Required Permissions

The administrator should be able to create and retrieve enterprise users, enterprise user memberships, and Box groups.

The Box application created on the Box system must have the Manage an enterprise scope selected as the permission.

Note
You must always reauthorize the connector after modifying permissions on the Box managed system for the changes to take effect.

For Activity Insights

An administrator requires the following additional permissions to utilize the Activity Insights:

Scope	Description
Manage groups	Gives the application permission to manage an enterprise's group.
Manage enterprise properties	Gives the application permission to view the enterprise event stream.
Admin can make calls on behalf of Users	Allows the application to make API calls on behalf of users using the As-User header.
Manage app users	Gives the application permission to manage standard App users.
Manage users	Gives the application permission to manage standard (managed) Box users.

For more information on configuring Activity Insights, refer to Activity Insights Settings.