ChatGPT permissions

Last updated Oct 17, 2026 Preview Consent

AI summary

The ChatGPT authenticator uses an OpenAI API key to access your OpenAI service. It requires permissions to read ChatGPT workspace data including groups, users, service accounts, usage limits, workspace invitations, various activity logs, and cost and analytics metrics.

The ChatGPT authenticator reads the OpenAI service with the key you give Rencore Governance. These are OpenAI permissions, not Microsoft ones, so they have no Microsoft documentation.

See Microsoft permissions for every authenticator, and Required permissions for how consent works.

Permissions

Permission	Description	Type	Used by
Read ChatGPT groups	View workspace groups and group membership	Application	ChatGPT group , ChatGPTGroupMemberEntity , ChatGPT Workspace
Read ChatGPT service accounts	View service accounts with their credentials and share targets	Application	ChatGPT service account credential , ChatGPT service account , ChatGPT service account share , ChatGPT Workspace
Read ChatGPT usage limits	View workspace, group and user usage limits and limit requests	Application	ChatGPT group usage limit , ChatGPT limit increase request , ChatGPT user usage and limit , ChatGPT Workspace , ChatGPT Workspace usage limit
Read ChatGPT workspace invitations	View pending workspace invitations	Application	ChatGPT invitation , ChatGPT Workspace
Read ChatGPT workspace users	View workspace users with their role and seat	Application	ChatGPT user , ChatGPT Workspace
Read the ChatGPT APP_AUTH_LOG stream	Ingest app link and unlink events	Application	ChatGPT app link , ChatGPT Workspace
Read the ChatGPT AUDIT_LOG stream	Ingest workspace audit events	Application	ChatGPT activity , ChatGPT Workspace
Read the ChatGPT AUTH_LOG stream	Ingest sign-in and authentication events	Application	ChatGPT activity , ChatGPT Workspace
Read the ChatGPT CODEX_LOG stream	Ingest Codex events	Application	ChatGPT activity , ChatGPT Workspace
Read the ChatGPT CONVERSATION_MESSAGE stream	Ingest conversation message metadata	Application	ChatGPT conversation , ChatGPT Workspace
Read the ChatGPT COSTS log	View per-day cost lines by user, group, agent, product, surface and model	Application	ChatGPT cost line , ChatGPT Workspace
Read the ChatGPT CUSTOM_AGENTS_LOG stream	Ingest workspace agent run events	Application	ChatGPT agent run , ChatGPT Workspace
Read the ChatGPT Stateful Compliance API	View custom GPTs, projects, connector scopes, agents, skills, plugins, Codex and per-user objects	Application	ChatGPT agent , ChatGPT automation , ChatGPT canvas , ChatGPT Codex device , ChatGPT Codex Environment , ChatGPT Codex machine , ChatGPT Codex task , ChatGPT connector scope , ChatGPT custom GPT , ChatGPT library file , ChatGPT memory , ChatGPT plugin , ChatGPT project , ChatGPT recording , ChatGPT skill , ChatGPT Workspace
Read the Codex analytics API	View Codex daily usage, cost attribution and code-review metrics	Application	ChatGPT Codex code review metric , ChatGPT Codex daily usage , ChatGPT Workspace

Frequently asked questions

Which permissions does the ChatGPT authenticator request?

14 permissions: Read ChatGPT groups, Read ChatGPT service accounts, Read ChatGPT usage limits, Read ChatGPT workspace invitations and 10 more.

Are the ChatGPT permissions application or delegated permissions?

All 14 permissions are application permissions.

Which inventories need the ChatGPT permissions?

The inventory of ChatGPT Enterprise.

Are the ChatGPT permissions Microsoft permissions?

No. They are OpenAI permissions, granted with the key you give Rencore Governance.

Was this page helpful?