Segments for ChatGPT Enterprise
AI summary
ChatGPT Enterprise comes with built-in segments, which are saved filters that identify specific objects and issues across your workspace. Segments are organized into eight categories covering security, guests and external access, oversharing, leavers, cleanup, licenses and costs, chargeback, and operations. View any segment to see its filter rule and the objects it selects.
These are the segments that come with ChatGPT EnterpriseChatGPT EnterpriseChatGPT Enterprise is the business plan of the ChatGPT AI assistant by OpenAI.Read more, grouped by topic. Each segment is a saved filter: it selects the objects that match its rule. Open a segment for its rule in plain words and the object it selects.
See the ChatGPT Enterprise inventory reference for the objects these segments select.
Security 10
Risky settings, weak credentials and access that is wider than it should be.
| Segment | Description | Selects |
|---|---|---|
| Admins | Users holding the workspace admin role. | ChatGPT user |
| Agents triggered without a human | Agents that ran from an API call, a webhook or a schedule in the last 30 days. | ChatGPT agent |
| Analytics viewers | Users who can read workspace-wide usage figures without holding admin rights. | ChatGPT user |
| Elevated invitations | Pending invitations that would grant owner or admin rights on acceptance. | ChatGPT invitation |
| Manual groups | Groups maintained by hand rather than provisioned through SCIM. | ChatGPT group |
| Non-SSO logins | Users who signed in with a password rather than through SSO in the last 30 days. | ChatGPT user |
Show 4 more segments
| Segment | Description | Selects |
|---|---|---|
| Owners | Users holding the workspace ownerWorkspace ownerA workspace owner is an owner of a Microsoft 365 workspace, such as a Team, a SharePoint site or a group.Read more role - the only people who can grant the owner-only compliance scopes. | ChatGPT user |
| Plugins listed to the whole workspace | Plugins any workspace member can find and install without being told about them. | ChatGPT plugin |
| Shadow accounts | ChatGPT users with no matching Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more identity - accounts outside the directory entirely. | ChatGPT user |
| System-created service accounts | Service accounts created by the system rather than a person, so there is nobody obvious to ask about them. | ChatGPT service account |
Guests and external access 10
Guests, external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more and content shared outside your organization.
| Segment | Description | Selects |
|---|---|---|
| Published agents with connectors | Agents that are live and can reach an external system. | ChatGPT agent |
| Codex environments with repository access | CodexChatGPT CodexCodex is the OpenAI coding agent that is part of a ChatGPT Enterprise workspace.Read more sandboxes wired to at least one repository. | ChatGPT Codex Environment |
| External data sources of projects | ConnectorConnectorA connector is the part of Rencore Governance that reads one service, such as Teams or SharePoint, into the inventory.Read more scopes through which a project pulls from Slack, Linear, Google Drive or a website. | ChatGPT connector scope |
| Invitations to external domains | Invitations to addresses that match no Entra ID user or match a guest. | ChatGPT invitation |
| External users | ChatGPT users whose Entra ID identity is a guest. | ChatGPT user |
| GPTs with custom actions | Custom GPTsCustom GPTA custom GPT is a version of ChatGPT that someone in your ChatGPT Enterprise workspace configured for one purpose and can share with others.Read more that call an external domain through a custom action. | ChatGPT custom GPT |
Show 4 more segments
| Segment | Description | Selects |
|---|---|---|
| MCP and OpenAPI app links | Live links from a member's ChatGPT account to an MCP server or an OpenAPI app. | ChatGPT app link |
| Plugins bundling MCP servers | Plugins that install an MCP server, and therefore an external endpoint the workspace talks to. | ChatGPT plugin |
| Projects with connector scopes | ChatGPT projects with at least one external data source attached. | ChatGPT project |
| Shared Codex environments | Codex sandboxes reachable by somebody other than their creator. | ChatGPT Codex Environment |
Oversharing 3
Content that more people can open than need to.
| Segment | Description | Selects |
|---|---|---|
| Publicly reachable GPTs | Custom GPTs reachable outside the workspace, by link or through the GPT store. | ChatGPT custom GPT |
| Publicly reachable or workspace-wide projects | ChatGPT projects reachable outside the workspace or by every member. | ChatGPT project |
| Workspace-wide GPTs | Custom GPTs every workspace member can reach without being named. | ChatGPT custom GPT |
Leavers 2
What people who left, or whose accounts are disabled, still own or hold.
