New OpenAI admin controls limit external AI access

Announcement: on September 24, OpenAI added two external-access settings for ChatGPT Enterprise in an admin preview. Global admins can separately decide whether ChatGPT Sites may use connected apps and whether applications may access ChatGPT Ads. Both permissions are disabled by default during the preview.

OpenAI stresses that identity sign-in is separate from data permissions. An employee must still authorize the connected app themselves; Sites also depends on workspace and individual app settings. According to the release notes, the update applies to Enterprise and not automatically to Business.

DigiDare perspective: treat every AI connection as a separate gateway to company data. Inventory connected apps, enable only what a specific process requires, and test with a limited group. Then check both central admin settings and the permissions users grant themselves.