How to manage Protect and control in Dash

Reviewing permissions on company documents before and after deploying Dropbox Dash to your employees adds a layer of security to your organization’s information.

Security is one of the main pillars of Dropbox Dash, and the built-in content visibility and remediations should be a key step in your Dash deployment. Dash data access governance supports Dropbox, Google Drive, and Microsoft OneDrive and Sharepoint files.

This article covers how to use the Dropbox Dash data access governance capabilities in the Protect and control and Action history sections of the admin console and how you can use it to secure your organization’s information.

Dash data access governance overview

Data access governance for Dash provides admins with complete visibility, remediations, and a full action history log of changes made.

Dash security features allow you to view all file permissions across added apps. You can review files shared internally, externally, or with open links. Team admins will receive access to Dash Protect and Control. These admins will be able to administer document access for the following apps, if they‘re added: Dropbox, Google Drive, Microsoft OneDrive, Sharepoint and Teams files.

Actionability

After reviewing and confirming document permissions, you can take remediation actions to remove unnecessary or unauthorized access, such as removing external sharing access and permissions.

Action history

As actions are performed, admins can review an action history to see remediated items and their status.

Protect and control overview

Dash's Protect and control area provides complete visibility of document permissions across applications. You can access it by navigating to the admin console, where you can find a section called Protect and control within the Dash products menu.

The Protect and control section displays document permissions across any data access governance applications you've connected.

Table

The Protect and control table provides more information about the items in your Workspace, including ownership information, document details, and sharing permissions.

Preset filters

Preset filters provide you with quick and easy access to standard document permission-sharing groupings, where you can quickly view items with a particular type of internal or external sharing.

Filters

The filters area lets you granularly select the specific criteria by which you'd like to filter the table of results. Using filters in Dash lets you to fine-tune the criteria of the documents you're trying to remediate. Filters can help you narrow down based on a document's last modified date, type, the application it's in, who it's shared with, and more.

Viewing additional item details

Admins can view more information about a specific item within the Protect and control section. To view more details about an item, click on its name in the list of results.

• Once clicked, a drawer opens up on the right side.
• The drawer provides additional information about the item. In the item drawer view, you’ll see details such as owners, age, last modified date, and more.
• Below the details section, you'll see an accounts section, which shows you more information about the accounts  with access and whether they're internal or external.

To view further details on an individual item and remove collaborators, click the box with the double sided arrow next to the name of the item you’d like to view. From this page you can see:

• The name and email address of all accounts that have access to the item
• The level of access each account has for the item
• Whether accounts with access to the item are internal, personal accounts, or outside accounts

You can filter this list by clicking a preset from the Filters menu on the left, or by selecting specific filters from the dropdown under User type, Access, and People.

To remove collaborators from an item within the item details page:

1. Check the boxes next to the people you’d like to remove.
2. Click the remove collaborator icon (person with an arrow pointing to the right).
3. Click Remove.

Remediation actions

When reviewing permissions, you might notice specific external access issues you want to remediate. Dash supports several remediation actions. Actions support modifying permissions on a single item or across many items at once.

Action history

After completing remediation actions in Dash, you can view the status of those actions by navigating to the Action history section. This section lets you see all actions and review what permission changes were and weren’t successful.

Viewing an Action history entry

Each Action history entry is clickable so that you can see exactly which items had permission changes and which didn’t.

To view an action history entry, click on the description of any action history entries.

• Once clicked, a drawer will open up on the right side.
• Additional details will be displayed, such as who performed the action and the details of the action taken.
• Below the details section, you’ll see more information about all items that were part of the action taken. Here, you can see if the item(s) in the action were completed successfully or if there were any errors. Items with errors will list the item name and send an error message.