Sym helps you code your way out of messy access management problems with approval workflows built in Python and Terraform

Protect and future-proof your organization by writing workflows in the Sym SDK. Then, run your flows in Slack for seamless access management across all of your teams.

SYM + Slack
Customize any aspect of your workflow Request and approve access in Slack

Using Sym in Slack

Your team can request access to sensitive infrastructure, privileged roles, and customer data in Slack. Once a request is fast-tracked or peer-approved, Sym users can use existing tooling in the same way as before.


Use Sym’s SDK to define rules for routing, approvers, and autmation, and Sym’s centralized logging to track the approval process for audit and compliance.


Sym and Your Slack Workspace

Sym's App for Slack only requests the OAuth scopes it needs to listen for incoming slash commands, send new messages, and update those messages. All data is encrypted at rest and in transit. Read our full privacy policy here.

By default, Sym's App for Slack cannot read or post to private channels that it is not in. You must invite the app to a private channel for it to read or post any messages in that channel. Removing the app from a private channel revokes all access to that channel.

Sym's App for Slack requires the following OAuth scopes:

Scope

Related API Calls

Reason for Scope(s)

channels.join
conversations.join
Sym's App for Slack auto-joins configured channels it has access to so it can send messages such as access request forms.
channels:manage,
groups:write,
im:write,
mpim:read,
mpim:write
conversations.create,
conversations.open
Sym's App for Slack can create direct messages and create group direct messages, as configured, to send messages such as access request forms to users.
groups:read,
channels:read
conversations.list
Sym Flows can be configured to send messages to channels by name. To do this, Sym must map channel names to channel IDs. conversations.list is used to read all channels to perform that mapping.
chat:write,
chat:write.public
chat.postEphemeral,
chat.postMessage
Sym's App for Slack can send messages such as access request forms or ephemeral messages such as notifications to a user that their permissions have been escalated.
commands
N/A
Sym's App for Slack may define shortcuts and/or slash commands to trigger Sym actions such as access requests.
users:read,
users:read.email
users.info
Sym must map Slack User IDs to Sym Users, and uses email to do so.
im:history
conversations.history
Sym's App for Slack needs this scope to say "hello" when you first open its Messages tab, and to respond to DMs.