policy, see Configure the backup retention policy. |
Retain Weekly Snapshots For | Set the duration in weeks to retain all the weekly backups. Note: The weekly backup is the last in a calendar week. The calendar week starts on Sunday. |
Retain monthly backups for | Set this duration in months to retain all the monthly backups. Note: The monthly backup is the last backup in a calendar month. For more information about the retention policy, see Configure the backup retention policy. |
Data Lock |
|
Enable Data Lock | Enable this option to:
For more information, see Data Lock. Note: Once you enable a profile with Data Lock, you cannot:
|
Resource Settings |
|
Max bandwidth [WAN] | Enter the maximum network bandwidth the user devices can consume while backing up data over WAN. You can indicate the maximum bandwidth in absolute terms or as a percentage of the total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero).
|
CPU Priority | Select the priority that you want to assign to inSync, on the user devices. We recommend that you set CPU priority to an optimal value. Assigning a higher CPU priority may affect the performance of other applications on the user's device. Assigning a lower CPU priority might increase the time required for backup by inSync, on the user device. We recommend that you set CPU priority to an optimal value. |
In the User Settings section, set the user Backup Settings, Backup Content and Backup Resource, Device setting and Notification settings.
Change backup schedule | Select this checkbox to allow users to modify the predefined backup schedule set by the Profile administrator. |
Change blackout window | Select this checkbox to allow users to modify the blackout window period as per their preference. |
Pause backup | Select this checkbox to allow users to pause a scheduled backup that is in progress. |
Cancel backup | Select this checkbox to allow users to cancel an ongoing backup that is in progress. Note: The backup will trigger automatically on the next backup interval. |
Backup Content |
|
Add backup folders | Select this checkbox to allow users to add additional folders for backup. |
Backup Resource |
|
Modify backup resources | Select this checkbox if you want to allow users to modify the Max Bandwidth and CPU Priority values. Note: After a user configures these settings, you cannot change these settings. |
Opt out of networks for backup | Select this checkbox to allow users to block specific networks from backing up data. Example: Allow users to block backups on the data card, personal mobile hotspots, or Mi-Fi devices during traveling to minimize the personal hotspot or Mi-Fi data usage and costs. Note: Users can opt out of networks with only 24 bits or more subnet mask. |
Edit proxy settings | Select this checkbox to allow users to update proxy settings. Note: This will enable users to connect to inSync Server directly if the user relocates to a different business unit from where inSync Client cannot connect to inSync Server directly. |
Device Settings for Users |
|
Quota per user | Set the user quota for the device backup of each user assigned to the profile. Example: If you set this to 1000 GB, inSync will back up user data for up to 1000 GB. If you do not want to set any restriction on the data size, type 0 (zero). 📝Note If the size of the files in the backup exceeds the assigned quota, the backup will fail. |
Mark the device inactive if it does not connect for | Set the duration in days after which the device is marked as inactive when not connected to inSync Cloud. |
Auto-delete inactive devices | Select this check box to delete inactive devices automatically. Set the number of days after which the inactive devices are deleted. Once the device is deleted, the backed-up data of that device will not be available for download or restore. |
Agent and User Notification Settings |
|
Show the inSync icon in the system tray | Select this checkbox for the Sync icon to appear in the system tray of the user devices. If enabled, the users can view the various statuses of inSync on the system tray such as connection, backup, restore, etc. |
Allow users to modify notification settings | Select this checkbox to allow users to select or deselect the type of notifications they prefer to see on their devices. |
Notifications shown on devices |
You can choose the type of inSync notifications you want to display on the user devices. For more information, see Enable inSync notifications. |
In the Data Loss Prevention section, configure the settings for laptops/Desktops and smartphones.
Allow auto-delete | Select this checkbox to automatically delete data from the backup folders for the devices that do not connect with inSync Cloud for a specific number of days. |
Alert if device does not connect for | Set the duration in days to send an alert if the user device is not connected to inSync Cloud. This option appears after you select the Allow Auto delete checkbox. |
Delete folders/data if a device does not connect for | Set the duration in days to delete the data from the backup folder automatically from the user's device if the device is not connected to inSync Cloud for a specific number of days.
|
Enable encryption | Select the encryption as applicable:
Disabled: If you do not want to disable encryption. |
DLP for Smartphones and Tablets |
|
Allow offline access to files | Select this checkbox to allow users to access their favorite files while they are in offline mode. |
Enable encryption for android | Select this checkbox to encrypt the data in the backup folders of the user's Android device. |
Remote device deactivation | Select an option from the list as applicable: Optional: If you want users to decide to enable device deactivation. Mandatory: If you want to make it mandatory for users to enable device deactivation. |
Allow other iOS apps to access content | Select this checkbox to back up data using other apps on an iOS device. |
In the Global Exclusions section, select the file extension and path to exclude from the backup.
