Create a profile
Overview
A Profile refers to a collection of settings that are utilized to manage a group of user accounts. If you are an administrator, you may need to establish inSync accounts for individuals who work in diverse departments and roles within your company, and these users may have various types of data that require safeguarding across different data sources.
Using a profile can be highly beneficial as it enables you to establish standard backup configuration settings that can be automatically applied to all users who belong to that specific profile. This makes it easier for you to create user accounts in the future, as you can simply assign a profile to ensure that data protection requirements are consistent across multiple users throughout your organization.
You can create a profile based on the following factors:
- Type of data sources such as Laptops, Desktops and Mobile Devices
- Types of Operating Systems such as Windows, Mac, Linux, Android, and iOS
- Type of files and applications
- Inclusion or exclusion of file types
- Backup schedules
- Data retention
- Data loss prevention
- Enable users to modify backup settings
You can create a new profile or also simply choose to create a copy of an existing profile and later modify its properties. Profiles ensure easy management of users because you no longer need to manage individual users. Using profiles, you can manage the following properties:
Administrator Abilities | User Abilities | Others |
---|---|---|
|
|
|
Procedure
To create a profile:
-
Go to the Endpoints console and click Profiles.
-
Click Create New Profile. The profile creation wizard appears.
-
Provide the appropriate information in each field as detailed in Steps and click Finish.
Steps:
Step 1: General
The following table describes the fields in the Summary and User Privacy & Access areas of the General page.
Enter the required fields and click Next.
In the Summary section, enter the Profile name, description and User limit.
Summary | |
---|---|
Profile Name |
Enter a name for the Profile. The name of a profile enables you to quickly identify and assign the profile while creating users. You can set the names based on the departments or operating systems. Example: Engineering, Sales, Marketing, Windows, Mobile devices. |
Description | Enter a description for the profile to assist the administrators in identifying the configuration parameters for the users assigned to the profile. |
User Limit |
Select one of the following options:
|
In the User Privacy & Access section, select Access Policy, Backup Data Privacy Settings and Logs Privacy Settings to further select the related settings.
Access Policy | |
Allow restore from web browser | Select this checkbox to enable inSync Web access for users. This capability will allow users to log in through web browser while away from their devices and restore device data. To know more, see About inSync Web. |
Allow access to inSync web only through public gateway IPs |
Select this checkbox to allow users to access inSync Web only when users login in through the corporate network. |
Allow access from mobile devices |
Select this checkbox to allow users to access backed-up data through mobile devices. Allow users to login only through the MDM managed app: Select this checkbox to allow users to log in to Druva Mobile App using the MDM mobile app. Enforce PIN for mobile access: Select this checkbox to make a four-digit security code mandatory for users to open Druva Mobile App.For more information, see Enable backup from mobile devices. |
Login using |
Select one of the following options to activate inSync and log on to inSync Client and inSync Web:
|
Backup Data Privacy Settings | |
Allow admin access to user backup data | Select this checkbox to access the user's data and perform restore activities. |
Allow users to edit data privacy settings. |
Select this checkbox to allow users to edit the data privacy settings. If you allow users to edit data privacy settings, users can restrict administrators to
Clear this check box if you do not want users to restrict the administrator to view/download the user backup data through inSync Client.
|
Logs Privacy Settings | |
Allow admin access to logs | Select this checkbox to access the inSync Client logs from user devices to analyze and troubleshoot the issues, especially for remote users. |
Allow users to edit logs privacy settings |
Select this checkbox to allow users to edit the logs privacy settings.
|
Set the Data Preservation & Alert duration in the Data Preservation and Backup Inactivity Alert section.
Data Preservation | |
Auto delete preserved users |
Select this checkbox to automatically set the duration to delete the preserved users after a particular duration.
|
Backup Inactivity Alert | |
Alert if user's data is not backed up for | Set the User Backup Inactivity alert if the user's data source is not connected to the inSync Cloud for a certain period. |
Step 2: Endpoints
You can enable and define the settings for Endpoints if you have availed a license for the Endpoints. To enable the settings for Endpoints, select Enable Device Backup.
The following table describes the fields of the Devices page. Enter the required fields and click Next.
In the Laptops & Desktop section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Laptops & Desktops | |
Windows/Mac/Linux |
Configure the profile based on the operating systems. You can protect data for Windows, Mac, and Linux operating systems. Click on the Windows, Mac, and Linux platforms for which you want to configure the folders for backup. If you are configuring files and folders for backup on macOS Mojave (version 10.14), see Configuration guidelines on macOS Mojave. |
Add Folders |
Select this option if you want to add custom folders for each operating system apart from the folders listed by default. To add a custom folder for backup, refer Add custom folder for backup.
To configure specific folders for backup on user devices, see Configure folders for backup.
|
Folder display name |
Type a name for the custom folder you want to add for backup.
