---
title: "Discussion on \"Slack Bot Token vs User Token Scopes: Least Privilege in Practice\" | Hashnode"
description: "Discussion on \"Slack Bot Token vs User Token Scopes: Least Privilege in Practice\". Bot tokens and user tokens are two different permission models, and picking the wrong one is the most common reason a Slack app fails a Marketplace review. Here is how to choose the right slack bot token scopes, when a user token is actuall"
url: "https://hashnode.com/posts/slack-bot-token-vs-user-token-scopes-least-privilege-in-practice/6a53825565abcd03cca8fedc"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Slack Bot Token vs User Token Scopes: Least Privilege in Practice](https://sapotacorpvn.hashnode.dev/slack-bot-token-vs-user-token-scopes-least-privilege-in-practice?utm_source=hashnode&utm_medium=feed)

Bot tokens and user tokens are two different permission models, and picking the wrong one is the most common reason a Slack app fails a Marketplace review. Here is how to choose the right slack bot token scopes, when a user token is actuall

Jul 12 · 9 min read · sapotacorpvn.hashnode.dev  
Read the article

-   [#slack](https://hashnode.com/tag/slack)
-   [#scopes](https://hashnode.com/tag/scopes)
-   [#security](https://hashnode.com/tag/security)
-   [#oauth](https://hashnode.com/tag/oauth)
-   [#least-privilege](https://hashnode.com/tag/least-privilege)

## Written by

[SapotaCorp](https://hashnode.com/@sapotacorpvn)

@sapotacorpvn · Hanoi, Vietnam

  
[View profile](https://hashnode.com/@sapotacorpvn)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.