Build
Capabilities
What the agent may do inside a hub.
Capabilities are the hub permissions your agent asks for — read messages, send messages, manage roles, and so on. They appear on the install screen and become a managed role in the hub. Hub managers can reduce them afterwards; your code must handle PERMISSION_DENIED.
Ask for the minimum. Administrative capabilities are shown as sensitive on the install screen and make installs less likely.
Changing capabilities doesn't change existing installations. Hubs that installed with fewer capabilities keep them until a manager re-authorizes.