How do I control my team’s access to Dropbox?
No matter how big your team is, as a Dropbox business admin you have plenty of options for managing Dropbox access.
13 minute read
Managing made easy
Whether you’re adding or removing members of your team, Dropbox business makes user management easy.
Managing members vs. groups
If you have a big team, creating groups is a great way to organize your team members. Knowing how to manage individual members and groups from the admin console will help you stay organized.
When it comes to managing the members of your Dropbox business account, you have several controls available. You can: reset passwords, suspend or delete users, and view individual activity logs.
To do so, click the Members tab in the Admin Console.
Get everyone on board
If you use Active Directory (AD), you can use the Dropbox AD Connector to quickly provision users.
For a more in-depth look, check out this help article. Note: the Dropbox AD Connector is available to Dropbox business teams on an Advanced or Enterprise plan.
Do you use Active Directory? Great! You can use the Dropbox AD Connector to easily provision, de-provision, and manage users and groups in Dropbox.
The AD Connector works like a mirror, which reflects changes in your AD to your Dropbox. We call this one-way sync, but know that the AD Connector will never actually alter files or content in a Dropbox account.
Here’s a tip: set up a user sync and a separate group sync when you set up your AD with Dropbox. This will offer you more flexibility when it comes to provisioning users.
With Dropbox, there are many ways to provision users, in addition to the AD Connector, such as the admin console and IAM/IdP. Choose what’s best for you (and know that some of these methods require a little bit of technical knowledge, too).
You may want to connect your Dropbox account to an identity management provider if you already use one, or if you have a complex, multi-forest Active Directory.
Note: Single sign-on (SSO) is available to Dropbox business teams on an Advanced or Enterprise plan.
Identity managers (IDMs)
Identity management offers admins a robust set of tools designed to simplify user lifecycle operations including creating and removing Dropbox accounts.
Take a look at this help article to learn which identity providers offer preconfigured settings for Dropbox.
Single sign-on (SSO)
SSO lets your team access Dropbox by signing in to a central identity provider. This makes life easier for your users—it gives them one less password to remember. If you’re already using an identity provider you trust and one that Dropbox supports, setting this up is easy. If you also manage SSO with your Cloud IDM, you can easily manage everything with your IDM provider.
Suspend user and remote wipe
Sometimes you need to remove a user’s access to your Dropbox team. We have two ways to let you do that, both of which can be accessed from the admin console.
Suspending a user means that they will instantly lose access to their Dropbox business team account and Paper docs. They can only get back in when an admin chooses to remove the suspension.
Suspending an account doesn’t free up a license, though. The account still exists, which means it’s still using that license. To free up the license, you’ll need to delete the account.
Remote wipe lets you delete a Dropbox business account from a team member’s linked devices. With this feature, you stay in charge of managing data on every device that it’s accessed from, and it’s perfect to use if one of your team members loses a device.
Once you unlink a device and use remote wipe, that device will immediately stop syncing.
Wait, don’t go!
Did you accidentally remove a team member? Didn’t mean to delete someone? No problem!
Dropbox Business admins have seven days to restore any deleted users. Restoring a user reactivates their account with the exact same files and permissions.
It’s like nothing even happened.
How to merge Dropbox teams
If there’s more than one Dropbox business team in your organization, or maybe you’re working closely with another team, you might want to merge these two separate teams into one.
One of my team members already has a Dropbox account. How do I add them into my Dropbox business account?
Invite your team member as you would any new member. If they choose to join the team, then they’ll be prompted to decide what they want to do with their existing files: merge their files with the Dropbox business account or create a separate personal Dropbox account for their files. Also, keep in mind that if that team member is part of an existing Dropbox business team, they can’t join a second team.