Using Security Classifications with Box Governance

If you're an admin, Box enables you to create, modify, and delete security classifications for content in your organization's Box deployment. With security classification, you can classify files based on their sensitivity and enforce access policies associated with that sensitivity level.  Classification helps you identify sensitive information and encourage smarter behavior when people handle that content.

Creating a classification

After you create a classification, Box enables you to

• display this classification under Details in the right-hand sidebar and next to the file's name in Preview when users select or preview content, and
• display an advisory message describing the classification in further detail when people select or preview content.

To create a new classification:

1. In the Admin Console's left sidebar, click Classification.
2. In the top-right corner, click Create New.
3. Under Name, type the name of your security classification. The classification name must be unique, and can have a maximum of 40 characters.
4. Under Definition
   • Select a background color for the classification label.  The same color can be used for multiple classification labels.
   • Type the message you want Box to display when people select or preview content bearing this classification.
5. In the top-right corner, click Create.

Modifying a classification

Box also enables you to specify which user roles are permitted to modify classifications. This permission applies to all classifications you define.

To select which type of collaborator can modify classifications:

1. In the Admin Console's left sidebar, click Classification.
2. In the top-right corner, click Settings.
3. Select the collaborator type permitted to modify classifications. You can select
   • Owner, or
   • Owner and Co-owner, or
   • Owner, Co-owner, and Editor, or
   • Owner, Co-owner, Editor, and Viewer Uploader.
4. In the bottom-right corner, click Save.

To modify a classification:

1. In the Admin Console's left sidebar, click Classification.
2. Click the name of the classification you want to edit.
3. Edit the classification's name, description, and color as you wish.
4. In the top-right corner, click Save.

When you change a classification label's color, Box updates the color in all labels bearing that classification.

Deleting a classification

To delete a classification:

1. In the Admin Console's left sidebar, click Classification.
2. Click the name of the classification you want to delete.
3. In the top-right corner, click Delete.

IMPORTANT

Deleting a classification is permanent.  Box removes the classification from all files and folders to which it is applied. This operation can not be undone.

Searching for classified content

Although Box cannot run a report to display all classified content, you can use Box's search functionality to achieve the same result. An administrator or co-administrator with Files and Folders privilege of at least View users's content can search for content bearing a specific classification. 

To search for all content bearing a given classification:

1. In the top of your Box window, in the Search Files and Folders field click the Search Options icon.
2. Select the Metadata tab
3. Under Metadata Template, click Select a Template and select Classification.
4. Under Classification, click Select Value and select the classification label.
5. To launch the search, do one of the following:
   • in the top of your Box window, in the Search Files and Folders field click the search icon (magnification glass), or
   • on your keyboard press Enter .

FAQ

Who can administrate security classification?

To create and edit classifications, you must be the admin or have co-admin privilege to at least Create and Edit Metadata.