It is possible for a JWT application to create an Access Token for a specific
user instead of for the .
Preconditions
The application must be configured to allow the creation of user Access Tokens.
This setting can be found in the Configuration tab of the
Developer Console.
Additionally, the authenticated user needs to be a user with Admin permissions,
meaning either an Admin, Co-Admin, or Service Account. See our guide on
for more details.
User access tokens with SDKs
To create a Box SDK client that authenticates as a specific user, follow the
steps described in the ,
but create a user client instead of an “Enterprise” client.
Learn more about using the Box SDKs with JWT
User access tokens without SDKs
To create a user Access Token that authenticates as a specific user, follow the
steps as described in the
but instead of creating
a claim for the enterprise, create one for a specific user ID.
Learn more about manually using JWT authentication
Last modified on September 14, 2026