Dropbox

Connecting Dropbox to LightBeam

Overview

LightBeam Spectra users can connect various data sources to the LightBeam application and these data sources will be continuously monitored for PII, PHI data.

Example: Dropbox, Google Drive, OneDrive, etc

---

Connecting Dropbox Data Source

1. Login to your LightBeam Instance.

2. Click on DATASOURCES on the Top Navigation Bar.

3. Click on “Add a data source”.

Figure 1. Add Data Source

1. Search for “Dropbox”.

Figure 2. Search for Dropbox

1. Click on Dropbox.

Figure 2.1 Dropbox

1. Fill in the requested information and click on Next.

Basic Information

1. Data Source Name: This is the unique name given to the data source.

2. Description: This is an optional field needed to describe the use of this data source.

3. Primary Owner: Email address of the person responsible for this data source which will get alerts by default.

4. Entity Creation: LightBeam Spectra detects and associates attributes based on the context and identifies whose data it is; these are called entities. Example: Jane Doe is an entity for whom LightBeam Spectra might have detected Name and SSN in a monitored data source.

5. Source of Truth: LightBeam Spectra would have monitored data sources that contain data acting as a single point of truth and that can be used for looking up entities/attributes which help to identify if the other attributes/entities found in any other data source are accurate or not. A Source of Truth data set would create entities based on the attributes found in the data.

6. Location: The location of the data source.

7. Purpose: The purpose of the data being collected/processed.

8. Stage: The stage of the data source. Example: Source, Processing, Archival, etc.

Figure 3. LightBeam Dropbox - Basic Information

1. On the Connection screen, choose one of two options for logging in: a) OAuth Token b) Direct Login

Figure 4. LightBeam Dropbox - Connection - Oauth Token

OAuth Token:

a. Select the "OAuth Token" option. b. Click the "Get Access Code" link.

Figure 4.1 LightBeam Dropbox - Connection - Oauth Token

If you are not already logged in, a login page will pop up.

Figure 4.2 LightBeam Dropbox - Connection - Oauth Token

Figure 4.3 LightBeam Dropbox - Connection - Oauth Token

Once you are logged in, you will see a warning message. Click Continue.

Figure 4.4 LightBeam Dropbox - Connection - Oauth Token

c. On the authorization page, review the permissions requested by LightBeam. Click "Allow" to approve.

Figure 4.5 LightBeam Dropbox - Connection - Oauth Token

d. Copy the provided App Access Code.

Figure 4.6 LightBeam Dropbox - Connection - Oauth Token

e. Return to LightBeam and paste the code into the "App Access Code" field. And click on Test Connection.

Figure 4.7 LightBeam Dropbox - Connection - Oauth Token

Verify that you get the message Connection Success! on the screen. Click on Next. Go to 8. Scan Settings

Figure 4.8 LightBeam Dropbox - Connection - Oauth Token

Direct Login

To use the direct login method:

a. Select the "Direct Login" option. b. Enter your Dropbox login credentials directly into the provided fields and click on Test Connection.

Figure 5. LightBeam Dropbox - Test Connection

c. Verify that you get the message Connection Success! on the screen. Click on Next.

8. Scan Settings

In this step,

Choose one of two scan setting options:

i) Scan All

ii) Scan Selected

To choose option (i), select Scan All, and click on Save.

Figure 6. LightBeam Dropbox - Scan Settings

To choose option (ii), select Scan Selected. Now enter the emails of the members that you would like to include for scanning in the Search box individually.

Select the drives by ticking the checkboxes next to them.

Click on Save.

Figure 6.1 LightBeam Dropbox - Scan Settings

Note: To get the Dropbox data source details please check Appendix

---

Appendix

The steps to generate an App key and Refresh Token for your scoped app in Dropbox are given below, so you can connect Dropbox as a data source in LightBeam for retrieving customer-sensitive information.

Create a Dropbox-scoped App

1. Begin by logging into your Dropbox account and navigating to Dropbox Developers to initiate the creation of a scoped app.

   

   Figure 7. LightBeam Dropbox - Dropbox Developers
2. Enter details for the scoped app in the App Console.

Figure 8. LightBeam Dropbox - App Console

Note: You will need to specify a unique app name. Ex: lb-<company-name>

Define App Permissions

1. Under the app Permission Type, launch Scoped Apps and specify the below permissions

Figure 9. LightBeam Dropbox - Permission Scope

Permissions Scope

The following outlines the necessary permissions for both individual and team scopes:

1. Individual Scope

• Files and Folders:

  • files.metadata.read - Read metadata of files and folders.

  • files.content.read - View content within files and folders.

1. Team Scope

• Team Information:

  • team_info.read - Access basic information about your team, including names, user count, and settings.

• Team Data:

  • team_data.member - Access team member data.

  • team_data.governance.write - Edit governance policies for your team's files and folders.

  • team_data.governance.read - View governance policies of your team's files and folders.

  • team_data.content.read - Access content within your team's files and folders.

  • files.team_metadata.read - View metadata for your team's files and folders.

• Members:

  • members.read - View team membership details.

  • groups.read - View group memberships within your team.

• Session and Activity:

  • sessions.list - View sessions, devices, and apps used by your team.

  • events.read - Access your team's activity log.

1. After specifying the required permissions, click Submit to save the configurations.

Figure 9.1 LightBeam Dropbox - Permission Scope

Copy App Key and App Secret

Figure 9.2 LightBeam Dropbox - App Key

Figure 9.2 LightBeam Dropbox - App Secret

a. Under app settings, note the App key to be used in retrieving the Refresh Token and when adding Dropbox as a data source to LightBeam.

b. Locate the App secret below the App key. Click "Show" to reveal it.

c. Copy and paste both the keys for use with the Direct Login option.

Important: Keep your App Key and App Secret confidential.

Specify OAuth Settings

Under app settings, specify the following parameters:

• Allow public client for OAuth 2.0 PKCE flow

Figure 10 LightBeam Dropbox - OAuth Settings

Retrieve Refresh Token

Prerequisites for All Platforms (Unix/Linux/Mac/Windows)

1. Install Python3

2. Install pip Package Manager:

   Begin by installing the pip package manager. Visit the pip installation guide for detailed instructions.

Installation - pip documentation v23.0.1

1. Install Dropbox Package:

   Use pip to install the Dropbox package dependency:

pip install dropbox

1. Download the Script:

   Download the for generating the Refresh Token to your local machine.

2. Export APP_KEY

export APP_KEY=<YOUR_APP_KEY>

1. Run the Script:

• Execute the script by navigating to its directory and running:

  python dropbox_refresh_token.py

1. Authorize and Retrieve the Refresh Token:

• Follow the script's instructions to obtain an authorization code.

• This involves copying the provided authorization URL into your browser.

Figure 11 LightBeam Dropbox - Copy Authorization Code

• Click "Continue" on the webpage.

Figure 12. LightBeam Dropbox - Continue Connecting App

• Grant the listed permissions to your scoped app by selecting Allow.

Figure 12.1 LightBeam Dropbox - Grant Permissions to App

• Copy the Authorisation Code from the browser and input it into your script

Figure 13. LightBeam Dropbox - Copy Access Code

1. Copy the Refresh Token to use for adding Dropbox as a data source to LightBeam.

Figure 14 LightBeam Dropbox - Retrieve Refresh Token

---

About LightBeam

LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.

For any questions or suggestions, please get in touch with us at: [e-mail].