{"id":51652,"date":"2024-12-20T19:43:43","date_gmt":"2024-12-20T15:43:43","guid":{"rendered":"https:\/\/www.msp360.com\/resources\/?p=51652"},"modified":"2025-03-17T15:58:47","modified_gmt":"2025-03-17T11:58:47","slug":"how-to-set-up-the-retention-policy-for-office-365-or-g-suite-in-msp360-managed-backup","status":"publish","type":"post","link":"https:\/\/www.msp360.com\/resources\/blog\/how-to-set-up-the-retention-policy-for-office-365-or-g-suite-in-msp360-managed-backup\/","title":{"rendered":"Retention Policies in MSP360 Managed Backup for Microsoft 365 and Google Workspace"},"content":{"rendered":"<p>Retention policies are a vital part of your backup strategy. This guide will explain the purpose of retention policies and provide a step-by-step walkthrough on how to create, assign, and manage them in <a href=\"https:\/\/www.msp360.com\/saas-backup\/managed-backup-microsoft365-google-workspace\/\">MSP360 Managed Backup for Microsoft 365 and Google Workspace.<\/a><\/p>\n<p><!--more--><\/p>\n<h2 id=\"value-and-purpose-of-retention-policies\">Value and Purpose of Retention Policies<\/h2>\n<p>Retention policies define how long data is retained and establish rules for its lifecycle, ensuring compliance, controlling storage costs, and protecting against data loss. As a <a href=\"https:\/\/www.msp360.com\/resources\/blog\/what-is-an-msp\/\">managed service provider (MSPs)<\/a> or an IT professional, understanding how to use retention policies will help you achieve your data protection goals with Microsoft 365 and Google Workspace.<\/p>\n<p>A good retention policy brings the following qualities to a backup strategy:<\/p>\n<ol type=\"1\">\n<li><strong>Safeguards Against Data Loss and Ensures Compliance<\/strong>: Data is retained long enough to protect against data loss and meet regulatory requirements, fulfilling the primary purpose of a backup.<\/li>\n<li><strong>Optimizes Storage Usage<\/strong>: Unnecessary data is automatically removed once it is no longer needed, keeping storage consumption efficient and costs manageable.<\/li>\n<li><strong>Aligns with Data Value<\/strong>: Retention rules match the nature and importance of the backed-up data, ensuring appropriate handling for each data type.<\/li>\n<\/ol>\n<p><span class=\"further-reading \">Further reading<\/span> <a href=\"https:\/\/www.msp360.com\/resources\/blog\/understanding-retention-policies-with-msp360-managed-backup\/\">Understanding Retention Policies in MSP360 Managed Backup for servers and workstations<\/a><\/p>\n<h2 id=\"creating-a-new-retention-policy\">Creating a New Retention Policy<\/h2>\n<h3 id=\"why-create-a-retention-policy\">Why Create a Retention Policy?<\/h3>\n<p>By default, when you set up <a href=\"https:\/\/www.msp360.com\/saas-backup\/m365\/\">backup for Microsoft 365<\/a> or <a href=\"https:\/\/www.msp360.com\/saas-backup\/google-workspace\/\">Google Workspace<\/a>, the backup includes no retention policy. That is, backed up data is stored indefinitely. It\u2019s the safest default option, but it assumes that you will set up a retention policy later on.<\/p>\n<h3 id=\"how-to-create-a-retention-policy\">How to Create a Retention Policy<\/h3>\n<ol type=\"1\">\n<li><strong>Log in to the MSP360 Managed Backup Service Dashboard<\/strong>. Navigate to the <strong>Retention Policies<\/strong> screen from the <strong>Account<\/strong> menu:<br \/>\n<figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/m365-create-retention.png\" alt=\"Retention Policies Menu\" \/><\/figure>\n<\/li>\n<li>Click <strong>Create Retention Policy<\/strong>. A pop-up window will appear:<br \/>\n<figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/m365-name-retention-policy.png\" alt=\"Create Retention Policy\" \/><\/figure>\n<\/li>\n<li>Give the policy a descriptive name. It will be used when you assign this policy to a user.<\/li>\n<li>Select the service for which the policy will apply (e.g., Mail, Drive, Contacts, Calendar, etc.).<\/li>\n<li>Select the approach to retention: to keep backups for a guaranteed time or to keep a guaranteed number of recent revisions.Select <strong>Delete Older Than<\/strong> to retain backups for a guaranteed time since they were made or since the backed up data was last modified. It\u2019s the optimal option when your backup plan must comply to organizational or regulatory requirements. Use the option \u201cAlways Keep the Latest Revision\u201d as a safety net in your retention policy, making sure that no matter how much time has passed, there\u2019s at least one backup copy retained.<img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/retention-policy-mail.png\" \/>Select <strong>Revisions to Keep<\/strong> to retain a guaranteed number of revisions. It\u2019s the optimal option when you have data which varies in usage, such as documents in OneDrive or Google Drive. With this approach to retention, you will know that your data has a set number of revisions available for restoring, no matter how often or rarely this data changes. This option is not available for Mail and Teams because data in them doesn\u2019t have revisions.