Export your Workspace data using local data storage

Exporting your Workspace data using local data storage is available for users with the Assured Controls or Assured Controls Plus add-on. Additional charges for Google Cloud Storage may apply. Contact Google Cloud Support for any billing or usage questions.

You can specify a Cloud Storage bucket that you own to take advantage of local data storage when exporting your data. This feature gives you more control over your data's location and who can access it, addressing data sovereignty concerns. Using local data storage also means your data’s storage, retention, and deletion options are fully controlled by your organization. 

To use local data storage:

1. Use the Google Cloud console to create your own Cloud Storage bucket in the desired location.
2. Next, set identity and access management policies for your bucket by assigning the following roles:

• Storage Legacy Bucket Reader
• Storage Object Creator
• Storage Object Viewer

Note: Storage Legacy Bucket Reader is a predefined legacy role. To assign it, you may need to click Manage Roles and create a custom role that uses this legacy role.

Alternatively, you can also grant these access permissions to the service account:

• storage.buckets.get
• storage.objects.create
• storage.objects.get

After you create the bucket, you’ll complete the remaining steps in the Google Workspace Admin Console. Choose whether you want to:

• Export all your users’ data
• Choose the Workspace data you want to export