Permission modes
Permissions control how ChatGPT (in the desktop app) and Codex (in the CLI or IDE) handle local actions, such as editing files, running commands, and using the internet. The mode you choose sets the boundary for what ChatGPT can do on its own and what needs review.
For most work, start with Ask for approval. It lets ChatGPT work within the current workspace and pauses before reaching beyond that boundary.
Choose a mode
Open the permissions control below the composer and select Approve for me to send eligible approval requests to automatic review. Check the selected mode for the current chat; having a mode available doesn’t mean it’s selected.
Select a mode to explore this documentation example. This doesn't change your ChatGPT or Codex permissions.
'%3e%3cpath%20d='M18.5848%2013.4121C18.7715%2012.9516%2019.2961%2012.7296%2019.7567%2012.916C20.217%2013.1027%2020.4391%2013.6274%2020.2528%2014.0879C19.0405%2017.0826%2016.2438%2019.2675%2012.9003%2019.6035V22C12.9003%2022.4971%2012.4969%2022.9004%2011.9999%2022.9004C11.5029%2022.9003%2011.0995%2022.497%2011.0995%2022V19.6035C7.75618%2019.2673%204.96018%2017.0823%203.74791%2014.0879C3.56144%2013.6272%203.78344%2013.1026%204.244%2012.916C4.70458%2012.7298%205.22933%2012.9517%205.41588%2013.4121C6.46985%2016.0157%209.02264%2017.8496%2012.0008%2017.8496C14.9787%2017.8493%2017.531%2016.0155%2018.5848%2013.4121Z'%20/%3e%3cpath%20fill-rule='evenodd'%20clip-rule='evenodd'%20d='M11.9999%201.34961C14.7061%201.34961%2016.9003%203.5438%2016.9003%206.25V10.7334C16.9003%2013.4396%2014.7061%2015.6338%2011.9999%2015.6338C9.29371%2015.6337%207.09947%2013.4396%207.09947%2010.7334V6.25C7.09947%203.54384%209.29372%201.34967%2011.9999%201.34961ZM11.9999%203.15039C10.2878%203.15045%208.90025%204.53795%208.90025%206.25V10.7334C8.90025%2012.4454%2010.2878%2013.8339%2011.9999%2013.834C13.7119%2013.834%2015.0995%2012.4455%2015.0995%2010.7334V6.25C15.0995%204.53792%2013.7119%203.15039%2011.9999%203.15039Z'%20/%3e%3c/g%3e%3c/svg%3e)
Approve for me
Approve for me keeps the same workspace-write sandbox as Ask for approval, but eligible approval requests are routed through automatic review instead of showing a prompt for manual approval. More details about automatic review.
- Sandbox
workspace-write- Approvals policy
on-request- Reviewer
auto_review
Available modes depend on your app version, execution environment, local configuration, and your organization’s requirements. A mode can be disabled or omitted when it isn’t available. Managed requirements can also restrict Ask for approval.
If Approve for me is missing or disabled, see permission troubleshooting.
How permissions work
Two controls work together:
- The sandbox defines which files and network resources ChatGPT can access.
- Approvals determine when ChatGPT pauses before an action or sends the request to automatic review.
Changing who reviews a request doesn’t expand the sandbox. For example, Approve for me keeps the same workspace boundary as Ask for approval; it sends requests to cross that boundary to automatic review.
Use the permissions control below the composer in the ChatGPT desktop app or IDE extension.
In the CLI, enter /permissions. For technical details, see
Sandbox, automatic review, or
permission profiles.