This name is used as an identifier for the custom folder by inSync. |
In the Smartphones/Tablets section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Smartphones/Tablets | |
Enable Mobile Backup |
Enable this option to backup and restore mobile device data. This checkbox appears if you select the Allow access from mobile devices checkbox in General settings. Note: Due to Android OS limitations, inSync no longer backs up the App Settings for Android devices. For more information on selecting mandatory folders for backup, see Select mandatory folders for backup and Mandate SD card backup on mobile devices. |
Add Folders |
Select the folders that you want to back up. You can select the folders for both Android/iOS operating systems. Note: Druva does not back up all drives which use non-NTFS file systems. To back up the drives which use the non-NTFS file system, you must configure the drives individually in the profile. To configure specific folders for backup on user devices, see Configure folders for backup |
In the Backup Schedule & Retention section, set the backup schedule and retention period for Laptops/ desktops and mobile devices.
Laptops/Desktops | |
Backup Every |
Set the time interval for scheduled backups to start backing up data automatically on user devices as per the set frequency.
|
Preferred backup window |
Set the preferred time frame within which the data backup from user devices starts. The scheduled backups are triggered on the user devices as per the selected backup frequency. Any backup triggered during this period will continue until completion, even past the end time. If you do not want any restriction on triggering a scheduled backup, type the exact start and end times. Example: 12:00 AM - 12:00 AM
|
Use admin time zone |
Select this checkbox to synchronize device backups to your time zone. Example: If the administrator's time zone, who updated the profile, is New York (EDT) and the backup schedule is at 08:00 A.M., backups will start from 05:00 AM for user devices in Los Angeles (PDT).
|
Backup at logoff/shutdown |
Select this checkbox to backup device data whenever a user attempts to log off/shut down the device and ensure data backup.
|
Smartphones/Tablets | |
Backup Every |
Set the time interval for scheduled backups that trigger automatically on user devices as per the set frequency. This option will appear when you select the Enable mobile backup checkbox in the General section. By default, the backup operation is scheduled for every 8 hours. For more information about updating this permission, see Define the mobile backup interval. |
Use data network in the absence of Wi-Fi | Select this option to backup using cellular data in case Wi-Fi network is unavailable. |
Retention | |
Retain all Snapshots for |
Set the duration in days to retain all the daily backups. Example: If you set the duration to retain snapshots for five days and the backup is completed on January 5, it will delete the backup data from the storage on January 10. For more information about the retention policy, see Configure the backup retention policy. |
Retain Weekly Snapshots For |
Set the duration in weeks to retain all the weekly backups.
|
Retain monthly backups for |
Set this duration in months to retain all the monthly backups.
|
Data Lock | |
Enable Data Lock |
Enable this option to:
For more information, see Data Lock.
|
Resource Settings | |
Max bandwidth [WAN] |
Enter the maximum network bandwidth the user devices can consume while backing up data over WAN. You can indicate the maximum bandwidth in absolute terms or as a percentage of the total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero).
|
CPU Priority | Select the priority that you want to assign to inSync, on the user devices. We recommend that you set CPU priority to an optimal value. Assigning a higher CPU priority may affect the performance of other applications on the user's device. Assigning a lower CPU priority might increase the time required for backup by inSync, on the user device. We recommend that you set CPU priority to an optimal value. |
In the User Settings section, set the user Backup Settings, Backup Content and Backup Resource, Device setting and Notification settings.
Backup Settings | |
Change backup schedule | Select this checkbox to allow users to modify the predefined backup schedule set by Profile administrator. |
Change blackout window | Select this checkbox to allow users to modify the blackout window period as per their preference. |
Pause backup | Select this checkbox to allow users to pause a scheduled backup that is in progress. |
Cancel backup |
Select this checkbox to allow users to cancel an ongoing backup that is in progress.
|
Backup Content | |
Add backup folders | Select this checkbox to allow users to add additional folders for backup. |
Backup Resource | |
Modify backup resources |
Select this checkbox if you want to allow users to modify the Max Bandwidth and CPU Priority values. Note: After a user configures these settings, you cannot change these settings. |
Opt out of networks for backup |
Select this checkbox to allow users to block specific networks from backing up data. Example: Allow users to block backups on the data card, personal mobile hotspots, or Mi-Fi devices during traveling to minimize the personal hotspot or Mi-Fi data usage and costs.
|
Edit proxy settings |
Select this checkbox to allow users to update proxy settings.
|
Device Settings for Users | |
Quota per user | Set the user quota for the device backup of each user assigned to the profile. |
Example: If you set this to 1000 GB, inSync will back up user data for up to 1000 GB. If you do not want to set any restriction on the data size, type 0 (zero).
