Pending invitation grants owner or admin rights
AI summary
A security policy rule detects pending ChatGPT invitations granting owner or admin rights. You should withdraw these because unclaimed administrative privileges are a security risk if sent to the wrong person or the mailbox is compromised.
What it detects
Detects pending invitations that would grant the owner or admin role on acceptance.
Why it matters
An outstanding owner or admin invitation is an unclaimed set of administrative rights sitting in somebody's inbox. If the address is wrong, or the mailbox is compromised, the rights go to whoever opens it. Invitations should be short-lived and role-appropriate; withdraw any that are neither.
The rule
Every ChatGPT Invitation where Status equals 'pending' and Role is one of 'owner,admin'
In Rencore Governance
Details
| Applies to | ChatGPT invitation |
|---|---|
| Connector | ChatGPT Enterprise |
| Severity | High |
| Category | Security |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check ChatGPT invitation objects:
- Invitation sent to an external domain (Medium)
- Stale invitation (Low)
Frequently asked questions
What does the pending invitation grants owner or admin rights policy detect?
The Pending invitation grants owner or admin rights policy detects pending invitations that would grant the owner or admin role on acceptance.
Which objects does the pending invitation grants owner or admin rights policy check?
The Pending invitation grants owner or admin rights policy checks ChatGPT invitation objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the pending invitation grants owner or admin rights policy?
Violations of the Pending invitation grants owner or admin rights policy have High severity. The policy is in the Security category.
Which module includes the pending invitation grants owner or admin rights policy?
The Pending invitation grants owner or admin rights policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?