I'm creating an app that will perform some automated audit functions on collaborations in my Enterprise account. In the developer console the app uses JWT authentication. I've granted it all of the scopes, including "Read and write all files and folders stored in Box" and all the Enterprise scopes ("Manage Enterprise," "Manage Users," etc.) and of course authorized the app in my Enterprise settings. The app name now shows up as a user in the "Content Manager" but nowhere else. I can actually login to that user's account and create some folders.
Here's my problem: when I call the API, the app only "sees" the folders it owns (or has permissions on), even though I've granted it all those scopes in the dev console.
Must I make this app a co-owner of the root folder or something? How do I do that?