Create a profile
Overview
When you create a new profile, the new profile inherits all the settings of the Default profile. If you update the settings for the Default profile, any new profile that you create later inherits the updated settings, except the settings for the following:
- Backup folders
- Encrypted folders that inSync administrators include for backup
- Mobile access and backup
- Enable device trace
When you configure your inSync setup for the first time, you define the settings for the Default profile.
Note: We strongly recommend that an administrator creates a secondary administrator account as well. In the potential scenario where an administrator forgets the password to log on to the inSync Management Console, only a secondary administrator can reset that password. Druva implements stringent password policies for inSync Master and is unable to reset administrator passwords.
To add a second administrator, click the link that is displayed on the inSync Management console and follow the same procedure as Create a Server Administrator.
Procedure
To create a profile
On the inSync Management Console menu bar, click Profiles. Click Create New Profile. The profile creation wizard appears. Provide the appropriate information in each field. Click Finish.
Steps:
Step 1 of 2: General
The following table describes the fields in the Summary and User Privacy & Access area of the General page.
Enter the required fields and click Next.
| Field | Action |
|---|---|
| Summary | |
| Profile name | Type the name for this profile. |
| Max. # users |
Type the maximum number of users that you want to assign to this profile. If you do not want to set any restriction on the number of users, type 0 (zero). |
| Description | Type a short description for this profile. |
| Backup Inactivity Alert | |
| Alert if user's data sources are not backed up for | inSync will raise the User Backup Inactivity alert if a user device is not backed up for more than the days specified in this field. You can specify from 1 to 365 days in this field. |
| User Privacy & Access | |
|
Allow admin access to user data |
If you do not want administrators to access and restore user data, click to clear this check box. Once cleared, you cannot change your preference. See also: How does Allow Admin Access to User Data setting impact user profile change |
| Allow users to edit privacy settings | If you do not want to allow users to edit the privacy settings, click to clear this check box. If you allow users to edit the privacy settings, users can prevent administrators from:
|
| Access Policy | |
| Allow restore from web browser | If you want to allow users to restore data by accessing their inSync account through a web browser, select this check box. |
| Login using |
Click a method that you want users to use to activate inSync and log on to inSync Web. The options are:
|
| Ignore system password policy for users |
If you do not want inSync to follow the organization's password policy, select this check box. Note: This option is not available if you clicked Active Directory in the Login using list. |
| Allow access from mobile devices |
You can allow users to backup data from their iOS and Android devices. If you want to allow users to access inSync data from their mobile devices, select this check box. For more information on how you can update this permission, see Enable backup from mobile devices. |
| Allow users to log on only through the MDM managed app | This option is displayed only if you check Allow access from mobile devices. Select this check box if you want to allow users to log on by using only the inSync for MobileIron app from iOS devices. |
| Enforce PIN for mobile access | This option is displayed only if you check Allow access from mobile devices. If you want to make it mandatory for users to set a four-digit security code to open inSync mobile app, select this check box. |
Step 2 of 2: Devices
You can enable and define the settings for Devices only if you have purchased a license for Devices. If you have not subscribed for the Devices license but would like to purchase one, contact Druva Sales.
To enable the settings for devices, select Enable Device Backup. The setting options on the Devices page are displayed
The following table describes the fields in the Select Backup Content area of the Devices page. Enter the required fields and click Next.
