« All posts

Slack Bot Token vs User Token Scopes: Least Privilege in Practice

Learn the differences between Slack bot and user token scopes. Requesting the right permissions can expedite your app's approval process.

The quickest way to have a Slack app rejected from the Marketplace is to request unjustified scopes, often stemming from a misunderstanding between bot and user tokens. Bot tokens are linked to the app's bot user, while user tokens act on behalf of an individual. Correctly identifying the necessary token type can prevent unnecessary permission requests and streamline the app's approval process.