OpenAI Platform - Opal Security Docs

Opal’s integration with OpenAI Platform allows you to manage access to OpenAI projects and service accounts.

Supported resources

Resource	Read	Grant and revoke access
OpenAI Projects	✔️	✔️
OpenAI Project Service Accounts	✔️

Requirements

Before you begin, you must:

Be an Opal Admin

1. Retrieve an API token in OpenAI

To allow Opal to access to your OpenAI projects and accounts, you must first create an admin API key. Use the following permissions scopes for the API token.

Resource	Permissions
Fine-tuning Checkpoints	None
Audit Logs Scope	None
Management API Scope	Write
Usage API Scope	None

Save the token, as you won’t be able to retrieve it later.

2. Create OpenAI app in Opal

In Opal, go to Inventory > +App and select OpenAI Platform. Name your OpenAI Platform app, provide a description, and enter the token you generated in step 1. After you save the app, you can import roles from … > Import items.

Last modified on October 28, 2025