ChatGPT Workspace
AI summary
The ChatGPT Workspace object represents your connected ChatGPT Enterprise workspace in Rencore Governance and shows which API scopes are granted to your Admin key. It identifies coverage gaps where data cannot be inventoried, such as conversation activity and usage metrics when the Conversation messages scope is not granted. The object tracks cost data, connection status, risk scores, and relates to agents, conversations, projects, custom GPTs, and users among other ChatGPT objects in the inventory.
The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps
Part of the ChatGPT Enterprise inventory.
In Rencore Governance
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Daily | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Key | String | Internal. | {{ChatGPTWorkspace. |
| Connected At | DateTime | When this workspace was first connected. Event-derived inventory starts empty at this date. | {{ChatGPTWorkspace. |
| Connection Status | String | Whether the stored credential currently validates against OpenAI. Allowed values: connected, disconnected, partial. | {{ChatGPTWorkspace. |
| Credits Last 30 Days | Double | {{ChatGPTWorkspace. | |
| Costs Last 30 Days (USD) | Double | {{ChatGPTWorkspace. | |
| Costs Last 7 Days (USD) | Double | {{ChatGPTWorkspace. | |
| Costs Last Month (USD) | Double | {{ChatGPTWorkspace. | |
| Costs This Month (USD) | Double | {{ChatGPTWorkspace. | |
| Coverage Gaps | String | What is not inventoried because the matching scope was not granted. Empty when coverage is complete. | {{ChatGPTWorkspace. |
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{ChatGPTWorkspace. |
| Display Name | String | {{ChatGPTWorkspace. | |
| Has Conversation Coverage | Boolean | True when the Conversation messages scope is granted. Without it there is no conversation object, no models per user and no usage count per GPT or project, so unused GPTs and projects degrade to configuration age. | {{ChatGPTWorkspace. |
| ID | String | The ChatGPTChatGPT EnterpriseChatGPT Enterprise is the business plan of the ChatGPT AI assistant by OpenAI.Read more workspace id, as entered in the connect flow. | {{ChatGPTWorkspace. |
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{ChatGPTWorkspace. |
| API Platform Organization ID | String | Collected once because OpenAI delivers the COSTS log on the organization route. No other API Platform object is read. | {{ChatGPTWorkspace. |
| Risk Score | Int32 | Stores risk score | {{ChatGPTWorkspace. |
| Risk Score Update | DateTime | Stores risk score update | {{ChatGPTWorkspace. |
| Risk Score Value | String | Stores risk score value like Low_Low | {{ChatGPTWorkspace. |
| Scopes Granted | String | The scope categories the Admin key validated against. A workspace ownerWorkspace ownerA workspace owner is an owner of a Microsoft 365 workspace, such as a Team, a SharePoint site or a group.Read more is required for the stateful compliance and Conversation messages scopes. | {{ChatGPTWorkspace. |
| Total Credits | Double | Total cost reported in credits. Kept apart from the dollar figures on purpose - the two units are not comparable and must never be added. | {{ChatGPTWorkspace. |
| Total Cost (USD) | Double | Total cost reported in dollars across all cost lines. Credits and dollars are never summed together. | {{ChatGPTWorkspace. |
Relations
| Relation | Connector | Description |
|---|---|---|
| ChatGPT activity | ChatGPT Enterprise | Ingested ChatGPT activity: who did what and when, retained beyond OpenAI's 30-day window |
| ChatGPT agent | ChatGPT Enterprise | Agents published into the ChatGPT workspace, with their skills, connectors, run history and spend |
| ChatGPT agent run | ChatGPT Enterprise | Runs of ChatGPT workspace agents, by trigger type and invoker |
| ChatGPT app link | ChatGPT Enterprise | Third-party apps and MCP servers linked to ChatGPT accounts, derived from link and unlink events |
| ChatGPT automation | ChatGPT Enterprise | Scheduled automations owned by ChatGPT users |
| ChatGPT canvas | ChatGPT Enterprise | Canvases owned by ChatGPT users, by version count and last update |
| ChatGPT Codex code review metric | ChatGPT Enterprise | Workspace-level CodexChatGPT CodexCodex is the OpenAI coding agent that is part of a ChatGPT Enterprise workspace.Read more code-review activity per day |
| ChatGPT Codex daily usage | ChatGPT Enterprise | Codex usage per user per day, with credits, cost, tokens and code attribution |
| ChatGPT Codex device | ChatGPT Enterprise | Phones and tablets paired to drive Codex remote control |
