1. Slack Help Center
  2. Workspace administration
  3. Manage apps & workflows
    4. Manage access to steps from third-party apps in Workflow Builder

Manage access to steps from third-party apps in Workflow Builder

Who can use this feature?
  • Org Owners/Admins and Workspace Owners/Admins
  • Available on paid plans

When members of your workspace or Enterprise Grid organization create workflows in Workflow Builder, they can add steps to do a variety of things. Steps from third-party apps are called connector steps, and they allow a workflow to take actions in another service. Read on to learn more about connectors and how to manage access.

What to expect

  • If app approval is required, members will need to request access to connectors. By default, all connectors will be visible for members of your workspace or Enterprise Grid org to request. Some connectors include multiple steps, while others may only provide one.
  • An automation rule will send requests for admins to review (either from a direct message from Slackbot or the admin dashboard). Learn more about this rule and how to make changes below.
  • Once a connector has been used in a workflow (or a request has been approved), you can set different access permissions for individual steps and specify allowed domains if they’d like.


Review connector requests

Review requests sent by Slackbot

Requests from Slackbot will include the name of the connector, the person who requested it, a list of steps the connector includes and what they do, and additional comments if available. Here’s how to review them:

  1. When you receive a request, open your DM with Slackbot.
  2. Click Approve or Deny. Denying a request will remove access to the connector in Workflow Builder.

When a request is approved or denied, Slack will update the original request message to reflect the status and the person who made the request will be notified.

Review requests from the dashboard

You can also view and manage connector requests from the Requests section of the admin dashboard: 

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Manage apps.
  3. From the left sidebar, click Requests.
  4. Next to a connector, click the  three dots icon.
  5. Select Approve or Deny.
  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Requests.
  4. Next to a connector, click the  three dots icon.
  5. Select Approve or Deny.

Tip: You can view all approved connectors from the Resolutions section of the Manage apps page (Pro and Business+ plans) or Resolutions in the Integrations section of the admin dashboard (Enterprise Grid plan).


Manage automation rules

By default, the automation rule for connector requests is set to send all requests for review. To automatically approve or restrict certain connectors, you can adjust the rule:

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Manage apps.
  3. From the left sidebar, click Requests.
  4. Click Automation Rules to view a list of your existing rules, then click the  three dots icon next to the Connector requests rule and select Edit rule.
  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Organization settings.
  3. From the left sidebar, click Integrations, then click Requests.
  4. Click Automation Rules to view a list of your existing rules, then click the three dots icon next to the Connector requests rule and select Edit.

Note: If you remove or pause this rule, any rules you’ve configured for app approval will apply to connectors.


Manage access to individual steps

Once a connector has been added to a workflow (or a request has been approved), you can set different access permissions for individual steps. 

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Manage apps.
  3. From the left sidebar, click Workflow steps, then select a connector from the list.
  4. Next to the step you’d like to manage, click the  three dots icon.
  5. Select Edit who can use this step.
  6. Choose an option from the dropdown menu, then click Save.
  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Select a connector from the list and click the Steps tab.
  5. Next to the step you’d like to manage, click the  three dots icon.
  6. Select Edit who can use this step.
  7. Choose an option from the dropdown menu, then click Save.


Manage allowed domains

To add connector steps to a workflow, the person building the workflow will need to connect their account. By default, people will be able to use an account on any domain, but you can create an allowlist to specify which domains members of your workspace or org can use.

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Manage apps.
  3. From the left sidebar, click Workflow steps.
  4. Click the   three dots icon next to a connector and select Manage domains and authentication.
  5. Add your domains, then click Save.
  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Click the   three dots icon next to a connector and select Manage domains and authentication.
  5. Add your domains, then click Save.


Manage authentication permissions

Note: This permission is rolling out gradually. We appreciate your patience as we make it available to all customers.

Workflow creators who add connector steps to their workflows can choose whether people authenticate with their own account for other services or use the creator’s credentials. To prevent creators from allowing people to authenticate with their credentials, follow the steps below:

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Manage apps. 
  3. From the left sidebar, click Workflow steps. 
  4. Click the   three dots icon next to a connector and select Manage domains and authentication. 
  5. Below How workflow users authenticate, select Require the user's account. 
  1. From your desktop, click your workspace name in the top left.
  2. Select Settings & administration from the menu, then click Organization settings. 
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Click the   three dots icon next to a connector and select Manage domains and authentication.
  5. Below How workflow users authenticate, select Require the user's account. 
Who can use this feature?
  • Org Owners/Admins and Workspace Owners/Admins
  • Available on paid plans

When members of your workspace or Enterprise Grid organization create workflows in Workflow Builder, they can add steps to do a variety of things. Steps from third-party apps are called connector steps, and they allow a workflow to take actions in another service. Read on to learn more about connectors and how to manage access.

