Slack Bot Token vs User Token Scopes: Least Privilege in Practice

Bot tokens and user tokens are two different permission models, and picking the wrong one is the most common reason a Slack app fails a Marketplace review. Here is how to choose the right slack bot token scopes, when a user token is actuall