

For a list of all the Data Box order statuses, see View order status. Provide the tracking number associated with your order.ĭata Box also sends email notifications anytime the order status changes based on the emails provided when the order was created. To track the order while the device is in transit, go to the regional carrier website, for example, UPS website in US. To track the order when the device is in Azure datacenter or your premises, go to your Data Box order > Overview in Azure portal. The following mechanisms are in place to track the Data Box order at any time: You can track your order through the Azure portal and through the shipping carrier website. This log contains a list of all files that were exported successfully.įor more information on export order, see Create an export order for Data Box Track the order When you select the Include verbose log option, a verbose log file is generated when copying the data from your Azure Storage account. Here is the order screen where you can enable the verbose log: When placing an export order for Data Box, you have the option to enable the collection of a verbose log. Assign a role at the resource group level, the user has access to all the Data Box orders within a resource group.įor more information on suggested Azure RBAC use, see Best practices for Azure RBAC.The user only has those permissions as defined by the roles to interact with that specific Data Box order only and nothing else. This role does not define any Storage account related permissions nor grants access to storage accounts. If they do not have access to a storage account, they can't even create a Data Box order to copy data to the account. Data Box Contributor - can only create an order to transfer data to a given storage account if they already have write access to a storage account.

They can’t access any other details related to storage accounts or edit the order details such as address and so on.

Data Box Reader - have read-only access to an order(s) as defined by the scope.The two roles that can be defined for the Azure Data Box service are: An Azure role determines the type of access – read-write, read-only, read-write to a subset of operations. Set up Azure roles at various scopes to control the access to the Data Box order. You can control who can access your order when the order is first created. View chain of custody logs including audit logs and order history Set up access control on the order via Azure RBACĭevice credentials access logged in Activity logs The following table shows a summary of the Data Box export order steps and the tools available to track and audit the order during each step. In the subsequent sections, any references to Data Box also apply to Data Box Heavy. The information in this article applies to both, Data Box and Data Box Heavy. This article describes in detail the various mechanisms or tools available to track and audit export orders for Data Box or Data Box Heavy. Corresponding to each step in the order, you can take multiple actions to control the access to the order, audit the events, track the order, and interpret the various logs that are generated. A Data Box or Data Box Heavy export order goes through the following steps: order, set up, data copy, return, and data erasure.
