Box Service Accounts

On This Page

Overview

A connection is how you grant DryvIQ access to the content in your Box Service Account. You will provide the connection information required for DryvIQ to connect to the platform/server. This grants DryvIQ access to the account so it can scan and analyze the content based on the policies you create.

Creating a Connection

  1. Select Content from the main menu.

  2. Verify you are on the Connections tab.

  3. Select Add connection.

     

  4. Select Box (Service Accounts) as the platform on the Add connection modal.

     

  5. Enter the connection information. See Connection Authentication Options below for details about each field.

  6. Test the connection to ensure DryvIQ can connect using the information entered.

  7. Select Done.

Connection Authentication Options

Below is a list of the authentication options available to create the connection. Select the options that work best for your account and the connection you are creating.

Field

Notes

Required

Field

Notes

Required

Display as

Enter the display name for the connection. If you will be creating multiple connections, ensure the name readily identifies the connection. The name displays in the application, and you can use it to search for the connection and filter lists.

Required

User Type

Required

Connect as a standard user

Select this option to create a standard connection to access a user's files and folders. This is the default selection. 



Connect as an administrator

Select this option to create an administrator connection. This requires administrator privileges and grants access to all accounts within the organization.



 

 

 

Client ID 

This value will be provided by your administrator. It can be found in your Box Developers Console or in the boxAppSettings section of {{public key}}_config.json.

Required

Client Secret 

This value will be provided by your administrator. It can be found in your Box Developers Console or in the boxAppSettings section of {{public key}}_config.json. 

Required

Enterprise ID

Enter the Enterprise ID if the connection will list content for all users on your connection root. This field is not required when an Account ID is being used. 

The Enterprise ID cannot be used with an Account ID; the options are mutually exclusive.

Required if not using an Account ID

Account ID 

Enter the account ID (user ID) if the connection will impersonate a single account. This field is not required when an Enterprise ID is being used. 

The Account ID cannot be used with an Enterprise ID; the options are mutually exclusive.

Required if not using an Enterprise ID

Public Key ID

Enter the public key for the account. This value can be obtained from your manually generated keypair or in the boxAppSettings section of {{public key}}_config.json.

Required

Private Key

Enter the private key for the account. This value can be obtained from your manually generated keypair or in the boxAppSettings section of {{public key}}_config.json. 

When you download the {{public key}}_config.json, the private key is displayed in the privatekey element. It looks something like this: 

"privateKey": "-----BEGIN ENCRYPTED PRIVATE KEY-----\xYZXYZxYZXyzxyzx.....................A0b0CAB0cAbCaBcabcabCA+B\noi0=\n-----END ENCRYPTED PRIVATE KEY-----\n",

You only need to add the values between the quotation marks. In the above example, you would add the following as the private key:

-----BEGIN ENCRYPTED PRIVATE KEY-----\xYZXYZxYZXyzxyzx.....................A0b0CAB0cAbCaBcabcabCA+B\noi0=\n-----END ENCRYPTED PRIVATE KEY-----\n

Use the Choose file on your computer link to upload the key from your computer if you have it stored locally.

Required

Password 

Enter the password for the account. This value can be obtained from your manually generated keypair or in the boxAppSettings section of {{public key}}_config.json. The password is generated by Box when created via the download keypair from your Box Developers Console.

Required

Behavior When Deleting Items

Select the type of delete DryvIQ should perform if a policy requires deleting items: Permanent or Soft. Soft delete is the default delete behavior; however, Permanent is the recommended behavior.

A soft delete marks items as a deleted and moves them to the platform’s deleted items. You can still access them to restore the items or permanently delete the items.

 A permanent delete removes the items. This delete is not reversible.

Optional

DryvIQ Govern Version: 5.9.2
Release Date: December 17, 2024