Policies and Settings22% of the exam

App approval, app managers and org app policies

How to recommend Slack app governance: turning on app approval, what restricting and scope changes do to installed apps, Slack's safest app management settings, app managers, org-level app policies in an Enterprise org, and the security questions for internally built apps.

Official exam objective
Provide guidance on app approval and the recommended settings.

~7 min read · 7 practice questions ·

What the exam expects

  • Turn on app approval for a workspace and explain what pre-approving and restricting do, including to apps already installed.
  • Explain what happens when an approved app's developer adds scopes.
  • Recommend Slack's safest app management settings, including app managers and where requests go.
  • Distinguish an org app management policy from workspace app approval in an Enterprise org, and know that installation policies apply only going forward.
  • Draft the security review questions for third-party and internally built apps.

Key terms:

  • App approval: the Require approved apps setting; members can install only pre-approved apps and request others.
  • Scopes: the permissions that govern what an app can do and access once installed.
  • App managers: members a Workspace Owner appoints to review app requests alongside Workspace Owners.
  • App management policy: an Enterprise org policy that turns on app approval in every workspace.
  • Slack Marketplace: Slack's app catalog (Trailhead still calls it the Slack App Directory).

Key facts

Default
Detail
Members can install apps without approval
Turn on approval
Detail
Require approved apps, Only allow pre-approved apps (Workspace Owners, all plans)
Restricting an installed app
Detail
Members keep using it until it's uninstalled
Restricted new scopes
Detail
Existing version keeps working; update blocked until approved
Default reviewers
Detail
Workspace Owners; app managers can be added
Sign in with Slack
Detail
Off by default
Org app management policy
Detail
Turns on app approval for every workspace (Enterprise plans)
Request review under an org policy
Detail
Workspace Owners and app managers for their workspaces
Marketplace-only policy
Detail
Applies only to installs and updates after it's turned on
Slack Marketplace review
Detail
Reviewed, not endorsed or certified
Sources for this section (4)
  • Why do members still use an app you just restricted?
  • When can members use an approved app's updated version that requests new scopes?
  • Who reviews app requests in a workspace after an Org Owner sets an app management policy?
  • Why doesn't a Marketplace-only org policy stop an internal app installed earlier?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Slack Consultant pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 38 lessons of the Slack Consultant guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Inline practice questions and one-click topic practice (7 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Unlimited timed practice exams

Practice for the Slack Consultant exam