Overview
A Profile refers to a collection of settings that are utilized to manage a group of user accounts. If you are an administrator, you may need to establish inSync accounts for individuals who work in diverse departments and roles within your company, and these users may have various types of data that require safeguarding across different data sources.
Using a profile can be highly beneficial as it enables you to establish standard backup configuration settings that can be automatically applied to all users who belong to that specific profile. This makes it easier for you to create user accounts in the future, as you can simply assign a profile to ensure that data protection requirements are consistent across multiple users throughout your organization.
You can create a profile based on the following factors:
Type of data sources such as Laptops & Desktops
Types of Operating Systems such as Windows, Mac, Linux, Android, and iOS
Type of files and applications
Inclusion or exclusion of file types
Backup schedules
Data retention
Data loss prevention
Enable users to modify backup settings
You can create a new profile or also simply choose to create a copy of an existing profile and later modify its properties. Profiles ensure easy management of users because you no longer need to manage individual users. Using profiles, you can manage the following properties:
Administrator Abilities | User Abilities | Others |
|
|
|
📝 Note
The default values have been carefully chosen to provide optimal performance and functionality in most scenarios. You can customize these settings to suit your needs within the specified range.
Procedure
To create a profile:
Go to the Endpoints console and click Profiles.
Click Create New Profile. The profile creation wizard appears.
Provide the appropriate information in each field as detailed in Steps and click Finish.
Steps:
Step 1: General
The following table describes the fields in the Summary and User Privacy & Access areas of the General page.
Enter the required fields and click Next.
In the Summary section, enter the Profile name, description, and User limit.
Profile Name | Enter a name for the Profile. The name of a profile enables you to quickly identify and assign the profile while creating users.
You can set the names based on the departments or operating systems.
Example: Engineering, Sales, Marketing & Windows. |
Description | Enter a description for the profile to assist the administrators in identifying the configuration parameters for the users assigned to the profile. |
User Limit | Select one of the following options:
|
In the User Privacy & Access section, select Access Policy, Backup Data Privacy Settings and Logs Privacy Settings to further select the related settings.
Allow restore from web browser | Select this checkbox to enable inSync Web access for users. |
Allow access to inSync web only through public gateway IPs | Select this checkbox to allow users to access inSync Web only when users login in through the corporate network.
📝 Note
To enable this setting you need to configure the Geofencing functionality from Druva Cloud settings.
|
Allow access from mobile devices | Select this checkbox to allow users to access backed-up data through mobile devices.
Allow users to login only through the MDM managed app: Select this checkbox to allow users to log in to Druva Mobile App using the MDM mobile app.
Enforce PIN for mobile access: Select this checkbox to make a four-digit security code mandatory for users to open Druva Mobile App.
📝Note
Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data
|
Login using | Select one of the following options to activate inSync and log on to inSync Client and inSync Web:
Note: Single Sign-On (SSO) option is available only if it is configured in inSync. To configure SSO, see Configure inSync for SSO.
|
Backup Data Privacy Settings | |
Allow admin access to user backup data | Select this checkbox to access the user's data and perform restore activities. |
Allow users to edit data privacy settings. | Select this checkbox to allow users to edit the data privacy settings. If you allow users to edit data privacy settings, users can restrict administrators to
Clear this check box if you do not want users to restrict the administrator to view/download the user backup data through inSync Client. |
Logs Privacy Settings | |
Allow admin access to logs | Select this checkbox to access the inSync Client logs from user devices, especially for remote users, to analyze and troubleshoot issues. |
Allow users to edit logs privacy settings | Select this checkbox to allow users to edit the logs privacy settings.
Note: Users can restrict administrators from downloading log files by selecting this checkbox. |
Set the Data Preservation & Alert duration in the Data Preservation and Backup Inactivity Alert section.
Auto delete preserved users | Select this checkbox to automatically set the duration to delete the preserved users after a particular duration.
Note:
|
Backup Inactivity Alert | |
Alert if user's data is not backed up for | Set the User Backup Inactivity alert if the user's data source is not connected to the inSync Cloud for a certain period. |
Step 2: Endpoints
You can enable and define the settings for Endpoints if you have availed a license for the Endpoints. To enable the settings for Endpoints, select Enable Device Backup.
The following table describes the fields of the Devices page. Enter the required fields and click Next.
In the Laptops & Desktop section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Windows/Mac/Linux | Configure the profile based on the operating systems. You can protect data for Windows, Mac, and Linux operating systems.
Click on the Windows, Mac, and Linux platforms for which you want to configure the folders for backup.
If you are configuring files and folders for backup on macOS Mojave (version 10.14), see Configuration guidelines on macOS Mojave. |
Add Folders | Select this option if you want to add custom folders for each operating system apart from the folders listed by default.