What to expect

  • If app approval is required, members will need to request access to connectors. By default, all connectors will be visible for members of your workspace or Enterprise Grid org to request. Some connectors include multiple steps, while others may only provide one.
  • An automation rule will send requests for admins to review (either from a direct message from Slackbot or the admin dashboard). Learn more about this rule and how to make changes below.
  • Once a connector has been used in a workflow (or a request has been approved), you can set different access permissions for individual steps and specify allowed domains if they’d like.


Review connector requests

Review requests sent by Slackbot

Requests from Slackbot will include the name of the connector, the person who requested it, a list of steps the connector includes and what they do, and additional comments if available. Here’s how to review them:

  1. When you receive a request, open your DM with Slackbot.
  2. Click Approve or Deny. Denying a request will remove access to the connector in Workflow Builder.

When a request is approved or denied, Slack will update the original request message to reflect the status and the person who made the request will be notified.

Review requests from the dashboard

You can also view and manage connector requests from the Requests section of the admin dashboard: 

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Manage apps.
  3. From the left sidebar, click Requests.
  4. Next to a connector, click the  three dots icon.
  5. Select Approve or Deny.
  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Requests.
  4. Next to a connector, click the  three dots icon.
  5. Select Approve or Deny.

Tip: You can view all approved connectors from the Resolutions section of the Manage apps page (Pro and Business+ plans) or Resolutions in the Integrations section of the admin dashboard (Enterprise Grid plan).


Manage automation rules

By default, the automation rule for connector requests is set to send all requests for review. To automatically approve or restrict certain connectors, you can adjust the rule:

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Manage apps.
  3. From the left sidebar, click Requests.
  4. Click Automation Rules to view a list of your existing rules. Then, click the  three dots icon next to the Connector requests rule and select Edit rule.
  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Organization settings.
  3. From the left sidebar, click Integrations, then click Requests.
  4. Click Automation Rules to view a list of your existing rules. Then, click the three dots icon next to the Connector requests rule and select Edit.

Note: If you remove or pause this rule, any rules you’ve configured for app approval will apply to connectors.


Manage access to individual steps

Once a connector has been added to a workflow (or a request has been approved), you can set different access permissions for individual steps. 

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Manage apps.
  3. From the left sidebar, click Workflow steps, then select a connector from the list.
  4. Next to the step you’d like to manage, click the  three dots icon.
  5. Select Edit who can use this step.
  6. Choose an option from the dropdown menu, then click Save.
  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Select a connector from the list and click the Steps tab.
  5. Next to the step you’d like to manage, click the  three dots icon.
  6. Select Edit who can use this step.
  7. Choose an option from the dropdown menu, then click Save.


Manage allowed domains

To add connector steps to a workflow, the person building the workflow will need to connect their account. By default, people will be able to use an account on any domain, but you can create an allowlist to specify which domains members of your workspace or org can use.

Pro and Business+ plans

Enterprise Grid plan

  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Manage apps.
  3. From the left sidebar, click Workflow steps.
  4. Click the  three dots icon next to a connector and select Manage domains and authentication.
  5. Add your domains, then click Save.
  1. From your desktop, click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Organization settings.
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Click the  three dots icon next to a connector and select Manage domains and authentication.
  5. Add your domains, then click Save.


Manage authentication permissions

Note: This permission is rolling out gradually. We appreciate your patience as we make it available to all customers.

Workflow creators who add connector steps to their workflows can choose whether people authenticate with their own account for other services or use the creator’s credentials. To prevent creators from allowing people to authenticate with their credentials, follow the steps below:

Pro and Business+ plans

Enterprise Grid plan

  1. Click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Manage apps. 
  3. Click Workflow steps in the left column. 
  4. Click the   three dots icon next to a connector and select Manage domains and authentication.
  5. Below How workflow users authenticate, select Require the user's account. 
  1. Click your workspace name in the sidebar.
  2. Select Tools & settings from the menu, then click Organization settings. 
  3. From the left sidebar, click  Integrations, then click Workflow steps.
  4. Click the   three dots icon next to a connector and select Manage domains and authentication.
  5. Below How workflow users authenticate, select Require the user's account. 

Awesome!

Thanks so much for your feedback!

If you’d like a member of our support team to respond to you, please send a note to feedback@slack.com.

Was this article helpful?Yes, thanks!Not really
Sorry about that! What did you find most unhelpful?
0/600
Submit article feedback

If you’d like a member of our support team to respond to you, please send a note to feedback@slack.com.

Oops! We're having trouble. Please try again later!