# ChatGPT Work connected-app permission exercise

Use native action and prompt controls with a restricted test identity, then record a synthetic read/write distinction.

Worked intended configuration and synthetic task. No app is connected or administrator setting changed.

Source: https://aona.ai/resources/guides/chatgpt-work-connected-app-security/
Sources checked: 2026-09-21

## Three controls with different jobs

### Action control

Which app actions may be used

Note: Example: read-only

### App permissions

When ChatGPT asks before using them

Note: Example: Any changes where available

### Connection identity

Which source-system data and actions the account can access

Note: Review personal/shared accounts separately

| Control or test | Intended example | Observed |
| --- | --- | --- |
| Action control | Read-only actions | Unverified |
| App permissions | Any changes where offered | Unverified |
| Account | Personal test identity, restricted resource | Unverified |
| Read synthetic note | Allowed if configuration supports it | Untested |
| Attempted change | Unavailable or denied by read-only scope | Untested |

## Review checklist

- [ ] Confirm the native controls exist for this connection
  The example applies only where Action control and the relevant prompt option are supported.
- [ ] Record the actual connected identity and source scope
  Shared or agent-owned accounts can differ from the requesting employee’s access.
- [ ] Separate action exclusion from approval prompting
  An approval prompt is not proof that a write capability has been removed.

## Included example files

- README.md
- intended-native-settings.json
- synthetic-reference-note.txt
- verification.csv
- connection-decision.md

## Source references

- OpenAI: Apps and connectors for enterprise: https://learn.chatgpt.com/docs/enterprise/apps-and-connectors (2026-09-21)
- OpenAI: ChatGPT Work security: https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security (2026-09-21)

Use the worksheet within the relevant legal, contractual and technical scope. It is not a certification or a record of an installed-product test.