> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/notifier-integrations/slack.md). # Slack Install the P0 Security Slack integration to request, approve, and receive just-in-time access notifications for cloud resources in Slack. {% hint style="info" %} Installing P0 on Slack takes about 2 minutes. {% endhint %} ### Before you begin Make sure you are either "Workspace Admin" or "Workspace Owner" for your workspace, or ask a user with one of these roles to install the P0 Slack integration. ### Adding Slack 1. On [p0.app](https://p0.app), navigate to "Integrations", then select Slack:

2. Click "Install integration". You'll be redirected to Slack's OAuth install page:

3. Choose the workspace where you want P0 installed, and select a channel where you want P0 to post. {% hint style="warning" %} The Slack channel you specify must be a public channel. {% endhint %} After you finish adding the Slack bot, your integration should look like this (just with your own information of course):

And that's it. You're ready to use p0 to grant least-privileged, just-in-time access to members of your organization! ### Slack Settings {% hint style="info" %} P0 can create and manage a @P0Approvers Slack group to automatically notify approvers when access requests are made. If you want P0 to manage this group, you will need to configure Slack (in your Slack's admin settings page) so that anyone except guests can create and modify user groups. {% endhint %}

### Permissions requested When you install the P0 Slack app, Slack's OAuth screen will ask you to approve the following bot token scopes. Here's what each one is used for:

Scope	Why P0 needs it
`incoming-webhook`	Lets you pick the default channel where P0 posts access-request and evidence notifications when you install the app (step 3, above). P0 stores the channel you choose and posts there.
`channels:join`	Lets the P0 bot join that public notification channel on its own, so it can start posting there without someone having to manually `/invite` it first.
`channels:read`	Required by Slack in order to call `conversations.join` on a public channel; P0 doesn't separately look up or use channel metadata with it.
`chat:write`	Lets P0 post and update messages — access-request notifications to approvers, status updates (approved/denied/expired) to requesters, and replies to the `/p0` slash command.
`im:write`	Lets P0 open a direct message with a specific user so it can send them a private notification (e.g. "your request was approved").
`im:read`	Companion permission to `im:write`; lets P0 maintain the DM conversation it opens with a user.
`commands`	Powers the `/p0` slash command, which lets users request and manage cloud access directly from Slack.
`users:read`	Lets P0 look up a Slack user's profile — used to identify who invoked `/p0` or clicked a button in a P0 message.
`users:read.email`	Lets P0 read a Slack user's email address, which it uses to match that Slack account to the corresponding P0 user account — both when notifying a P0 user in Slack, and when authenticating a Slack user who runs `/p0`.
`usergroups:read`	Lets P0 read the membership of the @P0Approvers Slack group described above. This only takes effect if your Slack workspace's admin settings allow apps to create and modify user groups; otherwise P0 skips group management and falls back to notifying approvers without it.
`usergroups:write`	Lets P0 create and update the membership of the @P0Approvers Slack group, keeping it in sync with your current approvers.