Security and Permissions
Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.
Hi
We have a Dropbox Biz plan with multiple team folders set up. Team Admins in Dropbox, through the Content function in the admin panel, can look into the tree, enter these team folders and eventually download a file.
I would like to know if this type of access by an admin is somehow logged, and if an alert can be set up if an admin uses that ability to download files, in particular from a folder to which he/she would normally not have access to.
The use case here is a team folder HR and personnel files - while there is no intrinsic problem of admin having access (as that's why admins exist in any IT system), the ability to monitor/log that access (and potentially set alerts on it), is important for our HR team to ensure confidentiality.
Thanks
David
Hey there @DavidBerg - thanks for posting on our Community and happy Monday!
I'm not sure if this would help, but are you familiar with the security alerts feature? If not, could you have a look here and let me know if this would do the trick for you?
Otherwise, you might want to change admin rights or permissions as outlined here and/or even check your events page for more information.
Keep me posted anyhow!
Walter
Community Moderator @ Dropbox
dropbox.com/support
Did this post help you? If so, give it a Like below to let us know.
Need help with something else? Ask me a question!
Find Tips & Tricks Discover more ways to use Dropbox here!
Interested in Community Groups? Click here to join
Thanks Walter, appreciate the reply. The limitation of the alerts for my use case is they are predefined, I can not tailor them to a specific folder within Dropbox.
I could probably use events post factum, but that then (as far as I know) does not allow me to configure a notification when the specific use case I'm after (opening a file in the specific team folder by one of the admins) is occuring.
Does the Dropbox API allow to query on these type of events (admin or user access to specific folders in Dropbox), as if so I could explore to potentially link that with a 3rd party SIEM to get the notifications configured?
Hey @DavidBerg, sorry to jump in here.
I believe that our Dropbox Business API page should provide you with several info on access and member file access that will be helpful to you.
Cheers!
Hannah
Community Moderator @ Dropbox
dropbox.com/support
Did this post help you? If so, give it a Like below to let us know.
Need help with something else? Ask me a question!
Find Tips & Tricks Discover more ways to use Dropbox here!
Interested in Community Groups? Click here to join!
Hi there!
If you need more help you can view your support options (expected response time for a ticket is 24 hours), or contact us on X or Facebook.
For more info on available support options for your Dropbox plan, see this article.
If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!