> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/notifier-integrations/slack.md). # Slack Install the P0 Security Slack integration to request, approve, and receive just-in-time access notifications for cloud resources in Slack. {% hint style="info" %} Installing P0 on Slack takes about 2 minutes. {% endhint %} ### Before you begin Make sure you are either "Workspace Admin" or "Workspace Owner" for your workspace, or ask a user with one of these roles to install the P0 Slack integration. ### Adding Slack 1. On [p0.app](https://p0.app), navigate to "Integrations", then select Slack:

2. Click "Install integration". You'll be redirected to Slack's OAuth install page:

3. Choose the workspace where you want P0 installed, and select a channel where you want P0 to post. {% hint style="warning" %} If you choose a private channel, P0 can't post to it until you invite P0 to the channel. See [#using-a-private-channel](#using-a-private-channel "mention"). {% endhint %} After you finish adding the Slack bot, your integration should look like this (just with your own information of course):

And that's it. You're ready to use p0 to grant least-privileged, just-in-time access to members of your organization! ### Using a private channel P0 joins a public channel by itself. Slack only lets P0 into a private channel if someone invites it. 1. Open the private channel in Slack and run `/invite @P0`. 2. Submit a test access request. The approval message appears in the channel. ### How approvers are notified P0 sends each approver a direct message in Slack with the request details, and they can approve or deny the request from that message. You don't need to create a Slack user group for approvers or change your workspace's user group settings. ### Permissions requested When you install the P0 Slack app, Slack's OAuth screen will ask you to approve the following bot token scopes. Here's what P0 does with each one:

Scope	What P0 does with it
`incoming-webhook`	Lets you pick the default channel where P0 posts access-request and evidence notifications when you install the app (step 3, above). P0 stores the channel you choose and posts there.
`channels:join`	Lets the P0 bot join that public notification channel on its own, so it can start posting there without someone having to manually `/invite` it first.
`chat:write`	Lets P0 post and update messages — access-request notifications to approvers, status updates (approved/denied/expired) to requesters, and replies to the `/p0` slash command.
`im:write`	Lets P0 open a direct message with a specific user so it can send them a private notification (e.g. "your request was approved").
`commands`	Powers the `/p0` slash command, which lets users request and manage cloud access directly from Slack.
`users:read`	Lets P0 look up a Slack user's profile — used to identify who invoked `/p0` or clicked a button in a P0 message.
`users:read.email`	Lets P0 read a Slack user's email address, which it uses to match that Slack account to the corresponding P0 user account — both when notifying a P0 user in Slack, and when authenticating a Slack user who runs `/p0`.