ChatGPT

1. 01ChatGPT trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
2. 02ChatGPT holds low-scope OAuth grants from 5 people (sign-in only). Low exposure, but decide whether "Sign in with Google" to AI apps is allowed at all.
3. 03ChatGPT was connected by users, not assigned by an admin. If it is approved, add it to the Workspace app catalog so access is managed and can be revoked at offboarding.
4. 04Nobody signed into ChatGPT through Google in 90 days. Unassign or revoke to reduce standing access.

• ▲Critical85ChatGPTEntra consentall users
• ◆High51ChatGPTNetwork11 people
• ●Medium48ChatGPTEndpoint2 people
• ◆High58ChatGPTEmail4 people
• ◆High60ChatGPT via Power PlatformAzure & Power Platform3 people
• ◆High70ChatGPT: sensitive dataPurview DLP3 people
• ◆High66ChatGPTSIEM · Splunk (demo)3 people
• ▲Critical81ChatGPTCode · GitHub (demo)0 people
• ●Medium38ChatGPTOkta (demo)10 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. oauth_grants · Aug 16, 2026
   Google Workspace (demo): ChatGPT, 5 OAuth grants (openid, userinfo.email, userinfo.profile) in 90 days
   Detail

   {
     "appIds": [
       "407408718192-openai.apps.googleusercontent.com"
     ],
     "scopes": [
       {
         "scope": "openid",
         "users": 5
       },
       {
         "scope": "userinfo.email",
         "users": 5
       },
       {
         "scope": "userinfo.profile",
         "users": 5
       }
     ],
     "revoked": 0,
     "assignedUsers": 0
   }

2. oauth_grant · Jul 19, 2026
   [email protected] authorized ChatGPT: openid, userinfo.email, userinfo.profile
   Detail

   {
     "clientId": "407408718192-openai.apps.googleusercontent.com"
   }

3. oauth_grant · Aug 15, 2026
   [email protected] authorized ChatGPT: openid, userinfo.email, userinfo.profile
   Detail

   {
     "clientId": "407408718192-openai.apps.googleusercontent.com"
   }

4. oauth_grant · Aug 16, 2026
   [email protected] authorized ChatGPT: openid, userinfo.email, userinfo.profile
   Detail

   {
     "clientId": "407408718192-openai.apps.googleusercontent.com"
   }

5. oauth_grant · Jul 4, 2026
   [email protected] authorized ChatGPT: openid, userinfo.email, userinfo.profile
   Detail

   {
     "clientId": "407408718192-openai.apps.googleusercontent.com"
   }

6. oauth_grant · Jul 17, 2026
   [email protected] authorized ChatGPT: openid, userinfo.email, userinfo.profile
   Detail

   {
     "clientId": "407408718192-openai.apps.googleusercontent.com"
   }

7. corroboration
   Also found by another lane (consent:aaaa0002-0000-4000-8000-000000000002)
   Detail

   {
     "findingKey": "consent:aaaa0002-0000-4000-8000-000000000002"
   }

8. corroboration
   Also found by another lane (mdca:11114)
   Detail

   {
     "findingKey": "mdca:11114"
   }

9. corroboration
   Also found by another lane (mde:openai-chatgpt)
   Detail

   {
     "findingKey": "mde:openai-chatgpt"
   }

10. corroboration
    Also found by another lane (mail:openai-chatgpt)
    Detail

    {
      "findingKey": "mail:openai-chatgpt"
    }

11. corroboration
    Also found by another lane (pp:shared_openai)
    Detail

    {
      "findingKey": "pp:shared_openai"
    }

12. corroboration
    Also found by another lane (dlp:openai-chatgpt)
    Detail

    {
      "findingKey": "dlp:openai-chatgpt"
    }

13. corroboration
    Also found by another lane (siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt)
    Detail

    {
      "findingKey": "siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt"
    }

14. corroboration
    Also found by another lane (repo:giypXj7r_Gc5tatesErdR:openai-chatgpt)
    Detail

    {
      "findingKey": "repo:giypXj7r_Gc5tatesErdR:openai-chatgpt"
    }

15. corroboration
    Also found by another lane (idp:9BKV_xBnZf5pDRMXOQ1jy:openai-chatgpt)
    Detail

    {
      "findingKey": "idp:9BKV_xBnZf5pDRMXOQ1jy:openai-chatgpt"
    }