Overview
A workspace is a ChatGPT environment with its own members, settings, and resources. Workspace roles, seat types, and feature permissions control different parts of a person's access:
| To change | Use | Where to learn more |
|---|---|---|
| What someone can administer | A built-in workspace role | Choose a workspace role below. |
| Which products someone can access | A seat type | Choose a seat type below. |
| Which people belong to a group or administer it | Group membership or a group manager designation | Managing groups and group managers. |
| Which features someone can use | Workspace defaults and custom roles | Managing feature access with role-based access control. |
Availability
The built-in workspace roles below apply to ChatGPT Enterprise and Edu. The seat-type and member-management instructions in this article describe ChatGPT Enterprise. Group manager delegation is available in ChatGPT Enterprise.
Choose a workspace role
Each workspace has four built-in roles:
Member: Uses the features allowed by their seat type, plan, and permissions. The Member role does not grant administrative privileges.
Analytics viewer: Has member access and can also view workspace analytics.
Admin: Helps manage members and groups, manages Codex access tokens, and performs supported administrative tasks.
Owner: Manages workspace configuration, billing, identity settings, membership, and custom roles. Owners can invite additional owners.
The table shows permissions granted by each built-in role. A role does not override seat type, plan, or feature eligibility. For example, a Codex-only seat does not gain ChatGPT access from its workspace role.
| Permission | Member | Analytics viewer | Admin | Owner |
|---|---|---|---|---|
| Use core chat functionality | Yes | Yes | Yes | Yes |
| View workspace users | Yes | Yes | Yes | Yes |
| View workspace analytics | — | Yes | Yes | Yes |
| Invite new members | — | — | Yes | Yes |
| Invite new admins or owners | — | — | — | Yes |
| Cancel an invitation | — | — | Yes | Yes |
| Remove a user | — | — | Yes | Yes |
| Change a user's workspace role | — | — | — | Yes |
| View groups in supported experiences | Yes | Yes | Yes | Yes |
| Manage groups | — | — | Yes | Yes |
| View plan information in Billing | — | — | Yes | Yes |
| View invoices in Billing | — | — | — | Yes |
| View and manage Identity & Provisioning | — | — | — | Yes |
| View and manage workspace settings | — | — | — | Yes |
| Create a GPT | Yes | Yes | Yes | Yes |
| View and manage GPT settings | — | — | — | Yes |
| View and manage apps | — | — | Yes | Yes |
Group visibility in sharing experiences does not grant permission to browse or edit the full group directory. For availability and visibility rules, see: Managing groups and group managers.
In ChatGPT Enterprise, an owner or admin can also designate a member as a group manager. This is an additional designation for selected group tasks; it does not replace a built-in workspace role or change a seat type. For assignment and delegated permissions, see: Managing groups and group managers.
Choose a seat type in ChatGPT Enterprise
ChatGPT Enterprise supports standard ChatGPT seats and Codex seats. A Codex seat provides Codex-only access. A workspace can have either seat type or a mix of both, and seats can be assigned to any built-in role.
For product access by seat type, see: What is ChatGPT Enterprise?. For agreements that use credit-based billing, see the credit-based rate card for Codex usage pricing. For eligible ChatGPT Enterprise agreements with token-based billing in USD, see the Enterprise token-based rate card.
Manage members in ChatGPT Enterprise
Invite members
Workspace Owners and Admins can invite members by email or CSV upload, or provision members through SCIM. Only Owners can invite new Admins or Owners.
ChatGPT Enterprise workspaces are for ongoing collaboration within an organization. Invite people you expect to remain on your team. Misusing seat assignments in violation of the Services Agreement can lead to workspace deactivation or account suspension.
Invite someone by email
In your Enterprise workspace, go to Workspace settings > Members and select + Add.
Select Invite by email, enter the person’s email address, and choose a workspace role. If a seat type is shown, select one.
To invite more people, enter their email addresses in the other rows or select Add more. Select Send invites when you’re ready.
Invite members in bulk with a CSV file
Prepare a CSV file with one row per recipient and up to 1,000 recipients per file. Use the format shown below.
In Workspace settings > Members, select + Add, then Invite by email.
Select Upload a CSV and choose your file. Review the recipients and their workspace roles. If seat types are shown, review those too. Select Send invites.
When you see Bulk invitation started, you can leave the page. Select View notifications to see progress now, or open the notification bell later. Open the bulk invitation to see how many recipients have been processed and which addresses need attention. Temporary failures are retried automatically when possible.
