> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Box

AccessOwl integrates with Box to provision and deprovision user access in your Box organization.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes users from your Box organization during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Admin** access to your Box Admin Console, so you can add the integration account and change its role.

## Setup

<Steps>
  <Step title="Add Box in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Add the integration account as a managed user">
    AccessOwl shows you the integration account's email address. In Box:

    * Open the **Admin Console** and go to **Users & Groups**.
    * On the **Managed Users** tab, click **Add Users**, then **Add Users Manually**.
    * Enter a name and the integration account's email address.
    * Click **Save**.
  </Step>

  <Step title="Give the integration account the Admin role">
    Box allows a single Admin per organization, so this step transfers the Admin role from the current Admin to the integration account. Logged in as the current Box Admin:

    * In **Admin Console > Users & Groups**, open the **Managed Users** tab and click your own Admin account.
    * In the **Role and Access Permissions** section, click **Edit**, then **Change Account Admin**.
    * Pick the role you keep for yourself, type the integration account's email address into the **New Admin** field and select it from the search results.
    * Click **Save Changes** and confirm the transfer from the verification email Box sends you.

    Both email domains involved need to be verified in Box's Domain Management. See Box's guide on [transferring Admin privileges](https://support.box.com/hc/en-us/articles/360044194953-Transferring-Admin-Privileges-to-Another-User).
  </Step>
</Steps>

## FAQ

<AccordionGroup>
  <Accordion title="Box shows a connection error after I invited the integration account">
    Check the integration account's role in **Admin Console > Users & Groups**. If it is **Co-admin** or **Member**, change it to **Admin** and click **Retry** on the Box application in AccessOwl. The connection completes on its own once the role is in place.
  </Accordion>

  <Accordion title="Can I connect Box without an integration account?">
    If Box access is already handed out through a group in your identity provider, you can connect it as an [identity-provider-managed application](/integrations/idp-managed-apps) instead and skip the integration account entirely.
  </Accordion>
</AccordionGroup>