Welcome to the new Box Support website. Check out all the details here on what’s changed.

Box Status
Print

Managing Access Policies

Admin , Box Shield , Article , New , Product Utilization , Instruction

Creating an access policy

Smart Access enables you to create and apply up to 25 classification-based access policies to restrict the scope of access.

Creating an access policy allows you to restrict the access to all or selected content based on a classification label. You can also decide which Security Control Type you want to apply in your access policy.

To create an access policy:

  1. In the left pane of Admin Console, click Shield.
  2. In the top of the window, click Access Policies.
  3. In the top-right corner, click Create Policy. Box displays the Create Access Policy window.
  4. Enter a Policy Name, and, optionally, a Description. 
  5. In Content Type, select:
    • Apply to all content without a classification label, or
    • Apply to only content with the following classification label and then choose a classification label.
  6. In Security Controls, click Add Security Control, and then select which security control you want to add. See Security Control Types for information on how to configure each security control type.
  7. In the Enforcement Action section of the security control, select:
    • Enforce restrictions - To enable the access policy once it is started. Select this option if you are ready to enforce the policy for your users.
    • Monitor restriction violations only - To monitor user actions that violate the access policy without warning or restricting users. Select this option to gather data about how this access policy will affect your users.
  8. In the top-right corner of the window, click Next. Box displays the policy's review window.
  9. To apply the policy, in the top-right corner of the review window, click Start Policy.

Modifying an access policy

To modify an access policy:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Access Policies.
  3. Click an access policy's name.
  4. In the top-right corner, click Edit.

Deleting an access policy

To delete an access policy:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Access Policies.
  3. Click an access policy's name.
  4. In the top-right corner, click Delete. 

Related articles