Admins, and co-admins with requisite permissions, have the option to enforce watermarks and tie them to specific classification labels. This provides the option to limit watermarking to sensitive content. If enabled, end users no longer have the ability to apply their own watermarking to affected content.Documentation Index
Fetch the complete documentation index at: https://docs.box.com/llms.txt
Use this file to discover all available pages before exploring further.
Watermarking sources
Watermarking has two sources:- Admin-controlled classification, enforced through an access policy.
- User-created, where the user has sufficient privileges.
Create, edit, and remove access policies which enforce watermarking
Enterprise admins and co-admins (who have Create, edit, and delete Shield configuration for your company permissions) can create and change watermarking access policies:- Navigate to the Admin Console.
- Select Shield.
- Select the Access Policies tab.
- Enter a Policy Name and, optionally, a Description.
- Select the Content Type you want this to apply to. See more about Classification Labels.
- Select Watermarking from the dropdown Security Controls menu.
- Ensure the Enable Watermarking toggle is turned on.
- To customize the applied watermark, select the Customize Watermark button, then select and configure your watermark’s properties before clicking Save.
- Select Next, then Start Policy.
Note:Users should not include personal or sensitive information in customized watermarks.
Customization conflicts
If an end user tries to create or edit watermarking for a file or folder which has security controls with watermarking customization applied, they will be unable to do so:- Customization enforced via the access policy takes precedence over user-enforced watermarking
- When end users try to override watermarking customization enforced via an access policy, the user will see a message explaining that the setting is disabled because of the access policy that is in place
- If existing watermarking user settings are overridden, they will be restored after the access policy is removed