Arctera Insight Information Governance Administrator's Guide

About configuring Box monitoring

Information Governance monitors the data stored on cloud-based content sharing and management services, such as Box and Microsoft OneDrive, to provide you access and ownership information.

Box uses the Open Authorization 2 (OAuth2) protocol to permit access to a third-party application. Information Governance uses Box Enterprise administrator credentials to gain access to a Box Administrator account, get information about all configured users, and to get information about events performed by them. The Administrator credentials authorize Information Governance to access the Box Enterprise account. The authorization received from Box is encrypted and saved in the Information Governance configuration so that only the Collector and Indexer specific to the device have a copy of it. The credentials are used by Information Governance to impersonate a user account to query Box for metadata.

In the Information Governance configuration, the Box account corresponds to a share on a file server. Since Information Governance uses the administrator account credentials to impersonate other users, you will always see just one share for every Box account. Whereas, different user accounts correspond to folders on a file share.

Information Governance scans the Box account for metadata such as path of the file or folder, modified by, modified at, created by, created at, size, file or folder type, and whether more than one user collaborate on the resource.

Information Governance maps the user name for every user account attribute to the users' attributes in the directory service for the purpose of ascertaining ownership on folders.

See Using a co-admin account to monitor Box resources.