Box Platform

Box Platform provides data security, file sharing, collaborating, and content management tools. Box Platform provides access to Box APIs.

Asset Types Fetched

Users, Roles, Groups, Application Settings, Permissions

Resources Required by Asset Type

The following connection parameters, advanced settings, permissions, and configurations are required to fetch each asset type.

Search by Asset Type to find the resources required for your specific needs.

Asset Type	Connection Parameters	Advanced Settings	Permissions	Additional Configurations
Users	Box Platform enterprise ID Client ID Box Platform private key configuration file	No specific setting required	Read and write all files and folders stored in Box Manage users Manage groups Manage enterprise properties	Create an Application
Roles	Box Platform enterprise ID Client ID Box Platform private key configuration file	No specific setting required	No specific permission required	Create an Application
Groups	Box Platform enterprise ID Client ID Box Platform private key configuration file	Fetch Groups	No specific permission required	Create an Application
Application Settings	Box Platform enterprise ID Client ID Box Platform private key configuration file Additional parameters - see note below	Fetch Application Settings	Co-admin permissions with access to Reports and Settings Read-only access to your organization’s settings and application Manage users Manage groups Manage enterprise properties	Create an Application Create a User Account
Permissions	Box Platform enterprise ID Client ID Box Platform private key configuration file	No specific setting required	No specific permission required	Create an Application

Fetching Application Settings

Some high-privilege settings cannot be fetched with client credentials (Box Platform enterprise ID, Client ID and private key configuration file) alone. These settings require additional parameters: Box Login URL, Username, Password, 2FA Secret Key (if required by your organization), and Use SSO (if required by your organization). See Connecting the Box Platform Adapter in Axonius for more information on these parameters.

APIs

Axonius uses the Box REST API - List enterprise users.

When fetching Application Settings, the following endpoints are called:

GET /2.0/users
GET /2.0/groups
GET /2.0/users/me
GET /2.0/enterprise_configurations/{enterprise_id} - Fetches the supported enterprise settings, such as password policy, session duration, multi-factor authentication, sharing and collaboration controls, watermarking, and Shield rules. Settings returned by this endpoint are not collected through the interactive settings scrape.
GET /2.0/users/USER_ID
GET /2.0/users/USER_ID/email_aliases

Updated 7 days ago

Did this page help you?