Permissions

Permission modes

Permissions control how ChatGPT (in the desktop app) and Codex (in the CLI or IDE) handle local actions, such as editing files, running commands, and using the internet. The mode you choose sets the boundary for what ChatGPT can do on its own and what needs review.

For most work, start with Ask for approval. It lets ChatGPT work within the current workspace and pauses before reaching beyond that boundary.

Choose a mode

Open the permissions control below the composer and select Approve for me to send eligible approval requests to automatic review. Check the selected mode for the current chat; having a mode available doesn't mean it's selected.

Select a mode to explore this documentation example. This doesn't change your ChatGPT or Codex permissions.

Do anything

Approve for me

GPT-6 AstraLight

How should ChatGPT actions be approved?Learn more

• Ask for approvalAlways ask to edit external files and use the internet
• Approve for meOnly ask for actions detected as potentially unsafe
• Full accessUnrestricted access to the internet and any file on your computer
• Custom (config.toml)Uses permissions defined in config.toml

Approve for me

Approve for me keeps the same workspace-write sandbox as Ask for approval, but eligible approval requests are routed through automatic review instead of showing a prompt for manual approval. More details about automatic review.

Sandboxworkspace-writeApprovals policyon-requestReviewerauto_review

If Approve for me is missing or disabled, see permission troubleshooting.

How permissions work

Two controls work together:

• The sandbox defines which files and network resources ChatGPT can access.
• Approvals determine when ChatGPT pauses before an action or sends the request to automatic review.

Changing who reviews a request doesn't expand the sandbox. For example, Approve for me keeps the same workspace boundary as Ask for approval; it sends requests to cross that boundary to automatic review.

Use the permissions control below the composer in the ChatGPT desktop app or IDE extension.

In the CLI, enter /permissions. For technical details, see Sandbox, automatic review, or permission profiles.