With the Approve apps setting enabled, Workspace Owners and members with permission to manage apps have more control over apps installed to a workspace:

• Pre-approve apps for members to install
• Restrict installations to only apps listed in the Slack App Directory
• Set whether members can request apps they want to use 
• Approve and deny requests to install apps

Tip: Anyone with the ability to manage apps can view pending requests, app permissions, and approval decisions from the Manage Apps page in the App Directory.

 

Create a list of approved apps

Workspace Owners and members with permission to manage apps can limit members to installing only apps that are approved for the workspace. Members can find and install these apps from the list of Pre-Approved Apps in the App Directory.

Approved apps

Here's how to create a list of approved apps: 

Note: Apps installed before the Approve apps setting was enabled will remain active. Members will need to request approval for any new app installations.

Restricted apps

Restrict new apps or review previously restricted apps for your workspace:

Tip: To prevent guests from using slash commands and Actions, adjust Permissions in the App Directory.

 

Only allow apps from the App Directory

Here's how to prevent any app that isn't available in Slack's App Directory from being installed to your workspace:

 

Review app requests

Apps and scopes

An app's scopes are a set of permissions governing what an app can do and access when installed in Slack.

When the Approve apps setting is on, members must send requests to install new apps. Members may also be prompted to send a request if an app's developer changes the scopes.

If you don't approve a request, the app will be restricted for all members. When you restrict an app's new scopes, members can continue using the existing version of the approved app.

To approve requests, select Approve for Workspace. To deny, choose Restrict for Workspace.

Custom integrations

Like apps listed in the App Directory, members can also request to install custom integrations (such as slash commands). Here are some things to keep in mind:

• Members can request one custom integration at a time (e.g., one slash command).
• Only the person who sends the request for a custom integration will be able to install it if it's approved.

 

Review app logs

App logs are available to help track which apps have been added, changed, or removed. App logs also note which apps and scopes have been approved or restricted.

To view app logs, visit your workspace's Activity Log page, or export your workspace's data.

 

Manage deactivated apps and integrations

When a member's Slack account is deactivated, they lose access to your workspace. Additionally, some apps they've created or installed may be disabled automatically. To help minimize disruption, Workspace Owners and Admins can re-enable deactivated apps to get them running again.