I'm noticing a trend where random Slack apps are being installed by our marketing or support teams without any prior review. It's concerning because some apps have overly broad permissions, like reading all messages or writing in any channel. Unfortunately, Slack's admin tools aren't catching these apps in real-time, which makes it difficult to monitor. Has anyone found an effective workflow or tools to keep track of these rogue apps?
4 Answers
I've had similar issues with apps sneaking past me. I’ve set up alert rules to monitor for scopes that aren’t on our approved list, which has been really helpful in catching new installations quickly. It’s worth trying!
In Slack Enterprise, only admins have the power to install and manage the list of allowed integrations. This can help keep things in check. You should look into that option!
You could consider creating your own app in Slack to track permissions. With an admin API key, you can use PowerShell to loop through all installed apps, checking their permissions and installation dates. I don't do this myself because it's a bit advanced, but it could automate some oversight!
In any Slack plan, you have the option to restrict end users from installing apps. Just head to the App Management Settings and modify the permissions there. This can really limit the rogue installations!
Why not just check directly in Slack? Are you saying it'll run daily and report updates on new permissions or apps?