Identity and access management (IAM) is a security measure that controls who has access to resources within an organization. Box offers an IAM system that allows you to control access to your organization's resources, such as folders and files. This technical reference guide outlines the steps for setting up IAM in Box.
Step 1: Create user accounts
The first step in setting up IAM in Box is to create user accounts for all of your organization's employees. To create a user account, follow these steps:
- Sign in to the Box Admin console.
- Click on the "Users" tab.
- Click the "Add User" button.
- Follow the prompts to create a new user account.
Step 2: Create groups
Groups are collections of user accounts that can be used to manage access to resources. To create a group, follow these steps:
- Sign in to the Box Admin console.
- Click on the "Groups" tab.
- Click the "Add Group" button.
- Follow the prompts to create a new group.
Step 3: Assign permissions to users and groups
Once you have created user accounts and groups, you can assign permissions to them in order to control access to resources. To assign permissions, follow these steps:
- Navigate to the resource that you want to control access to (e.g. a folder or a file).
- Click the "More Options" button (three dots) in the top right corner of the screen, and then click "Manage Access."
- In the "People" field, enter the names of the users or groups that you want to grant access to.
- Select the appropriate access level (e.g. "Editor" or "Viewer") for each user or group.
- Click the "Save" button.
Step 4: Set up organization-wide permissions
You can also use the Box Admin console to set up organization-wide permissions, which apply to all users in your organization. To set up organization-wide permissions, follow these steps:
- Sign in to the Box Admin console.
- Click on the "Security" tab.
- In the "Account Settings" section, click the "Edit" button.
- Follow the prompts to set up organization-wide permissions.
Setting up IAM in Box is an important step in controlling access to your organization's resources. By following the steps outlined in this technical reference guide, you can ensure that your resources are only accessible to authorized users.
