what it checks
OpenAI checks in Varman
Audit OpenAI organization access and audit logging for AI governance. Varman runs 2 checks against OpenAI on a schedule and records each result as evidence.
OpenAI organization access is enumerable
low severityThe OpenAI organization members (the AI-tool access register) can be listed for review.
OpenAI audit logging is enabled
medium severityOpenAI organization audit logs should be accessible so AI-tool actions and config changes are recorded.
how to connect
Connecting OpenAI
An admin adds the details below in Varman under Integrations. Secret values are encrypted before they are stored.
- Admin API Key
- An Organization Admin API key (starts with sk-admin-). Settings > Organization > Admin keys. Only an org owner can create one.