What is the proper configuration for uploading build artifacts?

I am setting up a build system (presently on BitBucket) and I would like to upload build artifacts to box.com.  The company has an enterprise account and I have made an app on box.com and client python code using boxsdk.  The app has been authorized so now when I `client.folder(0).get_items(limit=10)` I get `[]` returned rather than the authorization error I got previously.

I am not sure the proper way to continue setting this up.  I would like to be able to upload new files in specific folders but do not want the app to be able to delete or overwrite anything.

My guess is that I need to create a user and set their permissions as I need.  Then...  login as that user and install the app?  I'm not sure.  Thanks for any pointers.

Cheers,

-kyle