Set organisation policies for apps on Enterprise Grid

By default, members of an Enterprise Grid organisation can install any app to workspaces that they belong to. Org owners can set organisation policies for all workspaces in their org to manage app installation and use.

What to expect

• Setting an app management policy turns on app approval for every workspace in an org. When app approval is enabled, members can only use apps that have been approved for their workspaces.
  
• Org owners can approve or restrict apps for their entire org, but workspace owners and app managers will be responsible for reviewing app requests for workspaces that they manage.
• Org owners can also set org policies to limit members to installing apps from the Slack Marketplace and determine whether multi-channel guests can use shortcuts.

Set an app management policy for your org

Follow the steps below to turn on app approval for all workspaces in your org:

1. From your desktop, click your organisation name in the sidebar.
2. Hover over Tools & settings, then click Organisation settings.
3. From the left sidebar, click on Settings, then select Organisation policies.
4. Click the Apps tab at the top of the page.
5. Next to App management, click Add policy.
6. Tick the box next to Require app approval.
7. Select Save policy. Then, click Create policy.

Note: If you don’t set an app management policy for your org, workspace owners can still choose to enable app approval for workspaces that they manage.

Manage Sign in with Slack permissions

Some third-party apps offer the option to sign in to their service with Slack account credentials. By default, workspace owners can choose whether members can sign in to other services with their Slack account. If an app management policy has been set, org owners can remove workspace owners' ability to manage Sign in with Slack permissions and decide if apps with the Sign in with Slack identity scope require approval:

1. From your desktop, click your organisation name in the sidebar.
2. Hover over Tools & settings, then click Organisation settings.
3. From the left sidebar, click on Settings, then select Organisation policies.
4. Click the Apps tab at the top of the page.
5. Next to App management, click onAdd policy. If there’s already an app management policy in place, click on the  pencil icon to choose your Sign in with Slack permissions.
6. Under People who can manage Sign in with Slack restrictions, select Org owners from the drop-down menu.
7. Tick or untick the box next to Don’t require pre-approval for Sign in with Slack apps.
8. Select Save policy. Then, click Create policy.

Set other app installation policies

Org owners can also choose to set two other app installation policies, whether app approval has been turned on for all workspaces in their org or not:

• Slack Marketplace installations
  Only allow members to install apps from the Slack Marketplace.
• Guest app use restrictions
  Allow multi-channel guests to use slash commands and app shortcuts in channels that they belong to.

1. From your desktop, click your organisation name in the sidebar.
2. Hover over Tools & settings, then click Organisation settings.
3. From the left sidebar, click on Settings, then select Organisation policies.
4. Click the Apps tab at the top of the page.
5. Next to the app policy that you’d like to set, click Add policy.
6. Tick the box next to the policy description.
7. Select Save policy. Then, click Create policy.

Who can use this feature?

• Org owners and org admins
• Available on the Enterprise Grid subscription