Help shape the future of Box
Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!
See user guide here.
- or
9666 results found
-
Full file view and file rotation ability in Box preview
Users have reported that having the option to view the entire file in Box preview would be and be able to rotate the document within Box preview would be helpful to their user experience. Currently, users need to download the file or use Box edit for these features.
3 votes -
Add preset date ranges such as “Previous Month” when scheduling report generation
When scheduling report generation, it would be very helpful to have an option to select “Previous Month” (from the 1st to the last day of the previous month) as a preset date range.
It would also be useful to have additional preset options such as “Previous Year,” “Specific Month,” or “Specific Year” to easily configure commonly used reporting periods.2 votes -
API Endpoint to Manage Custom Apps
There are not currently any API endpoints to call for custom apps - ideally there would be the ability to manage scopes, disable/deauthorzie + enable/authorize, delete apps (both server and user auth)
3 votes -
Enable Admins to Recover Deleted Users Without Submitting Support Tickets
Occasionally, Admins can delete a user (or large group of users) for one reason or another (license re-allocation, deleting users based off of perceived inactivity, etc.). Sometimes these users need to be recovered quickly to give users access to their Box account once again if this was done by mistake. The ultimate goal would be to enable Admins who have the ability to manage users to recover deleted accounts on their own (whether through somewhere in the admin console and/or via the CLI or API) so that product support doesn't need to do so through a support ticket as a manual service request
Occasionally, Admins can delete a user (or large group of users) for one reason or another (license re-allocation, deleting users based off of perceived inactivity, etc.). Sometimes these users need to be recovered quickly to give users access to their Box account once again if this was done by mistake. The ultimate goal would be to enable Admins who have the ability to manage users to recover deleted accounts on their own (whether through somewhere in the admin console and/or via the CLI or API) so that product support doesn't need to do so through a support ticket as a…
3 votes -
Add PKCE Support for OAuth2 Applications
Currently, Box requires developers to use a client secret for OAuth 2.0 apps, which in turn requires standing up and maintaining a backend service just to exchange authorization codes securely.
While this is secure, it creates a huge amount of friction for developers who want to build modern, client-side applications such as single-page apps (SPAs) or mobile apps. In many cases, the only reason a backend exists is to hold a secret, nothing else.
If Box supported PKCE (Proof Key for Code Exchange), developers could authenticate directly from the client without needing a backend at all, just as they can with platforms like Microsoft Entra, Google Identity, and Okta.
This would dramatically reduce time to market, lower costs for developers, and make Box much easier to integrate into modern front-end-first workflows.
Example Scenario
A developer wants to build a React-based file manager using Box APIs.
Under the current model, they must:- Deploy a backend to safely store the client secret.
- Manage hosting, scaling, and security for that backend.
- Build and maintain the OAuth exchange logic.
With PKCE, none of that is necessary. The developer could securely authenticate directly from the browser, accelerating development and reducing costs.
Currently, Box requires developers to use a client secret for OAuth 2.0 apps, which in turn requires standing up and maintaining a backend service just to exchange authorization codes securely.
While this is secure, it creates a huge amount of friction for developers who want to build modern, client-side applications such as single-page apps (SPAs) or mobile apps. In many cases, the only reason a backend exists is to hold a secret, nothing else.
If Box supported PKCE (Proof Key for Code Exchange), developers could authenticate directly from the client without needing a backend at all, just as they can…
3 votes -
Improvement of the repeat timing for Box Relay schedule events
When trying to set the repeat timing for a Box Relay schedule event to monthly, currently you can only choose the 1st day or the last day every few months.
The timing of the event's start is not necessarily at the beginning or end of the month, so it is inconvenient to use.
I would like you to add a setting that repeats monthly based on the start date, like the report scheduling feature.-in Japanese-
Box Relayのスケジュールイベントを毎月に設定しようとしたとき、現在は何か月ごとの第１日目もしくは最終日しか選択できません。イベントの開始タイミングは必ずしも月初や月末ではないため使いにくいです。レポートのスケジュール設定のように、開始日を基準に毎月繰り返すような設定を追加してほしい。5 votes -
Add Categories or Tags to Organize AI Agents in Box AI Studio
The ability to create AI agents in Box AI Studio is extremely useful. However, as the number of AI agents increases, it becomes increasingly difficult to find the right agent when using Box AI.
