Box

How to create a Box Connector app to scan Box accounts.

Creating a Box app

  • Select Create New App and then Custom App

  • Select Server Authentication (with JWT) and enter app name, then click Create App

  • In the Configuration tab, change App Access Level to App + Enterprise Access, then, enable Generate user access tokens and Make API calls using the as-user header.

  • Click on Save changes

  • Make sure the below Application Scopes are selected

    • Content Actions > Read all files and folders stored in Box

    • Content Actions > Write all files and folders stored in Box

    • Administrative Actions > Manage users

    • Administrative Actions > Manage groups

  • In the same Configuration tab, scroll down to Generate a Public/Private Keypair

  • This will result in a JSON file being downloaded by the browser

  • In Authorization tab, click Review and Submit followed up with adding a description before submitting the app for review

  • Make note of User ID and Enterprise ID of the App in General Settings tab

  • Exit Dev Console and switch to the Admin Console

  • In Admin Console, go to Apps > Custom Apps Manager and locate the newly created app and click View button

  • Review the information and Authorize the app

Configuring Box connector in Dashboard

  • Navigate to Administration -> Data Sources -> Box -> New scan

  • Provide the values generated in the above steps from the Box application

  • Click on the Folder icon in Path to select a particular folder to scan, or leave the path as empty to scan all folders

  • Save the configuration

  • Once the configuration is saved, click on the icon on the right and select Start trustee scan to begin the trustee scanning

  • The scan results can be viewed under Dashboard > Access Governance

  • Click on the icon on the right and select Start file scan to begin the files scanning

  • The results can be viewed under Dashboard > Enterprise Search

File tagging

Prerequisites

  • The Box Pricing Plans required for metadata writing are Business Plus, Enterprise, or Enterprise Plus. The basic Business plan does not include custom metadata and metadata templates.

  • A metadata template must be created to support Getvisibility's tags. Please follow the below steps to achive this.

    • In the Admin Console, in the lefthand navigation click Content

    • Toward the top of the page, click Metadata

    • Click Create New

    • Click Name Your Template and enter name as getvisibility

    • Create a new attribute named as Classification with options as: Public, General Business, Confidential, Highly-Confidential

  • Similarly, create two more attributes:

    • Distribution with options as: Internal, External

    • Compliance with options as: PCI, PII, PHI

  • Use the Status drop down to indicate this template is Visible

  • Click Save

Last updated

Was this helpful?