| Field | Description |
| Laptops & Desktops | |
| Global Exclusions |
In the Exclude Files box, type the file types that you want to exclude from backup. The file extensions are automatically added to the adjacent field. If you want to remove a file type, click the file type. In the Exclude Paths box, type the folder name or the relative path for the folders that you want to exclude from backup. In Windows, the convention is to use a backward slash (\) as the separator. In UNIX and Mac, the convention is to use a forward-slash (/) as the separator. However, the inSync client irrespective of the operating system it is installed on considers both formats and excludes the folders that you specify from the backup operations. For more information on how you can configure the global exclude list, see Configure the global exclude list. |
| Windows/Mac/Linux |
Click the platform for which you want to configure the backup folders. You can configure backup folders for multiple platforms. If you are configuring files and folders for backup on macOS Mojave (version 10.14), see Configuration guidelines on macOS Mojave. |
| Folder to be backed up | Click the folders that you want to back up. You must select the folders for each operating system. |
| Include Files |
In this box, enter the file types that you want to back up. If a file type does not appear in the list, type the file extension in the box that appears beside Include Files box. For the list of file types that are by default included for backup, see Defined file types for backup. |
| Exclude Files |
In this box, enter the file types that you want to exclude from backup. If a file type does not appear in the list, type the file extension in the box that appears beside Exclude Files box. Note: If you have the same file type in the Include Files and Exclude Files box, that file type is excluded from backups. For the list of file types that are by default excluded from backup, see Defined file types for backup. |
| Exclude Paths | Type the path to the files and folders that you want to exclude from backups. |
| + Add Folder |
Click this link to add a custom folder for backup. Note: You must add the custom folder that you want to include for backups for each platform. For example, if you want to add a custom folder named Documents for Mac and Windows, you must click the Windows tab and add the Documents folder, and then click the Mac tab and add the Documents folder. |
| Folder display name *Displayed only when you add a custom folder for backup using + Add Folder and when you select All Drives as a backup folder for Windows. |
Type a name for the custom folder that you want to add for backup. This name is used as an identifier for the custom folder by inSync. Note: Once configured, Folder display name cannot be edited. |
| Smartphones and Tablets | |
| Enable mobile backup |
This check box appears after you select the Allow mobile access to users check box. If you want to allow users to back up data from their mobile devices, select this check box. After you select this check box, a list with additional option appears. For more information how you can select mandatory folders for backup, see Select mandatory folders for backup and Mandate SD card backup on mobile devices. |
| Schedule & Retention: Backup Schedule > Laptops & Desktops Schedule | |
| Backup every |
Click the frequency of scheduled backups from user devices. Note: The time in this list indicates the interval between two consecutive backups. For example, if the frequency for backups is 4 hours and a backup ends at 10:07 A.M., the next backup starts at 2:07 P.M. |
| Backup at logoff/shutdown |
If you want to trigger a backup every time users shut down or log off from their devices, select this check box. Note: This option is applicable only for Windows and Linux devices. |
| Preferred backup window |
Type the time period when inSync can back up data from user devices every day. Scheduled backups will be triggered from user devices every day. Any backup triggered during this period will continue till completion, even if it is past the end time. If you do not want any restriction on triggering a scheduled backup, type the same start time and end time. Note: inSync follows the time zone of the user device if Use admin time zone check box is not selected. |
| Blackout window |
Type the time period when inSync must not trigger any scheduled backups. This restriction is not applicable for user triggered backups and inSync administrator triggered backups. If you do not want to set this restriction, type the same start time and end time.
|
|
Use admin time zone |
If you want to synchronize backups of all the devices to inSync Master timezone, select this check box.
|
| Schedule & Retention: Backup Schedule > Smartphones & Tablets | |
| Backup every |
This field appears when you select the Enable mobile backup check box. Select the time interval between two consecutive backups that are triggered automatically user mobile devices. By default, inSync performs a backup operation every 8 hours. For more information how you can update this permission, see Define the mobile backup interval. |
| Use data network in absence of WIFI |
If you want backups to resume by using a cellular data connection when a wireless connection is not available, select this check box. |
| Schedule & Retention: Data Retention for Devices | |
| Retain all backups for | Type the number of days that you want to retain all backups. At the end of the backup period, inSync will delete the data from the storage. For example, if you specify that you want to retain all backups for 5 days and inSync completed the backup operation on January 6, 2017, inSync will delete the backup data from the storage on January 11, 2017. |
| Retain weekly backups for | Type the number of weeks that you want to retain all backups. At the end of the weekly backup period, inSync deletes the data from the storage.
