What can an AI agent do with
Workspace admin (user token)?
A special admin permission. If a workspace admin who is allowed to grant it installs the app, it can see sign-in logs and which members are billable, and manage member accounts through Slack's user management (SCIM) API. User token only. Slack says this is not a complete list of what it allows.
How to spot it
On a Slack connection or settings screen, this is admin.
With it, an agent can
- See workspace access (sign-in) logs
- See which members count as billable
- See logs of installed apps and integrations
- Add, change, or deactivate member accounts through the SCIM API on Business+ or Enterprise plans
It cannot, on its own
- Work unless the person installing it is an admin allowed to grant it
- Use the SCIM API on plans below Business+
What a bad day looks like
A tricked agent deactivates members through the SCIM API, and Slack notes it is possible to de-provision an entire workspace this way.
Set it up safer
- Do not give an AI agent admin; grant only the specific permissions it needs
- If it truly needs admin, install it from a separate admin account you can shut off
Ask the company selling the agent
- Why does the agent need admin at all?
- Which admin actions will it take, and are they logged?
- Can it work without admin?
Source
Checked against Slack documentation on 2026-09-28. All Slack permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.