GUIDES · FILE PERMISSIONS · BOX · DROPBOX · EGNYTE
Suggest who gets access to new folders in Box, Dropbox and Egnyte, from your own permission history
Every folder your admins have shared is a decision: which groups can open it, and who can edit. Box, Dropbox and Egnyte can all export those decisions as a report. StayCharted trains on the report and suggests the access for each new folder, the way your team has done it before, with a confidence and a flag for anything a person should check. It works from the report's folder paths and permissions only. It doesn't connect to your account, read files or change permissions.
Before you start
- A StayCharted workspace. Training and filling a file of new folders work on every plan, within its limits; asking from a flow needs the API (Essentials or Business).
- An admin who can run the permissions report in your drive's admin console.
- A Windows computer with PowerShell, to turn the report into one row per folder.
1. Export your permissions
| Product | Report | Where | What it gives you |
|---|---|---|---|
| Egnyte | Folder Permissions Report | Reports → Permissions → Folder Permissions Report; choose the folder and its subfolders | One row per explicit permission: Folder, Permission, Permission Type (user or group), Group Name, Email. Inherited permissions aren't repeated. |
| Box | Collaborations report | Admin Console → Reports | One row per collaboration: Path, Item Name, Item Type, Collaborator Name and Login, Collaborator Type (user, group or external), Collaborator Permission |
| Dropbox | Shared folders report | Admin console → Content → Export Shared Folders Report | One row per shared folder: folder path, owner, and the team members and external people with access. It doesn't include access levels such as view or edit. |
Dropbox's report says who can open each folder but not at what level, so a Dropbox model suggests people and groups without a permission level. Egnyte's and Box's reports include the level.
For Egnyte, leave List all the users within groups off when learning group assignments. Expanded member reports can show only one of several group permissions for a user. Review any None or inheritance-exclusion entries separately; this is not a complete effective-access calculation.
2. Turn the report into one row per folder
StayCharted trains on one row per folder: the folder's Path, and its Access as a list such as Finance:Full; Payroll Team:Editor. These templates read a local report and write a new CSV. They change nothing in your drive. They have not been tested against real vendor exports here: confirm the headers and check a small sample before using the output for training.
Egnyte
Show powershell example
# Egnyte Folder Permissions Report -> one row per folder for StayCharted.
$In = "$env:USERPROFILE\Downloads\folder-permissions.csv"
$Out = "$env:USERPROFILE\Downloads\egnyte-access.csv"
Import-Csv -LiteralPath $In |
Where-Object { $_.'Permission Type' -in @('USER', 'GROUP') } |
ForEach-Object {
$who = if ($_.'Permission Type' -eq 'GROUP') { $_.'Group Name' } else { $_.Email }
[pscustomobject]@{ Path = $_.Folder; Entry = "${who}:$($_.Permission)" }
} |
Group-Object Path |
ForEach-Object {
[pscustomobject]@{ Path = $_.Name; Access = ($_.Group.Entry | Sort-Object -Unique) -join '; ' }
} | Export-Csv -LiteralPath $Out -NoTypeInformation -Encoding UTF8
Box
Show powershell example
# Box Collaborations report -> one row per folder for StayCharted.
# Leaves out external collaborators, so the model learns your internal access.
$In = "$env:USERPROFILE\Downloads\collaborations.csv"
$Out = "$env:USERPROFILE\Downloads\box-access.csv"
# Check a known folder in your export. Set $false if Path is the parent only.
$PathIncludesItemName = $true
Import-Csv -LiteralPath $In |
Where-Object { $_.'Item Type' -eq 'Folder' -and $_.'Collaborator Type' -ne 'External' } |
ForEach-Object {
$path = ([string]$_.Path).TrimEnd('/')
if (-not $PathIncludesItemName) { $path = "$path/$($_.'Item Name')" }
$who = if ($_.'Collaborator Type' -eq 'Group') { $_.'Collaborator Name' } else { $_.'Collaborator Login' }
[pscustomobject]@{ Path = $path; Entry = "${who}:$($_.'Collaborator Permission')" }
} |
Group-Object Path |
ForEach-Object {
[pscustomobject]@{ Path = $_.Name; Access = ($_.Group.Entry | Sort-Object -Unique) -join '; ' }
} | Export-Csv -LiteralPath $Out -NoTypeInformation -Encoding UTF8
Dropbox
The Shared folders report already has one row per folder. Keep the folder path column and the column of people with access, rename them Path and Access, and make sure the names in Access are separated by ;. Leave external people out if you want the model to learn internal access only.
For Box, set $PathIncludesItemName after inspecting a known folder. Keep the same path format when asking for new suggestions.
Check before training: open the file and look at a few folders you know. Folders with very personal access (one person's own folder, for example) teach the model little; consider leaving them out.
3. Train and check the report
Upload the CSV to StayCharted. Map Path as the input and Access as the answer, and choose Each answer is a list, separated by ;. Train, then read the report: for each group or person, it shows how often the model added them wrongly (oversharing) and how often it left them out, on folders it never saw.
Start with one department. If the model agrees with your team most of the time there, add the next.
Review the history first: remove access mistakes you do not want the model to repeat. A model trained on oversharing can learn that oversharing.
4. Get suggestions for new folders
- A file at a time: list new folder paths in a CSV with a Path column and fill it in StayCharted. Each row comes back with suggested access, a confidence and whether it needs review.
- From a flow, for Egnyte: Egnyte's Power Automate connector has a When a folder is created trigger. Send the new folder's path to your model with the HTTP action, as in our SharePoint access guide, then start an approval for the folder's owner. Box's and Dropbox's Power Automate connectors have no folder trigger, so for those, periodically export a list of new folders and fill it in StayCharted.
Whichever way, a person applies the access. StayCharted suggests; your admins and folder owners decide, and every change they make goes into the next export and the next version of the model.
Confirm the trigger’s folder-path output in your own Egnyte flow. This end-to-end flow has not been tested here. Power Automate licensing must cover its Premium Egnyte connector and HTTP action.
Vendor documentation
Common questions
Does StayCharted read our files or connect to our account?
No. It reads the report you upload and the folder paths you send. It never connects to Box, Dropbox or Egnyte and never changes permissions.
Why leave out external collaborators?
Access for outside people is usually a one-off decision for a project, and including it teaches the model to suggest outsiders for new folders. Review external sharing separately.
What about inherited access?
Egnyte's report lists only the permissions set on each folder, which is what you want: those are the decisions your team made. Box's report lists each collaboration where it was added. Either way, the model learns where your team sets access explicitly.
Which plans?
Training and filling a file work on every plan. Asking from a flow needs the API, on Essentials or Business.
Put it into practice
File and SharePoint permissions →
Box is a trademark of Box, Inc. Dropbox is a trademark of Dropbox, Inc. Egnyte is a trademark of Egnyte, Inc. StayCharted is not affiliated with Box, Dropbox or Egnyte.