Question 1
Choose 1
Your are an Org Owner and need to manage the users for different user groups across your Enterprise Grid
workspaces. To avoid token management, you're only allowed to use a single token when building this
functionality.
Assuming your Slack app is configured with the correct scopes, what steps do you need to take to generate the
right token to accomplish your task?
Correct answer:
B. Ensure that the app is approved at the Enterprise Grid org-level then install the app at the Enterprise
Grid org-level.
Explanation
To manage user groups across multiple workspaces in an Enterprise Grid org using a single token, you need an org-level installation, which produces an org-wide token that works across the org's workspaces. The steps are:
1. Ensure the app is approved at the Enterprise Grid org-level — An Org Owner (or someone with the right admin permissions) must approve the app for the organization. Enterprise Grid enforces org-level app approval to control which apps are allowed.
2. Install the app at the Enterprise Grid org-level — Installing at the org level generates an org-wide token (e.g., an org-level bot/user token) that can be used to call APIs affecting user groups across the org's workspaces — without needing a separate token per workspace.
This satisfies the constraint of using a single token while managing user groups across workspaces.
✅ B. Ensure the app is approved at the Enterprise Grid org-level, then install the app at the Enterprise Grid org-level – Org approval + org-level install yields a single org-wide token.
❌ Why Other Options Are Incorrect
A. Install at org-level and also install individually on each workspace – Installing on each workspace creates multiple per-workspace tokens, which violates the "single token" constraint.
C. Approved at org-level and grant access to each workspace – Approval plus granting workspace access does not by itself produce the single org-wide token; the app must be installed at the org level.
D. Install at org-level and grant access to each workspace – You skipped the required org-level approval step, and granting workspace access isn't what generates the single org-wide token — org-level installation does (after approval).
📚 References
- Slack API Docs – Enterprise Grid & org-level apps – Explains org-level app approval and installation, and org-wide tokens for cross-workspace actions.
- Slack API Docs – Installing with OAuth / org-wide installation – Covers org-level installation producing a single org-wide token.
To manage user groups across multiple workspaces in an Enterprise Grid org using a single token, you need an org-level installation, which produces an org-wide token that works across the org's workspaces. The steps are:
1. Ensure the app is approved at the Enterprise Grid org-level — An Org Owner (or someone with the right admin permissions) must approve the app for the organization. Enterprise Grid enforces org-level app approval to control which apps are allowed.
2. Install the app at the Enterprise Grid org-level — Installing at the org level generates an org-wide token (e.g., an org-level bot/user token) that can be used to call APIs affecting user groups across the org's workspaces — without needing a separate token per workspace.
This satisfies the constraint of using a single token while managing user groups across workspaces.
✅ B. Ensure the app is approved at the Enterprise Grid org-level, then install the app at the Enterprise Grid org-level – Org approval + org-level install yields a single org-wide token.
❌ Why Other Options Are Incorrect
A. Install at org-level and also install individually on each workspace – Installing on each workspace creates multiple per-workspace tokens, which violates the "single token" constraint.
C. Approved at org-level and grant access to each workspace – Approval plus granting workspace access does not by itself produce the single org-wide token; the app must be installed at the org level.
D. Install at org-level and grant access to each workspace – You skipped the required org-level approval step, and granting workspace access isn't what generates the single org-wide token — org-level installation does (after approval).
📚 References
- Slack API Docs – Enterprise Grid & org-level apps – Explains org-level app approval and installation, and org-wide tokens for cross-workspace actions.
- Slack API Docs – Installing with OAuth / org-wide installation – Covers org-level installation producing a single org-wide token.