I would like to request a feature that allows users to better organize and find their AI agents. Possible solutions could be:
- Allowing users to assign categories to AI agents, which could also be arranged in a hierarchical structure
- Enabling the addition of multiple tags to each AI agent, along with the ability to filter or search by these tagsIn short, I hope you can provide an efficient way to categorize, tag, or otherwise manage AI agents, so that they can be easily found, especially as their number grows.
The ability to create AI agents in Box AI Studio is extremely useful. However, as the number of AI agents increases, it becomes increasingly difficult to find the right agent when using Box AI.
I would like to request a feature that allows users to better organize and find their AI agents. Possible solutions could be:
- Allowing users to assign categories to AI agents, which could also be arranged in a hierarchical structure
- Enabling the addition of multiple tags to each AI agent, along with the ability to filter or search by these tagsIn short, I hope…
5 votes -
Add repeatable sections to forms
Would be great to see repeatable sections in the forms.
So for example you have a set of fields related to some entity, and the user can add multiple entries of this entity by hitting to add additional sections with the same fields in it.
9 votes -
Box Hub Image Previews for External Users
Image previews in a Box Hub are not available unless logged in. We love the Box Hubs internally and would love for them to be as helpful and useful for non-users.
16 votes -
Forms API
Retrieval of Box Forms submissions via an API endpoint
3 votes -
AI restriction in shield access policy
Shield Access Policy Settings to include the possibility to restrict the use of AI on content. That would prevent using AI on files containing PII, or other files including sensitive content in particular when using Box AI in Box Hubs.
3 votes -
add decision logic to workflows
Would be great to have decision logic added to relay/workflows. For example I could have a form with a dropdown field with two options - A or B.
The workflow would then have two distinct sets of actions based on Option A or B. Option A Generate a Doc using template A, Option B generate a Doc using Template B
3 votes -
Box Drive: Safe Column Width Fixation
The default column width is too narrow when viewing in Box Drive, and it is not possible to apply column width locking. I would like to request an improvement to this feature.
12 votes -
Users should know what they are exposing outside
Is it possible to have a simple page accessible by a user, to get :
- all the shared links he has created (especially open links accessible by anyone outside, with or without password and expirity date)
- and old outside collaborations (with Box accounts needed)
?A lot of users create collaboration and shared links, and many months or years later they don't remember that these parameters are still in place (even if they don't work anymore with those external users).
It is a breach of security, exposing data outside of our company without knowing it (unless we dig in Box reports which takes a long time for admins, and does not inform and responsibilize users).Is it possible to have a simple page accessible by a user, to get :
- all the shared links he has created (especially open links accessible by anyone outside, with or without password and expirity date)
- and old outside collaborations (with Box accounts needed)
?A lot of users create collaboration and shared links, and many months or years later they don't remember that these parameters are still in place (even if they don't work anymore with those external users).
It is a breach of security, exposing data outside of our company without knowing it (unless we dig…4 votes -
Want to Restore Data Within a Specified Period
Content: The current Box feature does not have the capability to restore data within a specified period.
While you can check the deletion date within the trash, it takes time to verify if a large amount of content has been deleted, making immediate response difficult.
※In the case of "Restore All," all content will be restored, which may cause locking by LFO and impact operations.
For example, we hope for the implementation of a feature that restores content deleted within a specified period in the trash.(日本語)
件名：指定した期間内のデータ復元を行いたい
内容：現在のBox機能では指定した期間内のデータを復元できるような機能はありません。
ごみ箱内で削除された日付を確認できますが、大量のコンテンツを削除した場合に、確認に時間がかかり、即時対応が難しいです。
※「すべての復元」では全てのコンテンツが復元されるため、LFOによるロックがかかる可能性があり、業務に影響があります。
例えば、ごみ箱内で指定した期間内に削除されたコンテンツを復元するような機能実装を希望します。3 votes -
We want the Box administrator to be able to confirm when an IP address is blocked from communicating.
Box has a function to increase security by restricting the IP addresses accessing the system. When using this function, it is necessary to register the addresses to be used in the permission list when there is a system that wants to cooperate with Box.
