Policies and Settings22% of the exam
Org, workspace and system roles and permissions
What each admin role can do at the workspace and org level (Primary Owner, Owner, Admin), which tasks are org-only in an Enterprise org, who resets 2FA, and how system roles and custom roles delegate narrow admin tasks under least privilege.
Understand the administrative roles within Slack and their permissions for Slack settings.
~7 min read · 9 practice questions ·
What the exam expects
- Distinguish Primary Owner, Owner and Admin at the workspace level, including who manages billing and who can delete or transfer a workspace.
- Identify the tasks that belong to Org Owners and Org Admins in an Enterprise org (deactivation, new workspaces, IdP groups, domain claiming) and the ones only Org Owners hold (SSO configuration).
- Route a 2FA lockout to the role allowed to reset it.
- Pick the system role that delegates a task under least privilege, and know who assigns system roles and that guests can't hold them.
- Recommend a custom role when no system role fits, and know who creates it.
Key terms:
- Primary Owner: the single highest-privilege person in a workspace or org; only they transfer ownership.
- Org Owner / Org Admin: Enterprise org administrators above the workspace roles; Org Admins manage org-level settings and policies.
- System role: a predefined admin permission set (such as Users Admin) assigned to full members or IdP groups.
- Custom role: an Enterprise-only admin role built from chosen permissions.
Key facts
Delete or transfer a workspace
- Detail
- Workspace Primary Owner only
Workspace Admins and billing
- Detail
- Can't access the Billing page or manage billing details
Transfer org ownership
- Detail
- Org Primary Owner only
Configure SSO in an Enterprise org
- Detail
- Org Owners; Org Admins only manage SSO exclusions
Deactivate an account in an Enterprise org
- Detail
- Org Owner/Admin, not Workspace Owner/Admin
Turn off 2FA for a Workspace Owner
- Detail
- Workspace Primary Owner only
Turn off 2FA for a Workspace Admin
- Detail
- Workspace Owners only
Who can hold system roles
- Detail
- Members and IdP groups, not guests or Frontline Members
Who assigns org-level system roles
- Detail
- Org Primary Owner and org-level Roles Admins
Who creates custom roles
- Detail
- Org Primary Owner and org-level Roles Admins (Enterprise plans)
Sources for this section (6)
- Why does a Workspace Admin fit someone who manages members but must not see billing?
- When an Org Admin opens SSO settings, what can they change?
- Which system role lets someone manage who holds system roles without becoming an Org Owner?
- Who can turn off 2FA for a locked-out Workspace Owner?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Slack Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 38 lessons of the Slack Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (9 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams