usergroups_enable

What usergroups_enable does on Slack

AI agents use usergroups_enable to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why usergroups_enable is rated Medium

The tool name suggests it activates or re-enables a user group in Slack, which is a reversible modification operation. This qualifies as Write rather than Execute because it appears to be a direct state-change action on a resource (user group) rather than arbitrary code execution. The severity is high because misuse could alter access controls and group membership visibility across an organization's Slack workspace.

From the tool's definition Tool name 'usergroups_enable' indicates it performs an action that modifies state (enabling a user group), not merely querying data. The empty description prevents confirmation of exact behavior, but 'enable' implies a state change operation.

The rule that runs usergroups_enable safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For usergroups_enable, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "usergroups_enable": {
      "limits": [
        {
          "counter": "usergroups_enable_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about usergroups_enable