SOLVED

Dropbox controls for individually created accounts

%3CLINGO-SUB%20id%3D%22lingo-sub-701774%22%20slang%3D%22en-US%22%3EDropbox%20controls%20for%20individually%20created%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701774%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20customer%20that%20I%20am%20working%20with%20has%20a%20number%20of%20users%20who%20have%20created%20%22personal%22%20Dropbox%20accounts.%26nbsp%3B%20They%20where%20created%20using%20there%20organisations%20email%20address%20i.e.%20%40contoso.com.%20This%20was%20perfect%20shadow%20IT%2C%20as%20OneDrive%20wasn't%20rolled%20out%20at%20the%20time%20so%20the%20users%20found%20their%20own%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20bring%20them%20under%20MCAS%20management%20or%20migrate%20them%20to%20a%20business%20Dropbox%20account%20and%20thus%20MCAS%20managed%20from%20there%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20understand%20that%20the%20second%20question%20is%20probably%20more%20of%20a%20Dropbox%20question.%26nbsp%3B%20Dropbox%20is%20accounts%20are%20actively%20used%20by%20these%20accounts%2C%20so%20like%20everything%20in%20I.T%20the%20ideal%20solution%20would%20be%20invisible%20to%20the%20users.%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20or%20guidance%20is%20appreciated.%26nbsp%3B%3C%2FP%3E%3CP%3EMartin%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-701774%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECloud%20Discovery%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-701807%22%20slang%3D%22en-US%22%3ERe%3A%20Dropbox%20controls%20for%20individually%20created%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701807%22%20slang%3D%22en-US%22%3EHi!%3CBR%20%2F%3E%3CBR%20%2F%3EFrom%20what%20I%20can%20tell%20this%20needs%20a%20Dropbox%20business%20account%20as%20MCAS%20connects%20to%20the%20business%20account%20via%20an%20admin%20user%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fconnect-dropbox-to-microsoft-cloud-app-security%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fconnect-dropbox-to-microsoft-cloud-app-security%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.dropbox.com%2Fen_GB%2Fapp-integrations%2FMicrosoft-Cloud-App-Security%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.dropbox.com%2Fen_GB%2Fapp-integrations%2FMicrosoft-Cloud-App-Security%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EGood%20news%20is%20that%20Dropbox%20basic%20accounts%20can%20be%20moved%20to%20a%20Business%20account%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fhelp.dropbox.com%2Faccounts-billing%2Fplans-upgrades%2Fjoin-team-existing-user%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fhelp.dropbox.com%2Faccounts-billing%2Fplans-upgrades%2Fjoin-team-existing-user%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20these%20can%20be%20consolidated.%20Bad%20news%20is%20that%20I%20don%E2%80%99t%20think%20there%20is%20a%20way%20to%20make%20this%20invisible%20to%20the%20user%20or%20that%20MCAS%20can%20be%20made%20to%20work%20with%20multiple%20Dropbox%20basic%20accounts.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20questions%20and%20is%20enough%20to%20get%20you%20in%20the%20right%20direction!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-715489%22%20slang%3D%22en-US%22%3ERe%3A%20Dropbox%20controls%20for%20individually%20created%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-715489%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%2C%3C%2FP%3E%3CP%3EI%20knew%20the%20dropbox%20connection%20required%20a%20business%20account%2C%20but%20I%20didn't%20find%20the%20dropbox%20article%20about%20moving%20account%20to%20the%20business%20ones.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20be%20nice%20to%20enable%20the%20session%20based%20control%20warning%20on%20selected%20accounts%20like%20this%20with%20a%20notification%20requesting%20the%20users%20move%20their%20data%2C%20or%20at%20least%20letting%20them%20know%20it%20is%20being%20%22monitored%22%3C%2FP%3E%3CP%3EThanks%20heaps%20for%20the%20information.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi, 

The customer that I am working with has a number of users who have created "personal" Dropbox accounts.  They where created using there organisations email address i.e. @contoso.com. This was perfect shadow IT, as OneDrive wasn't rolled out at the time so the users found their own solution.

 

Is there a way to bring them under MCAS management or migrate them to a business Dropbox account and thus MCAS managed from there? 

 

I understand that the second question is probably more of a Dropbox question.  Dropbox is accounts are actively used by these accounts, so like everything in I.T the ideal solution would be invisible to the users.   

 

Any help or guidance is appreciated. 

Martin

2 Replies
best response confirmed by Boris_Kacevich (Microsoft)
Solution
Hi!

From what I can tell this needs a Dropbox business account as MCAS connects to the business account via an admin user

https://docs.microsoft.com/en-us/cloud-app-security/connect-dropbox-to-microsoft-cloud-app-security

https://www.dropbox.com/en_GB/app-integrations/Microsoft-Cloud-App-Security

Good news is that Dropbox basic accounts can be moved to a Business account

https://help.dropbox.com/accounts-billing/plans-upgrades/join-team-existing-user

So these can be consolidated. Bad news is that I don’t think there is a way to make this invisible to the user or that MCAS can be made to work with multiple Dropbox basic accounts.

Hope that answers your questions and is enough to get you in the right direction!

Best, Chris

Thanks @Christopher Hoard,

I knew the dropbox connection required a business account, but I didn't find the dropbox article about moving account to the business ones. 

I would be nice to enable the session based control warning on selected accounts like this with a notification requesting the users move their data, or at least letting them know it is being "monitored"

Thanks heaps for the information.