Permissions required for the Box connector

Overview

When you connect Incydr to Box, you grant a number of permissions to Incydr in your Box environment. This article lists the permissions Incydr requires as well as what those permissions allow Incydr to do in your Box environment.

Box permissions

Incydr collects file events from Box. A file event is any activity observed for a file, such as creating, modifying, sharing, renaming, moving, or deleting a file. To see this file activity, Incydr requires access to your Box environment.

Incydr requires the following:

  • The following Box scopes:
    • Read all files and folders stored in Box (root_readonly): Required to request additional file metadata, stream a file for hashing, and to determine a file’s category when analyzing file activity.
    • Read and write all files and folders stored in Box (root_readwrite): Required to grant temporary access to view a file and to view and manage sharing.
    • Manage groups (manage_groups): Required to identify in-scope users and group membership.
    • Manage enterprise properties (manage_enterprise_properties): Required to verify a customer’s Box account information during authorization.
    • Manage users (manage_app_users and manage_managed_users): Required for preventative controls to disable sharing for a user.
    • Generate user access tokens: Required to create API tokens for the Box connector.
  • Integrations enabled.
  • Permissions for co-admins to Manage groups and Run new reports and access existing reports.

This set of permissions gives Incydr the access to user information, file metadata, and drives needed to monitor file activity. This set includes manage and write permissions required for the Incydr data connection. However, Incydr is committed to data integrity and does not:

  • Write to or modify content in your cloud storage environment
  • Monitor the contents of files in cloud storage
  • Back up files in cloud storage

More information on file activity
For more information on the specific metadata and file events visible in Forensic Search, see the File event metadata reference.

External resources

Box documentation

Related topics

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.