To control which apps people can install in a Slack workspace, a Workspace Owner can turn on approval for apps, review each app’s requested permissions (called scopes), and approve, restrict, or route requests to app managers. App approval controls installation; separate settings govern other app behaviors, and Enterprise organizations can add organization-wide policies.
Require approval before members install apps
- In Slack desktop, open Admin in the sidebar, then select Apps and workflows and App Management Settings.
- Edit Require approved apps and enable Only allow pre-approved apps. Slack says app approval is available on all plans. Owners can pre-approve or restrict apps, allow members to submit app requests, and appoint app managers. See Slack’s workspace app-management instructions.
With approval required, decide whether members may request apps that are not already approved. Allowing requests creates a review path rather than simply blocking every unapproved installation; Slack refers to these submissions as “app requests.”
Review an app request before approving it
Slack may send requests in messages or to a configured channel. You can also manage them from the Requests to install tab. Check the app name, who requested it, the requested scopes, and any comments before choosing to approve or restrict the app. The review options are described in Slack’s app-approval guidance.
Assess what the app can access and do
Scopes define the information an app can access and the actions it can take. Review those two questions separately:
#1 Best Overall
- Provides a Vital On-The-Road Reference for Drivers On CSA Issues
- Covers All Information Drivers Need to Operate Successfully Under CSA
- Provides Fingertip Access of the Seven Basics
- How to Prepare for Roadside Inspections
- What can it see? Look for access to data such as messages, files, channel names, or member profiles.
- What can it do? Check whether it can post, modify content, create channels, or take other actions in the workspace.
Compare every requested scope with the app’s stated purpose. If Slack presents optional scopes, approve only those the app needs. Also consider the provider’s privacy policy, how long the access is needed, any associated cost, and available security and compliance information. Slack recommends trusting the app provider and offers security recommendations for using apps.
A Marketplace listing is not a guarantee that an app is suitable for your workspace. Slack states: “Though we review all apps in the Slack Marketplace, including their requested permissions, Slack doesn’t endorse or certify these apps.” The statement appears on Slack’s security recommendations page.
Choose an approval approach that fits your workspace
| Approach | Who controls installation and review | What to consider |
|---|---|---|
| Open installation | Members can install apps without waiting for app approval. | Offers less centralized review of requested scopes before installation. |
| Pre-approval with app requests | Workspace Owners or delegated app managers review requests; members can request apps if that option is enabled. | Provides a review gate while giving members a way to ask for needed apps. Reviewers can select necessary optional scopes when offered. |
| Organization-wide policy | Org Owners can apply app-management policies across an Enterprise organization; workspace-level managers handle requests for their workspaces. | Adds a higher policy layer, but existing workspace installations are not automatically removed by an organization-level restriction. |
Slack documents these controls in its workspace approval guidance and Enterprise organization app-management guidance. The appropriate approach depends on your organization’s access policy and the capacity to review requests.
Revisit approvals when app permissions change
An app developer’s scope changes may trigger a new request. If the new scopes are restricted, people may continue using the already-installed app version, but they cannot use or install the updated version until it is approved. Reassess the changed scopes against the app’s purpose instead of treating the original approval as permanent. Slack explains this behavior in its app-approval documentation.
Rank #3
Configure app settings separately from approval
App approval is only one part of Slack’s app management. Workspace Owners can also configure whether installations are limited to Slack Marketplace apps, whether Multi-Channel Guests can use shortcuts, whether the relevant app must be installed for rich link previews, and whether to enable or limit Sign in with Slack. These settings can be adjusted whether or not app approval is enabled. Marketplace-only installation does not prevent members from creating and installing internal apps. See Slack’s app-management settings documentation.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Use Enterprise policies and request automation carefully
On Enterprise, Org Owners can apply app-management policies across the organization, including requiring approval across its workspaces. Workspace Owners or app managers still manage requests for their individual workspaces. An organization-level restriction does not remove apps already installed in a workspace; a Workspace Owner or app manager must remove those separately. Details are in Slack’s Enterprise organization app-management instructions.
Automate only after testing the rules
Slack supports rules that can approve, restrict, dismiss, or flag app requests based on conditions. Administrators can rate scopes by risk and use those ratings in rules. Because a rule can make approval decisions automatically, test it in a test environment before using it in production. Slack documents app-approval automation.
Know what the admin approval API changes
For Enterprise approval processes at scale, Slack documents an admin approval API. Its instructions describe this API approach as Enterprise-only and warn that installing an admin app changes the approval workflow and disables workspace-level UI options. Review Slack’s admin approval API documentation before changing the workflow.
Recommended Free Tools
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
