Skip to content

Connect Box to Black Cat SSPM

Version française

Connect your Box enterprise so Black Cat can review users, external collaboration rules, connected applications, device controls and retention policies.

≈ 10 min · audit access · write-capable permissions are flagged below

What Black Cat reads, and why

PermissionWhat it lets Black Cat doStatus
App Access Only (Server Authentication with CCG)Lets Black Cat sign in as its own service identity rather than as one of your people.Required
Manage UsersLets Black Cat list users, their roles, status and exemptions from device or login checks. The write side of this permission is not used.Required Write (write-capable permission)
Manage GroupsLets Black Cat list groups, their membership and whether they may invite outside collaborators. The write side of this permission is not used.Required Write (write-capable permission)
Manage Enterprise PropertiesLets Black Cat review enterprise settings such as external collaboration limits, device pins and retention policies. The write side of this permission is not used.Required Write (write-capable permission)
Manage Enterprise EventsLets Black Cat see administrative events across the enterprise. The write side of this permission is not used.Required Write (write-capable permission)

What you'll need

  • Client identifier Required — Shown on the read-only custom app you create in the Box developer console.
  • Client secret Required — Issued with the client identifier on the same Box custom app.
  • Enterprise identifier Required — Shown in the Box admin console under Account & Billing.

Where to create it

What we check on Box →

Other setup guides

The information on this page is provided for general informational purposes and is believed to be accurate as of its most recent update. Product names, logos, and trademarks are the property of their respective owners and are used for identification purposes only; their use does not imply any affiliation with or endorsement by those owners. Descriptions of third-party applications are based on publicly available documentation and may change over time.

See your own SaaS posture in 10 minutes

Run a free posture scan — no credit card required, read-only-by-default access you can revoke any time.

Run a free posture scan