Slack Administrative Role Granted to User

Siddhant Mishra@Siddhant

•updated yesterday•0•0•0

Detects a Slack role change conferring administrative rights. A workspace admin can read private content, export conversation history, add applications and change retention — so this is a meaningful privilege grant in a system that holds a great deal of candid organisational information. Onboarding: SLACK is ingested via Slack native connector (Bloo extractor 833). Integration guide: https://bloo.io/docs/integrations/slack BQL (Bloo Query Language): stream=iam where sourcename='SLACK' and action='ROLE_ADDED' | groupby user, targetuser, role, workspace