To add a custom folder for backup, refer Add custom folder for backup.
Note:
To configure specific folders for backup on user devices, see Configure folders for backup.
|
Folder display name | Type a name for the custom folder you want to add for backup.
Note:
This name is used as an identifier for the custom folder by inSync. |
In the Smartphones/Tablets section, select the folders for backup and specify the file type for inclusion and exclusion for backup.
Enable Mobile Backup | 📝Note
Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data |
Add Folders | Select the folders that you want to back up. You can select the folders for both Android/iOS operating systems.
Note: Druva does not back up all drives that use non-NTFS file systems. To back up the drives that use the non-NTFS file system, you must configure the drives individually in the profile.
To configure specific folders for backup on user devices, see Configure folders for backup |
In the Backup Schedule & Retention section, set the backup schedule and retention period for Laptops/ desktops.
Laptops/Desktops | |
Backup Every | Set the time interval for scheduled backups to start backing up data automatically on user devices as per the set frequency.
Note: The time in this list indicates the gap between two consecutive backups. For example, if the frequency for backups is 4 hours and a backup ends at 10:07 A.M., the next backup starts at 2:07 P.M. |
Preferred backup window | Set the preferred time frame within which the data backup from user devices starts.
The scheduled backups are triggered on the user devices as per the selected backup frequency. Any backup triggered during this period will continue until completion, even past the end time. If you do not want any restriction on triggering a scheduled backup, type the exact start and end times. Example: 12:00 AM - 12:00 AM
Note:
inSync follows the time zone of the user device if the Use admin time zone check box is not selected. |
Use admin time zone | Select this checkbox to synchronize device backups to your time zone.
Example: If the administrator's time zone, who updated the profile, is New York (EDT) and the backup schedule is at 08:00 A.M., backups will start from 05:00 AM for user devices in Los Angeles (PDT).
Note: If you select this check box, the configuration specified in the following Preferred backup window and Blackout window fields act accordingly to your time zone. |
Backup at logoff/shutdown | Select this checkbox to backup device data whenever a user attempts to log off/shut down the device and ensure data backup.
Note: This option is applicable only for Windows. |
Retention | |
Retain all Snapshots for | Set the duration in days to retain all the daily backups.
Example: If you set the duration to retain snapshots for five days and the backup is completed on January 5, it will delete the backup data from the storage on January 10.
For more information about the retention policy, see Configure the backup retention policy. |
Retain Weekly Snapshots For | Set the duration in weeks to retain all the weekly backups.
Note: The weekly backup is the last in a calendar week. The calendar week starts on Sunday. |
Retain monthly backups for | Set this duration in months to retain all the monthly backups.
Note: The monthly backup is the last backup in a calendar month.
For more information about the retention policy, see Configure the backup retention policy. |
Data Lock | |
Enable Data Lock | Enable this option to:
For more information, see Data Lock.
Note: Once you enable a profile with Data Lock, you cannot:
|
Resource Settings | |
Max bandwidth [WAN] | Enter the maximum network bandwidth the user devices can consume while backing up data over WAN.
You can indicate the maximum bandwidth in absolute terms or as a percentage of the total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero).
|
CPU Priority | Select the priority that you want to assign to inSync, on the user devices. We recommend that you set CPU priority to an optimal value. Assigning a higher CPU priority may affect the performance of other applications on the user's device. Assigning a lower CPU priority might increase the time required for backup by inSync, on the user device. We recommend that you set CPU priority to an optimal value. |
In the User Settings section, set the user Backup Settings, Backup Content and Backup Resource, Device setting and Notification settings.
Change backup schedule | Select this checkbox to allow users to modify the predefined backup schedule set by the Profile administrator. |
Change blackout window | Select this checkbox to allow users to modify the blackout window period as per their preference. |
Pause backup | Select this checkbox to allow users to pause a scheduled backup that is in progress. |
Cancel backup | Select this checkbox to allow users to cancel an ongoing backup that is in progress.
Note: The backup will trigger automatically on the next backup interval. |
Backup Content | |
Add backup folders | Select this checkbox to allow users to add additional folders for backup. |
Backup Resource | |
Modify backup resources | Select this checkbox if you want to allow users to modify the Max Bandwidth and CPU Priority values.
Note: After a user configures these settings, you cannot change these settings. |
Opt out of networks for backup | Select this checkbox to allow users to block specific networks from backing up data.
Example: Allow users to block backups on the data card, personal mobile hotspots, or Mi-Fi devices during traveling to minimize the personal hotspot or Mi-Fi data usage and costs.
Note: Users can opt out of networks with only 24 bits or more subnet mask. |
Edit proxy settings | Select this checkbox to allow users to update proxy settings.
