A huge missing piece is how you'll handle the appsec. Even Slack got this wrong, although discord does a much better job with roles. You probably need indepth support via something like keycloak or Authress provides.