Provisioning a Service Account for Dropbox

Provision a service account for Dropbox to allow Cloud App Security to scan files stored in Dropbox. Cloud App Security uses the service account to run advanced threat protection and data loss prevention scanning on files in Dropbox.

The steps outlined below detail how to provision a service account for Dropbox from the pop-up wizard that appears at your first logon.

  1. Log on to the Cloud App Security management console.
  2. In the pop-up wizard, select Dropbox as the service to protect.
  3. On the Provision Service Account for Dropbox screen, click Click here.

    The Dropbox logon screen appears.

  4. Specify your Dropbox administrator credentials and click Sign in.

    The Dropbox authorization screen appears.

  5. Click Allow.
  6. Go back to the Cloud App Security management console as instructed and click Done.

    Cloud App Security then retrieves your Dropbox user and group information, including the user ID, user name, user email address, group ID, and group name. The time required depends on how many users and groups you have in Dropbox.

    Cloud App Security generates a quarantine folder (trendmicro_cas_quarantine__dont_change_or_delete) and a temporary folder (trendmicro_cas_temp__dont_change_or_delete) in the Dropbox administrator's root directory. The quarantine folder can be accessed only by the administrator, while the temporary folder can be edited by all users.


    Cloud App Security renames the files in the quarantine folder. Each file is prefixed with RANDOM_UUID, which is a unique string randomly generated by Cloud App Security. For example, some_file.doc will be renamed ecdd6cc3-58d4-42a4-831a-e39bcbc1c8d5_some_file.doc.

    The temporary folder stores quarantined files before they are moved to the quarantine folder and restored files before they are moved back to their original locations.

  7. Hover over the ring icon in the upper-right corner of the management console.

    If the message "Dropbox protected." appears on the Notifications screen, the provisioning is successful.


    To avoid unnecessary notifications, all users must exclude the temporary folder (trendmicro_cas_temp__dont_change_or_delete) from their synchronization list. Perform the following steps as a user:

    1. Locate and click the Dropbox tray icon on your desktop.

    2. Click the settings icon and choose Preferences.

    3. Click the Account tab and click Selective Sync.

    4. Clear the check box of the temporary folder (trendmicro_cas_temp__dont_change_or_delete).