| Segment | Description | Selects |
|---|---|---|
| Inactive users still holding objects | Inactive users who still own GPTs, projects, agents, Codex environments or library files. | ChatGPT user |
| Manually managed users | Users not provisioned through SCIM, so joiner-mover-leaver does not reach them. | ChatGPT user |
Clean-up 11
Inactive, empty, ownerless or outdated objects you can archive or delete.
| Segment | Description | Selects |
|---|---|---|
| Disabled automations | Scheduled automations that are switched off and left in place. | ChatGPT automation |
| Disabled service accounts | Service accounts that are switched off and left in place. | ChatGPT service account |
| Empty groups | Groups with no members, which still grant whatever was shared with them. | ChatGPT group |
| GPTs with an inactive owner | Custom GPTs whose owner is inactive or has left the workspace - orphan candidates for isolate, then delete. | ChatGPT custom GPT |
| Idle Codex machines | Developer machines not seen for 30 days but still paired. | ChatGPT Codex machine |
| Projects with an inactive owner | ChatGPT projects whose owner is inactive or has left the workspace. | ChatGPT project |
Show 5 more segments
| Segment | Description | Selects |
|---|---|---|
| Stale GPTs | Custom GPTs whose configuration has not changed in 90 days. | ChatGPT custom GPT |
| Stale invitations | Invitations still pending or expired more than 30 days after they were sent. | ChatGPT invitation |
| Stale projects | ChatGPT projects whose configuration has not changed in 90 days, with the same caveat as stale GPTs. | ChatGPT project |
| Trashed library files | Library files the user has trashed but which still consume storage. | ChatGPT library file |
| Unused Codex environments | Codex sandboxes no task has ever run in, which is standing repository access for nothing. | ChatGPT Codex Environment |
Licenses and costs 9
Licenses, spend and storage that cost money without being used.
| Segment | Description | Selects |
|---|---|---|
| Codex seat without Codex usage | Users on a Codex seat with no Codex usage in the last 30 days. | ChatGPT user |
| Codex seats | Users holding a Codex seat. | ChatGPT user |
| Groups without a default limit | Groups with no default spend cap, so their members fall through to the workspace default. | ChatGPT group |
| Idle seats | Users with no usage this month or last month - reclaim candidates. | ChatGPT user |
| Users with an individual override | Users whose cap comes from a personal override rather than their group or the workspace default. | ChatGPT user |
| Large library files | Library files over 50 MB. | ChatGPT library file |
Show 3 more segments
| Segment | Description | Selects |
|---|---|---|
| Temporary override active | Users on a time-boxed cap increase that has not yet lapsed. | ChatGPT user |
| Unlimited users | Users with no spend cap in force. | ChatGPT user |
| Users over 80% of their cap | Users whose month-to-date usage has passed 80% of their effective spend cap. | ChatGPT user |
Chargeback 1
Costs split by department, region or billing planPay-as-you-go planA pay-as-you-go plan links one or more Power Platform environments to an Azure subscription.Read more, so each part of the business sees its share.
| Segment | Description | Selects |
|---|---|---|
| Agents with spend | WorkspaceWorkspaceA Workspace is the top-level container in Rencore Governance. It holds the settings, users, roles and connected apps for exactly one Environment, the connected Microsoft 365 tenant.Read more agents that have incurred cost this month. | ChatGPT agent |
Operations 4
Day-to-day hygiene: naming, ownership, settings and configuration.
| Segment | Description | Selects |
|---|---|---|
| Credentials expiring within 30 days | Service account credentials that lapse in the next 30 days - an outage waiting to happen. | ChatGPT service account credential |
| Failed library indexing | Library files that failed to index and are silently unavailable to the person who uploaded them. | ChatGPT library file |
| Connector scopes with failed sync | External data sources that last failed to sync, so the project is answering from stale data. | ChatGPT connector scope |
| Pending limit-increase requests | Spend cap increase requests nobody has resolved. | ChatGPT limit increase request |
Frequently asked questions
How many segments does Rencore Governance provide for ChatGPT Enterprise?
How many segments does Rencore Governance provide for ChatGPT Enterprise?50 segments, such as Admins, Published agents with connectors and 48 more.
How are the ChatGPT Enterprise segments grouped?
How are the ChatGPT Enterprise segments grouped?By category: Security, Guests and external access, Oversharing, Leavers, Clean-up, Licenses and costs, Chargeback and Operations.
What is a segment of ChatGPT Enterprise objects?
What is a segment of ChatGPT Enterprise objects?A saved filter on the inventory. Rencore Governance recalculates it as scans update the inventory, so it always shows the current objects.
Which module includes the ChatGPT Enterprise connector?
Which module includes the ChatGPT Enterprise connector?The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.