CSV format
email,role,seat typeuser1@company.com,member,Codexanalyst1@company.com,member,ChatGPTadmin@company.com,admin,Codexit@company.com,owner,ChatGPT
| Column | Accepted values |
|---|---|
role | owner, admin, member, analytics_viewer |
seat type | ChatGPT, Codex |
Role and seat type values are case-insensitive. If you leave the role blank, enter an unrecognized role, or choose a role you don’t have permission to assign, the recipient is invited as a Member. If you leave the seat type blank, the workspace default applies.
You can set the default seat type in Workspace settings > Identity & Access. Members provisioned through SCIM inherit this default.
Adding members can affect billing and credits under your Enterprise agreement. For details on seat additions, true-ups, and shared credits, see Flexible pricing for the Enterprise, Edu, and Business plans.
Review employees with personal workspaces
Owners and Admins in eligible ChatGPT Enterprise workspaces can review people who use personal ChatGPT workspaces with their organization’s verified email domains and invite them to join the company workspace.
The verified domains must be associated with the selected Enterprise workspace. People who already belong to that workspace are excluded from this list.
Open the Personal workspaces list
Open the Enterprise workspace you want to manage.
Go to Workspace settings > Members.
Select Personal workspaces.
You may also see a notice about employees using personal workspaces. Select Review Users to open the same list. Opening the list does not send invitations.
Review the account and invitation information shown for each person. Account created indicates when the ChatGPT account was created; it does not indicate recent activity. People with pending invitations or join requests may still appear.
Invite users without SCIM
If your workspace does not use SCIM:
Review the users on the current page.
Select Review invitations. If individual selection is available, select the users you want to invite, then select Review selected (N).
Check the destination workspace and number of users in the confirmation.
Confirm to send the invitations.
Invitations apply to the users included in that confirmation. Review additional pages separately.
Check Pending invites and Active members for the results. If an invitation cannot be confirmed, check those lists before sending it again.
Review your seat availability and agreement’s billing terms before inviting additional members.
Provision users through SCIM
If your workspace uses SCIM, manage access through your identity provider:
Select Download CSV to export the available personal-workspace list.
Review which employees should receive access.
Assign those employees to the appropriate application or group in your identity provider.
Return to Members to check their provisioning and invitation status.
A manual invitation does not confirm that a user has been provisioned through SCIM. For setup and management instructions, see SCIM provisioning and management.
Download CSV is available for both SCIM and non-SCIM workspaces. The export includes the available list across all pages, regardless of row selection. Downloading it does not invite users or migrate their data.
What happens after an invitation?
Sending an invitation does not transfer personal workspace content. Eligible employees may see a migration prompt when they sign in. The prompt explains their available choices and any deadline.
Before inviting employees, share Migrating your personal workspace to ChatGPT Business or Enterprise so they can prepare.
Join or switch workspaces
Users join an Enterprise workspace by invitation. Joining can require a personal workspace associated with the company's email domain to be merged into the Enterprise workspace or deleted. A user without an existing ChatGPT account has one created as part of joining.
Personal workspaces contain the user's chats, memory, context, apps, and other personal ChatGPT resources. Enterprise workspaces contain the organization's resources and settings.
Users who belong to multiple workspaces can select an active workspace. On ChatGPT web, use the profile menu. On mobile, use the sidebar. Users can switch to a personal workspace if they still have one.
FAQ
Can a custom role give a Codex-only seat access to ChatGPT?
No. A Codex-only seat remains limited to Codex. Codex-specific RBAC permissions still apply. For feature permissions, see: Managing feature access with role-based access control.
Can SCIM assign a user's seat type?
SCIM-provisioned users inherit the workspace's default seat type. Set that default before provisioning users.
How do I give someone administrative access to one group?
In ChatGPT Enterprise, an Owner or Admin can designate an existing group member as a group manager and delegate supported tasks. Only an Owner can enable or disable Edit permissions on assigned roles. For the steps, see: Managing groups and group managers.
I added a user, and I got a message saying: "We couldn't confirm these invitations. They may still be processing. Close this dialog and check Pending invites and Active members before sending them again."
Please validate whether your "Allow external domain invites" toggle is enabled or disabled. If it's disabled, you will need to ensure that you have verified a domain in the Admin Console, and propagated/applied it to your ChatGPT workspace -- this will allow users with that domain to be invited successfully.