Overview
Plugins help Codex complete repeatable work by packaging the capabilities it needs for a specific workflow. A plugin can include workflow guidance, such as skills, and can also depend on approved apps that connect Codex to tools, data, or actions.
For Business, Enterprise, and Edu workspaces, plugin availability can depend on workspace settings, feature access, and the apps an admin has enabled. A plugin does not grant new access to data by itself. Users can only use app-backed capabilities when the connected app is available to them and they already have access to the underlying source system.
This article is for workspace admins, owners, and users who need to understand how plugins work and what needs to be enabled before a plugin can be used.
What is a plugin?
A plugin is a packaged capability for a workflow. Depending on the plugin, it may include:
Skills, which provide reusable instructions, prompts, and workflow patterns that help Codex complete a task.
Apps, which connect Codex to systems, data, and actions approved for your workspace.
App templates, which help an admin create or configure the app the plugin needs.
Some plugins are broad, while others are built for a specific line of business, such as sales, data analytics, or internal operations. A line-of-business plugin may bring together several capabilities so users can complete a job without manually switching between separate tools.
A single plugin may have multiple skills and apps, allowing users to accomplish a wide variety of tasks. Admins and owners can enable some or all apps within a plugin, depending on organizational policy. For example, a sales-focused plugin might include multiple app-backed capabilities that support a sales workflow.
How plugins use apps
Many plugins depend on apps to reach external systems. For example, a plugin may need access to a workspace-approved app that connects to a repository, data warehouse, CRM, document store, or messaging tool.
Admins and owners control who can use those apps in ChatGPT or Codex. Depending on the app, admins and owners may also control:
Which users, groups, or roles can access it (Enterprise/Edu only)
Whether it can read data only or also take actions
Whether users must confirm actions before they run
Whether sync, domain restrictions, source boundaries, or other app-specific settings apply.
Approving an app in ChatGPT does not override permissions in the source system. If a user cannot access a file, repository, record, workspace, or channel in the connected system, the plugin should not give them access to it through Codex.
Plugins that include app templates
Some plugins may include an app template or depend on an app created from a template. App templates are not the same as a ready-to-use app. A workspace admin or owner may need to enter organization-specific configuration, create a draft app, publish it, and assign access before members can use the plugin.
If a plugin depends on an app template that has not been set up yet, members may need an admin to complete setup first. The plugin cannot use the app template by itself.
For more about template setup, see ChatGPT app templates.
Setting up a plugin
Plugins are automatically available in Codex, but before asking members to use a plugin, check the plugin's requirements and first set up the required underlying app(s). High level steps are included below - read on for more detail.
Open Workspace settings > Apps.
Find the app or app template the plugin requires.
Review what system it connects to, what data it can access, and what actions it can take.
Assign access to the users, groups, or roles that should use the plugin (Enterprise/Edu only).
Review action controls and action confirmation settings.
If the app requires provider authentication, ask a test user to connect their account.
Run a low-risk test prompt to confirm the plugin works as expected.
Find and review the relevant app or app template
In ChatGPT settings, go to Workspace Settings > Apps.
Start in Directory if you are enabling a new app, or check Enabled if the app has already been approved. For Business plans, most apps are enabled by default. Use Drafts when you are reviewing a custom app that is waiting to be published.
Click on the ellipsis menu (...) next to the app you are interested in configuring to review the app. Click on View Details and confirm:
Which system the app connects to
What information it can search or fetch
Whether it can sync data into ChatGPT
Then review any actions the app can take, especially anything that can create, update, or send information.
If the app connects to sensitive systems or regulated data, pause for the right vendor, legal, security, or data residency review. For custom MCP apps, include the MCP server, authentication model, exposed tools, and write-action behavior in that review before publishing.
Assign app access and set action and data boundaries
Enterprise/Edu Admins and owners can decide which members of your workspace can use the app, by assigning apps to users, groups, or roles.
You can use RBAC or app access controls to assign the app only to that group, then expand later once the workflow is validated.
Note that app assignment in your workspace settings controls who can access the app in ChatGPT. It does not override the user's existing permissions in the connected source system. Users must still have the appropriate OAuth and other permissions to use the connected system that powers the app.
Admins and owners can also review what the app is allowed to do:
Keep the first version read-only when possible.
Allow write or modify actions only when the team needs them.
Require admin review for newly added actions when appropriate.
Use domain restrictions to keep users on approved work accounts.
Limit sync to approved folders, drives, repositories, spaces, or channels when available.
Publish and validate
When the app settings look right, select Publish.
After launch, periodically review access, action controls, sync settings, support questions, analytics, and compliance needs.
Security and permission considerations
When reviewing a plugin, use the same review process you use for apps in ChatGPT.
Confirm what external system the plugin depends on. Confirm whether the plugin can use read-only actions, write actions, or both. Confirm whether action confirmation is required for sensitive actions. Keep the first rollout limited to a pilot group when possible. Review whether legal, security, privacy, data residency, or vendor approval is needed before expanding access. Periodically review access after rollout.
Apps may have their own terms, privacy policies, and data residency commitments. Review those terms before enabling access for sensitive or regulated workflows.
FAQ
Why can't I find the plugin?
Plugin availability can depend on your plan, workspace settings, rollout status, and feature access. If you expected to see a plugin and do not, ask your workspace admin or owner to confirm whether the plugin is enabled for your workspace.
Why does the plugin say an app needs setup?
Ask a workspace admin or owner to review the required app. The admin may need to enable it, create it from a template, publish a draft, or assign access before members can use the plugin.
Why can't the plugin access the expected data?
Check both ChatGPT workspace access and the source system. The user must have access to the app in ChatGPT and must also have permission to the underlying content in the connected system.
Why can't the plugin take an action?
An admin may have limited the app to read-only access, or the action may require confirmation. Ask the admin to review action controls, action confirmation settings, and any source-system permissions required for the action.
Why is the related plugin still visible in Codex after I disabled an app in ChatGPT?
Plugins can include both app-backed capabilities and skills. Turning off an app or action prevents the plugin from using that app-backed capability, but the plugin may still appear in Codex when other parts of the plugin, such as skills or workflow guidance, are still available. If a visible plugin does not work after an app is disabled or says setup is required, ask a workspace admin or owner to review the underlying app, skill, and plugin availability settings.
Why don't I have access to skills?
Some plugin behavior may depend on workspace or feature availability. If a plugin is visible but does not work as expected, ask your admin or workspace owner to confirm whether the required plugin, skill, and app capabilities are available for your workspace.