Skip to main content

How can we help you?

Druva Documentation

Quick Reference Guide


inSync enables organizations to minimize risks with full data visibility, access, and compliance monitoring by providing a comprehensive backup, recovery, and archival of Microsoft 365 apps data. IT administrators can easily search, collect and preserve data of users to support legal and compliance needs.

This guide helps administrators quickly deploy inSync to protect Microsoft 365 apps in their organization.

Supported Microsoft 365 apps

inSync supports the following Microsoft 365 apps for protection:

  • Exchange Online
  • OneDrive
  • SharePoint Online
  • Teams
  • Groups

For detailed information on supported editions and the data is backed up for Microsoft 365 apps, see Support Matrix for Microsoft 365.

View video to configure inSync for Microsoft 365 backup

Use inSync to protect Microsoft 365 apps

Administrator with one of the following role can configure inSync to protect Microsoft 365 data:

  • Druva Cloud Administrator
  • inSync Cloud administrator
  • Any administrator with role and privileges to manage SaaS Apps

Step 1: Provide inSync access to Microsoft 365 apps data

inSync requires access to the Microsoft 365 tenant from which the user data should be backed up. Microsoft 365 global administrator must authorize inSync to access the user data. inSync requires specific permissions to access, backup, and restore the user data. To view the list of required permissions by inSync, see:

Here is a quick overview of the inSync access and configuration process:



You need a Microsoft 365 global administrator account with a valid Microsoft 365 license to provide access to inSync.


  1. On the inSync Management Console menu bar, click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.

  2. Click SaaS Apps.

  3. Click Microsoft 365.

M365_Not Configured_First screen_Oct6_marked.png

  1. On the confirmation message, click Configure to proceed with the configuration.

M365_Not Configured_Second screen_Oct6_marked.png

  1. On the login page that appears, enter the Microsoft 365 global administrator's username and password for Microsoft 365, and then click Sign in.

  2. On the next page that appears, click Accept to grant inSync app the required permissions to access Microsoft 365 data. inSync gets connected to Microsoft 365 data of all users in your organization.

Verify Configuration

After you provide the access to inSync with Microsoft 365 app, you can use the Verify Configuration option to check if inSync can access your tenant.


To verify the configuration:

  1. On the inSync Management Console menu bar, click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.

  2. Click SaaS Apps.

  3. Click Microsoft 365.

  4. On the Overview page,  click More options icon.png  and then click Verify.

  5. In the Verify Configuration dialog that appears, select a user.
    Provide an email address in the Select a user field.

    • User Principal Name (UPN) is not supported at the moment.

    • inSync recommends that you enter an organization's user email address to check if the configuration works instead of an administrator user.

  6. When you select a user, inSync performs the following checks as a part of verification:

  • App authentication: This step checks if inSync can utilize the available refresh tokens to validate the connection with the Microsoft 365 tenant.

  • User and user’s endpoints existence: This step checks if the user exists at the Microsoft 365 end.

  7. If any of the authentication steps fail, you are prompted with an error message. Click the error message to view the error details.

Step 2: Configure inSync to backup Microsoft 365 app data

Enable Microsoft 365 app backup in profile

A profile in inSync defines the backup settings, preferences, schedules and retention policy to protect the Microsoft 365 data. A profile can then be associated with the inSync user accounts whose data is backed up and protected based on the defined settings.

To configure a profile to backup Microsoft 365 app data, see Configure a Profile.

You can create a separate profile to backup each Microsoft 365 app.

To configure SharePoint Online, see Configure and manage SharePoint Online for protection.

Get user data encryption key(ekey)

To ensure that the Microsoft 365 data that is backed up is secure, you must configure inSync to get the data encryption key (ekey).

inSync requires access to the ekey to initiate the scheduled backup of any Microsoft 365 app data. The ekey is used to encrypt the user data when it is being backed up to the inSync Cloud. This is part of the digital envelope encryption process that Druva strictly adheres to.  Druva does not store ekey of the users and has no access to the data.

Use one of the following methods to enable inSync to get the user data encryption key(ekey):

Configure Cloud Apps settings for Microsoft 365

Define the user attribute that you want inSync to use to map user account to their Microsoft 365 app account.

  • By default, inSync uses the email address of users to map users to their SaaS Apps account.
  • Only administrators with the Cloud administrator role can configure the user account access settings.

Step 3: Add Microsoft 365 app users to inSync

To start the backup of Microsoft 365 app data of users, Administrator must add or create users in inSync. inSync supports the following methods to add or create new users:

If users are already created in inSync, assign the profile that you specifically created to manage Cloud App users. To manually assign a profile to a user, see Update the profile assigned to users

Step 4: Manage backup, restore, and monitor Microsoft 365 apps

After adding users, inSync automatically triggers the first backup of the configured user accounts and backs up the data as per the profile configuration.

Manual or on-demand backup

As an inSync Cloud administrator, you have an option to initiate an unscheduled backup of Microsoft 365 apps data as and when necessary. 

Restore Microsoft 365 apps data

Restore of data ensures that the data is available for future reference and business continuity and can be retrieved in case of accidental deletion or malicious activities.

Download Microsoft 365 apps data

inSync provides you with an option to download Microsoft 365 app data at custom locations such as laptop or desktop. You can perform a download of entire Microsoft 365 apps data or selective downloads of specific data residing within Microsoft 365 apps.

  • Was this article helpful?