1# Work mode admin FAQ1# ChatGPT Work admin FAQ
2 2
3Work mode brings the technology behind Codex into ChatGPT for longer,3ChatGPT Work brings the technology behind Codex into ChatGPT for longer,
4multi-step tasks. It can gather context from chats, files, workspace4multi-step tasks. It can gather context from chats, files, workspace
5resources, and connected systems; use approved tools; and create review-ready5resources, and connected systems; use approved tools; and create review-ready
6outputs. Access, context, actions, network behavior, and credit use vary by6outputs. Access, context, actions, network behavior, and credit use vary by
8 8
9## Overview9## Overview
10 10
11Work mode lets users delegate longer, multi-step tasks to ChatGPT. It can gather11ChatGPT Work lets users delegate longer, multi-step tasks to ChatGPT. It can gather
12information from connected sources, reason across steps, create documents,12information from connected sources, reason across steps, create documents,
13presentations, or analyses, and return results for review.13presentations, or analyses, and return results for review.
14 14
15Work mode launched July 9, 2026. For Enterprise and Edu, web and mobile access is15ChatGPT Work launched July 9, 2026. For Enterprise and Edu, web and mobile access is
16off by default during a two-week preview. Admins can enable billable usage, and16off by default during a two-week preview. Admins can enable billable usage, and
17explicit opt-outs persist when the default changes. Desktop access remains17explicit opt-outs persist when the default changes. Desktop access remains
18governed separately through Codex Local permissions and managed configuration.18governed separately through Codex Local permissions and managed configuration.
19 19
20This FAQ explains how admins manage Work mode in ChatGPT: access and data controls,20This FAQ explains how admins manage ChatGPT Work: access and data controls,
21compliance and visibility, usage and spend, incident response, and rollout21compliance and visibility, usage and spend, incident response, and rollout
22practices.22practices.
23 23
24## Core administrative controls24## Core administrative controls
25 25
26Administrators govern Work mode through several control layers:26Administrators govern ChatGPT Work through several control layers:
27 27
28- **Access to the enterprise workspace:** Identity and access controls manage28- **Access to the enterprise workspace:** Identity and access controls manage
29 authentication and access to the workspace. Depending on the plan and29 authentication and access to the workspace. Depending on the plan and
33 enforce workspace-wide MFA through your identity provider. Manage SSO and33 enforce workspace-wide MFA through your identity provider. Manage SSO and
34 related identity settings in the34 related identity settings in the
35 [Global Admin Console](https://help.openai.com/en/articles/12289294-admin-portal).35 [Global Admin Console](https://help.openai.com/en/articles/12289294-admin-portal).
36- **Access to Work mode within the workspace:** On web and mobile, admins use the36- **Access to ChatGPT Work within the workspace:** On web and mobile, admins use the
37 Work mode access control and role-based access control (RBAC) to decide who can37 ChatGPT Work access control and role-based access control (RBAC) to decide who can
38 use it. Enterprise and Edu access is off during the two-week preview;38 use it. Enterprise and Edu access is off during the two-week preview;
39 admins can enable it, and explicit opt-outs persist when the default changes.39 admins can enable it, and explicit opt-outs persist when the default changes.
40 Desktop access follows separate Codex Local permissions and40 Desktop access follows separate Codex Local permissions and
46 [Groups and provisioning](https://learn.chatgpt.com/docs/enterprise/groups-and-provisioning).46 [Groups and provisioning](https://learn.chatgpt.com/docs/enterprise/groups-and-provisioning).
47- **Workspace and member roles:** Built-in Owner, Admin, and Member roles47- **Workspace and member roles:** Built-in Owner, Admin, and Member roles
48 determine who can administer the workspace. Custom roles and member RBAC48 determine who can administer the workspace. Custom roles and member RBAC
49 separately control end-user access to Work mode, plugins, and other capabilities.49 separately control end-user access to ChatGPT Work, plugins, and other capabilities.
50 See50 See
51 [Roles and workspace permissions](https://learn.chatgpt.com/docs/enterprise/roles-and-workspace-permissions).51 [Roles and workspace permissions](https://learn.chatgpt.com/docs/enterprise/roles-and-workspace-permissions).
52- **Plugins and connectors:** Plugin policy governs plugin availability and52- **Plugins and connectors:** Plugin policy governs plugin availability and
62 admins can allow all actions, read-only actions, or a custom set and decide62 admins can allow all actions, read-only actions, or a custom set and decide
63 how newly added actions are handled. App permissions separately determine63 how newly added actions are handled. App permissions separately determine
64 when ChatGPT asks before using a connector.64 when ChatGPT asks before using a connector.
