Skip to main content
All CollectionsKnowledge BaseSlack
How permissions work with elvex apps in Slack
How permissions work with elvex apps in Slack

elvex has separate permissions that control Slack usage. Learn what the options are and which ones are appropriate for your use case.

Updated over 7 months ago

Permissions management has some special considerations when using elvex apps within Slack. Since elvex apps can be connected to sensitive datasources, some care is needed to avoid accidentally sharing information in a public Slack channel.

Apps are disabled for Slack by default

Because apps can be connected to sensitive datasources, all elvex apps are, by default, disabled for use in Slack. This let's administrators enable only those apps which should be usable from within Slack.

App Slack permission settings

Slack permissions for elvex apps are controlled individually for each app. To adjust permissions when creating or editing an existing app, expand Slack Settings.

Once expanded, you'll see three possible permissions for your app:

  1. All Slack users - Any member of your Slack workspace can use this App. When enabled, this App will be usable within public channels. This setting is only available for Apps with Public visibility.

  2. Match elvex permissions - Slack access will be restricted to elvex users who have permission to use this app. Only members of your Slack workspace with an elvex account can use this app. If you set this option, you will only be able to use this app in Slack DMs.

  3. Disabled (Default) - The app will not be usable from within your Slack workspace. This is the default setting for all new apps.

All Slack users

With this setting, any member of your Slack workspace will be able to use this app with the exception of Slack Connect channels.

Why aren't Slack Connect channels supported?

Slack Connect channels, by definition, can contain users that are not part of your workspace and thus may not be a safe place for elvex to respond.

We may in the future support a setting that allows elvex apps to be used in Slack Connect channels as well.

Match elvex permissions

With this setting, elvex will check the email address of the Slack user initiating a request to the elvex Slack App. If that email address matches that of a user who has access to elvex and this App, they'll be able to use the App within Slack.

Apps with this setting can only be used via a Direct Message with the elvex App within Slack. This is the only way elvex can ensure that only users with current access to elvex can see responses elvex generates.

Private Apps can only use "Match elvex permissions"

Private Apps are not allowed to use the "All Slack users" setting as this would potentially allow unauthorized users to access the App and any connected private Datasources.

Disabled

The default setting for new apps. If selected, this app will not be usable within Slack and will not appear with the /elvex list command.

Did this answer your question?