rencore.com (opens in a new tab) Start a trial (opens in a new tab)

ChatGPT service account

Last updated Preview Inventory ChatGPT Enterprise

AI summary

ChatGPT service accounts are non-human identities that hold credentials and are shared within your ChatGPT workspace. Rencore Governance tracks all properties of these accounts, including their creation details, enabled status, and risk scores, plus their relationships to credentials and users. You can segment accounts by creation type or status, and disable them when no longer needed.

Non-human identities in the ChatGPT workspace, with their credentials and share targets

Part of the ChatGPT Enterprise inventory.

In Rencore Governance

The ChatGPT Service Account inventory page in Rencore Governance: counts, trend, violated policies and the list of objects
The inventory page in a Rencore demo Environment, captured October 2026.

Scan settings

Default scanning interval Allowed scanning intervals Data removal during incremental scan
Daily Daily, Weekly, Bi-Weekly, Monthly, Never, Initial Yes

Properties

Property Type Description Automation placeholder
Key String Internal. {{ChatGPTServiceAccount.ApiKeyEncrypted}}
Created At DateTime {{ChatGPTServiceAccount.CreatedAt}}
M365 Creator User The Entra ID user behind the creator, so a bot can be attributed to a department. {{ChatGPTServiceAccount.CreatedByM365User}}
M365 Creator Name String {{ChatGPTServiceAccount.CreatedByM365UserName}}
Created By Type String Whether a person or the system created the account. System-created accounts have no human owner to ask about them. Allowed values: system, user. {{ChatGPTServiceAccount.CreatedByType}}
Created By ChatGPT user The user who created the service account, and therefore the person accountable for it. {{ChatGPTServiceAccount.CreatedByUser}}
Created By Email String The creator's email address, which the approval variant of Disable ChatGPT Service Account sends its request to. Empty for a system-created account. {{ChatGPTServiceAccount.CreatedByUserEmail}}
Created By Name String {{ChatGPTServiceAccount.CreatedByUserName}}
Initially Scanned DateTime Shows when this object was initially found in a scan. {{ChatGPTServiceAccount.CreatedTime}}
Deactivated At DateTime {{ChatGPTServiceAccount.DeactivatedAt}}
Display Name String {{ChatGPTServiceAccount.DisplayName}}
Enabled Boolean Whether the service account can currently authenticate. Disabling is reversible and is the action this connector ships, in preference to deletion. {{ChatGPTServiceAccount.Enabled}}
ID String {{ChatGPTServiceAccount.Id}}
Last scan update DateTime Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. {{ChatGPTServiceAccount.LastModifiedTime}}
Risk Score Int32 Stores risk score {{ChatGPTServiceAccount.RiskScore}}
Risk Score Update DateTime Stores risk score update {{ChatGPTServiceAccount.RiskScoreLastUpdate}}
Risk Score Value String Stores risk score value like Low_Low {{ChatGPTServiceAccount.RiskScoreValue}}
Workspace ChatGPT Workspace {{ChatGPTServiceAccount.Workspace}}
Workspace Name String {{ChatGPTServiceAccount.WorkspaceName}}

Relations

Relation Connector Description
ChatGPT service account credential ChatGPT Enterprise Credentials held by ChatGPT service accounts, with their scopes, expiry and revocation
ChatGPT service account share ChatGPT Enterprise Principals a ChatGPT service account is shared with, and the role they hold on it
ChatGPT user ChatGPT Enterprise Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join
ChatGPT Workspace ChatGPT Enterprise The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps
User Microsoft 365 All users registered in your tenant (internal, external)

Segments

Segment Description
Disabled service accounts Service accounts that are switched off and left in place
System-created service accounts Service accounts created by the system rather than a person, so there is nobody obvious to ask about them

Actions

  • Disable Service Account

Frequently asked questions

What is the ChatGPT service account object in Rencore Governance?

Non-human identities in the ChatGPT workspace, with their credentials and share targets. ChatGPT service account is an object type in the ChatGPT Enterprise inventory of Rencore Governance.

Which properties does Rencore Governance collect for ChatGPT service account?

Rencore Governance collects 19 properties for ChatGPT service account, such as Key, Created At, M365 Creator and 16 more.

How often is ChatGPT service account scanned?

By default daily. You can change the scan interval of ChatGPT service account objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which actions can I run on ChatGPT service account objects?

The built-in actions for ChatGPT service account objects are Disable Service Account.

Which module includes the ChatGPT Enterprise connector?

The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.