Display all members with access to team folders and shared folders, showing permission levels and folder relationships
Maps folder access across the team, showing which members can access specific folders and their permission levels. Invaluable for access reviews, identifying over-privileged accounts, and understanding content exposure. Helps maintain principle of least privilege.
watermint toolbox
stores credentials into the file system. That is located at below path:
OS | Path |
---|---|
Windows | %HOMEPATH%\.toolbox\secrets (e.g. C:\Users\bob.toolbox\secrets) |
macOS | $HOME/.toolbox/secrets (e.g. /Users/bob/.toolbox/secrets) |
Linux | $HOME/.toolbox/secrets (e.g. /home/bob/.toolbox/secrets) |
Please do not share those files to anyone including Dropbox support. You can delete those files after use if you want to remove it. If you want to make sure removal of credentials, revoke application access from setting or the admin console.
Please see below help article for more detail:
Description |
---|
Dropbox for teams: View information about your Dropbox files and folders |
Dropbox for teams: View your team group membership |
Dropbox for teams: View your team membership |
Dropbox for teams: View your Dropbox sharing settings and collaborators |
Dropbox for teams: View structure of your team’s and members’ folders |
Dropbox for teams: View and edit content of your team’s files and folders |
Dropbox for teams: View basic information about your team including names, user count, and team settings |
For the first run, tbx
will ask you an authentication with your Dropbox account.
Please copy the link and paste it into your browser. Then proceed to authorization. After authorization, Dropbox will show you an authorization code. Please copy that code and paste it to the application.
watermint toolbox xx.x.xxx
==========================
© 2016-2025 Takayuki Okazaki
Licensed under open source licenses. Use the `license` command for more detail.
1. Visit the URL for the auth dialogue:
https://www.dropbox.com/oauth2/authorize?client_id=xxxxxxxxxxxxxxx&response_type=code&state=xxxxxxxx
2. Click 'Allow' (you might have to login first):
3. Copy the authorization code:
Enter the authorization code
Please download the pre-compiled binary from Latest Release. If you are using Windows, please download the zip file like tbx-xx.x.xxx-win.zip
. Then, extract the archive and place tbx.exe
on the Desktop folder.
The watermint toolbox can run from any path in the system if allowed by the system. But the instruction samples are using the Desktop folder. Please replace the path if you placed the binary other than the Desktop folder.
This document uses the Desktop folder for command example.
Windows:
cd $HOME\Desktop
.\tbx.exe dropbox team content member list
macOS, Linux:
$HOME/Desktop/tbx dropbox team content member list
Note for macOS Catalina 10.15 or above: macOS verifies Developer identity. Currently, tbx
is not ready for it. Please select “Cancel” on the first dialogue. Then please proceed “System Preference”, then open “Security & Privacy”, select “General” tab.
You may find the message like:
“tbx” was blocked from use because it is not from an identified developer.
And you may find the button “Allow Anyway”. Please hit the button with your risk. At second run, please hit button “Open” on the dialogue.
home
in the updated team space, a personal folder with your username will be selected. This is convenient for referencing or uploading files in your personal folder, as you don’t need to include the folder name with your username in the path. On the other hand, if you specify root
, you can access all folders with permissions. On the other hand, when accessing your personal folder, you need to specify a path that includes the name of your personal folder.. Options: root (Full access to all folders with permissions), home (Access limited to personal home folder). Default: rootTEAMFOLDER_NAME/:ERROR-SCAN-TIMEOUT:/SUBFOLDER_NAME
.. Options: short (scantimeout: short), long (scantimeout: long). Default: shortDIRECT
if you want to skip setting proxy.Report file path will be displayed last line of the command line output. If you missed the command line output, please see path below. [job-id] will be the date/time of the run. Please see the latest job-id.
OS | Path pattern | Example |
---|---|---|
Windows | %HOMEPATH%\.toolbox\jobs\[job-id]\reports |
C:\Users\bob.toolbox\jobs\20190909-115959.597\reports |
macOS | $HOME/.toolbox/jobs/[job-id]/reports |
/Users/bob/.toolbox/jobs/20190909-115959.597/reports |
Linux | $HOME/.toolbox/jobs/[job-id]/reports |
/home/bob/.toolbox/jobs/20190909-115959.597/reports |
This report shows a list of shared folders and team folders with their members. If a folder has multiple members, then members are listed with rows.
The command will generate a report in three different formats. membership.csv
, membership.json
, and membership.xlsx
.
Column | Description |
---|---|
path | Path |
folder_type | Type of the folder. (team_folder : a team folder or in a team folder, shared_folder : a shared folder) |
owner_team_name | Team name of the team that owns the folder |
access_type | User’s access level for this folder |
member_type | Type of this member (user, group, or invitee) |
member_name | Name of this member |
member_email | Email address of this member |
same_team | Whether the member is in the same team or not. Returns empty if the member is not able to determine whether in the same team or not. |
If you run with -budget-memory low
option, the command will generate only JSON format report.
In case of a report becomes large, a report in .xlsx
format will be split into several chunks like follows; membership_0000.xlsx
, membership_0001.xlsx
, membership_0002.xlsx
, …
This report shows folders without members.
The command will generate a report in three different formats. no_member.csv
, no_member.json
, and no_member.xlsx
.
Column | Description |
---|---|
owner_team_name | Team name of the team that owns the folder |
path | Path |
folder_type | Type of the folder. (team_folder : a team folder or in a team folder, shared_folder : a shared folder) |
If you run with -budget-memory low
option, the command will generate only JSON format report.
In case of a report becomes large, a report in .xlsx
format will be split into several chunks like follows; no_member_0000.xlsx
, no_member_0001.xlsx
, no_member_0002.xlsx
, …