Hey community - my infosec team is concerned about the Clay <> Slack integration and I was wondering if anyone has installed a more limited in scope integration (see link for info)https://www.clay.com/integrations/action/send-scheduled-message-to-channel-minimal-scopes-slack Thanks!
Clay offers a "Send scheduled message to channel (minimal scopes)" Slack integration specifically designed for security-conscious teams. [1] This option requires fewer permissions than our standard Slack integration.
For additional security controls, you can:
We only integrate with GDPR compliant companies, and you can review any integration provider's individual privacy documents to ensure they meet your company's security standards. [4]
If you need help configuring the minimal scopes integration or want to discuss specific security requirements, click "Talk to a person" for human assistance.
Was that helpful?
If you need any further assistance with the Slack integration or have more specific security concerns, I’m here to help. Would you like to provide more details about what you’re trying to resolve or understand?
How can my infosec team set this limited scope integration up?
To set up the limited scope Slack integration, your infosec team should use the "Send scheduled message to channel (minimal scopes)" option. [1]
Here's how to configure it:
Navigate to Settings > Connections in Clay [2]
Click + Add connection in the top-right corner
Search for and select the Slack integration [3]
Choose the "Send scheduled message to channel (minimal scopes)" option specifically
Follow the OAuth authentication process to connect your Slack account [4]
Name your integration account and optionally set it as default
This minimal scopes version requires fewer permissions than our standard Slack integration, addressing your security team's concerns while still enabling scheduled messaging functionality.
Did that answer your question?
If you still need help setting up the limited scope Slack integration, I’m here to assist. Would you like to share more about any specific steps or concerns your infosec team has encountered?
