Skip to main content

Dynamic permissions and group membership

  • January 14, 2026
  • 1 reply
  • 32 views

Due to the highly regulated nature of my industry - we need to be pretty rigid on standards, access, structures etc.

 

We’ve broken our root structure into individual projects. Each project adheres to a strict folder structure.

 

At present there are hundreds. That’s fine. It will grow as we scale and that’s also fine.

 

My sticking point is on permissions.

 

I’ve no idea how to structure this at scale.

 

Role based access is the best bet going forward. But certain roles only need to see the projects of the clients they’re assigned.

 

Other roles only need certain subfolders in each project. Some roles need very little and some need a lot but only some of the time.

For example in a project build, only certain roles should see. One it goes live, that access is removed and other roles can come in with certain access etc etc until it’s closed and archived.

 

Multiply this by a few hundred with different clients having different needs and I’m stumped how to do this.

 

My first instinct is perhaps a group per project? Is there a logical limit to how many Box groups can be created on a tenant? Moreover is there a limit to how many groups a user can be added to?

 

The way I see it is potentially we could automate a group creation once a project gets created and this could be managed easier during the project life cycle.

 

Has anyone done something similar?

 

Moreover…. is there any way to nest groups in Box?? I can’t see a logical way to do it and it would be EXTREMELY useful to be able to put a group PMs into a group for a specific project

1 reply

Jey Bueno Box
  • Community Manager
  • January 14, 2026

👋 Hi ​@dglasgow, welcome to the Box Community!

 

For a deeper discussion about your root and folder structure, user permissions, your use case, and how you manage Box overall, I recommend reaching out to your Box Account Team. They’re best equipped to guide you on strategic approaches for managing your environment effectively and securely.


I’ve sent you a private message here in the community with their contact details.


Regarding Groups, please note that only users within your organization (managed users) can be added to Groups. You cannot add external users to your managed Groups. You can refer to Creating and Managing Groups for more information.


To ensure Box performs optimally, here are the recommended limits for Groups:

  • Groups per enterprise – Recommended: 10,000
  • Groups per user – Recommended: 500
  • Users per group – Recommended: 15,000


As for automating group creation, I don’t believe there’s a built‑in way to do that, but your Account Team may be able to discuss or check possible options.

 

Looking forward to getting things sorted out.