rencore.com (opens in a new tab) Start a trial (opens in a new tab)

Shadow accounts

Last updated Preview Inventory ChatGPT Enterprise

AI summary

Use this security preview segment to identify ChatGPT users outside your Entra ID directory who lack a matching Microsoft 365 identity. The Microsoft 365 Users inventory is required for accurate results.

SecurityPreview

ChatGPT users with no matching Entra ID identity - accounts outside the directory entirely. Needs the Microsoft 365 Users inventory; without it every user is listed.

What it selects

The segment selects ChatGPT user objects from the ChatGPT Enterprise inventory.

The rule

Every ChatGPT User where M365 user is empty

In Rencore Governance

The Shadow accounts segment in Rencore Governance: its rule, count, trend, violated policies and the objects it selects
The segment in a Rencore demo Environment, captured October 2026.

Details

SelectsChatGPT user
ConnectorChatGPT Enterprise
CategorySecurity
Primary segmentNo
RecommendedNo
StatusPreview

Frequently asked questions

What does the shadow accounts segment select?

The Shadow accounts segment: chatGPT users with no matching Entra ID identity - accounts outside the directory entirely. Needs the Microsoft 365 Users inventory; without it every user is listed.

What is the rule of the shadow accounts segment?

Every ChatGPT User where M365 user is empty.

Which objects does the shadow accounts segment use?

The Shadow accounts segment works on ChatGPT user objects from the ChatGPT Enterprise inventory.

Which module includes the shadow accounts segment?

The Shadow accounts segment comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.