ChatGPT via Power Platform
Azure & Power Platform OpenAI · Assistant · connector shared_openai
Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
60
High
People
3
Makers who created connections
Connections
3
1 environment · 3 makers
Data path
Third party
Flow data leaves the tenant
power-platformthird-party-connectordefault-environmentcorroborated
Next steps
Recommended actions
- 01ChatGPT via Power Platform trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
- 02OpenAI (Independent Publisher) sends flow and app data to a third-party AI API. Classify the connector as Blocked or Business in a Power Platform DLP policy so it cannot be combined with SharePoint, Dataverse, or Outlook connectors.
- 03Connections exist in the Default environment, where every licensed user is a maker. Move sanctioned AI work to a managed environment and apply a DLP policy to Default.
Power Platform
Where the connector is used
| Environment | Type | Connections |
|---|---|---|
| Contoso (default) | Default | 3 |
Connector shared_openai · sends data to a third-party API
Same app, other lanes
Related findings
- Critical85ChatGPTEntra consentall users
- High51ChatGPTNetwork11 people
- Medium48ChatGPTEndpoint2 people
- High58ChatGPTEmail4 people
- High70ChatGPT: sensitive dataPurview DLP3 people
- High66ChatGPTSIEM · Splunk (demo)3 people
- Critical81ChatGPTCode · GitHub (demo)0 people
- Medium38ChatGPTOkta (demo)10 people
- Medium30ChatGPTGoogle Workspace (demo)5 people
- High59ChatGPTVendor account11 people
Who
People
Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.
| Person | Department | Source | Sign-ins · 30 d | Granted |
|---|---|---|---|---|
| n/a | Platform owner or maker | 0 | No direct grant | |
| n/a | Platform owner or maker | 0 | No direct grant | |
| n/a | Platform owner or maker | 0 | No direct grant |
Why
Evidence
- connector_usage · Sep 9, 2026OpenAI (Independent Publisher) connector: 3 connections by 3 makers across Contoso (default)
Detail
{ "thirdParty": true, "connectorId": "shared_openai", "environments": [ { "name": "Contoso (default)", "type": "Default", "connections": 3 } ] } - connection · Aug 5, 2026Connection 'OpenAI - henry' created by [email protected]
Detail
{ "status": "Connected", "connectionId": "con-0001" } - connection · Aug 23, 2026Connection 'OpenAI GPT' created by [email protected]
Detail
{ "status": "Connected", "connectionId": "con-0002" } - connection · Sep 9, 2026Connection 'openai key' created by [email protected]
Detail
{ "status": "Connected", "connectionId": "con-0003" } - corroborationAlso found by another lane (consent:aaaa0002-0000-4000-8000-000000000002)
Detail
{ "findingKey": "consent:aaaa0002-0000-4000-8000-000000000002" } - corroborationAlso found by another lane (mdca:11114)
Detail
{ "findingKey": "mdca:11114" } - corroborationAlso found by another lane (mde:openai-chatgpt)
Detail
{ "findingKey": "mde:openai-chatgpt" } - corroborationAlso found by another lane (mail:openai-chatgpt)
Detail
{ "findingKey": "mail:openai-chatgpt" }