However, there are cases where it is not possible to confirm the IP addresses used with each system vendor.
Therefore, currently, we block communication once and ask Box to confirm the information by contacting the company.
This operation requires support from Box and is inconvenient for us because it takes time to add the IP address to the allowed list.
We would like to see the IP addresses blocked by the IP address restriction function displayed in the activity report.
(In Japanese)
〈IPアドレスの通信をブロックされた時、Box管理者が確認できるようにしてほしい〉BoxではアクセスするIPアドレスに制限をかけて、セキュリティを高める機能があります。この機能を利用している場合、Boxと連携したいシステムがあると利用するアドレスを許可リストに登録する必要があります。
しかし、各システムベンダーに使用しているIPアドレスを確認しても分からない場合があります。
そのため、現状は一度通信をブロックさせて、Box社に問い合わせして確認してもらっています。
この運用では、Box社はサポート対応が必要ですし、我々としても許可リストに追加するまでに時間がかかり不便です。IPアドレス制限機能でブロックされたIPアドレスをアクティビティレポートに表示して欲しいです。
Box has a function to increase security by restricting the IP addresses accessing the system. When using this function, it is necessary to register the addresses to be used in the permission list when there is a system that wants to cooperate with Box.
However, there are cases where it is not possible to confirm the IP addresses used with each system vendor.
Therefore, currently, we block communication once and ask Box to confirm the information by contacting the company.
This operation requires support from Box and is inconvenient for us because it takes time to add the IP address…
13 votes -
CrowdStrike's ability to filter device protection by IP address
Box Shield allows you to protect your devices with CrowdStrike.
Once CrowdStrike is enabled, you will not be able to log in on devices that do not have Box Tools installed.
Therefore, if you have a device that cannot be installed on Box Tools, such as Linux, you will not be able to use CrowdStrike's protection of your device.
Only when calling from a specific IP address should CrowdStrike policies be applied.
There is a need to not want the policy to be applied to unmanaged devices, so we would like a function that allows us to narrow down the target by IP address.【In Japanese】
＜タイトル＞
CrowdStrikeによるデバイス保護対象をIPアドレスで絞り込める機能の要望
＜本文＞
Box ShieldではCrowdStrikeによるデバイスの保護が可能です。
CrowdStrikeを有効化するとBox Toolsをインストールしていない端末ではログインすることができません。
そのためLinuxなどBox Toolsがインストールできない端末が存在する場合は、CrowdStrikeによるデバイスの保護を利用することができません。
特定のIPアドレスで発信する場合のみ、CrowdStrikeのポリシーを適用できるようにして下さい。
管理対象外の端末に対してはポリシーを適用させたくないニーズがありますので、IPアドレスで対象を絞り込める機能を要望いたします。Box Shield allows you to protect your devices with CrowdStrike.
Once CrowdStrike is enabled, you will not be able to log in on devices that do not have Box Tools installed.
Therefore, if you have a device that cannot be installed on Box Tools, such as Linux, you will not be able to use CrowdStrike's protection of your device.
Only when calling from a specific IP address should CrowdStrike policies be applied.
There is a need to not want the policy to be applied to unmanaged devices, so we would like a function that allows us to narrow down…2 votes -
Box Shield: Suspicious Location Alerts - Add details about content within 'User Activities'
As part of triage for Box Shield Suspicious Location alerts, it would be beneficial to have details added about the content which shows up in 'User Activities'.
For example:
- The User ID/Email of the user who owns the folder/file interacted with
- The File/Folder ID interacted with
- Links to the Files, or their listings within Admin Console Content Manager, when hovering over their names.Also, being able to export this information would be beneficial.
5 votes -
Filter on multiple text values in text data type
Currently, a metadata field needs to already be a multiselect to use the Match Any to allow form multiple match cases for a given metadata field. If the data type is a text field you and only match on one value.
Essential, we would like to be able to create an OR conditional match on multiple values for a text field when querying metadata in a Box App View.
3 votes -
Share Box Forms with co-owners
Can you enable the ability to share a Box Form with another user as a co-owner or editor?
For example, if I create a Form, and then leave the company, a co-owner could still use it or make edits.
13 votes
- Don't see your idea?