One of the reasons for which the user's permissions are not properly reflected in Box may be because Provisioning stopped working. You can check that from your Admin Console -> Applications -> Box -> Provisioning -> Test API Credentials. You may also want to check if there are any error messages in your Admin Console -> Dashboard -> Tasks. For further troubleshooting please open a ticket with Support.
Thank you, Paul Auer Customer Support Engineer | Okta