App and AI Administration and Automations20% of the exam
App approval, app managers and org-level app installs
How a Workspace Owner turns on app approval, takes member requests and appoints app managers; what pre-approve, restrict and uninstall each do; the App Management Settings and org policies that enforce a security policy; and how Org Admins install, scope and remove apps across an Enterprise org.
Assess a given scenario to determine how to manage app installation and approvals.
~8 min read · 15 practice questions ·
What the exam expects
- Turn on app approval in a workspace, let members request apps with comments, and appoint app managers, knowing these are Workspace Owner permissions on every plan.
- Choose between pre-approving, restricting and uninstalling an app, and predict what happens to existing installs and to an approved app whose developer adds scopes.
- Pick the App Management Settings and org policies that meet a stated security policy.
- In an Enterprise org, install an app at the org level, add it to current and future workspaces, limit who can use it and where, and remove it from selected workspaces.
Key terms:
- App approval: the Require approved apps setting (Only allow pre-approved apps) that stops members installing apps nobody approved.
- App manager: a member or user group a Workspace Owner appoints to review app requests.
- Restrict: block an app so members cannot install or request it; existing installs keep working.
- App Management policy: the org policy (Require App Approval) that turns on app approval in every workspace of an Enterprise org.
Key facts
Who turns on workspace app approval
- Detail
- Workspace Owners, on all plans
Default request reviewers
- Detail
- Workspace Owners; app managers added via Select App Managers
Restricted app already installed
- Detail
- Members keep using it until uninstalled
New scopes restricted
- Detail
- Old version keeps working; update blocked until scopes approved
Sign in with Slack
- Detail
- Off by default
Org App Management policy
- Detail
- Turns on app approval in every workspace
Token rotation policy
- Detail
- Unused refresh tokens expire after 30 days
Default for future workspaces
- Detail
- Adds an org-level app to new workspaces automatically
Approval app requirements
- Detail
admin.apps:write,app_requested, installed on the org
Sources for this section (5)
- Why can't a Workspace Admin turn on Require approved apps?
- When does restricting an app's new scopes leave members with a working app?
- How do you approve a requested app without one of its optional scopes?
- Which Member Permissions settings limit an org app to one IdP group and two channels?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Slack Administrator pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 32 lessons of the Slack Administrator guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (15 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams