Box is updating co-admin permissions in the Admin Console for Policies. Previously, access to Legal Holds was coupled with Retention and Content Manager. With the new Legal Holds only permission, enterprises can now assign either:
- View legal holds only, or
- Create, edit, and delete legal holds only
Assigning these roles does not require the admins be given any additional product access, helping organizations establish admins responsible for managing Legal Holds, while still maintaining the principal of least privilege. These more granular controls reduce over-permissioning and enable tighter security with more precise control, all from within the Admin Console.
To learn more about how Co-admin permissions are handled within Box, please look here.