Skip to content

Configuring Dropbox Activity Monitoring

Monitored events are defined in the Dropbox Business API specification.

This published event list is not comprehensive. Data Access Manager supports all event types. Some events are excluded by default. To modify which event types are excluded, edit the excludedEventTypes value in the WBX.DropboxBAMHost.dll.config file.

Note

Verify auditing is enabled which was listed in the prerequisites.

Activity Monitoring gathers events from applications to help control and audit resource access.

Activity Monitoring is disabled by default. To enable it, set the Allow Activity Monitoring toggle to on.

Setting the Data Retention Period

Setting a data retention period allows the user to specify how long activities will be stored offline. Activities are available on the Activity Forensics screen for a default of 12 months. After the initial 12 months, the activity data is retained and available via a support ticket. You can set a retention period from between 1 month and 7 years. After the retention period is met, all activities will be deleted.

Example: If the data retention period in the application configuration is set to 18 months, the activities will be available in Data Access Security for the initial 12 months and then available by a support ticket for the 18 additional months, making it a total of 30 months.

Activity Exclusions

Note

Activity Monitoring exclusions need to be manually added.

Allows administrators to configure activities which are not desired to reduce unnecessary noise of activity data set. Activities which match exclusions will be discarded so they will not display in forensics or be held in any storage.

To add an exclusion:

  1. Type an exclusion into the relevant dropdown list (file extension, user, folder, actions).
  2. Select the + icon to add it to the list.
  3. Select to Next or Cancel to close the panel once the list is complete.

To edit or remove an exclusion from the list:

  1. Select the appropriate dropdown list.
  2. On the desired extension that needs to be edited or removed, select either the edit or delete icon.
  3. Select to Next or Cancel to close the panel.
  4. Click Clear Selection to clear the entire list.

Excluded File Extensions - List of file extensions that are not monitored, e.g., txt, exe. Enter one value at a time as described above.

Exclude Folders - List of folders that are not monitored, e.g., \servername\share1\folder1. Enter one value at a time as described above.

Exclude Users - List of users whose activities are not monitored, e.g., user1, domain\user2, user3@domain.com. Enter one value at a time as described above.

The user format to be used depends on how the activity is logged by the endpoint. If you are not sure which of the user formats above to use, either specify all of them, or leave the list empty for now, navigate to the Forensics > Activities screen in the File Access Manager Website after some activities flow in to see how the user is depicted in them and use that depiction in the exclusion list.

Exclude Actions - List of actions that are not monitored. e.g., copy file.