Note: This will enable users to connect to inSync Server directly if the user relocates to a different business unit from where inSync Client cannot connect to inSync Server directly. |
Device Settings for Users | |
Quota per user | Set the user quota for the device backup of each user assigned to the profile.
Example: If you set this to 1000 GB, inSync will back up user data for up to 1000 GB.
If you do not want to set any restriction on the data size, type 0 (zero).
📝Note
If the size of the files in the backup exceeds the assigned quota, the backup will fail.
|
Mark the device inactive if it does not connect for | Set the duration in days after which the device is marked as inactive when not connected to inSync Cloud. |
Auto-delete inactive devices | Select this check box to delete inactive devices automatically.
Set the number of days after which the inactive devices are deleted.
Once the device is deleted, the backed-up data of that device will not be available for download or restore. |
Agent and User Notification Settings | |
Show the inSync icon in the system tray | Select this checkbox for the Sync icon to appear in the system tray of the user devices.
If enabled, the users can view the various statuses of inSync on the system tray such as connection, backup, restore, etc. |
Allow users to modify notification settings | Select this checkbox to allow users to select or deselect the type of notifications they prefer to see on their devices. |
Notifications shown on devices |
You can choose the type of inSync notifications you want to display on the user devices. For more information, see Enable inSync notifications. |
In the Data Loss Prevention section, configure the settings for laptops/Desktops and smartphones.
Allow auto-delete | Select this checkbox to automatically delete data from the backup folders for the devices that do not connect with inSync Cloud for a specific number of days. |
Alert if device does not connect for | Set the duration in days to send an alert if the user device is not connected to inSync Cloud.
This option appears after you select the Allow Auto delete checkbox. |
Delete folders/data if a device does not connect for | Set the duration in days to delete the data from the backup folder automatically from the user's device if the device is not connected to inSync Cloud for a specific number of days.
|
Enable encryption | Select the encryption as applicable:
Disabled: If you do not want to disable encryption. |
DLP for Smartphones and Tablets | |
Allow offline access to files | Select this checkbox to allow users to access their favorite files while they are in offline mode. |
Enable encryption for android | Select this checkbox to encrypt the data in the backup folders of the user's Android device. |
Remote device deactivation | Select an option from the list as applicable:
Optional: If you want users to decide to enable device deactivation.
Mandatory: If you want to make it mandatory for users to enable device deactivation. |
Allow other iOS apps to access content | Select this checkbox to back up data using other apps on an iOS device. |
In the Global Exclusions section, select the file extension and path to exclude from the backup.
File Type | Select the specific file type you want to exclude.
|
Path and folder | Enter the path to the files and folders you want to exclude from backups.
Example: C:\Program Files\Microsoft Office\Data |
Regular Expressions (for File Types, Paths, and Folders to be excluded) | Enter the files and folders using regular expressions to exclude them from the backup operation. |
Configuration guidelines on macOS Mojave and later
Locations that display a prompt
❗ Important
The macOS Mojave (version 10.14) has a User Data Protection feature, which displays an authorization prompt when inSync Client tries to access the following locations if configured for backup:
Location Services
Contacts ~/Library/Application Support/Address Book
Calendars ~/Library/Calendars
Reminders ~/Library/Calendars
Photos ~/Pictures/Photos Library.photoslibrary
If you want inSync to back up the locations but do not want the macOS Mojave to display the permission prompts to the users, you can pre-configure the authorization to inSync via MDM (Mobile Device Management) which is used in your organization. Druva also recommends educating the inSync Client users of your organization to pre-approve inSync by adding it to Full Disk Access in System Preferences > Security and Privacy pane for a seamless backup experience.
If you do not want inSync to backup the mentioned locations, you must configure these locations in the Global Exclude list, defined at Profile level. inSync skips the locations mentioned in the Global Exclude list while backing up user data. For more information, see Configure the global exclude list.
inSync Client v6.1.1
inSync Client v6.1.1 supports macOS Mojave (version 10.14).
Druva recommends that you upgrade the inSync Client to v6.1.1 before upgrading user devices to macOS Mojave.
If inSync Client users do not take any action on the prompts, inSync will pause the ongoing backup and it will remain in that state until the user takes an action.
For inSync Client v6.1.0 and earlier:
inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.
Locations that do not display a prompt
For inSync Client v6.1.1:
inSync Client will skip the following configured locations by default while performing the backup if it does not have the required access permissions:
Mail
Messages
Safari Browsing History
HTTP Cookies
Call History
iTunes Backups
Time Machine Backups
Druva recommends educating the inSync Client users of your organization to pre-approve inSync access to the configured locations.
For inSync Client v6.1.0 and earlier:
inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.
Step 3: SaaS Apps (Optional)
If you have enabled the SaaS Apps license, see Create Profile for SaaS Apps to configure the desired workloads.