Veritas Data Insight Administrator's Guide

About configuring Box monitoring

Data Insight monitors the data stored on cloud-based content sharing and management services, such as Box and Microsoft OneDrive, to provide you access and ownership information.

Box uses the Open Authorization 2 (OAuth2) protocol to permit access to a third-party application. Data Insight uses Box Enterprise administrator credentials to gain access to a Box Administrator account, get information about all configured users, and to get information about events performed by them. The Administrator credentials authorize Data Insight to access the Box Enterprise account. The authorization received from Box is encrypted and saved in the Data Insight configuration so that only the Collector and Indexer specific to the device have a copy of it. The credentials are used by Data Insight to impersonate a user account to query Box for metadata.

In the Data Insight configuration, the Box account corresponds to a share on a file server. Since Data Insight uses the administrator account credentials to impersonate other users, you will always see just one share for every Box account. Whereas, different user accounts correspond to folders on a file share.

Data Insight scans the Box account for metadata such as path of the file or folder, modified by, modified at, created by, created at, size, file or folder type, and whether more than one user collaborate on the resource.

Data Insight maps the user name for every user account attribute to the users' attributes in the directory service for the purpose of ascertaining ownership on folders.

See Using a co-admin account to monitor Box resources.