Shared Links OTP Access List report

The Shared Links OTP Access List report lists the email addresses and domains on the Access Lists of active shared links in your enterprise. A shared link has an Access List when its creator requires email verification and selects Only people added to the link’s Access List. Use this report to review who can access content shared through these links, and who added each entry. To find which shared links use email verification, see the Access Security column in the Shared Links report. Admins can run this report. Co-admins need the permissions required to run reports.

Running the report

Go to Admin Console > Reports.
Select Create Report.
Select Shared Links OTP Access List, then select Next.
Optionally, set the report filters.
In the Invite as viewer field, optionally enter one or more user names or user groups. See Subscribing Users to Reports.
Optionally, save the report configuration or select Schedule Report to schedule the report.
Select Run.

For more about running reports, see Running Reports.

Shared Links OTP Access List report details

File format: comma-separated value (.csv) file
Filename and folder name time zone: the local date and time of the admin who ran the report or who set up the report schedule.

Shared Links OTP Access List report data columns

The report contains one row for each entry on an Access List. A shared link with several entries appears on several rows, with the same item and link details on each row. The following table describes the data columns in the report:

Data column	Description
Item Owner Login	The login of the owner of the item.
Item ID	A number that uniquely identifies the file or folder.
Item Name	The name of the file or folder.
Path	The path to the item, starting from All Files. For a file, the path includes the file name. For a folder, the path ends with a slash (`/`).
Shared Item Type	The type of item shared: file or folder.
Access Security	The additional security required to access the shared link. In this report, the value is always OTP (Access List).
Shared Link URL	The Box-generated URL of the shared link.
Access List Entry	The email address or domain on the Access List. Domain entries start with `@`, for example `@example.com`.
Access List Entry Type	Whether the entry is an email address or a domain. Values can be email or domain. A domain entry matches every email address at that domain.
Added By Login	The login of the user who added the entry to the Access List. This user isn’t always the item owner.
Added Date	The date and time the entry was added to the Access List, for example Aug 1, 2026 9:12 AM.

The report contains email addresses of people outside your organization. Handle this data according to your organization’s privacy and data protection policies.

Shared Links OTP Access List report filters

All filters are optional. The following table describes the filters that you can set:

Filter	Description
Owner	Enter one or more names or email addresses of managed users, or names of user groups, to limit the report to shared links on items owned by those users.
Expiration Date	Select a date range to limit the report to shared links that expire within that range.
Created Date	Select a date range to limit the report to shared links created within that range.
Shared Link	Enter a shared link URL to report on that shared link only.

​Running the report

​Shared Links OTP Access List report details

​Shared Links OTP Access List report data columns

​Shared Links OTP Access List report filters

​Related articles

Running the report

Shared Links OTP Access List report details

Shared Links OTP Access List report data columns

Shared Links OTP Access List report filters

Related articles