<img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/retention-policy-drive.png\" \/><\/li>\n<li>Set the \u201cPurge Delay\u201d parameter. It acts as a safety net by adding extra buffer time before a backup copy is removed when it already matches the retention conditions.<\/li>\n<li>Finalize your settings and save the policy by clicking <strong>Create<\/strong>.<\/li>\n<\/ol>\n<h2 id=\"assigning-a-retention-policy\">Assigning a Retention Policy<\/h2>\n<h3 id=\"why-assign-a-retention-policy\">Why Assign a Retention Policy?<\/h3>\n<p>To make use of a retention policy, you must assign it to specific users and services. You can assign a policy to one or multiple users, or even set it as the default policy that applies to all users without a specific policy. Starting with well-configured default policies for each service is the best way to ensure all users have appropriate retention settings from the beginning.<\/p>\n<h3 id=\"configure-the-default-retention-policies\">Configure the Default Retention Policies<\/h3>\n<p>It\u2019s good to start by selecting the default retention policy for each backed up service. It will be applied to all current and new users which don\u2019t have a specific policy assigned to them.<\/p>\n<ol type=\"1\">\n<li><strong>Access the Retention Policies Screen<\/strong>.In the MSP360 console, open the <strong>Account<\/strong> menu and navigate to <strong>Retention Policies<\/strong>:<br \/>\n<figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/m365-create-retention.png\" alt=\"Retention Policies Menu\" \/><\/figure>\n<\/li>\n<li><strong>Set Up the Default Policy:<\/strong>\n<ol type=\"1\">\n<li>Click <strong>Default Retention Policy<\/strong>.<\/li>\n<li>In the windows that opens, select the desired policies for the supported services (Mail, Drive, Contacts, etc.).<\/li>\n<li>To ensure the default policy applies to all users, including those with pre-existing retention settings, check the <strong>Apply to all users<\/strong> option.<\/li>\n<\/ol>\n<figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/retention-policy-select-default.png\" alt=\"Select the default retention policies\" \/><\/figure>\n<\/li>\n<li><strong>Save Your Changes<\/strong>. Click <strong>Save<\/strong> to activate the default policy<\/li>\n<\/ol>\n<p>Default retention policies are an efficient way to ensure that users without specific policies assigned still follow the organization\u2019s data retention rules.<\/p>\n<h3 id=\"assign-a-retention-policy-to-a-user\">Assign a Retention Policy to a User<\/h3>\n<p>Of course, you can assign a retention policy to a specific users or a group of users at once.<\/p>\n<ol type=\"1\">\n<li><strong>Select One or Multiple Users<\/strong>. Navigate to the <strong>Users<\/strong> tab in the MSP360 console and locate the user or group of users you want to assign a retention policy to.<\/li>\n<li><strong>Select Retention Policy<\/strong>:\n<ul>\n<li>Click <strong>Retention Policy<\/strong> button above the users list.<\/li>\n<li>In the slide-in pane on the right, select the appropriate retention policy for each service (Mail, Drive, Contacts, Calendar, etc.).<\/li>\n<\/ul>\n<figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/12\/m365-assign-retention-policy.png\" alt=\"Assign Retention Policy\" \/><\/figure>\n<\/li>\n<li><strong>Apply by Saving<\/strong>. Once you\u2019ve selected the policies, click <strong>Save<\/strong>. The retention policy is now applied to selected users.<\/li>\n<\/ol>\n<p id=\"last\">Retention policy won\u2019t be enforced immediately when you apply it. Instead, it will be scheduled within the next 24 hours. Further on, the policy will be enforced daily without any need for management and control from your side.<\/p>\n<p><!-- CTA: MBS slide-in --><\/p>\n<div id=\"slidebox\"><a class=\"close\">\u00a0<\/a><!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper hs-cta-deferred\" id=\"hs-cta-wrapper-761dc0f3-19c9-403d-a99e-670c329ec4a1\" data-portal=\"5442029\" data-id=\"761dc0f3-19c9-403d-a99e-670c329ec4a1\"><span class=\"hs-cta-node hs-cta-761dc0f3-19c9-403d-a99e-670c329ec4a1\" id=\"hs-cta-761dc0f3-19c9-403d-a99e-670c329ec4a1\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/5442029\/761dc0f3-19c9-403d-a99e-670c329ec4a1\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-761dc0f3-19c9-403d-a99e-670c329ec4a1\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/761dc0f3-19c9-403d-a99e-670c329ec4a1.png\" alt=\"CTA\"><\/a><\/span><\/span><!-- end HubSpot Call-to-Action Code --><\/div>\n<p>By following the steps in this section, you have ensured that each user has the correct data retention settings, whether they use a default retention policy or a specific one.<\/p>\n<h2 id=\"using-retention-policies-with-immutable-storage\">Using Retention Policies with Immutable Storage<\/h2>\n<h3 id=\"what-is-immutable-storage\">What is Immutable Storage?