
When first created, an app will be in "Development" mode, which means it will only be able to link to a single team. Read more about this in the Path Root Header Modes Guide. Accessing its contents requires passing the Dropbox-API-Path-Root header to calls to the Dropbox User API. Note that some Dropbox Business teams use the Team Space. Read more about these headers in our Authentication Types Guide. Some User API endpoints also support the Dropbox-API-Select-Admin header, which enables executing user calls as an admin, enabling simple viewing or modification of team-owned content. To make calls on a member's behalf, pass a Dropbox-API-Select-User HTTP header with the team_member_id to act as a specific member. Read the DBX Team Files Guide for an in-depth overview of working with team member files. Legacy apps must have Team member file access permissions while scoped apps must have the team_mber scope selected. Member file accessĪ Dropbox Business app may make calls to the Dropbox User API for any member of the Dropbox Business team, per the Permissions section above. They should never be cached in insecure environments or downloaded to client devices. The OAuth response/redirect will include an additional team_id field that can be used to uniquely identify a team.ĭropbox Business API OAuth tokens can enable extensive access to team data, so it is your responsibility to properly secure them server-side. Linking to a teamĭevelopers will need to direct a Dropbox Business team administrator through the standard OAuth 2.0 flow to install their application on a Dropbox Business team. Development accounts are granted on a by-request basis and are contingent on additional terms and conditions outlined in the request form. This will allow you to test your app using a standard Dropbox Business team. To test an app that calls the Dropbox Business API endpoints, you can request a free Dropbox Business Development Account here. To create a Dropbox Business app, visit the app creation page.



You can read more about scopes in the OAuth Guide. After creating your app in the App Console, you can select your apps scopes on the Permissions tab.

Scopes control the level of access your app has into user and team data. It also gives apps programmatic access to Dropbox Business admin functionality. The Dropbox Business API allows apps to manage the user lifecycle for a Dropbox Business account and perform API actions on all members of a team.
