The Dropbox admin console is where admins on a Dropbox team account manage members, admin roles, team folders, security settings such as single sign-on, and activity and storage reports. You open it by clicking Admin console in the left sidebar of dropbox.com, and what you can do there depends on your plan and the admin role you hold, as of October 2026.
The thing team members most often don't realise is how much an admin can see. Everything in a Dropbox team account is private to other members by default, but a team admin can use Sign in as user to open a member's account and view the files in their team member folder. Dropbox says the member may get an email about it, but sending that email is at the admin's discretion, and members can't switch the feature off. Admins can't open a member's linked personal Dropbox account, although they can see its name and email address.
The eight Dropbox admin roles
On Standard or Business teams every admin has full global permissions. On Advanced, Business Plus and Enterprise teams, you can give someone a narrower role instead. Dropbox has eight pre-built roles as of October 2026.
| Admin role | What it's for | Worth knowing |
|---|---|---|
| Team admin | Full access to all admin permissions | The only role that can log in as a member or create and assign admin roles |
| User management admin | Add, remove and manage member accounts | Can generate an activity report, but it leaves out admin activity |
| Support admin | Help members with limited tasks such as password resets | Can reset non-admin passwords, not admin ones |
| Billing admin | Billing, payments and contracts | Can add licences and open the billing tab, but can't view the members tab |
| Content admin | Content and permissions | Can create and remove team folders |
| Compliance admin | Retention policies and legal holds | Only with the Data Governance add-on |
| Reporting admin | Activity and usage reports | Can view the company activity feed and export members data |
| Security admin | Security alerts, external sharing and security risks | Can manage authentication, sharing controls and device approvals |
Dropbox recommends at least two admins on every team account, and you must always have at least one team admin. If your only admin leaves without handing over, getting settings changed gets a lot harder.
Making someone an admin
- Click Admin console in the left sidebar, then Members.
- Click More next to the member you want to promote.
- Click Make admin.
- Choose the admin permission level in the pop-up and click Add.
- Click Ok.
To change a role later, click More next to the admin, pick the new permission level and click Change. To remove one, use Change role and then Remove admin role. Members can find their admins by clicking their avatar in the bottom-left corner, which lists everyone on the team with their status.
You can also bring in an admin from another Dropbox team, for example an outside IT partner. Under Settings, open Trusted teams, enter their admin's email address and they accept from an email notification. They become a multi-team admin with all the capabilities of your own admins, except they can't open the Billing or Help pages. You revoke access from the same Trusted teams page. For security, you can't add yourself as an admin on another team; their admin has to add you.
Team folders and the team folder manager
The team folder manager is where certain admins organise team folders and manage who can access them and any shared subfolders. By default, everyone can create team folders on Standard, Advanced, Enterprise, Business and Business Plus teams, though team admins can restrict who creates new top-level ones.
When you create a team folder you choose to share it with everyone on the team or with specific people, with edit or view-only access, and whether it syncs to the team's desktop folder. Here's a detail that catches admins out: the folder is only shared once you enter names and click Add. Cancel out of that screen and it stays visible only to admins in the console.
Deleting and archiving behave differently. A deleted team folder leaves the team space, but anyone who had access keeps it, and only admins can restore or permanently delete it. Archiving removes every member and moves the folder to the archive tab, where it still counts towards your team's storage. You can only permanently delete a top-level team folder once it's archived, and permanently deleted folders can't be recovered, even by Dropbox Support. If you're tidying up how files are shared more widely, my guide on sharing a Dropbox folder covers the member side.
Single sign-on for Dropbox teams
Admins on Advanced, Business Plus and Enterprise can turn on single sign-on, so members log in through a central identity provider instead of a separate Dropbox password. You set up Dropbox with your identity provider, download its X.509 certificate and note its sign-in URL, then add both under Settings, Security, Authentication.
There are two modes. Optional is for testing, and lets people use either SSO or their Dropbox password. Required is for production: member passwords stop working, though admins can still log in with their Dropbox admin credentials. Once SSO is on, admins can't reset passwords or require two-factor authentication through Dropbox, because the identity provider handles that. Linked devices keep working.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Reports you can pull from the admin console
Most reports export as a CSV saved to a folder called Dropbox Business reports in the admin's own account, with an email when each one's ready. The ones small teams use most are the activity report, a filterable log of every action, the member data report for licence and storage audits, the member access report showing every folder one person can reach, and the duplicate files report. The external sharing report flags links with no password and links over three months old with no expiry. A data classification report scans for personal information such as card and passport numbers, though files over 100 MB or with passwords can't be scanned.
My verdict on the admin console
I'd set up at least two admins on day one and give anyone outside the core team a narrow role rather than full team admin, because Sign in as user and permanent deletion are powerful. I'd skip turning SSO to Required until you've tested it in Optional mode. If Dropbox's admin tools feel heavier than your team needs, I've compared Dropbox alternatives too.
Monthly sharing audits and offboarding checklists are perfect jobs to automate rather than do by hand. I run AI training and workshops for teams, and help businesses with AI enablement and workflow automation, so the busywork runs itself and people get time back. Most of that work is with SaaS marketing teams and small businesses. Here's how we can work together.
Frequently asked questions
Can a Dropbox admin see my files?
Yes, for your team account. Admins can use Sign in as user to view files in your team member folder. They can't open a linked personal Dropbox account, but they can see its name and email address.
How many admins should a Dropbox team have?
Dropbox recommends at least two admins on every team account, and you must always have at least one team admin.
Which Dropbox plans have limited admin roles?
Admins on Advanced, Business Plus or Enterprise teams can have a limited set of permissions. On Standard or Business teams, all admins have global permissions.
Which Dropbox plans support single sign-on?
Single sign-on is available to admins on Dropbox Advanced, Business Plus and Enterprise.
Can a permanently deleted team folder be recovered?
No. Permanently deleted files and folders can't be restored, even by Dropbox Support.