Note: The weekly backup is the last backup in a calendar week. The calendar week starts on Sunday. |
| Retain monthly backups for |
Type the number of months that you want to retain all backups. At the end of the monthly backup period, inSync deletes the data from the storage. Note: The monthly backup is the last backup in a calendar month. |
| Schedule & Retention: Laptops & Desktops Resources | |
| Max bandwidth [LAN] |
Type the maximum network bandwidth that the user devices can consume while backing up data over LAN. You can indicate the maximum bandwidth in absolute terms or as a percentage of total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero). Note: inSync requires a minimum bandwidth of 128 Kbps for backups over LAN. If you set the bandwidth as a percentage value, ensure that the maximum LAN bandwidth is not less than 128 Kbps. |
| Max bandwidth [WAN] |
Type the maximum network bandwidth that the user devices can consume while backing up data over WAN. You can indicate the maximum bandwidth in absolute terms or as a percentage of total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero). Note: inSync requires a minimum bandwidth of 128 Kbps for backups over WAN. If you set the bandwidth as a percentage value, ensure that the maximum WAN bandwidth is not less than 128 Kbps. |
| CPU Priority |
Select the priority that you want to assign to inSync, on the user device. We recommend that you set CPU priority to an optimal value. Assigning a higher CPU priority may affect the performance of other applications on the user's device. Assigning a lower CPU priority might increase the time required for backup. inSync, on the user device. We recommend that you set CPU priority to an optimal value. |
| Data Loss Prevention: DLP for Laptops and Desktops | |
| Device trace |
Select if you want the location of the user's device to appears on the world map in the DLP Overview page.
|
| Auto delete | If you want inSync to automatically delete data from the backup folders on devices if those devices do not connect with inSync Master for a specific number of days, select this check box. |
| Auto delete folders if device does not connect for |
This box appears only after you select the Auto delete check box. In the Auto delete folders if device does not connect for box, type the number of days which when the user's device does not connect with the inSync Master, inSync must automatically delete data from the backup folders on the device. |
| Delete folders/data if device does not connect for |
This box appears only after you select the Auto delete check box. In the Alert if device does not connect for specify the number of days which when the user's device does not connect with the inSync Master, inSync sends an alert to the inSync administrators. |
| Encrypt |
|
| Select mandatory backup folders for encryption |
This box appears only after you select Admin Configured Folder in the Encryption for Windows Laptops and Desktops field. In the Select mandatory backup folders for encryption, click the platform for which you want to encrypt the backup folders. |
| Encrypt inSync share folder | If you want to encrypt files in the inSync Share folder for the users, select this check box. For more information, see inSync Share folder for the users. For more information, see Encrypt inSync Share folder for Windows laptops. |
| Data Loss Prevention: DLP for Smartphone and Tablets | |
| Device trace | If you want the location of the mobile device to appear on the world map in the DLP Overview page, select this check box.
|
| Remote device deactivation | Click the appropriate remote device deactivation option from the list: If you want users to decide if they want to enable device deactivation, click Optional. If you to make it mandatory for your users to enable device deactivation, click Mandatory. If you want to disable device deactivation, click Disable. |
| Allow offline access to files (Favorites in share) | If you want to allow users to access their favorite files while they are in the offline mode, select this check box. |
| Allow other iOS apps to access inSync content | If you want users to backup data by using other apps on an iOS device, select this check box. |
| Encryption for android | If you want to encrypt the data in the backup folders of the user's android devices, select this check box. |
| User Settings: Allow Users to Change Settings > Backup Settings | |
| Change backup schedule |
If you want users to set their own backup schedule, select this check box. User backup schedules override administrator backup schedules. |
| Change blackout window | Select this check box to allow inSync users to set blackout window period as per their preference. |
| Pause backup |
If you want to allow users to pause a scheduled backup that is in progress, select this check box. A user might decide to pause a backup to conserve internet bandwidth or CPU usage. |
| User Settings: Allow Users to Change Settings > Backup Content | |
|
Add backup folders (laptops & desktops) |
Select this check box to allow inSync users to add backup folders. |
| Add content & edit settings (smartphones & tablets) | If you want users to modify content for backup, backup schedule or resource settings, select this check box. |
| User Settings: Allow Users to Change Settings > Backup Resources | |
|
Modify backup resources |
If you want to allow users to be able to update the Max Bandwidth and CPU Priority values, select this check box.
|
|
Opt out of networks for backup |
If you want to allow inSync users to block specific networks from backing up data, select this check box. For example, allow inSync users to block backups on data card, personal mobile hotspots, or Mi-Fi devices when traveling to minimize the personal hotspot or Mi-Fi data usage and costs.
