Remove external collaborator in Box
Automatically remove an external Box collaborator from a Slack request with Stepwork, and confirm their folder access has ended.
- Use case
- Security response & remediationInfoSec & Compliance
- Best for
- Security Analyst
- Applications used
Box
Slack
- Business outcome
- Risk reduction
The problem
Outside access waits on folder owners.
When an external collaborator should lose access, security chases folder owners one by one. Some folders get updated; others stay open for days.
The invite is still live while the ticket sits. Exposure depends on who responds first, not on a single confirmed removal.
The outcome
External access ends on request
Stepwork removes the specified external collaborator from folders and confirms access ended. The response is logged without chasing owners. For a departing employee’s own login, use Deactivate user in Box.
- The external collaborator is removed from folders.
- Access for that collaborator ends.
- If the collaborator cannot be found, the run stops.
The process
From Slack request to a removed Box collaborator
Security posts the collaborator in Slack. Stepwork removes them from folders and confirms access ended.
- Step 1
Request it in Slack
A teammate posts the external collaborator’s email and the folders in scope. That message starts the flow, and Stepwork records who asked and when.
- Step 2
Find the collaborator
Stepwork signs in to Box and locates the external collaborator on the named folders. If they cannot be found, the run stops.
- Step 3
Remove access
Stepwork removes the collaborator from those folders, the same change an admin makes when closing outside access.
- Step 4
Confirm and reply in Slack
Stepwork checks that access ended, then posts the result back in Slack.
Why Stepwork
Collaborator removal stays on the response path
A deterministic agent runs the removal you recorded. External access does not wait on whoever owns the folder that week.
Similar use cases
Similar use cases
Deactivate user in BoxDeactivates a departing user in the Box admin console, blocking access while retaining content.
Revoke shared link in DropboxRevokes a specified shared link and confirms it no longer resolves.
Disable public board link in MiroTurns off the public link for a specified board and confirms it is dead.
FAQ