65- **Credits:** Work mode and Codex share pricing, credits, and usage limits.65- **Credits:** ChatGPT Work and Codex share pricing, credits, and usage limits.
66 Eligible Enterprise and Edu admins can set monthly per-user limits through a66 Eligible Enterprise and Edu admins can set monthly per-user limits through a
67 workspace default, group defaults, and individual overrides. Users can67 workspace default, group defaults, and individual overrides. Users can
68 request increases when the workspace allows it. Business follows a separate68 request increases when the workspace allows it. Business follows a separate
79 79
80### How are access to data, systems, and user actions protected?80### How are access to data, systems, and user actions protected?
81 81
82Work mode is governed by the identity, access, and permission controls already82ChatGPT Work is governed by the identity, access, and permission controls already
83established in your ChatGPT workspace. Administrators use identity management,83established in your ChatGPT workspace. Administrators use identity management,
84[RBAC](https://help.openai.com/en/articles/11750701-rbac), and workspace roles84[RBAC](https://help.openai.com/en/articles/11750701-rbac), and workspace roles
85to determine who can use Work mode.85to determine who can use ChatGPT Work.
86 86
87Where supported, access can be synchronized with your identity provider through87Where supported, access can be synchronized with your identity provider through
88[SCIM](https://help.openai.com/en/articles/10011769-openai-platform-scim-integration-faq)88[SCIM](https://help.openai.com/en/articles/10011769-openai-platform-scim-integration-faq)
89and group synchronization. This lets you manage access and permissions centrally89and group synchronization. This lets you manage access and permissions centrally
90as employees join the organization, change roles, or leave.90as employees join the organization, change roles, or leave.
91 91
92Underlying source systems continue to enforce access to enterprise data. Work mode92Underlying source systems continue to enforce access to enterprise data. ChatGPT Work
93respects the permissions defined in connected applications, so users and agents93respects the permissions defined in connected applications, so users and agents
94can access only files, repositories, channels, records, and actions they are94can access only files, repositories, channels, records, and actions they are
95authorized to use. Work mode doesn't bypass existing access controls or grant new95authorized to use. ChatGPT Work doesn't bypass existing access controls or grant new
96permissions in connected systems.96permissions in connected systems.
97 97
98<a id="how-does-work-access-data-and-context"></a>98<a id="how-does-work-access-data-and-context"></a>
99<a id="how-does-work-mode-access-data-and-context"></a>
99 100
100### How does Work mode access data and context?101### How does ChatGPT Work access data and context?
101 102
102Work mode can use the current chat, uploaded files, workspace resources, and103ChatGPT Work can use the current chat, uploaded files, workspace resources, and
103connected systems through plugins. Depending on enabled capabilities and104connected systems through plugins. Depending on enabled capabilities and
104permissions, this can include documents, repositories, tickets, channels,105permissions, this can include documents, repositories, tickets, channels,
105email, and calendars. Files from earlier chats or memory can be available106email, and calendars. Files from earlier chats or memory can be available
108 109
109Each context source keeps its own controls: users supply chat context,110Each context source keeps its own controls: users supply chat context,
110admins manage workspace resources, and connected systems enforce authentication111admins manage workspace resources, and connected systems enforce authentication
111and permissions. Work mode can access only information authorized for the user or an112and permissions. ChatGPT Work can access only information authorized for the user or an
112approved shared connection.113approved shared connection.
113 114
114Work mode inherits applicable ChatGPT workspace protections. Residency, retention,115ChatGPT Work inherits applicable ChatGPT workspace protections. Residency, retention,
115logging, and feature availability vary by plan, region, surface, and connected116logging, and feature availability vary by plan, region, surface, and connected
116system, so confirm coverage for your configuration.117system, so confirm coverage for your configuration.
117 118
144## Compliance145## Compliance
145 146
146<a id="how-does-work-support-enterprise-privacy-and-data-commitments"></a>147<a id="how-does-work-support-enterprise-privacy-and-data-commitments"></a>
148<a id="how-does-work-mode-support-enterprise-privacy-and-data-commitments"></a>
147 149
148### How does Work mode support enterprise privacy and data commitments?150### How does ChatGPT Work support enterprise privacy and data commitments?
