Help/Slack permissions, explained
Slack permissions, explained
When you add asyncmate to Slack, the install screen lists everything the bot can do. This page explains each permission in plain language, and what asyncmate cannot see.
1The short version
- asyncmate cannot read your channels. It does not ask for channel message history, public or private.
- It reads replies only in its own direct message conversations. That is how answering a check-in by DM works.
- It always posts as itself, never as a person.
2Every permission on the install screen
| Permission | Slack scope | Why asyncmate needs it |
|---|---|---|
| Send messages | chat:write |
Check-in DMs, digests, reminders, poll cards and kudos. |
| Post in public channels | chat:write.public |
Deliver the digest to the channel you pick without an invite step. |
| Custom name and icon | chat:write.customize |
Certain cards, like kudos, post with their own name and icon. |
| List channels | channels:read, groups:read |
Fill the channel picker for digests, polls and reminders. Private channels appear only where the bot was invited. |
| Direct messages | im:write, im:history |
Open a DM to ask your check-in questions and read the answers sent back in that same DM. This covers only the bot's own DMs, nothing between people. |
| People | users:read, users:read.email |
Names, avatars and timezones, so a 9:00 check-in lands at 9:00 in everyone's own timezone. Email links your Slack identity to your dashboard account. |
| Workspace details | team:read |
Your workspace name and icon in the dashboard. |
| Slash command | commands |
The /asyncmate command. |
| Custom emoji | emoji:read |
Show your workspace's custom emoji correctly in dashboard views of answers and kudos. |
3What asyncmate cannot do
- Read messages in any channel, public or private.
- Read direct messages between people.
- Post, edit or delete anything as another user.
- See files shared in your workspace.
4Signing in is separate
The dashboard sign-in uses Sign in with Slack (OpenID Connect). It reads your name, email and avatar to create your account, and grants no workspace permissions. Google sign-in and email magic links work the same way.
5How credentials and answers are stored
The bot token Slack issues on install is encrypted at rest and never written to logs. Check-in answers and logged hours are stored so digests, history and reports work; the Privacy Policy covers retention, export and erasure. If you uninstall asyncmate, sending stops immediately and workspace data is erased after the retention window.
Tip: sharing this with your Slack admin? The admin approval guide has a ready-to-send summary.