This guide is for ChatGPT Enterprise Admins looking to set up Codex for their workspace. If you’re a developer, check out our docs.
Enterprise-grade security and privacy
Codex automatically supports all ChatGPT Enterprise security features, including:
- No training on enterprise data
- Zero data retention for the CLI and IDE
- Residency and retention follow ChatGPT Enterprise policies
- Granular user access controls
- Data encryption at rest (AES 256) and in transit (TLS 1.2+)
To learn more, refer to our security page.
Local vs. Cloud Setup
Codex operates in two environments: local and cloud.
- Local usage of Codex includes the CLI and IDE extension. The agent works locally in a sandbox on the developer’s laptop.
- Cloud usage of Codex includes Codex web, iOS, Code Review, and tasks created by the Slack integration. The agent works remotely in a hosted cloud container containing your codebase.
Access to Codex local and cloud can be configured through separate permissions, governed by role-based access control (RBAC). Using RBAC, you can enable only local, cloud, or both for all users or just specific user groups.
Codex CLI and IDE Setup
Enable Codex CLI and IDE extension in workspace settings
To enable your workspace members to leverage Codex locally, go to Workspace Settings > Settings and Permissions. Toggle on Allow members to use Codex CLI and IDE Extension for your organization. Note that this setting does not require the GitHub connector.
Once enabled, users can sign in to use the CLI and IDE extension with their ChatGPT account. If this toggle is off, users who attempt to use the CLI or IDE will see the following error: “403 - Unauthorized. Contact your ChatGPT administrator for access.”
Codex Cloud Setup
Prerequisites
Codex Cloud requires GitHub (cloud-hosted) repositories for use. If your codebase is on-prem or not on GitHub, you can use the Codex SDK to build many of the same functionalities of Codex Cloud in your own on-prem compute.
Note: To set up Codex as an admin, you must have GitHub access to the repositories commonly used across your organization. If you don’t have the necessary access, you’ll need to collaborate with someone on your Engineering team who does.
Enable Codex Cloud in workspace settings
Start by turning on the ChatGPT Github Connector in the Codex section of Workspace Settings > Settings and Permissions.
To enable Codex Cloud for your workspace, toggle Allow members to use Codex Web ON.
Once enabled, users can access Codex directly from the left-hand navigation panel in ChatGPT.
Note: After you toggle Codex to ON in your Enterprise workspace settings, it may take up to 10 mins for the Codex UI element to populate in ChatGPT.
Enable Codex Cloud agent internet access
By default, Codex Cloud agents have no internet access during runtime to protect from security and safety risks like prompt injection.
As an admin, you can toggle on the ability for users to enable agent internet access in their environments. To enable, toggle Allow Codex agent to access the internet ON.
When this setting is on, users can whitelist access to common software dependencies add additional domains and trusted sites, and specify allowed HTTP methods.
Enable Codex to post full answers in Slack
Codex integrates with Slack. When a user mentions @Codex in Slack, Codex kicks off a cloud task, gets context from the Slack thread, and responds with a link to a PR to review in the thread.
To allow the Slack app to post answers on task completion, toggle Allow Codex Slack app to post answers on task completion ON. When enabled, Codex posts its full answer back to Slack upon task completion. Otherwise, Codex posts only a link to the task.
To learn more, refer to our guide on using Codex in Slack.
Enable code review with Codex Cloud
To allow Codex to do code reviews, go to Settings → Code review.
Users can specify their personal preferences on whether they want Codex to reviews all of their pull requests. Users can also configure whether code review runs for all contributors to a repository.
There are two types of code reviews:
- Auto-triggered code reviews when a user opens a PR for review
- Reactive code reviews when a user mentions @Codex to look at issues. For example, “@Codex fix this CI failure” or “@Codex address that feedback”
Role-based-user-access (RBAC)
We support role based user access for Codex. RBAC is a security and permissions model used to control access to systems or resources based on a user’s role assignments.
To enable RBAC for Codex, navigate to Settings & Permissions → Custom Roles in ChatGPT’s admin page and assign roles to Groups created in the Groups tab.
This simplifies permission management for Codex and improves security in your ChatGPT workspace. To learn more, refer to our help center article.
Set up your first Codex cloud environment
- Navigate to Codex Cloud and click Get Started to begin onboarding.
- Click Connect to GitHub to start installation of the ChatGPT GitHub Connector if you have not already connected to GitHub with ChatGPT.
- Authorize the ChatGPT Connector for your user
- Choose your installation target for the ChatGPT Connector (typically your main organization)
- Authorize the repositories you’d like to enable to connect to Codex (may require a GitHub admin to approve).
- Create your first environment by selecting the repository most relevant to your developers. Don’t worry, you can always add more later. Then click Create Environment
- Add the emails of any environment collaborator to enable edit access for them
- Codex will suggest starter tasks (e.g. writing tests, fixing bugs, exploring code) that can run concurrently; click Start Tasks button to kick them off.
You have now created your first environment. Individuals who connect to GitHub will now be able to create tasks using this environment and users who are authorized for the relevant repository will have the ability to push pull requests generated from their tasks.
Environment management
As a ChatGPT workspace administrator, you have the ability to edit and delete Codex environments in your workspace.
Connect additional GitHub repositories with Codex Cloud
- Click the Environments button or open the environment selector and click Manage Environments.
- Click the Create Environment button
- Select the environment you’d like to connect to this environment
- Give the environment an recognizable name and description.
- Select the environment visibility
- Click the Create Environment button
Note: Codex automatically optimizes your environment setup by reviewing your codebase. We recommend against performing advanced environment configuration until you observe specific performance issues. View our docs to learn more.
User Facing Setup Instructions
The following are instructions you can share with your end users on how to get started using Codex:
- Navigate to Codex in the left-hand panel of ChatGPT.
- Click the Connect to GitHub button inside of the prompt composer if not already connected
- Authenticate into GitHub
- You are now able to use shared environments with your workspace or create your own environment.
- Try getting started with a task using both Ask and Code mode, here is something you can try:
- Ask: Can you find some bugs in my codebase?
- Write code: Improve test coverage in my codebase following our existing test pattern.
Tracking Codex Utilization
- For workspaces with rate limits, navigate to Settings → Usage dashboard to view workspace metrics for Codex.
- For enterprise workspaces with flexible pricing, you can see credit usage in the ChatGPT workspace billing console.
Codex Analytics
Codex’s Analytics dashboard allows ChatGPT workspace administrators to track user adoption of different features. Codex offers the following analytics dashboards:
- Daily users by product (CLI, IDE, Web, Code Review)
- Daily code review users
- Daily code reviews
- Code reviews by priority level
- Daily code reviews by feedback sentiment
- Daily web tasks
- Daily web users
- Daily VS Code extension users
- Daily CLI users