149 151
150Work mode uses the privacy, security, and data commitments applicable to the152ChatGPT Work uses the privacy, security, and data commitments applicable to the
151customer's ChatGPT workspace, subject to plan, configuration, surface, feature,153customer's ChatGPT workspace, subject to plan, configuration, surface, feature,
152and region. For ChatGPT Enterprise, this includes154and region. For ChatGPT Enterprise, this includes
153[no training on business data by default](https://help.openai.com/en/articles/8983130-what-if-i-want-to-keep-my-history-on-but-disable-model-training),155[no training on business data by default](https://help.openai.com/en/articles/8983130-what-if-i-want-to-keep-my-history-on-but-disable-model-training),
160and the customer's agreement for the features and regions in use.162and the customer's agreement for the features and regions in use.
161 163
162Connected services have their own retention, logging, access, residency, and164Connected services have their own retention, logging, access, residency, and
163compliance requirements. When Work mode uses plugins, repositories, or third-party165compliance requirements. When ChatGPT Work uses plugins, repositories, or third-party
164systems, evaluate both the ChatGPT workspace controls and the connected166systems, evaluate both the ChatGPT workspace controls and the connected
165system's controls.167system's controls.
166 168
171 173
172### What data is stored, retained, or deleted?174### What data is stored, retained, or deleted?
173 175
174Data retention and deletion for Work mode are governed by the ChatGPT workspace176Data retention and deletion for ChatGPT Work are governed by the ChatGPT workspace
175plan, administrative settings, and the capabilities in use. Retention can vary177plan, administrative settings, and the capabilities in use. Retention can vary
176across the information Work mode accesses. Data stored by ChatGPT follows the178across the information ChatGPT Work accesses. Data stored by ChatGPT follows the
177configured workspace retention policies, while connected applications continue179configured workspace retention policies, while connected applications continue
178to manage their own data and lifecycle policies. See180to manage their own data and lifecycle policies. See
179[Chat and file retention policies](https://help.openai.com/en/articles/8983778-chat-and-file-retention-policies-in-chatgpt).181[Chat and file retention policies](https://help.openai.com/en/articles/8983778-chat-and-file-retention-policies-in-chatgpt).
180 182
181Work mode can create chat content, uploaded or generated files, artifacts,183ChatGPT Work can create chat content, uploaded or generated files, artifacts,
182and execution metadata. Codex chats can also create repository or environment184and execution metadata. Codex chats can also create repository or environment
183metadata, command output, diffs, and logs. Check the current product and185metadata, command output, diffs, and logs. Check the current product and
184[Compliance API](https://learn.chatgpt.com/docs/enterprise/compliance-api) documentation for exact data186[Compliance API](https://learn.chatgpt.com/docs/enterprise/compliance-api) documentation for exact data
239 241
240Governance spans three related but separate layers:242Governance spans three related but separate layers:
241 243
242- **Work mode access controls** determine who can use Work mode on244- **ChatGPT Work access controls** determine who can use ChatGPT Work on
243 each surface.245 each surface.
244- **Workspace Agent controls** determine who can build, publish, share,246- **Workspace Agent controls** determine who can build, publish, share,
245 schedule, or configure reusable agents and shared connections.247 schedule, or configure reusable agents and shared connections.
249 251
250Managed configuration constrains supported runtime behavior. It doesn't grant252Managed configuration constrains supported runtime behavior. It doesn't grant
251workspace access, replace RBAC, or revoke a user's workspace access. These253workspace access, replace RBAC, or revoke a user's workspace access. These
252layers aren't one uniform Work mode policy surface. Analytics and compliance logs254layers aren't one uniform ChatGPT Work policy surface. Analytics and compliance logs
253provide additional visibility within their documented product and event255provide additional visibility within their documented product and event
254scopes.256scopes.
255 257
266 268
267### Can access be scoped by group, role, workspace, or capability?269### Can access be scoped by group, role, workspace, or capability?
268 270
269Yes. Work mode capabilities can be scoped with workspace roles, identity groups,271Yes. ChatGPT Work capabilities can be scoped with workspace roles, identity groups,
270and administrator-defined permissions. Assign capabilities to groups based on272and administrator-defined permissions. Assign capabilities to groups based on
271business need and organizational policy instead of giving every user identical273business need and organizational policy instead of giving every user identical
272access. See the274access. See the
273[RBAC guide](https://help.openai.com/en/articles/11750701-rbac) and this275[RBAC guide](https://help.openai.com/en/articles/11750701-rbac) and this
274[RBAC walkthrough](https://vimeo.com/1207482321/d1286e4467?share=copy&fl=sv&fe=ci).276[RBAC walkthrough](https://vimeo.com/1207482321/d1286e4467?share=copy&fl=sv&fe=ci).