File Type | Select the specific file type you want to exclude.
|
Path and folder | Enter the path to the files and folders you want to exclude from backups. Example: C:\Program Files\Microsoft Office\Data |
Regular Expressions (for File Types, Paths, and Folders to be excluded) | Enter the files and folders using regular expressions to exclude them from the backup operation. |
Configuration guidelines on macOS Mojave and later
Locations that display a prompt
❗ Important
The macOS Mojave (version 10.14) has a User Data Protection feature, which displays an authorization prompt when inSync Client tries to access the following locations if configured for backup:
Location Services
Contacts ~/Library/Application Support/Address Book
Calendars ~/Library/Calendars
Reminders ~/Library/Calendars
Photos ~/Pictures/Photos Library.photoslibrary
If you want inSync to back up the locations but do not want the macOS Mojave to display the permission prompts to the users, you can pre-configure the authorization to inSync via MDM (Mobile Device Management) which is used in your organization. Druva also recommends educating the inSync Client users of your organization to pre-approve inSync by adding it to Full Disk Access in System Preferences > Security and Privacy pane for a seamless backup experience.
If you do not want inSync to backup the mentioned locations, you must configure these locations in the Global Exclude list, defined at Profile level. inSync skips the locations mentioned in the Global Exclude list while backing up user data. For more information, see Configure the global exclude list.
Step 3: SaaS Apps (Microsoft 365 & Google Workspace)
To start configuring backup and retention settings for SaaS Apps, Enable SaaS Apps Backup.
❗ Important
You can view and configure settings only for those SaaS Apps for which you have purchased a license and configured it in inSync. To purchase a license, contact your Account Manager or Druva Support.
Configure Backup settings for Microsoft 365 Apps
You can configure the settings for the following user apps -
Exchange Online
OneDrive
❗ Important
Other supported Microsoft 365 apps like SharePoint Online, Teams, Groups, and so on, do not require a Profile to be configured. You can configure the backup settings at the App level while configuring it to protect in inSync. For more information, see Protect Microsoft 365 Apps.
Exchange Online
Configure settings for Exchange Online
Click the slider to Enable Exchange Online backup.
❗ Important
In-Place Archive for Exchange Online is also backed up if Exchange Online is selected.
2. (Optional) If you want to Exclude Paths and Folders while backing up data, type the folder name or relative path to the folders that you want to exclude from backups.
Ensure that you separate consecutive entries using a semicolon (;) and there is no white space between two entries.
Example: Let's assume you have the following folder in your Exchange Online:
Inbox/Mails
/Templates
You specify Inbox/Mails ;Templates in the Exclude Paths field. Now, during the backup operation, inSync excludes Inbox/Mails and Templates from getting backed up.
❗ Important
Avoid using ':&' when specifying the path. for exclusion.
3. (Optional) If you want to backup the Exchange Online 'Recoverable Items' folder, which keeps the deleted emails, contacts, and calendar items in the Deletions and Purges items, select the Backup Recoverable Items checkbox. This enables administrators and users to restore or download data caused by accidental or malicious deletion.
OneDrive
Configure settings for OneDrive
Click the slider to Enable OneDrive backup.
(Optional) You can exclude specific files and specific file and folder paths from backup.
Exclude File Types - If you do not want inSync certain file types, select and enter those in Exclude File Types. If you are looking for a specific file type and if it does not appear in the standard list, type the file extension in the adjacent box.
Exclude Paths - Type the file or folder name or relative path to the files and folders that you want to exclude from backups in Exclude Paths. Ensure that you separate consecutive entries using a semicolon (;) and there is no white space between two entries.
Let's assumeyou have the following folders in your OneDrive:
/Druva/Templates/Paths.txt
Druva/Paths.txt
You specify Paths.txt in the Exclude Paths field. Now, during the backup operation, inSync excludes Paths.txt from the folders ‘/Druva/Templates/Paths.txt’ and ‘/Druva/Paths.txt’ from getting backed up
By default, backup of Teams Meeting Recordings (TMR) is excluded. Microsoft stores the Teams Meeting Recordings (TMR) in OneDrive and SharePoint. To ensure better backup speed, all files from the default folder path of Teams Meeting Recordings are excluded from the backups by default. To backup Teams Meeting Recordings (TMR), clear the check box.
Configure Backup Settings for Google Workspace Apps
If you have a Google Workspace license, you can configure the settings for the following user apps -
Gmail
Google Drive
❗ Important
Shared Drive does not require a Profile to be configured. You can configure the backup settings while configuring Google Workspace for data protection in inSync. For more information, see Protect Google Workspace Apps.
Gmail
Configure settings for Gmail
Click the slider to Enable Gmail backup.
(Optional) You can exclude specific files and specific file and folder paths from backup. Type the folder name or relative path to the folders that you want to exclude from backups in Exclude Paths. Ensure that you separate consecutive entries using a semicolon (;) and there is no white space between two entries.
Example: Ifyou have the following folder in your Gmail:
Inbox/Mails
/Templates
You specify Inbox/Mails ;Templates in the Exclude Paths field. Now, during the backup operation, inSync excludes Inbox/Mails and Templates from getting backed up.
