> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/saas-data-monitoring/inventory/inventory-users/slack-users/slack-internal-users.md).

# Slack internal users

Internal users belong to your organization's Slack workspace and operate within the organization domains or subdomains. 

After you filter a specific user's assets, you can generate a [CSV report ](#generate-csv-report)or [remediate exposure](#remediate-asset-exposure) for specific assets. The internal users page displays the following data:

* [Internal user list](#internal-user-list)
* [Internal user details](#internal-user-details)
* [Assets](#assets)
* [Events](#events)

## Locate an internal user

To view personal details, asset and event data for a specific internal user in Slack:

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Slack** and **Internal**.<br>

   <figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F8q7kG7IpMJ7rKQ60Fv5s%2FSlack%20users.png?alt=media&amp;token=de882075-e3df-4bc1-946a-18a5b6359d42" alt=""><figcaption></figcaption></figure>
3. Filter for a specific user.
4. Click the user's **email address** to open the [internal user details](#internal-user-details).
5. Click any **app** icon to display user details, assets and events for that SaaS app.

## Internal user list

All internal users, including terminated users, in your Slack workspace are displayed with these parameters:

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F6lbRWmJUd3kU7E7BG1Xl%2FSlack%20internal%20users.png?alt=media&amp;token=ca9d2b83-9570-4df1-8a76-a4f067b789fd" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="223.87890625">Internal user parameter</th><th>Description</th></tr></thead><tbody><tr><td>Email</td><td>Internal user's email address. Click the email to open the <a href="#internal-user-details">internal user details </a>with <a href="#assets">asset</a> and <a href="#events">event</a> data. </td></tr><tr><td>First name</td><td>Internal user's given name</td></tr><tr><td>Last name</td><td>Internal user's surname</td></tr><tr><td>Admin</td><td>Indication if the user is a Slack administrator</td></tr><tr><td>Owner</td><td>Indication if the user is a Slack owner</td></tr><tr><td>Created on</td><td>Date when the user was created in Slack</td></tr><tr><td>Updated on</td><td>Date when the user was updated in Slack</td></tr></tbody></table>

{% hint style="success" %}
Click **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> to download a consolidated report of internal Slack users in CSV format.
{% endhint %}

## Internal user details

Metadata for a specific internal user in Slack is displayed as follows:

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FFzP66km7ZDcbcfbXS32V%2Finternal%20user%20Slack.png?alt=media&amp;token=41227b16-b6ad-4d28-9c9c-6c1d2fb5cb8f" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="271">Internal user detail</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Internal user name</td></tr><tr><td>Email </td><td>Email of internal user</td></tr><tr><td>Phone</td><td>Phone number of internal user</td></tr><tr><td>Admin</td><td>Indication if the user is a Slack administrator</td></tr><tr><td>Owner</td><td>Indication if the user is a Slack owner</td></tr><tr><td>Job title</td><td>Role of internal user</td></tr><tr><td>Related active alerts</td><td>Number of active alerts where this user is the actor. Click <strong>View</strong> to open the Alerts page filtered for this user's alerts.</td></tr></tbody></table>

## Assets

View and filter metadata for an internal user's Slack assets.

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Slack** and **Internal**.
3. Filter for a specific user.
4. Click the user's **email address** to open the internal user details.
5. Scroll down to view metadata for the user's Slack assets.

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2Fc0o2i5oOjJZ12digiG5E%2FSlack%20internal%20assets.png?alt=media&amp;token=951cbab1-be2c-4ed0-ab3a-1a4022cfc3f5" alt=""><figcaption><p>Asset details for a specific internal user in Slack</p></figcaption></figure>

The metadata displayed for internal users' Slack assets includes these parameters:

<table><thead><tr><th width="189.2265625">Asset parameter</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Name of file in Slack, including file suffix</td></tr><tr><td>Potential sensitivity </td><td>DoControl proprietary sensitivity ranking based on the asset name</td></tr><tr><td>Publicly shared</td><td>Indication if channel is publicly shared</td></tr><tr><td>Channels</td><td>Slack channel to which file was uploaded</td></tr><tr><td>Uploaded by</td><td>Actor who uploaded the file</td></tr><tr><td>Created on</td><td>Date and time that file was uploaded to Slack channel</td></tr></tbody></table>

### Generate CSV report

You can generate a report for selected asset metadata in CSV format.

1. Select the relevant assets.
2. Click the **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> icon.\
   A consolidated report of asset metadata is downloaded in CSV format.

### Remediate asset exposure

You can apply [inventory actions](/docontrol-user-guide/workflows/inventory-actions-quick-actions.md) to Slack assets, in order to manually trigger on-demand remediation actions to resolve specific issues. Click **Remediate** to apply these inventory actions to selected Slack assets:

* [Delete file](/docontrol-user-guide/workflows/inventory-actions-quick-actions/slack-inventory-actions.md#delete-files)

## Events

DoControl monitors real-time events of user activities in Slack. If no date range is selected, events are displayed from the last 30 days.

#### To view events for a specific internal user:

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Slack** and **Internal**.
3. Filter for a specific user.
4. Click the user's **email address** to open the internal user details.
5. Scroll down to view metadata for the user's events in Slack.

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FrmLBrzNjuHJv3hT3XHmT%2FSlack%20events%20internal.png?alt=media&amp;token=5cd4fddd-385a-4dec-8d18-98488d60d21f" alt=""><figcaption></figcaption></figure>

The metadata displayed for a user's events in Slack includes these parameters:

<table><thead><tr><th width="271">Event parameter</th><th>Description</th></tr></thead><tbody><tr><td>Date and time</td><td>When the event occurred</td></tr><tr><td>Actor </td><td>The user who triggered the event</td></tr><tr><td>Target</td><td>The user whom the actor shared data with</td></tr><tr><td>App</td><td>App involved in the event: Slack</td></tr><tr><td>Asset</td><td>Name of the asset involved</td></tr><tr><td>Event type</td><td>Type of event as defined in Slack (File public, File shared, etc)</td></tr><tr><td>Triggered</td><td>Number of workflows or alerts that were triggered by this event</td></tr><tr><td>Event ID</td><td>Unique identifier for the event</td></tr><tr><td>Event JSON</td><td>Click to open the JSON file with raw details about the event</td></tr></tbody></table>

{% hint style="success" %}
Click **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> to download a consolidated report of event metadata for a specific Slack user.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/saas-data-monitoring/inventory/inventory-users/slack-users/slack-internal-users.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.