I have several questions related to the Email Upload functionality: It seems that enabling email uploads to a folder allows a managed user who is not a collaborator on that folder to still upload to it (unless the specific setting for 'collaborators only' is checked). But can a user who is not a managed user in this domain perform an email upload if they are provided with the folder's email address as defined in the settings for that folder? (That seems a little light on security so I need to fully understand how this works.) Who can enable the folder setting to allow email upload? Owners, Co-owners, and Editors? I assume setting a folder's settings to allow email upload has to be done on a folder-by-folder basis and there is no way to do a "mass" setting change of this value? Are there any security concerns with allowing email upload? Thanks!

Hi Kim,Welcome to the Box Community and thanks for posting!I'd be happy to help answer your questions regarding Box Email Upload feature to the best of my knowledge:It seems that enabling email uploads to a folder allows a managed user who is not a collaborator on that folder to still upload to it (unless the specific setting for 'collaborators only' is checked). But can a user who is not a managed user in this domain perform an email upload if they are provided with the folder's email address as defined in the settings for that folder? (That seems a little light on security so I need to fully understand how this works.) --- Yes, users do not actually need to be logged into Box to upload via email as a result, you may see "Anonymous" making those uploads (again, that is if the option "Only allow email uploads from collaborators in this folder" is not enabled).Who can enable the folder setting to allow email upload? Owners, Co-owners, and Editors? --- Correct, only Owners, Co-owners, and Editors has the necessary permission to enable/disable this setting.I assume setting a folder's settings to allow email upload has to be done on a folder-by-folder basis and there is no way to do a "mass" setting change of this value? --- Correct, there is currently no way to enable this setting at once for all your folders, and has to be done on a folder by folder basis.Are there any security concerns with allowing email upload? --- From a security standpoint, the main item to be aware of is that if the specific setting for 'collaborators only' is not checked, anyone with that email address can use email uploads to upload to that folder. We do understand that each enterprise might have unique security concerns, so if you have any additional concerns, please reach out to your enterprise's Customer Success Manager or CSM to go over how to best set up features for your enterprise's use case.Thanks again for reaching out and for your participation in the forum!

Question

Email Upload functionality questions

Forum|Forum|1 year ago
May 22, 2025
3 replies
51 views

C

community-manager
Box Employee

I have several questions related to the Email Upload functionality:

It seems that enabling email uploads to a folder allows a managed user who is not a collaborator on that folder to still upload to it (unless the specific setting for 'collaborators only' is checked). But can a user who is not a managed user in this domain perform an email upload if they are provided with the folder's email address as defined in the settings for that folder? (That seems a little light on security so I need to fully understand how this works.)
Who can enable the folder setting to allow email upload? Owners, Co-owners, and Editors?
I assume setting a folder's settings to allow email upload has to be done on a folder-by-folder basis and there is no way to do a "mass" setting change of this value?
Are there any security concerns with allowing email upload?

Thanks!

C

community-manager
Author
Box Employee
Forum|Forum|1 year ago
May 22, 2025

Hi Kim,

Welcome to the Box Community and thanks for posting!

I'd be happy to help answer your questions regarding Box Email Upload feature to the best of my knowledge:

It seems that enabling email uploads to a folder allows a managed user who is not a collaborator on that folder to still upload to it (unless the specific setting for 'collaborators only' is checked). But can a user who is not a managed user in this domain perform an email upload if they are provided with the folder's email address as defined in the settings for that folder? (That seems a little light on security so I need to fully understand how this works.) --- Yes, users do not actually need to be logged into Box to upload via email as a result, you may see "Anonymous" making those uploads (again, that is if the option "Only allow email uploads from collaborators in this folder" is not enabled).
Who can enable the folder setting to allow email upload? Owners, Co-owners, and Editors? --- Correct, only Owners, Co-owners, and Editors has the necessary permission to enable/disable this setting.
I assume setting a folder's settings to allow email upload has to be done on a folder-by-folder basis and there is no way to do a "mass" setting change of this value? --- Correct, there is currently no way to enable this setting at once for all your folders, and has to be done on a folder by folder basis.
Are there any security concerns with allowing email upload? --- From a security standpoint, the main item to be aware of is that if the specific setting for 'collaborators only' is not checked, anyone with that email address can use email uploads to upload to that folder. We do understand that each enterprise might have unique security concerns, so if you have any additional concerns, please reach out to your enterprise's Customer Success Manager or CSM to go over how to best set up features for your enterprise's use case.