A way to be able to select the rights of the developer console, which is similar to allow users to use Box Relay.
This is a way to prevent users not to make sand boxes and API.

Is there a way to read Enterprise Settings using API? That would be much beneficial where the Admin can choose certain settings like Storage and there wont be a necessity to change the Code every time the Admin wants to change the settings. The API can read the existing settings and manage users based on those configurations. Currently, the application that manages Box accounts has to store those locally and every time there is a change in those settings, that calls for a Change management and code deployment.

The current .NET Core NuGet package is set to support .NET Standard 1.4, but this means that support for old libraries is required. For example, the SDK throws exceptions when getting an admin client due to incompatibilities with System.IdentityModel.JwtToken >= 5.4. These sort of problems are going to continue to happen as the framework progresses.

The Box CLI:GET commandlet is a good tool but if it could grab more basic information, it would be great.. For my company, we would like to see the Last Activity and Last Login of an end user's Box Account. This would help us determine when to de-provision a Box Account after we can verify it hasn't been used in X amount of time.

Amazon has many EIDs and their security team needs to be able to apply and monitor enterprise settings in a centralized, scalable way.

Provide a UI where we can see the webhooks that have been created across our enterprise applications. We have had some webhooks deleted because of users deleting folders or webhooks. Also, we have a case where a webhook stopped triggering. After calling the 'list all webhooks' api, we don't see that webhook created. No one has deleted it so it's difficult to understand what happened to this webhook trigger.

Currently BOX CLI download doesn't have overwrite action. If a folder already exists in the location where the new folder is being downloaded, the CLI errors out.

There should be a over-write switch to the box CLI folder download. It should be something like:

box folders:download Folder_ID --destination=<location> --over-write=Yes

We would like you to provide a way in the developer console to remove the download permission from our application.

We are worried about leaking access tokens.
Our application needs Box administrator privileges. Then change the folder name or delete the collaborator.
However, it does not access the content of files in box.

I'd like to provide our central identity management team a way to tell whether or not a given Box user has a > 0 byte usage before they delete the user's account (for example, as someone leaves our organization). I'd like to give them read-only API access to https://api.box.com/2.0/users, without giving them any additional access. Support tells me that this isn't currently possible. It'd be nice if it was--this could be useful for a number of other uses, too, such as reporting.

Documents in BOX are not searchable based on Metadata when uploaded using BOX API

Document uploaded into BOX via EPHESOFT using BOX API and 3 metadata elements are attached to the document. We can see the document in the BOX and the metadata elements are present in the Custom Metadata section in the BOX.

One thing that would be handy is to be able to upload a folder (of dicom files) and process the contents with the "Box DICOM Import" functionality using the BoxCLI.

Maybe something like: (add a flag to current box:folders:upload command)

"box folders:upload /root/test_folder --parent-folder=%ID% --dicom-import"

That would be Nice!

You can currently add tags for weblinks via the API, but can't read them. This is a huge oversight, which makes it nearly impossible to add any sort of dynamic filtering capabilities. That is, there's no way to return (or parse) out a list of available tags -- since you can't read any of them.

To accomplish any sort of dynamic filtering, you have to bypass the tags altogether and add them to a field you can read. For example, after a colon in the title field. However, that's a temporary stop-gate solution with issues of its own.

Add Golang SDK

Enterprise Events API endpoint only allows retrieval of events up to one year back. Activity reports in Box go back 7 yrs. Events contain a lot more useful data than activity reports so the request is to match the retention period between the two so the same amount of data can be collected via the API or web application.

API method that resets or invalidates all session tokens for a specific user.

In some cases we are not able to delete or inactivate a user after they have been terminated. The user's iDP (active directory) login is been disabled, but session tokens in apps like Box Drive don't expire. We need the ability to programatically invalidate all access tokens for a user.

Thanks!

We want to be able to use the BoxAPI only from whitelisted IP addresses
(For example, register the IP address list of our proxy server )

We believe it is the best to be able to specify a list of accessible IP address range on the apps in the application registration screen