Supported Event Types

  • Account Capture Change Policy
  • App Link Team
  • App Link User
  • App Unlink Team
  • App Unlink User
  • Camera Uploads Policy Changed
  • Capture Transcript Policy Changed
  • Classification Change Policy
  • Computer Backup Policy Changed
  • Content Administration Policy Changed
  • Data Placement Restriction Change Policy
  • Data Placement Restriction Satisfy Policy
  • Device Approvals Change Desktop Policy
  • Device Approvals Change Mobile Policy
  • Device Approvals Change Unlink Action
  • Device Delete On Unlink Fail
  • Device Delete On Unlink Success
  • Device Change Ip Mobile
  • Device Unlink
  • Dropbox Passwords Policy Changed
  • Email Ingest Policy Changed
  • Emm Change Policy
  • Extended Version History Change Policy
  • External Drive Backup Policy Changed
  • File Add
  • File Change Comment Subscription
  • File Comments Change Policy
  • File Copy
  • File Delete
  • File Locking Policy Changed
  • File Move
  • File Provider Migration Policy Changed
  • File Rename
  • File Request Receive File
  • File Requests Change Policy
  • File Transfers Policy Changed
  • Folder Link Restriction Policy Changed
  • Google Sso Change Policy
  • Governance Policy Add Folder Failed
  • Governance Policy Add Folders
  • Governance Policy Content Disposed
  • Governance Policy Create
  • Governance Policy Delete
  • Governance Policy Edit Details
  • Governance Policy Edit Duration
  • Governance Policy Export Created
  • Governance Policy Export Removed
  • Governance Policy Remove Folders
  • Governance Policy Report Created
  • Governance Policy Zip Part Downloaded
  • Group Create
  • Group Add Member
  • Group Change External Id
  • Group Change Management Type
  • Group Change Member Role
  • Group Rename
  • Group Join Policy Updated
  • Group User Management Change Policy
  • Integration Policy Changed
  • Invite Acceptance Email Policy Changed
  • Login Fail
  • Logout
  • Member Change Admin Role
  • Member Change Email
  • Member Change Name
  • Member Change Status
  • Member Permanently Delete Account Contents
  • Member Send Invite Policy Changed
  • Member Space Limits Change Caps Type Policy
  • Member Space Limits Change Policy
  • Member Suggest
  • Member Suggestions Change Policy
  • Member Transfer Account Contents
  • Member Requests Change Policy
  • Microsoft Office Addin Change Policy
  • Network Control Change Policy
  • Paper Change Deployment Policy
  • Paper Change Member Link Policy
  • Paper Change Member Policy
  • Paper Change Policy
  • Paper Default Folder Policy Changed
  • Paper Desktop Policy Changed
  • Paper Doc Change Sharing Policy
  • Password Change
  • Password Reset
  • Password Strength Requirements Change Policy
  • Permanent Delete Change Policy
  • Reseller Support Change Policy
  • Rewind Policy Changed
  • Secondary Mails Policy Changed
  • Send For Signature Policy Changed
  • Shared Content Copy
  • Shared Content Unshare
  • Shared Content Remove Invitees
  • Shared Content Download
  • Shared Content Change Invitee Role
  • Shared Content Change Member Role
  • Shared Content Change Viewer Info Policy
  • Shared Folder Change Link Policy
  • Shared Folder Change Members Inheritance Policy
  • Shared Folder Change Members Management Policy
  • Shared Folder Change Members Policy
  • Shared Folder Create
  • Shared Folder Mount
  • Shared Folder Transfer Ownership
  • Shared Link Add Expiry
  • Shared Link Change Expiry
  • Shared Link Change Visibility
  • Shared Link Create
  • Shared Link Disable
  • Shared Link Remove Expiry
  • Shared Link Settings Add Expiration
  • Shared Link Settings Add Password
  • Shared Link Settings Allow Download Disabled
  • Shared Link Settings Allow Download Enabled
  • Shared Link Settings Change Audience
  • Shared Link Settings Change Expiration
  • Shared Link Settings Remove Expiration
  • Shared Link Settings Remove Password
  • Shared Link Share
  • Shared Link View
  • Sharing Change Folder Join Policy
  • Sharing Change Link Allow Change Expiration Policy
  • Sharing Change Link Default Expiration Policy
  • Sharing Change Link Enforce Password Policy
  • Sharing Change Link Policy
  • Sharing Change Member Policy
  • Showcase Change Download Policy
  • Showcase Change Enabled Policy
  • Showcase Change External Sharing Policy
  • Sign In As Session Start
  • Smarter Smart Sync Policy Changed
  • Smart Sync Change Policy
  • Sso Change Policy
  • Team Activity Create Report
  • Team Branding Policy Changed
  • Team Extensions Policy Changed
  • Team Folder Create
  • Team Folder Change Status
  • Team Folder Rename
  • Team Profile Change Name
  • Team Selective Sync Policy Changed
  • Tfa Change Policy
  • Tfa Change Status
  • Two Account Change Policy
  • Viewer Info Policy Changed
  • Watermarking Policy Changed
  • Web Sessions Change Fixed Length Policy
  • Web Sessions Change Idle Length Policy
  • Team Folder Create
  • Team Folder Change Status
  • Team Folder Rename
  • Team Profile Change Name
  • Tfa Change Status

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.