275 277
276Organizations can use RBAC to determine which users can access Work mode, manage278Organizations can use RBAC to determine which users can access ChatGPT Work, manage
277workspace settings, configure approved plugins, or build and publish Workspace279workspace settings, configure approved plugins, or build and publish Workspace
278Agents. For eligible Enterprise and Edu workspaces, monthly usage limits can280Agents. For eligible Enterprise and Edu workspaces, monthly usage limits can
279support a phased rollout through a workspace default, group defaults, and user281support a phased rollout through a workspace default, group defaults, and user
287 289
288### How are runtime and network boundaries governed?290### How are runtime and network boundaries governed?
289 291
290The security boundaries for Work mode depend on the task. A chat in Chat mode, a292The security boundaries for ChatGPT Work depend on the task. A standard Chat conversation, a
291connected workflow, a scheduled task, and a Codex chat can run in different293connected workflow, a scheduled task, and a Codex chat can run in different
292environments with different permissions, tools, and network access.294environments with different permissions, tools, and network access.
293 295
294Govern each execution environment through its applicable controls. Work mode296Govern each execution environment through its applicable controls. ChatGPT Work
295permissions on web and mobile govern access to Work mode and supported browser or297permissions on web and mobile govern access to ChatGPT Work and supported browser or
296network capabilities. Search, plugins, Workspace Agents, and298network capabilities. Search, plugins, Workspace Agents, and
297source-system permissions remain separate controls. Desktop and Codex chats299source-system permissions remain separate controls. Desktop and Codex chats
298follow Codex permissions, managed configuration, MCP policy, sandboxing, and300follow Codex permissions, managed configuration, MCP policy, sandboxing, and
308## Usage and cost310## Usage and cost
309 311
310<a id="how-does-work-usage-translate-into-spend-over-time"></a>312<a id="how-does-work-usage-translate-into-spend-over-time"></a>
313<a id="how-does-work-mode-usage-translate-into-spend-over-time"></a>
311 314
312### How does Work mode usage translate into spend over time?315### How does ChatGPT Work usage translate into spend over time?
313 316
314[Work mode and Codex share pricing, credits, and usage limits](https://learn.chatgpt.com/docs/pricing).317[ChatGPT Work and Codex share pricing, credits, and usage limits](https://learn.chatgpt.com/docs/pricing).
315Consumption varies with the model and capability, context size, task duration,318Consumption varies with the model and capability, context size, task duration,
316tool use, and output size. Standard Chat usage is separate.319tool use, and output size. Standard Chat usage is separate.
317 320
400 403
401## Recommended admin actions404## Recommended admin actions
402 405
403- **Confirm who should have access first.** Decide whether to keep Work mode off,406- **Confirm who should have access first.** Decide whether to restrict access to
404 run a pilot, or roll out broadly. Many organizations start with power users,407 ChatGPT Work, run a pilot, or roll it out broadly. Many organizations start
405 champions, or teams with clear use cases.408 with power users, champions, or teams with clear use cases.
406- **Review roles and permissions.** In **Permissions & roles**, confirm which409- **Review roles and permissions.** In **Permissions & roles**, confirm which
407 users or groups can access Work mode. Match access to business need, readiness,410 users or groups can access ChatGPT Work. Match access to business need, readiness,
408 and governance expectations.411 and governance expectations.
409- **Review plugins and data sources.** Work mode is most useful with approved412- **Review plugins and data sources.** ChatGPT Work is most useful with approved
410 business context such as files, email, calendars, Slack, or CRM. Review413 business context such as files, email, calendars, Slack, or CRM. Review
411 enabled plugins, their audiences, and whether connector policies still match how users414 enabled plugins, their audiences, and whether connector policies still match how users
412 should delegate work.415 should delegate work.
413- **Set expectations for appropriate use cases.** Position Work mode for multi-step,416- **Set expectations for appropriate use cases.** Position ChatGPT Work for multi-step,
414 higher-value tasks such as research, synthesis, analysis, file creation,417 higher-value tasks such as research, synthesis, analysis, file creation,
415 workflow updates, and reusable outputs. Use Chat mode for quick questions,418 workflow updates, and reusable outputs. Use Chat for quick questions,
416 light rewrites, or brainstorming.419 light rewrites, or brainstorming.
417- **Review credit and usage controls.** Because Work mode can perform longer-running420- **Review credit and usage controls.** Because ChatGPT Work can perform longer-running
418 tasks, it can use more credits than a standard chat in Chat mode. Review421 tasks, it can use more credits than a standard Chat conversation. Review
419 defaults, group defaults, user overrides, and internal guidance about422 defaults, group defaults, user overrides, and internal guidance about
420 matching effort to business value.423 matching effort to business value.
421- **Identify your first high-value workflows.** Start with clear, reviewable424- **Identify your first high-value workflows.** Start with clear, reviewable