Does anyone have a good explanation of the permissions the Prefect Slack app needs? Our security-conscious admins were not happy that the app needed the "identify" permission, other apps that posts to slack is OK with only the "incoming-webhook" permission. Any help would be appreciated, as I need to document the decision to approve the Prefect app.

I think it’s this

Yes, basically the question was why the "identify" permission was needed. I have checked out the permissions of some other apps that simply post to slack, and they do not require "identify". What does prefect do that requires that permission? Also (in case anyone happens to know a lot about slack) does this apply to the entire org or only the channel it is integrated with?

I get what you mean, and I don’t know why that is needed. You could create your own webhook though. But let’s see if someone else knows more about Slack and can answer. I believe it’s org.

not sure how you use this Slack App, Henning, but in case you would use that e.g. to send alerts in a state handler, this topic might help - it uses only a simple incoming webhook, no custom permissions needed

Wow, thanks Anna, that was really the missing manual.