With the Approve appssetting enabled, Workspace Owners and members with permission to manage apps have more control over apps installed to a workspace:
Set whether members can request apps they want to use
Approve and deny requests to install apps
Tip: Anyone with the ability to manage apps can view pending requests, app permissions, and approval decisions from the Manage Apps page in the App Directory.
Create a list of approved apps
Workspace Owners and members with permission to manage apps can limit members to installing only apps that are approved for the workspace. Members can find and install these apps from the list of Pre-Approved Apps in the App Directory.
Search for an app or service and select it from the list of search results.
From the app page, click Approve for Workspace.
Note: Apps installed before the Approve apps setting was enabled will remain active. Members will need to request approval for any new app installations.
Restricted apps
Restrict new apps or review previously restricted apps for your workspace:
Click Manage in the top right of the App Directory.
Here's how to prevent any app that isn't available in Slack's App Directory from being installed to your workspace:
From your desktop, click your workspace name in the top left.
Select Administration from the menu, then click Manage apps.
Click Permissions in the left column.
Toggle Only allow apps from the Slack App Directory on.
Review app requests
Apps and scopes
An app's scopes are a set of permissions governing what an app can do and access when installed in Slack.
When the Approve apps setting is on, members must send requests to install new apps. Members may also be prompted to send a request if an app's developer changes the scopes.
If you don't approve a request, the app will be restricted for all members. When you restrict an app's new scopes, members can continue using the existing version of the approved app.
To approve requests, select Approve for Workspace. To deny, choose Restrict for Workspace.
Custom integrations
Like apps listed in the App Directory, members can also request to install custom integrations (such as slash commands). Here are some things to keep in mind:
Members can request one custom integration at a time (e.g., one slash command).
Only the person who sends the request for a custom integration will be able to install it if it's approved.
Review app logs
App logs are available to help track which apps have been added, changed, or removed. App logs also note which apps and scopes have been approved or restricted.
When a member's Slack account is deactivated, they lose access to your workspace. Additionally, some apps they've created or installed may be disabled automatically. To help minimize disruption, Workspace Owners and Admins can re-enable deactivated apps to get them running again.