|
|
Mark device inactive if it does not connect for | Set the duration in days after which the device is marked as inactive when not connected to inSync Cloud. |
Auto-delete inactive devices |
Select this check box to delete inactive devices automatically. Set the number of days after which the inactive devices are deleted. Once the device is deleted, the backed-up data of that device will not be available for download or restore. |
Agent and User Notification Settings | |
Show inSync icon in system tray |
Select this checkbox for the Sync icon to appear in the system tray of the user devices. If enabled, the users can view the various statuses of inSync on the system tray such as connection, backup, restore, etc. |
Allow users to modify notification settings | Select this checkbox to allow users to select or deselect the type of notifications they prefer to see on their devices. |
Notifications shown on devices |
|
In the Data Loss Prevention section, configure the settings for laptops/Desktops and smartphones.
Data Loss Prevention (DLP) for Laptops and Desktops | |
Enable device trace |
Select this checkbox to enable device tracking in case the user's device is lost or stolen. The location of the user's device appears on the world map on the DLP Overview page on the Druva Console.
|
Allow auto-delete | Select this checkbox to automatically delete data from the backup folders for the devices that do not connect with inSync Cloud for a specific number of days. |
Alert if device does not connect for |
Set the duration in days to send an alert if the user device is not connected to inSync Cloud. This option appears after you select the Allow Auto delete checkbox. |
Delete folders/data if device does not connect for |
Set the duration in days to delete the data from the backup folder automatically from the user's device if the device is not connected to inSync Cloud for a specific number of days. This box appears only after you select the Allow Auto delete checkbox. |
Enable encryption |
Select the encryption as applicable:
|
DLP for Smartphones and Tablets | |
Enable device trace |
Select this checkbox to enable device tracking in case the user's mobile device is lost or stolen. The location of the user's device appears on the world map on the DLP Overview page on the Druva Console.
|
Allow offline access to files | Select this checkbox to allow users to access their favorite files while they are in offline mode. |
Enable encryption for android | Select this checkbox to encrypt the data in the backup folders of the user's Android device. |
Remote device deactivation |
Select an option from the list as applicable: Optional: If you want users to decide to enable device deactivation. Mandatory: If you want to make it mandatory for users to enable device deactivation. |
Allow other iOS apps to access content | Select this checkbox to back up data using other apps on an iOS device. |
In the Global Exclusions section, select the file extension and path to exclude from the backup.
File Type |
Select the specific file type you want to exclude. For the list of file types that are by default excluded from backup, see Defined file types for backup |
Path and folder |
Enter the path to the files and folders you want to exclude from backups. Example: C:\Program Files\Microsoft Office\Data |
Regular Expressions (for File Types, Path, and Folders to be excluded) | Enter the files and folders to exclude from the backup operation using regular expressions. For more information to configure the global exclude list for file types, paths and folders, and regular expressions, see Configure the global exclude list. |
Configuration guidelines on macOS Mojave and later
Locations that display a prompt
Important: The macOS Mojave (version 10.14) has a User Data Protection feature, which displays an authorization prompt when inSync Client tries to access the following locations if configured for backup:
-
Location Services
-
Contacts ~/Library/Application Support/Address Book
-
Calendars ~/Library/Calendars
-
Reminders ~/Library/Calendars
-
Photos ~/Pictures/Photos Library.photoslibrary
If you want inSync to back up the locations but do not want the macOS Mojave to display the permission prompts to the users, you can pre-configure the authorization to inSync via MDM (Mobile Device Management) which is used in your organization. Druva also recommends educating the inSync Client users of your organization to pre-approve inSync by adding it to Full Disk Access in System Preferences > Security and Privacy pane for a seamless backup experience.
If you do not want inSync to backup the mentioned locations, you must configure these locations in the Global Exclude list, defined at Profile level. inSync skips the locations mentioned in the Global Exclude list while backing up user data. For more information, see Configure the global exclude list.
inSync Client v6.1.1
inSync Client v6.1.1 supports macOS Mojave (version 10.14).
- Druva recommends that you upgrade the inSync Client to v6.1.1 before upgrading user devices to macOS Mojave.
- If inSync Client users do not take any action on the prompts, inSync will pause the ongoing backup and it will remain in that state until the user takes an action.
For inSync Client v6.1.0 and earlier:
inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.
Locations that do not display a prompt
For inSync Client v6.1.1:
inSync Client will skip the following configured locations by default while performing the backup if it does not have the required access permissions:
- Messages
- Safari Browsing History
- HTTP Cookies
- Call History
- iTunes Backups
- Time Machine Backups
Druva recommends educating the inSync Client users of your organization to pre-approve inSync access to the configured locations.
For inSync Client v6.1.0 and earlier:
inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.
Step 3: SaaS Apps (Optional)
If you have enabled the SaaS Apps license, see Create Profile for SaaS Apps to configure the desired workloads.