The info on this page applies to Grouper v4 and above.

External System 

Grouper Box External System

Grouper development team testing

Set this in grouper.hibernate.properties (or set env var: GROUPER_MOCK_SERVICES=true)

grouper.is.mockServices = true


Provisioning attributes

Advice

  • Provisioning type is membershipObjects
  • Use group and entity link (since there are uuids in the target for groups and entities that need to be looked up)

Group attributes. API

Grouper name

Type

Required?

Box API

Description

idStringrequiredidThis is the id read from Box.  Select only.  This should not be translated from Grouper, and the target attribute should be cached.
nameStringrequiredname

This is the name of the group on the Box side.

descriptionStringoptionaldescriptionThis is the description in Box

canInviteAsCollaborator

Booleanoptionalpermissions.can_invite_as_collaboratorSelect only

externalSyncIdentifier

Stringoptional

external_sync_identifier

An arbitrary identifier that can be used by external group sync tools to link this Box Group to an external group.

Example values of this field could be an Active Directory Object ID or a Google Group ID.

We recommend you use of this field in order to avoid issues when group names are updated in either Box or external systems.

groupType

Stringoptionalgroup_type

The type of the group.

invitabilityLevel

Stringoptionalinvitability_levelSpecifies who can invite the group to collaborate on folders.

memberViewabilityLevel

Stringoptionalmember_viewability_level

Specifies who can see the members of the group.

provenance

Stringoptionalprovenance

Keeps track of which external source this group is coming, for example Active Directory, or Okta.

typeStringoptionaltypevalue is always "group"

Entity attributes. API

Grouper name

Type

Required?

Box API

Description

idStringrequiredidThis is the id read from Box.  Select only.  This should not be translated from Grouper, and the target attribute should be cached.
nameStringrequiredname

This is the name in Box. 

login

Stringmostlylogin

The email address the user uses to log in. Required, unless is_platform_access_only is set to true.

canSeeManagedUsers

booleanoptionalcan_see_managed_users

Whether the user can see other enterprise users in their contact list

isExemptFromDeviceLimits

booleanoptionalis_exempt_from_device_limits

Whether to exempt the user from enterprise device limits

isExemptFromLoginVerification

booleanoptionalis_exempt_from_login_verification

Whether the user must use two-factor authentication

isExternalCollabRestricted

booleanoptionalis_external_collab_restricited

Whether the user is allowed to collaborate with users outside their enterprise

isPlatformAccessOnly

booleanoptionalis_platform_access_only

Specifies that the user is an app user.

isSyncEnabled

booleanoptional

is_sync_enabled

Whether the user can use Box Sync

maxUploadSize

integeroptionalmax_upload_size

The maximum individual file size in bytes the user can have

role

stringoptionalrole

The user’s enterprise role. Value is one of coadmin,user

spaceAmount

integeroptionalspace_amount

The user’s total available space in bytes. Set this to -1 to indicate unlimited storage.

spaceUsed

integeroptionalspace_used

The amount of space in use by the user

status

stringoptionalstatus

The user's account status

Value is one of active,inactive,cannot_delete_edit,cannot_delete_edit_upload

type

stringoptionaltypevalue is always "user"