|
| Edit proxy settings | If you want to allow users to update proxy settings, select this check box. |
| User Settings: Device Settings for Users | |
| Quota per user |
Type the maximum data that each user who belong to this profile can back up or share. If you do not want to set any restriction on the data size, type 0 (zero). Note: If the size of the files in the backup and share folders exceed the assigned quota, the backup and share from user devices fail. |
|
Allow users to add devices |
If you want users to activate inSync on their devices, select this check box. inSync on their devices, select this check box. If you do not select this check box, you must activate inSync for all users. inSync for all users.
|
| Max. devices per user | This box appears only when you select Allow users to add devices check box. In the Max. devices per user box type the number of devices that each user can back up. |
| Show inSync icon in system tray | If you want the inSync icon to appears on the system tray of the user’s devices, select this check box. |
| Show desktop notifications | If you want inSync to display important information to users through desktop notifications, select this check box. |
| User settings: Device Settings for Users > Manage Inactive Devices | |
|
Mark a device as inactive if it does not connect for |
Specify the number of days after which inSync must mark the device as inactive in the absence of any connection between the user device and inSync server. The default value is 15 days for this field. For example, if you set the period as 5 days and if a user device did not connect for 5 consecutive days, inSync server flags the device as inactive. You can specify any value from 1 to 365. |
|
Auto delete inactive devices |
Enables auto-delete of inactive devices setting for the profile. inSync automatically deletes inactive devices associated with the profile after the number of days specified in the Delete inactive devices after field. Once the device is deleted, snapshots of that device will not be available for download or restore. |
|
Delete inactive devices after |
Specify the number of days after which inSync must delete the inactive devices. The default value is 180 days for this field. You can specify values from 90 to 1000 days. |
Note: Click Disable Device Backup to disable the backup on the devices associated to this profile at anytime.
Configuration guidelines on macOS Mojave
Locations that display a prompt
Important: The macOS Mojave (version 10.14) has a User Data Protection feature, which displays an authorization prompt when inSync Client tries to access the following locations if configured for backup:
-
Location Services
-
Contacts ~/Library/Application Support/Address Book
-
Calendars ~/Library/Calendars
-
Reminders ~/Library/Calendars
-
Photos ~/Pictures/Photos Library.photoslibrary
If you want inSync to back up the locations but do not want the macOS Mojave to display the permission prompts to the users, you can pre-configure the authorization to inSync via MDM (Mobile Device Management) which is used in your organization. Druva also recommends educating the inSync Client users of your organization to pre-approve inSync by adding it to Full Disk Access in System Preferences > Security and Privacy pane for a seamless backup experience.
If you do not want inSync to backup the mentioned locations, you must configure these locations in the Global Exclude list, defined at Profile level. inSync skips the locations mentioned in the Global Exclude list while backing up user data. For more information, see Configure the global exclude list.
inSync Client v5.9.9
inSync Client v6.1.1 supports macOS Mojave (version 10.14).
- Druva recommends that you upgrade the inSync Client to v5.9.9 before upgrading user devices to macOS Mojave.
- If inSync Client users do not take any action on the prompts, inSync will pause the ongoing backup and it will remain in that state until the user takes an action.
For inSync Client v5.9.9 and earlier:
inSync Client v5.9.9 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. inSync administrators must upgrade user devices running on macOS Mojave to inSync Client v5.9.9 or later to successfully backup the mentioned locations.
Locations that do not display a prompt
For inSync Client v5.9.9:
inSync Client will skip the following configured locations by default while performing the backup if it does not have the required access permissions:
- Messages
- Safari Browsing History
- HTTP Cookies
- Call History
- iTunes Backups
- Time Machine Backups
Druva recommends educating the inSync Client users of your organization to pre-approve inSync access to the configured locations. To learn more, refer to inSync Client changes for macOS Mojave (version 10.14).
For inSync Client v5.9.8 and earlier:
inSync Client v5.9.8 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. inSync administrators must upgrade user devices running on macOS Mojave to inSync Client v5.9.9 or later to successfully backup the mentioned locations.