Skip to main content
Create a profile
Updated over 2 months ago

Overview

A Profile refers to a collection of settings that are utilized to manage a group of user accounts. If you are an administrator, you may need to establish inSync accounts for individuals who work in diverse departments and roles within your company, and these users may have various types of data that require safeguarding across different data sources.

Using a profile can be highly beneficial as it enables you to establish standard backup configuration settings that can be automatically applied to all users who belong to that specific profile. This makes it easier for you to create user accounts in the future, as you can simply assign a profile to ensure that data protection requirements are consistent across multiple users throughout your organization.

You can create a profile based on the following factors:

  • Type of data sources such as Laptops & Desktops

  • Types of Operating Systems such as Windows, Mac, Linux, Android, and iOS

  • Type of files and applications

  • Inclusion or exclusion of file types

  • Backup schedules

  • Data retention

  • Data loss prevention

  • Enable users to modify backup settings

You can create a new profile or also simply choose to create a copy of an existing profile and later modify its properties. Profiles ensure easy management of users because you no longer need to manage individual users. Using profiles, you can manage the following properties:

Administrator Abilities

User Abilities

Others

  • Access user's data

  • Define access policies such as:

    • Restore through web

    • Select login methods

    • Allow access through mobile devices.

  • Select data sources - Devices and SaaS Apps

  • Select backup content - Include and exclude files

  • Define global exclusions

  • Setup backup frequency

  • Define data retention

  • Bandwidth consumed and CPU utilized during backup

  • Configure data loss prevention

  • Set quota per user

  • Allow users to modify backup settings

  • Edit privacy settings

  • Restore data through web

  • Modify backup settings

  • Add folders for backup

  • Add devices

  • Modify the bandwidth consumed and CPU priority for backups

  • Pause backups

  • Stop administrators from accessing user data

  • Define the maximum users that a profile can have

  • Define the maximum number of devices per user

  • User login through Active Directory

  • inSync system tray icon and user notifications

  • Auto-delete inactive devices


📝 Note

The default values have been carefully chosen to provide optimal performance and functionality in most scenarios. You can customize these settings to suit your needs within the specified range.


Procedure

To create a profile:

  1. Go to the Endpoints console and click Profiles.

  2. Click Create New Profile. The profile creation wizard appears.

  3. Provide the appropriate information in each field as detailed in Steps and click Finish.

Steps:

Step 1: General

The following table describes the fields in the Summary and User Privacy & Access areas of the General page.

Enter the required fields and click Next.

In the Summary section, enter the Profile name, description, and User limit.

Profile Name

Enter a name for the Profile. The name of a profile enables you to quickly identify and assign the profile while creating users.

You can set the names based on the departments or operating systems.

Example: Engineering, Sales, Marketing & Windows.

Description

Enter a description for the profile to assist the administrators in identifying the configuration parameters for the users assigned to the profile.

User Limit

Select one of the following options:

  • Unlimited- To assign unlimited users for a profile

  • Set Limit- To assign a user limit between 1 to 100000 for a profile.

In the User Privacy & Access section, select Access Policy, Backup Data Privacy Settings and Logs Privacy Settings to further select the related settings.

Allow restore from web browser

Select this checkbox to enable inSync Web access for users.
This capability will allow users to log in through web browser while away from their devices and restore device data. To know more, see About inSync Web.

Allow access to inSync web only through public gateway IPs

Select this checkbox to allow users to access inSync Web only when users login in through the corporate network.


📝 Note

To enable this setting you need to configure the Geofencing functionality from Druva Cloud settings.


Allow access from mobile devices

Select this checkbox to allow users to access backed-up data through mobile devices.

Allow users to login only through the MDM managed app: Select this checkbox to allow users to log in to Druva Mobile App using the MDM mobile app.

Enforce PIN for mobile access: Select this checkbox to make a four-digit security code mandatory for users to open Druva Mobile App.
For more information, see Enable backup from mobile devices.


📝Note

Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data


Login using

Select one of the following options to activate inSync and log on to inSync Client and inSync Web:

  • inSync Password: If you want users to log in with a password.

  • AD/LDAP Account: If you want users to use their AD/LDAP username and password. Once opted, the Select AD/LDAP Server field appears. Select the IP address or the fully qualified domain name (FQDN) that contains the AD or LDAP server.

  • Single Sign-On: If you want users to log in using Single Sign-On.


Note: Single Sign-On (SSO) option is available only if it is configured in inSync. To configure SSO, see Configure inSync for SSO.


Backup Data Privacy Settings

Allow admin access to user backup data

Select this checkbox to access the user's data and perform restore activities.

Allow users to edit data privacy settings.

Select this checkbox to allow users to edit the data privacy settings. If you allow users to edit data privacy settings, users can restrict administrators to

  • View or download user data.

