OpenAI

When you connect an OpenAI organization to Oblique, Oblique will automatically sync the organization, its members, its projects, and its groups.

As you add people to OpenAI, change their roles, remove their access, or add and archive projects, these changes are automatically synced to Oblique.

You can add multiple OpenAI organizations to Oblique. Each is a separate integration, identified by its organization name.

The OpenAI integration syncs an OpenAI API Platform organization. It doesn’t sync ChatGPT workspaces, which OpenAI manages separately.

Supported options

Oblique syncs the following from your OpenAI organization.

OpenAI object	Oblique object	Capability
Members	Accounts	Read-only
Organization	Resources	Read-only
Projects	Resources	Read-only
Groups	Resources	Read-only
Roles	Roles	Read-only
Organization membership	Entitlements	Read-only
Project membership	Entitlements	Read-only
Group membership	Entitlements	Read-only

Accounts

Oblique syncs each OpenAI organization member as an Oblique account. Pending invitations and service accounts aren’t synced.

Oblique automatically matches OpenAI accounts to users in Oblique. OpenAI accounts are matched to Oblique users by their email (email).

Resources

Oblique’s OpenAI integration is read-only. Oblique can’t make changes to your OpenAI organization, its members, projects, and groups, or their roles.

Oblique syncs the following from OpenAI as resources:

• The OpenAI organization you connected
• Each active project in the organization
• Each group in the organization

Archived projects aren’t synced.

A member or group has an entitlement for the organization, or for a project, for each role assigned to them directly. Each member of a group has an entitlement for the group.

Organization owners can access every project in OpenAI. Oblique only shows an entitlement for a project if they were also added to it.

Roles

Oblique syncs OpenAI roles as Oblique roles, for both organization and project memberships, including custom roles.

An entitlement for the organization or a project can be for one or more roles. Membership in a group has no role.

Required permissions

You must be an Owner in OpenAI to connect this integration.

If you don’t have sufficient permissions, create an install link so someone who does can connect the integration without being an Oblique admin.

The OpenAI integration connects using a Read only admin API key, which only an organization owner can create. Oblique only uses the key to read your organization’s members, projects, groups, and their roles, and doesn’t read your prompts, usage, or billing.

Note

An admin API key is different from an OpenAI API key. It can’t be used to call OpenAI models and can’t use your OpenAI credits. A project API key, starting with sk-proj-, can’t be used to connect the integration.

Add OpenAI integration

You must be an admin to add an integration.

You connect an OpenAI organization to Oblique by creating an admin API key in OpenAI, then adding it to Oblique.

To create an admin API key, in the OpenAI API Platform:

1. As an organization owner, navigate to Settings > Organization > Admin keys.
2. Select Create new admin key.
3. Name the key, for example Oblique.
4. Under Permissions, select Read only.
5. (Optional) Choose an expiration.
6. Select Create admin key.
7. Copy the key, which starts with sk-admin-. OpenAI only shows the key once.

Then, to add an OpenAI integration, navigate to the Integrations page:

1. Select Add integration.
2. Select OpenAI.
3. Under Connect, in Admin API key, paste the key you created.
4. Select Add integration.

Oblique will immediately start syncing the organization’s members, projects, and groups.

Caution

If the admin API key expires, or the owner who created it is removed from the organization or loses the Owner role, Oblique can no longer sync your organization. Before that happens, create a new key and replace the integration’s credentials.

Change OpenAI integration’s authorizations

You must be an admin to replace an integration’s credentials.

If the admin API key expires, is revoked, or needs rotating, you can replace it without removing the integration. From the integration’s detail page:

1. Navigate to the Settings tab.
2. Under Connection, select Replace admin API key….
3. Under Admin API key, paste the new admin API key and select Replace admin API key.

You can only replace the key with another one for the same organization. To change the organization, instead delete the integration and add another one.

Manage entitlements

Oblique’s OpenAI integration is read-only, so it can’t be used to manage your OpenAI organization, its members, projects, and groups, or their roles. Make these changes in OpenAI directly, and Oblique will sync them automatically.

Remove OpenAI integration

You must be an admin to remove an integration.

To remove an OpenAI integration, from the integration’s detail page:

1. Navigate to the Settings tab.
2. At the bottom of the page, under Delete integration, select Delete integration….
3. In the confirmation dialog, type the text to confirm, then select Delete integration.

This will immediately stop all syncing and remove all resources from the integration.

Caution

Removing the integration doesn’t revoke Oblique’s access to OpenAI. To revoke it, in the OpenAI API Platform, go to Settings > Organization > Admin keys, and delete the admin key you created for Oblique.