ChatGPT service account
AI summary
ChatGPT service accounts are non-human identities that hold credentials and are shared within your ChatGPT workspace. Rencore Governance tracks all properties of these accounts, including their creation details, enabled status, and risk scores, plus their relationships to credentials and users. You can segment accounts by creation type or status, and disable them when no longer needed.
Non-human identities in the ChatGPTChatGPT EnterpriseChatGPT Enterprise is the business plan of the ChatGPT AI assistant by OpenAI.Read more workspace, with their credentials and share targets
Part of the ChatGPT Enterprise inventory.
In Rencore Governance
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Daily | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Key | String | Internal. | {{ChatGPTServiceAccount. |
| Created At | DateTime | {{ChatGPTServiceAccount. | |
| M365 Creator | User | The Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more user behind the creator, so a bot can be attributed to a department. | {{ChatGPTServiceAccount. |
| M365 Creator Name | String | {{ChatGPTServiceAccount. | |
| Created By Type | String | Whether a person or the system created the account. System-created accounts have no human owner to ask about them. Allowed values: system, user. | {{ChatGPTServiceAccount. |
| Created By | ChatGPT user | The user who created the service account, and therefore the person accountable for it. | {{ChatGPTServiceAccount. |
| Created By Email | String | The creator's email address, which the approval variant of Disable ChatGPT Service Account sends its request to. Empty for a system-created account. | {{ChatGPTServiceAccount. |
| Created By Name | String | {{ChatGPTServiceAccount. | |
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{ChatGPTServiceAccount. |
| Deactivated At | DateTime | {{ChatGPTServiceAccount. | |
| Display Name | String | {{ChatGPTServiceAccount. | |
| Enabled | Boolean | Whether the service account can currently authenticate. Disabling is reversible and is the action this connector ships, in preference to deletion. | {{ChatGPTServiceAccount. |
| ID | String | {{ChatGPTServiceAccount. | |
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{ChatGPTServiceAccount. |
| Risk Score | Int32 | Stores risk score | {{ChatGPTServiceAccount. |
| Risk Score Update | DateTime | Stores risk score update | {{ChatGPTServiceAccount. |
| Risk Score Value | String | Stores risk score value like Low_Low | {{ChatGPTServiceAccount. |
| WorkspaceWorkspaceA Workspace is the top-level container in Rencore Governance. It holds the settings, users, roles and connected apps for exactly one Environment, the connected Microsoft 365 tenant.Read more | ChatGPT Workspace | {{ChatGPTServiceAccount. | |
| Workspace Name | String | {{ChatGPTServiceAccount. |
Relations
| Relation | Connector | Description |
|---|---|---|
| ChatGPT service account credential | ChatGPT Enterprise | Credentials held by ChatGPT service accounts, with their scopes, expiry and revocation |
| ChatGPT service account share | ChatGPT Enterprise | Principals a ChatGPT service account is shared with, and the role they hold on it |
| ChatGPT user | ChatGPT Enterprise | Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join |
| ChatGPT Workspace | ChatGPT Enterprise | The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps |
| User | Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more | All users registered in your tenant (internal, external) |
Segments
| Segment | Description |
|---|---|
| Disabled service accounts | Service accounts that are switched off and left in place |
| System-created service accounts | Service accounts created by the system rather than a person, so there is nobody obvious to ask about them |
Actions
- Disable Service Account
Frequently asked questions
What is the ChatGPT service account object in Rencore Governance?
Non-human identities in the ChatGPT workspace, with their credentials and share targets. ChatGPT service account is an object type in the ChatGPT Enterprise inventory of Rencore Governance.
Which properties does Rencore Governance collect for ChatGPT service account?
Rencore Governance collects 19 properties for ChatGPT service account, such as Key, Created At, M365 Creator and 16 more.
How often is ChatGPT service account scanned?
By default daily. You can change the scan interval of ChatGPT service account objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.
Which actions can I run on ChatGPT service account objects?
The built-in actions for ChatGPT service account objects are Disable Service Account.
Which module includes the ChatGPT Enterprise connector?
The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?