What can an AI agent do with
See people in the workspace?
Lets the agent see the list of people in your workspace, their profile details, and whether they are online.
How to spot it
On a Slack connection or settings screen, this is users:read.
With it, an agent can
- List everyone in the workspace
- Look up a person's profile
- Check whether someone is online
It cannot, on its own
- See email addresses (that needs users:read.email)
- Change anyone's profile
What a bad day looks like
The agent pulls your full staff list with names and profiles, which could help a scammer target your team.
Set it up safer
- Only grant this if the agent needs to know who people are
Ask the company selling the agent
- Do you store our staff list?
- What do you use profile details for?
Source
Checked against Slack documentation on 2026-09-28. All Slack permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.