Restrict workspace models, plugins and Work
Purpose
Sara wants the team to use only the models and plugins the shop has agreed on, not whatever each person happens to pick. Set workspace-wide rules that apply to every Seat: turn plugins or Work off, and limit which models and plugins people may use.
Before you start
- Select a team or organization workspace.
- You also need permission to view members to open Workspace administration.
- You need permission to manage workspace settings, which Owners and Admins have. Without it the "Policies" tab is hidden.
- Policies work inside the plan: they can narrow what the plan offers but never add models or plugins the plan does not include.
- Policies are separate from personal settings and apply to everyone in this workspace only.
Steps
- Open Settings, choose "Workspace administration" under "Workspace" and select the "Policies" tab. It shows a summary such as "Plugins: Enabled · Work: Enabled".
- Choose "Edit workspace policies". The dialog "Workspace policies" opens.
- Untick "Plugins enabled" to stop plugin use in the workspace, or untick "Work enabled" to refuse requests of the Work type.
- Under "Allowed models", leave "All available models" ticked to allow every model in the plan. To restrict, untick it, search with "Search models", and tick the models people may use. Choose "Load more models" for more. Each restricted list supports up to 1,000 selections.
- Do the same under "Allowed plugins" with "All available plugins", "Search plugins" and "Load more plugins".
- Check the counter under each list, for example "2 selected. An empty selection disables access." Unticking "All available" and choosing nothing blocks all models, or all plugins.
- Choose "Save". The model and plugin lists across the app refresh.
- Above the summary, the "Data Privacy Mode" and "Sensitivity check" cards have their own switches and settings. They save on their own and are not part of this dialog. See Use Data Privacy Mode.
Expected result
The Policies tab shows the new summary. People in this workspace can use only the allowed models and plugins, and restricted models disappear from model selection. Blocked plugins may remain visible in the catalog, but cannot be connected or used. Requests the policy forbids are refused with a message such as "Your workspace policy does not allow this kind of request." or "Your plan or workspace policy does not allow this plugin."
Troubleshooting
| Problem | What to do |
|---|---|
| The "Policies" tab is missing | You lack permission to manage workspace settings. |
| Nobody can use any model or plugin | A list was left unticked on "All available" with nothing chosen. Reopen the dialog and tick what should be allowed. |
| A model you expect is not in the list | The list only offers models that your plan and this workspace make available. |
| Work stopped working for everyone | "Work enabled" is off. Turn it on again. |
| Saving shows an error | Reopen the tab to see whether the policy changed, then try again. |
| Models, web search, plugins or voice disappeared for everyone | "Data Privacy Mode" may be on for the workspace. Only private models are offered then, and features with no private version are off. See Use Data Privacy Mode. |