We are developing a tool to extract user data from AD, Azure and other IDMs and provision them to Box via API.
We want to use the user IDs on the IDM as a user external key for Box so that we can track the associated Box account when the email address changes on the IDM side.
However, the current attribute "externalappuser_id" of Box users has the following limitations

Only the App User can be set as the value.

Only some privileged users, such as service accounts for JWT-authenticated applications, can access this item.

For improved convenience, please remove the following restrictions

Please make it possible to set values for managed users as well.

API requests from OAuth 2.0 authorization apps should also be able to be processed.