ChatGPT Workspace ID: What It Is and How to Use It for Security
If your company has a ChatGPT Enterprise or ChatGPT Team account, you have a workspace ID. Most IT admins don't know what it is, but it's the key to enforcing which ChatGPT accounts can be used on your managed devices.
Here's what it is, where to find it, and how to use it.
What Is the ChatGPT Workspace ID?
When your organization signs up for ChatGPT Enterprise or ChatGPT Team, OpenAI assigns your account a unique identifier, the workspace ID. It's a string tied to your organization's tenant, not to any individual user.
The workspace ID is the mechanism behind tenant restriction: a security control that lets you say "ChatGPT can be used on our devices, but only when signed into our company's account."
Without tenant restrictions, ChatGPT is ChatGPT. Your employees can use their personal accounts, their spouse's account, a throwaway account, anything. Your company has no visibility into those sessions. No data processing agreement covers them. Anything pasted in is OpenAI's to use for training (depending on the account settings).
With tenant restrictions enabled and your workspace ID configured at the SWG level, the policy changes: ChatGPT requests not authenticated against your workspace ID get blocked. Personal accounts get a "you can't use this here" message. Corporate accounts work normally.
Where to Find Your ChatGPT Workspace ID
Your workspace ID lives in your ChatGPT Enterprise or Team account settings.
- Log into your ChatGPT account as an admin
- Go to Settings → Organization
- Look for Workspace ID or Organization ID, it's a string in the format org-XXXXXXXXXXXXXXXXXXXX
If you're using ChatGPT Enterprise via API access, the workspace ID may also appear in your OpenAI API dashboard under your organization settings.
Don't have one? If you're using the free or Plus tier of ChatGPT, you don't have a workspace ID. These are consumer-grade accounts with no organizational controls. That's exactly the kind of account you want to block on managed devices.
How to Use the Workspace ID to Enforce Tenant Restrictions
Having the workspace ID is step one. Enforcing it is step two, and this is where your dope Secure Web Gateway comes in.
Read on to see how to use this Workspace ID to enforce Enterprise Account usage only— here.
