Group Management and RAD Synchronization (Quickstart Guide)
This article will provide a brief overview of how to use RAD to manage your unit’s groups in Box.
If you are looking for a comprehensive, detailed description of the process instead, please see the page Group management and RAD synchronization (Extended Guide).
Setting Box group admins
To make someone an admin of a group in Box, place their -adm account directly into the RAD group that is to be synced. Unlike regular users, -adm users in subgroups of a group that is synchronized to Box do not become members of the parent group in Box. A person must be a group admin of a specific group in order to see it in the Admin Console, and must be a group admin of at least one group in Box to see the Admin Console at all.
RAD -box-sync Groups
If you would like a RAD group synced to Box, you must indicate that by making the group a member of a “-box-sync” group in your OU.
There are two valid locations for a -box-sync group: in your top-level OU or in a sub-OU one level down. The top-level-box-sync groups must be named [ou]-box-sync. The -box-sync groups one level down must be named [ou]-[sub-ou]-box-sync or [ou] [sub-ou]-box-sync.
Any group in your OU can be a member of your top-level -box-sync group, but the -box-sync groups in sub-OUs can only contain member groups in the same sub-OU. Groups located elsewhere will not sync to Box.
Box does not support nested groups. When RAD groups containing other groups as members are synchronized to Box, they must produce a flattened group in Box.
If you want a group to appear in Box, it must be a member of an appropriate -box-sync group. If it is only a subgroup of a -box-sync group member, it will not become a group in Box. However, its members will be included in the parent group that is synced to Box.
Group Naming Conventions
RAD groups that you want to be synced to Box should be named in one of the following ways:
- [ou][separator][freeform portion]
- [ou][separator][sub-ou][separator][freeform portion]
Both spaces and hyphens are valid separators, but each individual group name must be internally consistent, and use one or the other.
-box-sync groups are a special exception to the internal consistency requirement; if you want to use spaces to separate your top-level OU and sub-OUs, you can do so while using the required hyphen to separate the sub-OU from “box-sync.” For example, “Pets Cats-box-sync” is as valid as “Pets-Cats-box-sync.”
Warnings and Notes
Synchronization is not instantaneous; it occurs every half hour.
Once a RAD group has been synchronized to Box, deleting the RAD group or removing it as a member of its -box-sync group will break synchronization. Do not move or delete a Box-synchronized group in RAD unless you no longer want to use the group in Box. If you no longer wish to use a group in Box, you can move or delete it in RAD and then simply delete the group in Box.
You can add users to a RAD group marked for synchronization to Box even if they do not have a Box account. Once they activate a Box account, after the next sync interval they will automatically be added to all of the groups they were previously made a member of.
Please contact email@example.com if you have any questions.