Content & Sharing Settings for Your Enterprise

The Content & Sharing tab in Enterprise Settings allows you to enable or disable various permission types that are available to managed user when collaborating and sharing files.



Shared Links 

See Enterprise Settings: Shared Links for more details on how you can customize settings for all users' shared links and defaults.


Collaboration Restrictions

This section allows you to set restrictions for how collaborators can be invited to the content in your, or your managed user's accounts. See a detailed explanation of each permission level.




  • Restrict invites: This option allows you to set who can invite collaborators. If this option is enabled then only folder/file Owners, Co-owners and Admins (including Co-admins and Group Admins) will be able to invite collaborators to a given folder.
  • Enable invite links: If you enable this function, users will be permitted to use invite links to collaborate.
  • Enable group invites: Enabling this option makes it possible for users to invite groups to collaborate in folders.
  • Restrict Ownership Transfer: Enables you to prevent account holders other than admins and co-admins from transferring ownership of your enterprise's content to an external account.  When you apply Restrict Ownership Transfer, external account holders and managed account holders who are not admins or co-admins in your enterprise:

    • cannot assign to anyone outside your enterprise the Owner role for any file or folder owned by your enterprise, and
    • cannot move a file or folder owned by your enterprise to a folder owned by an external account.
  • External collaboration:
    • Enable external collaboration: This enables people within your organization to collaborate with other Box users outside your company.
    • Limit collaboration to whitelisted domains: Box Governance enables you to restrict collaboration to an approved set of domains, or a whitelist.  Access this feature via either the normal Box UI or the Box API. To enable whitelisted domains:  
      1. Under Enterprise SettingsContent & Sharing > Collaborating on Content >  External Collaboration, click Limit collaboration to whitelisted domains.
      2. Click Manage Whitelist.  The Collaboration Whitelist window opens.
      3. Enter each domain specifically. Your people can collaborate only with people from one of the domains you specify.
        • If you invite someone to collaborate who is not from one of the specified domains, the system displays this message:  “Invitations could not be sent to the following people because collaboration is restricted to your enterprise's collaboration whitelist: <email address>”

When you create your whitelist, you can also can exert finer control and limit collaboration to one direction, inbound or outbound, as defined from the perspective of someone inside your enterprise.

  • Inbound collaboration – Your people are INVITING SOMEONE FROM OUTSIDE IN TO your enterprise to collaborate on content that resides inside your organization. 
    • To allow only inbound collaboration, prepend each domain with a plus sign (+)
  • Outbound collaboration – People from outside your enterprise are INVITING SOMEONE FROM INSIDE your enterprise OUT to collaborate on content that resides outside your organization.
    • To allow only outbound collaboration, prepend each domain with a minus sign (-)
  • To enable collaboration with any domain, use an asterisk (*)
    • Typically you'll use an asterisk to enable unidirectional collaboration -- for example to allow only your users to be invited to other content and not allow any external users to be invited to your content.

Here are some examples:


Domains Whitelisted

Expected Behavior

Box users within your company can invite people only from Company ABC and can only be invited to folders from Company ABC.

Note   The whitelist is literal, and only works on single domains.  In this example, "" is not whitelisted.  You would need to add it separately.


Your company's users can invite only people from Company ABC to their folders.


Only people in Company ABC can invite Box users from your company to join their folders as well.  No one else can invite your company's users to their folders.

+ *

Your company’s users can invite anyone from any domain to collaborate on content within your enterprise, but no one outside of your company can invite your company’s users to collaborate externally.

- *


Anyone from any domain can invite your people to collaborate on content externally, but your people can invite only users from company to collaborate on content that resides within your enterprise.


Other points:

  • Users not subject to whitelist: You can allow certain users special privileges to collaborate with domains outside of the whitelisted domains. To grant this privilege, below Users not subject to whitelist, enter the names or email addresses of your selected users in the box.
  • External Collaborator Invitations: This enables you to restrict external collaborators from inviting other external collaborators into content owned by your enterprise and to prevent them from increasing other external collaborators' permission levels.


Things to know about collaboration restrictions: 

  • External collaboration whitelisting is only available as part of the Governance package and must be enabled by request. Please contact your Box Representative or Box User Services to enable these features. 
  • Collaboration restrictions can be set at the enterprise, user, and folder level. We'll use the most restrictive setting at any given time. For example, if an enterprise allows collaboration with 100 domains and a user within the enterprise further restricts collaborators for a particular folder, that folder will be governed by the user's more restrictive settings.  


Content Creation

  • Restrict content creation at root: This prevents all non-admin managed users from creating folders in their "All Files and Folders" section. Use this option if you would like to create the folder structure for the entire account and invite users into this structure.
  • Restrict tag creation: This allows you to set who can create tags for files in your account. This can be set to "All Users with tag privilege" (editor or higher), Folder Owners/Co-Owners & Admins, and Admins only.



Auto Expiration Settings


  • Shared Links: This allows you to set an auto expiration for all shared links generated in your account. Expired shared links will no longer be accessible.
    Note: Enabling auto-expiration of shared links for your enterprise will only apply to links that do not currently have an expiration date set. Enabling this setting will not override the dates already set on shared links.

    In addition, disabling this feature will not remove any expiration dates already set on shared links.
  • Collaborators: This sets a limit on collaboration. A user will be removed from a folder owned by your enterprise account after the specified number of days.
    Note: Enabling auto-expiration of collaborators for your enterprise is not retroactive. Adding a collaboration expiration date will only apply to collaborators added after the setting has been enabled.


Choose "Save" to save any configurations that you have made.


Version history
Revision #:
42 of 42
Last update:
‎03-08-2019 12:22 PM
Updated by:


Is the "External collaboration" still in this areas of settings or is this help article obsolete now?