About Box permissions

Data Insight enables visualization and analytics of permissions assigned on Box resources. Visibility into Box permissions enables you to ensure security, minimize the possibility of a data breach, and ensure that the right people have access to the right data.

Box permissions work a little differently than the permissions set on a file server. On a file server, you can specify a different permission at each level of the folder hierarchy. In case of Box resources, the users and groups are assigned access levels that provide a set of permissions on a folder. Typically the subfolders have the same access level as the parent folder .The permissions associated with an access level are nothing but the actions allowed to the users or groups on that Box resource (folder). The access level assigned to a user or group on a parent folder automatically cascades to the child folder(s), unless a sub-folder is specifically assigned a different access level.

Table: Box Permissions describes the various access levels in Box.

Table: Box Permissions

Access level

Permission

Editor

View, download, upload, edit, delete, copy, move, rename, generate shared links , make comments, assign tasks, create tags, and invite/remove collaborators. Users with this access level can not delete or move root level folder.

Viewer

Preview, download, make comments, and generate shared links. Users with this access level can not add tags, invite new collaborators, upload, edit, or delete items in the folder.

Previewer

Preview the items in the folder using the integrated content viewer. Users with this access level can not share, upload, edit, or delete any content.

Uploader

Upload and see the names of the items in a folder. They will not able to download or view any content.

Previewer-Uploader

Preview files using the integrated content viewer as well as upload items into the folder. Users with this access level can not download, edit, or share, items in the folder.

Viewer-Uploader

Preview, download, add comments, generate shared links, and upload content to the folder. They will not be able to add tags, invite new collaborators, edit, or delete items in the folder.

Co-owner

All of the functional read/write access that an Editor has. Users with this access level can manage users in the folder. A Co-Owner can add new collaborators, change access levels of existing collaborators, and remove collaborators. However, a co-owner cannot manipulate the user with owner permission on the folder or transfer ownership to another user.

Owner

All rights.

For the latest list of Box permissions, refer to Box documentation.

Data Insight displays the access levels for users and the paths on which unique permissions are set. Data Insight does not distinguish between privately owned and collaborative folders in the folder and user centric views. A lock icon on a folder signifies unique permission, otherwise nherited from owner.

More Information

Data Insight limitations for Box permissions