The Salesforce for Slack app uses a set of permission scopes to read, write, and interact with Salesforce.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions |
Salesforce for Slack is configured using these permission scopes.
| Permission scope | Allows Salesforce for Slack To |
|---|---|
| app_mentions:read | See a message when a user tags @Salesforce for Slack |
| channels:join | Join a public channel in a workspace. Users don’t have to explicitly invite the app to a channel. |
| channels:manage | Create a channel for a notification that's triggered by Salesforce |
| channels:read | See information about a channel so that it can determine how to respond |
| chat:write | Post messages in approved channels and conversations. Salesforce for Slack uses this scope to send Slack notifications from Salesforce. |
| chat:write.public | Send messages to channels that the app isn’t a member of |
| commands | Add shortcuts and slash commands that you can use. You can authenticate and connect with the Salesforce platform using the /sfhq-connect command. |
| groups:read | View information about private channels that Salesforce for Slack has been added to |
| groups:write | Manage private channels that Salesforce for Slack has been added to and create channels |
| im:read | View information about direct messages that Salesforce for Slack has been added to |
| im:write | Start a direct message with a Slack user |
| incoming-webhook | Create one-way webhooks to post messages to a specific channel |
| links:read | View URLs in a message |
| links:write | Show a preview of URLs in a message |
| mpim:read | View information about group direct messages that Salesforce for Slack has been added to |
| mpim:write | Start a group message with Slack users. The app uses this scope to send notifications from Salesforce to specific users. |
| team:read | View the name, email domain, and icon for workspaces that the app is connected to |
| users:read | View people in a workspace. Salesforce for Slack reads user emails and users to match their identity across apps that share the same user mapping. This scope is used to enable users to authenticate to Salesforce once across multiple Slack apps. |
| users:read.email | Reads user emails and users to match their identity across apps that share the same user mapping. This scope is used to enable users to authenticate to Salesforce once across multiple Slack apps. |