  • Perform data restores.

  • Perform a search for user data.

  • View user audit trail activities, such as files and folder names that users have restored or downloaded.

  • Download data that users share with others. However, administrators can view the share activities of users regardless of their privacy settings.

Clear this check box if you do not want users to restrict the administrator to view/download the user backup data through inSync Client.

Logs Privacy Settings

Allow admin access to logs

Select this checkbox to access the inSync Client logs from user devices, especially for remote users, to analyze and troubleshoot issues.

Allow users to edit logs privacy settings

Select this checkbox to allow users to edit the logs privacy settings.

Note: Users can restrict administrators from downloading log files by selecting this checkbox.

Set the Data Preservation & Alert duration in the Data Preservation and Backup Inactivity Alert section.

Auto delete preserved users

Select this checkbox to automatically set the duration to delete the preserved users after a particular duration.

Note:

  • Once the user is auto-deleted, the backed-up data of that user is also deleted from inSync. You cannot recover this deleted data.

  • User data retention or deletion is based on the backup retention policy you have defined through profiles.

  • If a preserved user is under Legal Hold, the user will not be deleted.

Backup Inactivity Alert

Alert if user's data is not backed up for

Set the User Backup Inactivity alert if the user's data source is not connected to the inSync Cloud for a certain period.

Step 2: Endpoints

You can enable and define the settings for Endpoints if you have availed a license for the Endpoints. To enable the settings for Endpoints, select Enable Device Backup.

The following table describes the fields of the Devices page. Enter the required fields and click Next.

In the Laptops & Desktop section, select the folders for backup and specify the file type for inclusion and exclusion for backup.

Windows/Mac/Linux

Configure the profile based on the operating systems. You can protect data for Windows, Mac, and Linux operating systems.

Click on the Windows, Mac, and Linux platforms for which you want to configure the folders for backup.

If you are configuring files and folders for backup on macOS Mojave (version 10.14), see Configuration guidelines on macOS Mojave.

Add Folders

Select this option if you want to add custom folders for each operating system apart from the folders listed by default.

To add a custom folder for backup, refer Add custom folder for backup.

Note:

  • Druva does not back up all drives using non-NTFS file systems. To back up the drives using the non-NTFS file system, you must configure them individually in the profile.

  • Select All Drives for backup when you are not sure about the location of the files that you want to backup on user devices.

To configure specific folders for backup on user devices, see Configure folders for backup.

  • If you configure inSync to backup All Drives on Windows devices, inSync, by default, does not back up the drives which use non-NTFS file systems. To back up the drives which use the non-NTFS file system, you must configure the drives individually in the profile.

  • Select All Drives for backup when you are not sure about the location of the files that you want to backup on user devices.

  • If you configure OneDrive folder for backup, inSync backs up only the files that are available locally on the user's device. The On-Demand Files are excluded from backup if the Files On-Demand feature is enabled for the user's OneDrive account.

Folder display name

Type a name for the custom folder you want to add for backup.

Note:

  • This option is displayed only when you click the + Add Folder option.

  • In a few scenarios, inSync ignores the name defined in this field. For more information, see the Naming convention for global variables.

This name is used as an identifier for the custom folder by inSync.

In the Smartphones/Tablets section, select the folders for backup and specify the file type for inclusion and exclusion for backup.

Enable Mobile Backup

📝Note

Druva has depricated backup support for Mobile device. To know more, see Deprecation of backup for Mobile Device Data

Add Folders

Select the folders that you want to back up. You can select the folders for both Android/iOS operating systems.

Note: Druva does not back up all drives that use non-NTFS file systems. To back up the drives that use the non-NTFS file system, you must configure the drives individually in the profile.

To configure specific folders for backup on user devices, see Configure folders for backup

In the Backup Schedule & Retention section, set the backup schedule and retention period for Laptops/ desktops.

Laptops/Desktops

Backup Every

Set the time interval for scheduled backups to start backing up data automatically on user devices as per the set frequency.

Note: The time in this list indicates the gap between two consecutive backups. For example, if the frequency for backups is 4 hours and a backup ends at 10:07 A.M., the next backup starts at 2:07 P.M.

Preferred backup window

Set the preferred time frame within which the data backup from user devices starts.

The scheduled backups are triggered on the user devices as per the selected backup frequency. Any backup triggered during this period will continue until completion, even past the end time. If you do not want any restriction on triggering a scheduled backup, type the exact start and end times. Example: 12:00 AM - 12:00 AM

Note:

  • If the Blackout window is configured for a profile, an ongoing scheduled backup will automatically pause if the ongoing backup enters the Blackout window duration. And the backup will remain paused until the Blackout window duration is complete.

