Slack Capabilities
Last updated: October 8, 2024
After this article...
You'll understand the capabilities our Slack integration provides, and how Lumos interacts with the Slack API.
Send messages
Across the Lumos product, we've embedded Slack-first messaging that meets employees where they work to make decisions. For some examples, see the articles below:
AppStore requests and approvals:📄 Requesting Access to an App from Slack and📄 Approving Access Requests
Inactivity Workflows:📄 Inactivity Workflows 101
Renewal reminders:📄 How-To: Set Up Renewal Reminders
Access reviews:📄 Access Review Notifications
View users
The mapping between Slack user statuses and Lumos user account statuses is below.
Slack User Status | Lumos Account Status |
active | Active |
deactivated | Suspended |
deleted (Slack no longer returns a user) | Deprovisioned |
For Enterprise Grid customers, Lumos will read the list of teams it can access, then get all users from those teams.
Lumos will not surface the Slackbot account in the account list, but other bots will appear.
Slack API endpoints:
Get Teams (Enterprise Grid): https://api.slack.com/methods/admin.teams.list
Get Users: https://api.slack.com/methods/users.list
View a user's entitlements
Lumos can retrieve the following user entitlements from Slack.
Role - Whether the user is a Slack Workspace Primary Owner, Workspace Owner, Workspace Admin, Single Channel Guest, Multi Channel Guest, Invited Member, or Full Member.
Billing Type - [Only supported for Enterprise Grid] This value will tell you whether a Slack account is Paid or Free. A user account is Free if it meets one of the following conditions.
The Role of the account is "Single Channel Guest" or "Invited Member".
The account has been deactivated in Slack.
The account is a bot.
The account's last activity is greater than 28 days ago.
Slack API endpoint: https://api.slack.com/methods/users.list
View last activity
This field is only available if your Slack instance is on the Enterprise Grid plan.
In Lumos, the Last Activity value for Slack represents the last date that someone posted a message or read at least one channel or direct message.
Notes
Slack only returns this data for the last 90 days, but Lumos caches old values if we don't get new ones. So for example, you can have users where their Last Activity was 9+ months ago in Lumos if we have not received any net new activity since the first time it synced.
A blank value here means that the user has not had any Slack activity at least 90 days prior to you connecting the Slack integration to Lumos.
The data you see in Lumos should match the "Last Active" timestamp in Slack's Org Analytics
Slack API endpoint: https://api.slack.com/methods/admin.users.list (we use the last_active_ts field)
Suspend a user
AppStore | Offboarding | Access Reviews | License Management |
N/A | ✅ | ✅ | ✅ |
In Lumos, suspending a Slack user marks their Account Status as "Suspended".
In Slack, this action wipes all valid sessions on all devices for a given user and sets the user to deactivated.
This action is only supported if you are on the Enterprise Grid plan.
This action reclaims a license in Slack.
Slack API endpoints:
Session Wipe: https://api.slack.com/methods/admin.users.session.reset
Delete User: https://api.slack.com/admins/scim#delete-users-id
Provision a user
AppStore | Offboarding | Access Reviews | License Management |
✅ | N/A | N/A | N/A |
In Lumos, provisioning a Slack user has no impact on Lumos Slack user data until the next Slack user sync runs. Once the sync runs, a user with a "Full Member" Role will be added to the Slack users table.
In Slack, this action creates a user with a "Full Member" role using their email, first name, and last name in Lumos.
This action is only supported if you are on the Slack Business+ plan or above.
This action adds a license in Slack.
Slack API endpoint: https://api.slack.com/admins/scim#post-users