Systems for managing multiple shared content objects using access tokens that cover the multiple shared content objects are disclosed. A method commences upon assigning the shared content objects to have individual permissions grantable to two or more users. A user configures a shareable unit to include attributes that describe a plurality of constituent shared content objects stored on one or more storage devices in the cloud-based storage system. An administrator or other user configures allow/deny access privileges to the shareable unit. Upon receiving a request from a user to access the shareable unit, a single access token is generated to provide access to the shared content objects that comprise the shareable unit. Ongoing access to the shareable unit is accomplished using the single access token, without the need to provision an access token or tokens pertaining to individual ones of the constituent shared content objects of the shareable unit.