Slack is at its most powerful when you connect it to tools you already use. With your permission, apps and integrations can access your workspace’s information to help you automate tasks and get work done.
To make your data more secure, it’s important to understand how apps work with Slack. That way you can come up with a policy for reviewing and approving integrated tools.
All apps in our App Directory have a unique set of permissions, called scopes, that tell you what information the app can access and how that information can be used. Generally speaking, an app will ask permission to do the following:
An app's full set of permissions are listed when the app is installed. You can find a detailed list of scopes in our API documentation.
Note:For a list of a specific app’s scopes and permissions, click on the App permissions tab in the App Directory. You’ll find a description of what each scope allows the app to access in your workspace.
Workspace Owners can control exactly which apps get installed by creating lists of approved and restricted apps. In the App Directory, members will clearly see which apps are approved for the workspace, which apps need approval and which apps are not allowed.
👨✈️ Decide who can manage apps and integrations
By default, only Workspace Owners can manage apps. With the Approve apps setting turned on, Owners can allow selected members to manage approved apps and respond to app installation requests.
Turn on app approval
From your desktop, click your workspace name in the top left.
Select Administration from the menu, then click Manage apps.
Select Permissions from the left-hand menu.
Toggle on Approve apps.
Tip: For apps that require approval, set expectations with your team by letting them know how long it’ll take to review their app requests.
4. Develop an approval policy
Whether members are requesting apps or installing them as needed, protect your workspace by developing an app approval policy aided by your IT, security and policy teams.
Carefully consider internal protocols relating to data management to devise a policy that feels right for your team. Here are some questions to include in your review:
Is there a valid business reason for using the app?
Are other apps being used for this purpose?
How long will the app be needed in the workspace?
How often will the app post to a channel?
Are there any additional costs or licences?
Creating internal integrations
Who will maintain the integration?
Are additional servers, databases or integrations needed?