  • The scheduled backup will automatically resume when the Blackout window duration is complete.

  • Users can resume a paused backup if the backup has paused due to the Blackout window.

inSync follows the time zone of the user device if the Use admin time zone check box is not selected.

Use admin time zone

Select this checkbox to synchronize device backups to your time zone.

Example: If the administrator's time zone, who updated the profile, is New York (EDT) and the backup schedule is at 08:00 A.M., backups will start from 05:00 AM for user devices in Los Angeles (PDT).

Note: If you select this check box, the configuration specified in the following Preferred backup window and Blackout window fields act accordingly to your time zone.

Backup at logoff/shutdown

Select this checkbox to backup device data whenever a user attempts to log off/shut down the device and ensure data backup.

Note: This option is applicable only for Windows.

Retention

Retain all Snapshots for

Set the duration in days to retain all the daily backups.

Example: If you set the duration to retain snapshots for five days and the backup is completed on January 5, it will delete the backup data from the storage on January 10.

For more information about the retention policy, see Configure the backup retention policy.

Retain Weekly Snapshots For

Set the duration in weeks to retain all the weekly backups.

Note: The weekly backup is the last in a calendar week. The calendar week starts on Sunday.

Retain monthly backups for

Set this duration in months to retain all the monthly backups.

Note: The monthly backup is the last backup in a calendar month.

For more information about the retention policy, see Configure the backup retention policy.

Data Lock

Enable Data Lock

Enable this option to:

  • Protects the backed-up data from rogue admin threats.

  • Ensure that the data cannot be deleted, modified, or encrypt the snapshots once you enable the Data Lock.

For more information, see Data Lock.

Note: Once you enable a profile with Data Lock, you cannot:

  • Disable the Data Lock setting.

  • Delete the snapshots, users, and devices associated with the profile.

  • Edit the retention period.

  • Change the profile of users.

  • Remove the license of users.

Resource Settings

Max bandwidth [WAN]

Enter the maximum network bandwidth the user devices can consume while backing up data over WAN.

You can indicate the maximum bandwidth in absolute terms or as a percentage of the total available bandwidth. If you do not want to set any restriction on bandwidth consumption, type 0 (zero).


Note: inSync requires a minimum bandwidth of 128 Kbps for backups over WAN. If you set the bandwidth as a percentage value, ensure the maximum WAN bandwidth is not less than 128 Kbps.

CPU Priority

Select the priority that you want to assign to inSync, on the user devices. We recommend that you set CPU priority to an optimal value. Assigning a higher CPU priority may affect the performance of other applications on the user's device. Assigning a lower CPU priority might increase the time required for backup by inSync, on the user device. We recommend that you set CPU priority to an optimal value.

In the User Settings section, set the user Backup Settings, Backup Content and Backup Resource, Device setting and Notification settings.

Change backup schedule

Select this checkbox to allow users to modify the predefined backup schedule set by the Profile administrator.

Change blackout window

Select this checkbox to allow users to modify the blackout window period as per their preference.

Pause backup

Select this checkbox to allow users to pause a scheduled backup that is in progress.

Cancel backup

Select this checkbox to allow users to cancel an ongoing backup that is in progress.

Note: The backup will trigger automatically on the next backup interval.

Backup Content

Add backup folders

Select this checkbox to allow users to add additional folders for backup.

Backup Resource

Modify backup resources

Select this checkbox if you want to allow users to modify the Max Bandwidth and CPU Priority values.

Note: After a user configures these settings, you cannot change these settings.

Opt out of networks for backup

Select this checkbox to allow users to block specific networks from backing up data.

Example: Allow users to block backups on the data card, personal mobile hotspots, or Mi-Fi devices during traveling to minimize the personal hotspot or Mi-Fi data usage and costs.

Note: Users can opt out of networks with only 24 bits or more subnet mask.

Edit proxy settings

Select this checkbox to allow users to update proxy settings.

Note: This will enable users to connect to inSync Server directly if the user relocates to a different business unit from where inSync Client cannot connect to inSync Server directly.

Device Settings for Users

Quota per user

Set the user quota for the device backup of each user assigned to the profile.

Example: If you set this to 1000 GB, inSync will back up user data for up to 1000 GB.

If you do not want to set any restriction on the data size, type 0 (zero).


📝Note

If the size of the files in the backup exceeds the assigned quota, the backup will fail.


Mark the device inactive if it does not connect for

Set the duration in days after which the device is marked as inactive when not connected to inSync Cloud.

Auto-delete inactive devices

Select this check box to delete inactive devices automatically.

Set the number of days after which the inactive devices are deleted.

Once the device is deleted, the backed-up data of that device will not be available for download or restore.

Agent and User Notification Settings

Show the inSync icon in the system tray

Select this checkbox for the Sync icon to appear in the system tray of the user devices.