<\/h3>\n<p><a href=\"https:\/\/www.msp360.com\/resources\/blog\/immutable-backups\/\">Immutability (Object Lock)<\/a> is a storage feature that ensures data cannot be modified or deleted for a specified period. This immutability is enforced by the storage provider, creating a secure environment where data remains untouchable until the retention period expires. It provides <a href=\"https:\/\/www.msp360.com\/resources\/blog\/how-to-be-protected-against-ransomware\/\">ransomware protection<\/a>, and safeguards backup data from insider threats and accidental deletions.<\/p>\n<h3 id=\"how-immutable-storage-empowers-retention-policies\">How Immutable Storage Empowers Retention Policies<\/h3>\n<p>Retention policies have two important roles. First, they ensure backups are removed when they become stale, helping control storage usage and costs. On their own, retention policies are sufficient for this role.<\/p>\n<p>Second, retention policies should also guarantee that backups are kept for a specified time. This assumes trust in the environment\u2014that no one tampers directly with the storage, removing or modifying the backup copies. But can we truly trust that no internal or external actor will interfere?<\/p>\n<p>A better approach is to adopt a zero-trust setup, where the ability to remove backups is not left to trust but is enforced at the storage level. <a href=\"https:\/\/www.msp360.com\/resources\/blog\/immutable-backups\/\">Immutable storage<\/a> makes this possible, ensuring that backups cannot be removed before their retention period expires, regardless of external actions or internal changes.<\/p>\n<h3 id=\"how-immutable-storage-and-retention-policies-work-together\">How Immutable Storage and Retention Policies Work Together<\/h3>\n<p>When backups are created on storage with Object Lock enabled and retention policies applied, the following occurs:<\/p>\n<ul>\n<li><strong>New backup copies become immutable<\/strong>. Backup copies are locked upon creation and cannot be modified or deleted during the retention period.<\/li>\n<li><strong>Changing retention policy impacts only subsequent backups<\/strong>. Even if a retention policy is modified or deleted, backup copies that were already created remain unaffected and locked until their original retention period expires. The storage provider enforces the retention period, ensuring data remains untouchable for the specified duration.<\/li>\n<\/ul>\n<p>This integration creates a robust, zero-trust backup system where retention policies and immutable storage work together to protect data from any form of tampering.<\/p>\n<p>Using immutable storage with retention policies ensures your backups are secure, compliant, and resilient to both internal and external threats.<\/p>\n<p><span class=\"further-reading \">Further reading<\/span> <a href=\"https:\/\/www.msp360.com\/resources\/blog\/top-6-critical-mistakes-in-microsoft-365-data-protection\/\">Top 6 Critical Mistakes in Microsoft 365 Data Protection<\/a><\/p>\n<h3 id=\"conclusion\">Conclusion<\/h3>\n<p>Now you know how to set up and use retention policies in MSP360 Managed Backup for <a href=\"https:\/\/www.msp360.com\/products\/microsoft-365\/\">Microsoft 365<\/a> and <a href=\"https:\/\/www.msp360.com\/solutions\/google-workspace\/\">Google Workspace<\/a>. If you have any further questions, feel free to <a href=\"https:\/\/www.msp360.com\/contact\/?category=sales\">contact our pre-sales team<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Retention policies are a vital part of your backup strategy. This guide will explain the purpose of retention policies and provide a step-by-step walkthrough on how to create, assign, and manage them in MSP360 Managed Backup for Microsoft 365 and Google Workspace.<\/p>\n","protected":false},"author":104,"featured_media":59283,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[878,1005,931],"tags":[944],"class_list":["post-51652","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-msp-university","category-msp360-managed-backup-for-microsoft-365-and-google-workspace","category-msp360-product-guides","tag-microsoft-365-and-google-g-suite-backup-in-msp360-mbs","types-resources"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/51652","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/users\/104"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/comments?post=51652"}],"version-history":[{"count":35,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/51652\/revisions"}],"predecessor-version":[{"id":61636,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/51652\/revisions\/61636"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/media\/59283"}],"wp:attachment":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/media?parent=51652"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/categories?post=51652"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/tags?post=51652"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}