---
title: User and group management
description: The Dropbox Provisioner synchronizes users and groups from your datastore to Dropbox. The following sections describe the behavior of each provisioning capability.
component: dropbox
page_id: dropbox::pf_dropbox_connector_user_and_group_management
canonical_url: https://docs.pingidentity.com/integrations/dropbox/pf_dropbox_connector_user_and_group_management.html
revdate: June 11, 2024
section_ids:
  synchronizing-existing-users: Synchronizing existing users
  user-provisioning: User provisioning
  user-updates: User updates
  synchronizing-existing-groups: Synchronizing existing groups
  group-provisioning: Group provisioning
  group-name-updates: Group name updates
  group-membership-updates: Group membership updates
  group-deletion: Group deletion
---

# User and group management

The Dropbox Provisioner synchronizes users and groups from your datastore to Dropbox. The following sections describe the behavior of each provisioning capability.

## Synchronizing existing users

PingFederate synchronizes users based on the `Email` attribute in Dropbox. If a user already exists in your datastore and Dropbox, mapping this attribute correctly links the two records together.

For example:

* In Dropbox, Janet's `Email` is `jsmith@domain.com`.

* In your datastore, Janet's `mail` is `jsmith@domain.com`.

* On the **Attribute Mapping** tab of your provisioning connection configuration, map the `Email` attribute to `mail`.

* When the provisioning connector runs, the datastore user is provisioned with a `Email` of `jsmith@domain.com`. That matches Janet's existing `Email` in Dropbox, so her information in the datastore is synchronized to her Dropbox account.

## User provisioning

PingFederate provisions users when any of the following happens:

* A user is added to the datastore group or filter that is targeted by the provisioning connector.

* A user with "disabled" status is added to the datastore group or filter that is targeted by the provisioning connector, and the **Provision disabled users** provisioning option is enabled.

## User updates

PingFederate updates users when a user attribute changes in your datastore.

The **Attribute Mapping** tab of your provisioning connection configuration defines which attributes PingFederate monitors for changes.

## Synchronizing existing groups

PingFederate synchronizes groups from the datastore to the target service based on the group name.

For example:

* In Dropbox, there is a group is named `Accounting`.

* In your datastore, there is a group with a `CN` of `Accounting`.

* When the provisioning connector runs, the two groups are synchronized.

## Group provisioning

PingFederate provisions groups when a group is added to the datastore filter that is targeted by the provisioning connector.

## Group name updates

PingFederate renames groups when they are renamed in the datastore.

## Group membership updates

PingFederate updates group memberships when memberships change in the datastore, whether the change is in the group's properties or a user's properties.

Group memberships in the datastore overwrite the group memberships in Dropbox.

## Group deletion

PingFederate deletes groups when any of the following happen:

* The group is deleted in the datastore.

* The group is removed from the datastore group or filter that is targeted by the provisioning connector.

Group deletions are permanent and cannot be undone.