Manage workspace settings

I need the workspace settings aligned with Platform team's compliance checklist. Update the message retention policy to 90 days, enforce two-factor authentication for everyone, and restrict file uploads to the engineering and product channels only. After you apply changes, generate a short summary for the Platform lead and schedule a notice to go to all staff on Monday morning.

Before I change workspace settings, make the decision easy for the compliance reviewer. Put a one-sentence justification up top: why 90-day retention and enforced 2FA. Make the exact settings findable, show who will be affected by channel restrictions, and flag any user groups or bots that will need exemptions or migration steps.

I opened the security settings and stalled because enabling enforced two-factor will lock out contractors who use a shared corporate SSO and I don't know how many there are. I am afraid of breaking builds or support rotations. What is the most likely impact, what should I check first, and what is the safest rollout plan?

We keep toggling security and retention settings ad hoc and then scramble to re-enable access or migrate bots. This wastes Platform time and annoys Product. What operational habit and short checklist will let us change workspace-wide security settings without back-and-forth support tickets? Who should own the migration plan?