If enabled, the users can view the various statuses of inSync on the system tray such as connection, backup, restore, etc.

Allow users to modify notification settings

Select this checkbox to allow users to select or deselect the type of notifications they prefer to see on their devices.

Notifications shown on devices

  • Critical

  • High

  • Warning

  • Informative

You can choose the type of inSync notifications you want to display on the user devices. For more information, see Enable inSync notifications.

In the Data Loss Prevention section, configure the settings for laptops/Desktops and smartphones.

Allow auto-delete

Select this checkbox to automatically delete data from the backup folders for the devices that do not connect with inSync Cloud for a specific number of days.

Alert if device does not connect for

Set the duration in days to send an alert if the user device is not connected to inSync Cloud.

This option appears after you select the Allow Auto delete checkbox.

Delete folders/data if a device does not connect for

Set the duration in days to delete the data from the backup folder automatically from the user's device if the device is not connected to inSync Cloud for a specific number of days.


This box appears only after you select the Allow Auto delete checkbox.

Enable encryption

Select the encryption as applicable:

  • All Folders: If you want to encrypt all the backup folders.

  • Admin Configured Folder: If you want to encrypt folders that administrators include in the backup.

Disabled: If you do not want to disable encryption.

DLP for Smartphones and Tablets

Allow offline access to files

Select this checkbox to allow users to access their favorite files while they are in offline mode.

Enable encryption for android

Select this checkbox to encrypt the data in the backup folders of the user's Android device.

Remote device deactivation

Select an option from the list as applicable:

Optional: If you want users to decide to enable device deactivation.

Mandatory: If you want to make it mandatory for users to enable device deactivation.

Allow other iOS apps to access content

Select this checkbox to back up data using other apps on an iOS device.

In the Global Exclusions section, select the file extension and path to exclude from the backup.

File Type

Select the specific file type you want to exclude.
From the default file extensions in the subsequent field, enter the particular file type you want to exclude for backup.


For the list of file types that are by default excluded from backup, see Defined file types for backup

Path and folder

Enter the path to the files and folders you want to exclude from backups.

Example: C:\Program Files\Microsoft Office\Data

Regular Expressions (for File Types, Paths, and Folders to be excluded)

Enter the files and folders using regular expressions to exclude them from the backup operation.
For more information to configure the global exclude list for file types, paths and folders, and regular expressions, see Configure the global exclude list.

Configuration guidelines on macOS Mojave and later

Locations that display a prompt


❗ Important

The macOS Mojave (version 10.14) has a User Data Protection feature, which displays an authorization prompt when inSync Client tries to access the following locations if configured for backup:

  • Location Services

  • Contacts ~/Library/Application Support/Address Book

  • Calendars ~/Library/Calendars

  • Reminders ~/Library/Calendars

  • Photos ~/Pictures/Photos Library.photoslibrary


If you want inSync to back up the locations but do not want the macOS Mojave to display the permission prompts to the users, you can pre-configure the authorization to inSync via MDM (Mobile Device Management) which is used in your organization. Druva also recommends educating the inSync Client users of your organization to pre-approve inSync by adding it to Full Disk Access in System Preferences > Security and Privacy pane for a seamless backup experience.

If you do not want inSync to backup the mentioned locations, you must configure these locations in the Global Exclude list, defined at Profile level. inSync skips the locations mentioned in the Global Exclude list while backing up user data. For more information, see Configure the global exclude list.

inSync Client v6.1.1

inSync Client v6.1.1 supports macOS Mojave (version 10.14).

  • Druva recommends that you upgrade the inSync Client to v6.1.1 before upgrading user devices to macOS Mojave.

  • If inSync Client users do not take any action on the prompts, inSync will pause the ongoing backup and it will remain in that state until the user takes an action.

For inSync Client v6.1.0 and earlier:

inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.

Locations that do not display a prompt

For inSync Client v6.1.1:

inSync Client will skip the following configured locations by default while performing the backup if it does not have the required access permissions:

  • Mail

  • Messages

  • Safari Browsing History

  • HTTP Cookies

  • Call History

  • iTunes Backups

  • Time Machine Backups

Druva recommends educating the inSync Client users of your organization to pre-approve inSync access to the configured locations.

For inSync Client v6.1.0 and earlier:

inSync Client v6.1.0 and earlier, running on macOS Mojave will skip the backup of the mentioned locations, even if they are configured for backup. Administrators must upgrade user devices running on macOS Mojave to inSync Client v6.1.1 or later to successfully backup the mentioned locations.

Step 3: SaaS Apps (Optional)

If you have enabled the SaaS Apps license, see Create Profile for SaaS Apps to configure the desired workloads.

Did this answer your question?