ChatGPT: Configuring the App Activities Integration

This article explains how to configure the App Activities integration for ChatGPT.

Overview

App Activities provides you with an API-based solution for out-of-band visibility of all activity made by any user in a connected SaaS application. To provide App Activities with visibility of data within an app, you need to set up an integration with the required application. Once you create the integration, if a field has changed or expired, you can edit it from the Resources >Integrations > Integrated Apps page. For more information, see What is Application Control via API with App Activities.

To configure the App Activities integration, you need to:

1. Configure the integration within the SaaS application

2. Create the API connector in the CMA

A CASB license is required for App Activities. This license includes app and data control and App Activities via API. For more about purchasing a CASB license, please contact your Cato representative.

Configuring the ChatGPT Integration

The ChatGPT integration includes two separate connectors, to be configured individually:

• Audit Log Connector: Provides visibility into admin activities regarding settings and policies

  • To configure this connector, follow these procedures in Step 1:

    • Configure the ChatGPT Audit Log Connector

    • Create a compliance API key (Admin Token)

      • This must be a unique key different to the one used for the Conversations connector

    • Identify your workspace ID

      • This is the same for both connectors

• Conversations Connector: Provides visibility into conversations, including uploads

  • To configure this connector, follow these procedures in Step 1:

    • Configure the ChatGPT Conversations Connector

    • Create a compliance API key (Admin Token)

      • This must be a unique key different to the one used for the Audit Log connector

    • Identify your workspace ID

      • This is the same for both connectors

Prerequisites

• You must have purchased the ChatGPT Enterprise license

• A Workspace Owner account in the OpenAI Admin Console

Step 1: Configure the Integrations in the OpenAI Platform Center

In the OpenAI Platform Center, identify the information to enter into the CMA.

To configure the ChatGPT Audit Log Connector:

1. Log into your OpenAI Platform Center.

2. In your OpenAI Platform Center, navigate to Settings > Data Controls.

3. On the Data retention tab, Enable Audit logging and click Save.

   

4. Navigate to Settings > Organization > Admin Keys.

5. Click Create new Admin key.

6. (Optional) Enter a name for the Admin key and update the Project and click Create Admin key.

7. Copy the key so it can be entered into the CMA. This should be entered into the Access Token field.

   

To configure the ChatGPT Conversations Connector:

1. Log into your Open AI Platform Center.

2. Navigate to Identity & Access > Credentials > Admin Keys.

3. Click Create Admin Key.

4. (Optional) Enter a name for the Admin key and update the Project and click Create Admin key.

5. Copy the secret key so it can be entered into the CMA. This should be entered into the Access Token field.

To create a compliance API key (Admin Token)

1. In your Open AI Platform Center, navigate to Identity & Access > Credentials > Admin Keys.

2. Click Create new admin key.

3. Add the following details:

   • Name: Choose a name for the key

   • Workspace: Select the ChatGPT Enterprise workspace for Cato to monitor

   • Expiration: Never

   • Permissions: Select All

4. Click Submit.

5. Copy the secret key so it can be entered into the CMA. This should be entered as the Admin Token.

Step 2: Create the API Connector in the CMA

After you have set up an integration with the required application, add the details in the CMA.

To create the API connector in the CMA:

1. From the navigation menu, click Resources > Integrations.

2. Click the Integrated Apps tab.

3. Click New.

   The New Integration panel opens.

4. Select the SaaS Application you want to add.

5. In the Capability drop down select App Activities.

6. Add the details created during step one:

   • Auth: Admin Bearer (Access) tokens authentication for ChatGPT Enterprise

   • Name: Choose a name for the connector

   • Workspace ID: Workspace ID

   • Access Token: Admin key

   • Admin Token: Compliance API key

7. Click Save.

8. The app is visible on the Integrated Apps table with a Connected status.

After connecting your APIs, you can track the App activities in the Cloud Apps dashboard. Data may take a few minutes to appear.

Sources

• Audit Logs - Use the audit_logs endpoint to query ChatGPT audit logs

Known Limitations

• All events are currently fetched