| ChatGPT Codex Environment | ChatGPT Enterprise | Codex sandboxes, the repositories they reach and how widely they are shared |
| ChatGPT Codex machine | ChatGPT Enterprise | Developer machines running Codex remote control |
| ChatGPT Codex task | ChatGPT Enterprise | Codex cloud tasks, by creator, source and environment |
| ChatGPT connector scope | ChatGPT Enterprise | External data sources attached to ChatGPT projects, who added them and whether they still sync |
| ChatGPT conversation | ChatGPT Enterprise | Conversations as objects: who, when, how many messages, which models, and which GPT or project - never the content |
| ChatGPT cost line | ChatGPT Enterprise | Daily ChatGPT cost lines by user, group, agent, product, surface and model |
| ChatGPT custom GPT | ChatGPT Enterprise | Custom GPTsCustom GPTA custom GPT is a version of ChatGPT that someone in your ChatGPT Enterprise workspace configured for one purpose and can share with others.Read more in the workspace, with their sharing visibility, configuration shape and usage |
| ChatGPT group | ChatGPT Enterprise | ChatGPT groups, their membership source, their SCIM mapping and their default spend cap |
| ChatGPT group usage limit | ChatGPT Enterprise | The default monthly spend cap each ChatGPT group hands to its members |
| ChatGPT invitation | ChatGPT Enterprise | Invitations into the ChatGPT workspace, with their role, seat type and status |
| ChatGPT library file | ChatGPT Enterprise | Files in ChatGPT user libraries, by owner, size, state and lifecycle |
| ChatGPT limit increase request | ChatGPT Enterprise | Requests for a higher ChatGPT spend cap, and how they were resolved |
| ChatGPT memory | ChatGPT Enterprise | Per-user memory footprint in ChatGPT, as counts and dates only |
| ChatGPT plugin | ChatGPT Enterprise | Plugins in the ChatGPT workspace, their discoverability and the MCP servers and skills they bundle |
| ChatGPT project | ChatGPT Enterprise | ChatGPT projects, with their sharing visibility, tools, connector scopes and usage |
| ChatGPT recording | ChatGPT Enterprise | Recordings owned by ChatGPT users, by duration and date only - transcripts are never read |
| ChatGPT service account credential | ChatGPT Enterprise | Credentials held by ChatGPT service accounts, with their scopes, expiry and revocation |
| ChatGPT service account | ChatGPT Enterprise | Non-human identities in the ChatGPT workspace, with their credentials and share targets |
| ChatGPT skill | ChatGPT Enterprise | Skills available to ChatGPT workspace agents, with their creator and attachments |
| ChatGPT user | ChatGPT Enterprise | ChatGPT users holding the admin role in the workspace. |
| ChatGPT user | ChatGPT Enterprise | ChatGPT users holding the analytics viewer role in the workspace. |
| ChatGPT user | ChatGPT Enterprise | Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more join |
| ChatGPT user | ChatGPT Enterprise | ChatGPT users holding the member role in the workspace. |
| ChatGPT user | ChatGPT Enterprise | ChatGPT users holding the owner role in the workspace. |
| ChatGPT user usage and limit | ChatGPT Enterprise | Each member's monthly spend cap, where it comes from, and live month-to-date usage |
| ChatGPT Workspace usage limit | ChatGPT Enterprise | The workspace default spend cap |
Segments
This object does currently not have any segments.
Actions
This object does currently not have any actions.
Policies that check this object
| Policy | Severity | Description |
|---|---|---|
| ChatGPT workspace with too many admins | Medium | Detects workspaces where more than five users hold the admin role |
Frequently asked questions
What is the ChatGPT Workspace object in Rencore Governance?
The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps. ChatGPT Workspace is an object type in the ChatGPT Enterprise inventory of Rencore Governance.
Which properties does Rencore Governance collect for ChatGPT Workspace?
Rencore Governance collects 21 properties for ChatGPT Workspace, such as Key, Connected At, Connection Status and 18 more.
Which policies check ChatGPT Workspace objects?
1 built-in policy checks ChatGPT Workspace objects, such as ChatGPT workspace with too many admins.
How often is ChatGPT Workspace scanned?
By default daily. You can change the scan interval of ChatGPT Workspace objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.
Which module includes the ChatGPT Enterprise connector?
The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?