Skip to main content

How can we help you?

Druva Documentation

Configure Druva inSync to protect Teams data

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business


This topic provides information about how to configure inSync to protect Teams.

 Please note that a couple of the Teams Metadata and Private Channel APIs are in Beta state. Click here to know which APIs are in the Beta state.

Before you begin

Before you initiate inSync configuration to protect Teams data, ensure that you have the following accounts with:

  • A Microsoft 365 global administrator account with a valid Microsoft 365 license.

 Sharepoint Auto discover and Auto assign storage settings must be enabled to back up Files in  a Teams Channel

SPO for Teams_border.png

Configure inSync to protect Teams

Log in to inSync Management Console as a inSync Cloud administrator and perform the following steps to set-up inSync to protect Teams.


Step 1: Provide inSync permissions to access Teams data

 If you are already protecting Microsoft 365 data with Druva, you have to reconfigure Microsoft 365 to start protecting Teams.

To protect and backup Teams data, inSync requires authorization from Microsoft 365. Also, the inSync Cloud administrator must accept the required permissions to allow inSync to access Teams data. 

inSync uses OAuth 2.0 to communicate with services like Microsoft 365. OAuth is an open protocol for token-based authentication and authorization on the internet. For more information on OAuth 2.0, see the OAuth website.


To establish the connection with Microsoft 365 and provide required permissions to inSync:

  1. On the inSync Management Console menu bar, click Data Sources > Microsoft 365.  Click  Register Microsoft 365 Account. The Configure for Backup page appears.

  1. On the Configure for Backup page,  click Configure beside Druva Microsoft 365 to configure Teams for backup.

Configure for backup_newadmin.png

  1. On the Microsoft 365 login page, enter the Microsoft 365 global administrator's username and password for Microsoft 365, and then click Sign in
  2. Click Accept to grant inSync app the required permissions to access Teams data. See Required permissions to access Teams. inSync gets connected with Microsoft 365 to get access to Teams data. 

Verify Configuration

After you complete the configuration of inSync with Microsoft 365 app, you can use the Verify Configuration option to check if inSync can access your app or users' data. 


To verify the configuration:

  1. On the inSync Management Console menu bar, click Data Sources > Microsoft 365.

2. On the Overview page, click More options icon.png and then click Verify.

3. In the Verify Configuration dialog that appears, select the Druva Microsoft 365 app to verify the configuration.


4. In the Verify Configuration dialog, enter the Team name in the Select a Team field. 

When you select Druva Microsoft 365 app and provide the Team name for verification, inSync performs the following checks as a part of verification: 

  • App authentication: This step checks if inSync can utilize the available refresh tokens to validate the connection with the Microsoft 365 tenant.
  • User and user’s endpoints existence: This step checks if the user exists at the Microsoft 365 end.

5. If any of the authentication steps fail for the selected app, you are prompted with an error message. Click the error message to view the error details.


Step 2: Get data encryption key (ekey)

To ensure that the Microsoft 365 data that is backed up is secure, you must configure inSync to get the data encryption key(ekey). 

 inSync requires access to the ekey to initiate the scheduled backup of any Microsoft 365 app data. The ekey is used to encrypt the data when it is being backed up to the inSync Cloud. This is part of the digital envelope encryption process that Druva strictly adheres to. Druva does not store ekey of the users and has no access to the data.

Use one of the following methods to enable inSync to get the data encryption key(ekey):

Deploy inSync Connector 
At least one inSync Connector is configured and connected to the inSync Cloud (default option). For more information, see: 


  • inSync Connector acts as a SaaS Apps connector to provide the ekeys without requiring users to have their devices connected for the SaaS Apps backup .
  • If the registered inSync Connectors are not connected, backup of the configured SaaS Apps data fails.
  • inSync Connector does not need to have any domains or AD mappings added to it.
  • inSync generates a Not Connected alert if inSync Connector is not connected.

Enable Cloud Key Management 

If none of the earlier mentioned deployment options are used, you must have the Cloud Key Management feature enabled. For more information, see Configure Key Management for SaaS Apps.

Step 3: Configure Teams for backup and restore

After inSync is configured to connect with Microsoft 365, you must configure Teams settings to enable discovery and backup of Teams. 


  The settings that you define automatically apply to all subsequent auto discovered Teams. You can also change the settings of any auto discovered teams. 

 You can configure Teams for backup and restore in the following ways:

3.1  Auto Configuration

3.2  Custom  Configuration

3.1 Auto Configuration of Teams

Use the Auto Configuration Settings (Default) option to automatically detect any new Teams and to apply the global or same backup schedule to each of the newly discovered and configured Teams.

  1. On the inSync Management Console menu bar, click Data Sources > Microsoft 365. The Overview page appears.
  2. Click Teams on the left pane. A page that lists all the discovered Teams appears.

The status of all the discovered Teams by default is set as Not Configured

For more information about the status of discovered Teams, see Teams Status.


  1. Click Auto Configuration. Enter the following details in the Auto Configuration Settings wizard and click Save


Field Description
Auto discover teams for backup Select this check box if you want inSync to automatically discover new Teams added to the Teams setup of your organization. inSync runs the discovery process every 24 hours. This setting is enabled by default.
Auto assign storage

Select this checkbox if you want inSync to automatically assign storage for any newly discovered Teams. It is mandatory for Teams to be assigned storage for inSync to back it up.

Select Storage

Displays all the configured storage regions. Select storage from the list. 

Note: Storage once assigned cannot be changed later.

Backup frequency

Select the frequency of backups for Teams. By default, the value is set to Once a Day.

Data Retention By default, data retention is set to Forever that is, unlimited retention.
  1. Click Save.  On the confirmation dialog that appears,  click Ok to complete the auto configuration.


Note:  Only if you click OK on the confirmation pop-up window, the status of existing Teams in Not Configured state changes to Enabled. Also, by default, any newly added Teams that are discovered will get enabled with these configuration settings.

3.2 Custom configuration of Teams for backup

Use the custom configuration option to provide different configuration and backup and retention settings for each of the discovered Teams.

  1. On the inSync Management Console menu bar, click Data Sources > Microsoft 365. The Overview page appears.
  2. Click Teams on the left pane. A page that lists all the discovered Teams appears.

The status of all the discovered Teams by default is set as Not Configured

For more information about the status of discovered Teams, see Teams Status.

  1. Click the Team that you want to configure for backup and restore. The  Configure Team Backup page appears.

Configure Teams.png

  1. If you choose to use the Use Default option, review the details and click Save. If you have selected the Custom option, enter the following details and click Save.
Field Description

Team Name

Displays the name of the Team.


Assign storage

Assign storage for backups.

Select storage from the drop-down list.

 Storage once assigned cannot be changed later.


Displays the backup and retention policy settings that you want to apply to the team. The following options are available:

  • Use Default (Default)-Select this option if you want to apply the defined global Teams' settings for this Team. The settings are displayed and can't be edited. 
  • Custom - Select this option if you want to define custom settings for this team. This enables you to define a custom backup schedule for the selected Team. 

Backup frequency

Select the frequency of backups for Teams.

  • Select Use Default option to apply the default backup frequency set for Auto Configuration Settings.
  • Select the Custom option to set and apply the desired backup frequency for the selected Teams.

If you have selected Custom, then you have the option to select and set the desired backup frequency.

Note: For successful scheduled backups, ensure that the pre-requisites to backup SaaS Apps data  are met.

Data Retention By default, data retention is set to Forever that is, unlimited retention.

Congratulations! You have completed the configuration successfully. 

Related Activities

  • Was this article helpful?