From

Essentially:

$ su
# usermod -a -G vboxsf user

This adds the user to the security group ‘vboxsf’ that has create/edit permissions.