📝 Note
Avoid using ':&' when specifying the path. for exclusion.
Google Drive
Configure settings for Google Drive
Click the slider to Enable Google Drive backup.
(Optional) You can exclude specific files and specific file and folder paths from backup.
Exclude File Types - If you do not want inSync certain file types, select and enter those in Exclude File Types. If you are looking for a specific file type and if it does not appear in the standard list, type the file extension in the adjacent box.
Exclude Paths - Type the file or folder name or relative path to the files and folders that you want to exclude from backups in Exclude Paths. Ensure that you separate consecutive entries using a semicolon (;) and there is no white space between two entries.
Let's assumeyou have the following folders in your Google Drive:
/Druva/Templates/Paths.txt
/Druva/Paths.txt
You specify Paths.txt in the Exclude Paths field. Now, during the backup operation, inSync excludes Paths.txt from the folders ‘/Druva/Templates/Paths.txt’ and ‘/Druva/Paths.txt’ from getting backed up.
Backup shared data owned by other users: Select this checkbox if you want to backup all the Google Drive users' data (owner's data and data shared by other users).
❗ Important
Selecting the Backup shared data owned by other users checkbox might slower your incremental backups. For faster backup and restore, it is recommended to deselect this checkbox. For existing administrators, this checkbox is selected by default. You have to manually deselect this option.
Backup Schedule & Retention
Configure Backup Schedule & Retention settings
Field | Action |
Backup Schedule |
|
Backup every | Select how frequently you want inSync to back up SaaS Apps data. By default, inSync performs the backup operation once a day. For more information, see Define the backup interval for SaaS Apps. |
Data Retention for files |
|
Retain all Snapshots For | Set the duration in days to retain all the daily backups. Example: If you set the duration to retain snapshots for five days and the backup is completed on January 5, it will delete the backup data from the storage on January 10. |
Retain Weekly Snapshots For | Set the duration in weeks to retain all the weekly backups. 📝 Note The weekly backup is the last backup in a calendar week. The calendar week starts on Sunday. |
Retain Monthly Snapshots For | Set this duration in months to retain all the monthly backups. Note: The monthly backup is the last backup in a calendar month. For more information about the retention policy, see Configure the backup retention policy. 📝 Note The monthly backup is the last backup in a calendar month. |
Data Retention for Emails |
|
Apply file data retention settings for emails | Select this option to apply the files' data retention settings for Microsoft 365 Exchange Online and Gmail snapshots.
inSync retains the email backed-up snapshots within the storage as per the configured daily, weekly, and monthly retention period settings for files.
For example, if you specify that you want to retain all backups for 5 days and inSync completed the backup operation on January 6, 2019. inSync retains the email backed-up snapshots till January 11, 2019. For more information about retention policy, see Configure the backup retention policy. |
Delete emails older than | Select and type the number of months up to which you want inSync to retain all backed-up emails within Exchange Online and Gmail snapshots. For example, if you type 6, inSync will retain all emails across all snapshots whose sent or received timestamp is less than 6 months old. By default, inSync retains emails for 84 months. Emails are retained based on the email’s event date and timestamp. The maximum retention period that you can specify is 250 months and the minimum is 1 month. Type zero (0) for unlimited retention of emails. For more information about retention policy, see Configure the backup retention policy.
📝 Note Data retention settings for files and emails do not apply in the following scenarios:
|
Data Lock |
|
Enable Data Lock | 📝 Note Only Druva Cloud Administrators can enable the Data Lock feature. Enable Data Lock: Select the Enable Data Lock option to enable the data lock to prevent the snapshots from any accidental or malicious deletion.
After the profile is enabled with the Data Lock feature, you will see the data lock icon next to the profile on Manage Profile page. When you hover over the icon, a message stating Data Lock is enabled appears. For more information, see Data Lock. 📝 Note Once you enable a profile with the Data Lock feature, you cannot:
|
Global Exclusions
Configure Global Exclusions
You can create a global exclusion list for file types, file names, and folders that you want to exclude from inSync backups. inSync excludes the files types that you specify in the global exclude list irrespective of the filters set at the folder level by the administrator or the user. For example, if you do not want inSync to back up .mpg files from user account, you must add .mpg to the global exclude list.
For more information on how you can configure the global exclude list, see Configure a global exclusion list for files and folders.
In the Exclude File Types box, type the file types that you want to exclude from the backup. The file extensions are automatically added to the adjacent field. If you want to remove a file type, click the file type.
📝 Note
Exclusions of file types are supported for OneDrive and Google Drive only.
2. In the Exclude Paths and Folders box, type the file or folder name or relative path to the files and folders that you want to exclude from backups. Ensure that you separate consecutive entries using a semicolon (;) and there is no white space between two entries.
❗ Important
For Gmail and Exchange Online, only folder name or relative paths are supported for Exclude Paths. For example, Birthdays;United States holidays;Calendar
For Google Drive and OneDrive, folder or file name or relative paths are supported for Exclude Paths. For example, /Druva/Templates/Paths.txt;Templates