1. Configure Drive SDK API

1. Sign in to Google Admin console with the credentials of the domain you wish to back up.
2. Go to Apps > Google Workspace.
   
3. Click Drive and Docs.
   
4. Click Features and Applications.
   
5. Click on the Drive SDK section and tick Allow users to access Google Drive with the Drive SDK API. Click SAVE.
   

2. Create a service key

1. Sign in to Google Developers Console as a domain super administrator.
2. Click Select a project and hit NEW PROJECT in the upper-right corner of the pop-up window.¹
   
3. Enter a project name and click CREATE.
   
4. Open the project you just created.
   
5. Click Navigation menu and go to APIs & Services > Library.
   
6. Search for the following APIs and enable them one by one: Admin SDK API, Google People API, Gmail API, Google Calendar API, and Google Drive API.
   
7. Click Navigation menu and go to IAM & Admin > Service Accounts.
   
8. Click + CREATE SERVICE ACCOUNT.
   
9. Enter a Service account name as you please and click CREATE.
   
10. Select Project > Owner as the role and click CONTINUE.
    
11. Omit the optional fields and click DONE.
    
12. You will automatically jump to the page listing service accounts. Find the newly created account. Click  under Actions and select Manage keys.
    If you see the window below, click the "disable" link as shown in the screenshot or go to Navigation Menu > Organization Policies and find Disable service account key creation. Set the policy to Inactive. Once completed, return to the Service Accounts tab.
    
13. Click ADD KEY > Create new key.
    
14. In the pop-up window, choose JSON as the key type and click CREATE.
    
15. The key will be automatically saved to your computer. Click CLOSE.²
    
16. Go to DETAILS and copy the Unique ID to your Notepad.³
    
17. Sign in to Google Admin console with the credentials of the domain you wish to back up.
18. Go to Security > Access and data control > API controls.
    
19. Click MANAGE DOMAIN WIDE DELEGATION at the bottom of the page.
    
20. Click Add new.
    
21. In the pop-up window, enter the following information and click AUTHORIZE:
    • Client ID: Paste the unique ID that you copied in step 16.
    • OAuth scopes: Copy and paste the following:
      https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.domain.readonly, https://www.googleapis.com/auth/drive, https://mail.google.com, https://www.googleapis.com/auth/calendar, https://www.googleapis.com/auth/contacts, https://www.googleapis.com/auth/contacts.other.readonly, https://sites.google.com/feeds, https://www.googleapis.com/auth/tasks
    • 
22. Now you can use the locally-stored key (generated in step 14) to create a task in Active Backup for Google Workspace. This article will guide you through the steps.