Choose what ChatGPT can do on your computer and when it asks for approval
Permission modes
Permissions control how ChatGPT (in the desktop app) and Codex (in the CLI or IDE) handle local actions, such as editing files, running commands, and using the internet. The mode you choose sets the boundary
for what ChatGPT can do on its own and what needs review.
For most work, start with Ask for approval. It lets ChatGPT work within the
current workspace and pauses before reaching beyond that boundary.
Select different modes below to understand how each one works.
Ask Codex anything.
Ask for approval
Codex can read and edit files in the current workspace and run routine local commands. It asks before using the internet or going beyond the workspace boundary.
Approve for me keeps the same workspace-write sandbox as Ask for approval, but eligible approval requests are routed through automatic review instead of showing a prompt for manual approval. More details about automatic review.
Codex can edit files outside the workspace and use the internet without asking for approval. Use this only when you want Codex to operate with full machine access.
Codex uses the permissions profile and sandbox settings from your local configuration. This is where you define narrower or broader defaults than the built-in presets.
SandboxConfigured in profileApprovals policyConfigured in profileReviewerConfigured in profile
Common custom settings include default_permissions, sandbox_mode, approval_policy, and named [permissions.<name>] profiles.
Enable modes
When you're using the ChatGPT desktop app for the first time, you need to enable modes in application settings.
Ask for approval is always available. To add Approve for me (called
Auto-review in settings) or Full access to the permissions menu, open
Settings > General in the ChatGPT desktop app, then turn on the mode under
Permissions. Enabling a mode makes it available in the menu; it doesn't
select the mode or change an existing chat.
Permissions
Default permissionsBy default, ChatGPT can read and edit files in its workspace. It can ask for additional access when needed
Auto-reviewChatGPT can read and edit files in its workspace. ChatGPT automatically reviews requests for additional access. Auto-review can make mistakes. Learn more about elevated risks.
Full accessWhen ChatGPT runs with full access, it can edit any file on your computer and run commands with network, without your approval. This significantly increases the risk of data loss, leaks, or unexpected behavior. Learn more about elevated risks.
How permissions work
Two controls work together:
The sandbox defines which files and network resources ChatGPT can access.
Approvals determine when ChatGPT pauses before an action or sends the
request to automatic review.
Changing who reviews a request doesn't expand the sandbox. For example,
Approve for me keeps the same workspace boundary as Ask for approval;
it sends requests to cross that boundary to automatic review.
Use the permissions control below the composer in the ChatGPT desktop app or
IDE extension.
