# App approval, app managers and org-level app installs

*Slack Administrator Study Guide · App and AI Administration and Automations · Last updated October 21, 2026 · https://www.certifyforce.com/study-guide/slack-administrator/app-and-ai-administration-and-automations/app-approval-app-managers-and-org-level-app-installs*

How a Workspace Owner turns on app approval, takes member requests and appoints app managers; what pre-approve, restrict and uninstall each do; the App Management Settings and org policies that enforce a security policy; and how Org Admins install, scope and remove apps across an Enterprise org.

- Certification: Salesforce Slack Administrator
- Exam section: App and AI Administration and Automations
- Study guide: https://www.certifyforce.com/study-guide/slack-administrator

**Official exam objective:**

> Assess a given scenario to determine how to manage app installation and approvals.

## What the exam expects

- Turn on app approval in a workspace, let members request apps with comments, and appoint app managers, knowing these are Workspace Owner permissions on every plan.
- Choose between pre-approving, restricting and uninstalling an app, and predict what happens to existing installs and to an approved app whose developer adds scopes.
- Pick the App Management Settings and org policies that meet a stated security policy.
- In an Enterprise org, install an app at the org level, add it to current and future workspaces, limit who can use it and where, and remove it from selected workspaces.

Key terms:
- **App approval:** the Require approved apps setting (Only allow pre-approved apps) that stops members installing apps nobody approved.
- **App manager:** a member or user group a Workspace Owner appoints to review app requests.
- **Restrict:** block an app so members cannot install or request it; existing installs keep working.
- **App Management policy:** the org policy (Require App Approval) that turns on app approval in every workspace of an Enterprise org.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Who turns on workspace app approval | Workspace Owners, on all plans | [Manage app approval](https://slack.com/help/articles/222386767-Manage-app-approval-for-your-workspace) |
| Default request reviewers | Workspace Owners; app managers added via Select App Managers | [Manage app requests](https://slack.com/help/articles/360024269514-Manage-app-requests-for-your-workspace) |
| Restricted app already installed | Members keep using it until uninstalled | [Manage app approval](https://slack.com/help/articles/222386767-Manage-app-approval-for-your-workspace) |
| New scopes restricted | Old version keeps working; update blocked until scopes approved | [Manage app requests](https://slack.com/help/articles/360024269514-Manage-app-requests-for-your-workspace) |
| Sign in with Slack | Off by default | [Manage app approval](https://slack.com/help/articles/222386767-Manage-app-approval-for-your-workspace) |
| Org App Management policy | Turns on app approval in every workspace | [Set organization-level policies](https://slack.com/help/articles/360038559694-Set-organization-level-policies-for-apps) |
| Token rotation policy | Unused refresh tokens expire after 30 days | [Set organization-level policies](https://slack.com/help/articles/360038559694-Set-organization-level-policies-for-apps) |
| Default for future workspaces | Adds an org-level app to new workspaces automatically | [Manage apps in an Enterprise organization](https://slack.com/help/articles/360000281563-Manage-apps-in-an-Enterprise-organization) |
| Approval app requirements | `admin.apps:write`, `app_requested`, installed on the org | [Managing app approvals](https://docs.slack.dev/admins/managing-app-approvals/) |

## Check yourself

- Why can't a Workspace Admin turn on Require approved apps?
- When does restricting an app's new scopes leave members with a working app?
- How do you approve a requested app without one of its optional scopes?
- Which Member Permissions settings limit an org app to one IdP group and two channels?

## Sources

- [Manage app approval for your workspace](https://slack.com/help/articles/222386767-Manage-app-approval-for-your-workspace)
- [Manage app requests for your workspace](https://slack.com/help/articles/360024269514-Manage-app-requests-for-your-workspace)
- [Manage app settings and permissions](https://slack.com/help/articles/1500009181142-Manage-app-settings-and-permissions)
- [Set organization-level policies for apps](https://slack.com/help/articles/360038559694-Set-organization-level-policies-for-apps)
- [Manage apps in an Enterprise organization](https://slack.com/help/articles/360000281563-Manage-apps-in-an-Enterprise-organization)
- [Managing app approvals](https://docs.slack.dev/admins/managing-app-approvals/)
- [Optimize App Management in Slack](https://trailhead.salesforce.com/content/learn/modules/app-governance-in-slack/manage-apps)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 15 linked practice questions, and unlimited timed mock exams are included with the Slack Administrator pack (USD $19): https://www.certifyforce.com/practice-exams