Supported editions for this feature: Google Workspace Assured Controls and Assured Controls Plus.
Local data storage is a Google Workspace feature that enables you to export your organization's Workspace data into your own Google Cloud Storage (GCS) bucket. The location of your bucket determines the location in which your data is stored. The feature gives you control over your data's location and who can access it, addressing data sovereignty concerns.
Important: When you use local data storage, exports include data only from users with the Assured Controls add-on license assigned. Additional charges may apply. Contact Google Cloud Support for any questions relating to usage or billing of GCS.
To use local data storage, you must first use the Google Cloud console to create your own Cloud Storage bucket in the desired location.
After you create the bucket, the remaining steps are in the Google Workspace Admin Console.
You must be signed in as a super administrator for this task.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
Sign in to your Google Admin console.Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu DataData import & exportData Export.
-
Click Set up new export.
- In the Name box, enter a name for your export.
- In the Scope box, select which users' data to export.
To export all of your organization's data, including data that's available only to admins, select Export all user data and skip the next step. See Export all your organization's data for more information.
To export the data for selected users, select Export data for specific users and choose whether to identify users by organizational unit, group, or individual user names.
- Identify the organizational units, groups, or user names to export.
Click in the Add box > make your selection > click Done.
When you select an organizational unit, only the direct members of the selected organizational unit are exported— not the sub organizational units. For example, a Finance organizational unit has two sub organizational units, Europe and Asia. If you select the Finance organizational unit, only the direct users under Finance are exported. The Europe and Asia organizational units are not exported unless you explicitly select those organizational units.
- (Optional) Set up continuous export.
In the Continuous export box, select the check box.
- In the Destination box, choose where to save the exported data.
To choose your own Cloud Storage bucket, select Your bucket and enter the name of the bucket you created.
- If you have not already done so, return to the Google Cloud console and assign these roles to the service account shown in the Destination box:
*Storage Legacy Bucket Reader
*Storage Object Creator
*Storage Object Viewer
Alternatively, you can also grant these access permissions to the service account:
*storage.buckets.get
*storage.objects.create
*storage.objects.get
-
Click Start export.