✅ Feature availability: This integration is now available for Vanta Government customers.
Overview
Vanta integrates with OpenAI to monitor and manage user access to your OpenAI organization. By synchronizing user and role data, Vanta helps ensure that only active employees retain access and that access is promptly removed when personnel leave—supporting automated compliance workflows, streamlined access reviews, and structured access requests.
Estimated setup time: Less than 10 minutes
How it works
Vanta connects to OpenAI and synchronizes user data on a recurring basis. This data powers the following workflows within Vanta:
Automated compliance tests: Vanta verifies that OpenAI accounts are linked to active employees and are deprovisioned when personnel leave the organization.
Access Reviews: Synced users are surfaced in Vanta's Access Reviews. Approvers can validate whether access remains appropriate, confirm least-privilege alignment, and generate audit-ready evidence.
Access Requests: OpenAI roles are imported into Vanta. Requesters can submit access requests for specific roles, approvers can review requests with appropriate context, and system administrators can track provisioning activity.
Automated Deprovisioning: When an employee is offboarded in Vanta, their OpenAI access can be revoked directly from Vanta. This requires the connected API key to be an organization-level Admin API key. For a full walkthrough of the offboarding workflow in Vanta, refer to Offboarding Personnel.
Use cases
Connecting OpenAI to Vanta enables you to:
Monitor and manage personnel access to your OpenAI organization
Ensure that only active employees retain access
Simplify access reviews and support compliance requirements
Automatically remove user access through Vanta
Prerequisites
To connect the OpenAI integration, you must have:
A Vanta administrator account
An Organization Owner role in OpenAI (required to access and generate organization-level Admin API keys)
An OpenAI organization-level Admin API key with the Organization Administration permission set to Read (and Write if you want automated deprovisioning)
Your OpenAI Organization ID
Connect the integration
Step 1: In Vanta, go to the Integrations page, click Add integration, and search for OpenAI. For help, see our guide to the Integrations Page.
Step 2: Click on the integration tile and then click Connect.
Step 3: Click Add OpenAI Credentials.
Step 4: You will be prompted to enter your API key and the Organization ID. You can also select the checkbox to enable Vanta to automatically deprovision.
Step 5: Log in to your OpenAI account and navigate to Settings > Organization > General. Copy the Organization ID.
Step 6: Go to Settings → Organization → Admin keys and click Create new Admin key. Under Permissions, select Restricted and set Organization Administration to Read (or to Write if you plan to enable automated deprovisioning). Leave every other scope set to None. Copy the key; it is shown only once.
⚠️ Note: Keys created anywhere other than the Admin keys tab — project keys, or keys created in a ChatGPT workspace — cannot reach the endpoints Vanta uses, even if they look valid.
Step 7: Return to Vanta and paste the Organization ID and API key into the corresponding fields. Click Validate and store.
Step 8: A confirmation message will appear indicating that the connection was established.
Employees will appear in Vanta within approximately 30 minutes.
ℹ️ Note: To enable automated access deprovisioning (removing users directly from Vanta), the API key used to establish the connection must be an organization-level Admin API key with Organization Administration: Write. If you connected with a personal or project key, or with Read-only permission, reconnect using a key that has Write.
Capabilities
The OpenAI integration supports the following resources and workflows within Vanta. The table below outlines which objects are supported, how they are used (for example, Access Reviews, Access Requests, or Automated Tests), and any limitations imposed by the OpenAI API.
Resource | Supported | Usage |
Users | ✅ | |
Groups | ❌ | Not supported by OpenAI API |
Roles/Entitlements | ✅ | |
Last Login | ❌ | Not provided by OpenAI API |
Access Deprovisioning | ✅ | Remove users directly from Vanta (requires Organization Administration: Write) |
Permissions
Vanta accesses the following data from the OpenAI API:
Read access
Vanta can access:
User data: Granted by Organization Administration: Read. Vanta reads your organization's member list (id, email, name, role, date added) to verify that only active employees retain access to your OpenAI organization and that terminated employees are deprovisioned promptly.
Write access
When automated access deprovisioning is enabled, Vanta can:
Remove organization members from OpenAI
Requires Organization Administration: Write. Vanta calls OpenAI's remove-organization-member endpoint and nothing else.