Manually managed ChatGPT user
AI summary
Rencore Governance detects ChatGPT users who are not provisioned through SCIM. These accounts will not be automatically revoked when users change roles or leave your organization, which is why moving them to SCIM provisioning is recommended.
What it detects
Detects workspace users who are not provisioned through SCIM.
Why it matters
A manually created account is outside joiner-mover-leaver: when the person changes role or leaves, nothing revokes it automatically. These are also the accounts most likely to outlive the person. Moving them under SCIM is the fix; note that OpenAI then refuses API-driven removal, which is correct behaviour rather than a limitation.
The rule
Every ChatGPT User where SCIM Managed is false
In Rencore Governance
Details
| Applies to | ChatGPT user |
|---|---|
| Connector | ChatGPT Enterprise |
| Severity | Medium |
| Category | User OffboardingLeaverA leaver is someone who has left your organization but whose account may still hold licenses, workspaces, ownership and OneDrive content.Read more |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check ChatGPT user objects:
- Codex seat with no Codex usage (Low)
- Idle ChatGPT seat (Low)
- Inactive user still holding objects (High)
- ChatGPT login bypassed SSO (High)
- ChatGPT user with no Entra ID identity (High)
- ChatGPT user with no spend cap (Medium)
- ChatGPT user over 80% of their spend cap (Medium)
Frequently asked questions
What does the manually managed ChatGPT user policy detect?
What does the manually managed ChatGPT user policy detect?The Manually managed ChatGPT user policy detects workspace users who are not provisioned through SCIM.
Which objects does the manually managed ChatGPT user policy check?
Which objects does the manually managed ChatGPT user policy check?The Manually managed ChatGPT user policy checks ChatGPT user objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the manually managed ChatGPT user policy?
How severe is a violation of the manually managed ChatGPT user policy?Violations of the Manually managed ChatGPT user policy have Medium severity. The policy is in the User Offboarding category.
Which module includes the manually managed ChatGPT user policy?
Which module includes the manually managed ChatGPT user policy?The Manually managed ChatGPT user policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?