> ## Documentation Index
> Fetch the complete documentation index at: https://docs.letsflow.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# OpenAI

> Manage OpenAI organization users, groups, projects, roles, spend controls, and enterprise settings.

Flow uses this integration to run OpenAI actions from automations with the team connection selected during setup. Admins choose which actions that team can use, and automation runs call only those allowed actions through the connection.

> [tab] Organization Admin API key
>
> ### Prepare in OpenAI
>
> Create an OpenAI Organization Admin API key for Flow. The key must have organization management access for the actions this team will use. A project API key with **Read and write API resources** is not enough for organization-management actions such as listing users; OpenAI requires management scopes such as `api.management.read`.
>
> Flow checks organization-management access before setup completes by reading one organization user through OpenAI. If OpenAI denies the check, create or update an Organization Admin API key with the required management access and reconnect.
>
> ### Connect in Flow
>
> **1. Find the OpenAI integration.**
>
> 1. Open **Integrations**.
> 2. Choose **Add connection**.
> 3. In **Add connection**, search for **OpenAI**.
> 4. Select the **OpenAI** card.
>
> [Open Flow](https://app.letsflow.ai)
>
> **2. Connect.**
>
> 1. Pick the team that will use the connection.
> 2. Select the OpenAI actions that team's automations need.
> 3. Complete the credential step with an OpenAI Organization Admin API key.
> 4. Wait for Flow to verify organization-management access.
> 5. Open the new connection's **Automations** tab.
> 6. Choose **Enable** for the intended team or teams.
> 7. Choose the OpenAI actions automations can run.
> 8. Choose **Save** if you changed the selection.

## Permissions and scopes

This integration does not define provider scopes.

## Supported actions

| Action | Description | Risk (Risk estimates the impact of the action. Low reads provider data, medium changes existing records, and high can grant access, remove data, disable resources, or make broad changes.) |
| - | - | - |
| Add group user | Adds a user to a group. | high |
| Add project group | Grants a group access to a project. | high |
| Archive project | Archives a project in the organization. Archived projects cannot be used or updated. | high |
| Assign organization role to group | Assigns an organization role to a group within the organization. | high |
| Assign organization role to user | Assigns an organization role to a user within the organization. | high |
| Assign project role to group | Assigns a project role to a group within a project. | high |
| Assign project role to user | Assigns a project role to a user within a project. | high |
| Create group | Creates a new group in the organization. | high |
| Create invite | Create an invite for a user to the organization. The invite must be accepted by the user before they have access to the organization. | high |
| Create organization role | Creates a custom role for the organization. | high |
| Create organization spend alert | Creates an organization spend alert. | medium |
| Create project | Create a new project in the organization. Projects can be created and archived, but cannot be deleted. | medium |
| Create project role | Creates a custom role for a project. | high |
| Create project spend alert | Creates a project spend alert. | medium |
| Create project user | Adds a user to the project. Users must already be members of the organization to be added to a project. | high |
| Delete group | Deletes a group from the organization. | high |
| Delete invite | Delete an invite. If the invite has already been accepted, it cannot be deleted. | high |
| Delete organization role | Deletes a custom role from the organization. | high |
| Delete organization spend alert | Deletes an organization spend alert. | medium |
| Delete organization spend limit | Delete the organization's hard spend limit. | high |
| Delete project model permissions | Deletes model permissions for a project. | high |
| Delete project role | Deletes a custom role from a project. | high |
| Delete project service account | Deletes a service account from the project. | high |
| Delete project spend alert | Deletes a project spend alert. | medium |
| Delete project spend limit | Delete a project's hard spend limit. | high |
| Delete project user | Deletes a user from the project. | high |
| Delete user | Deletes a user from the organization. | high |
| Get organization spend limit | Get the organization's hard spend limit. | low |
| Get project spend limit | Get a project's hard spend limit. | low |
| List audit logs | List user actions and configuration changes within this organization. | low |
| List group organization role assignments | Lists the organization roles assigned to a group within the organization. | low |
| List group users | Lists the users assigned to a group. | low |
| List groups | Lists all groups in the organization. | low |
| List invites | Returns a list of invites in the organization. | low |
| List organization roles | Lists the roles configured for the organization. | low |
| List organization spend alerts | Lists organization spend alerts. | low |
| List project group role assignments | Lists the project roles assigned to a group within a project. | low |
| List project groups | Lists the groups that have access to a project. | low |
| List project rate limits | Returns the rate limits per model for a project. | low |
| List project roles | Lists the roles configured for a project. | low |
| List project service accounts | Returns a list of service accounts in the project. | low |
| List project spend alerts | Lists project spend alerts. | low |
| List project user role assignments | Lists the project roles assigned to a user within a project. | low |
| List project users | Returns a list of users in the project. | low |
| List projects | Returns a list of projects. | low |
| List user organization role assignments | Lists the organization roles assigned to a user within the organization. | low |
| List users | Lists all of the users in the organization. | low |
| Modify project | Modifies a project in the organization. | medium |
| Modify project hosted tool permissions | Updates hosted tool permissions for a project. | high |
| Modify project model permissions | Updates model permissions for a project. | high |
| Modify project rate limit | Updates a project rate limit. | high |
| Modify project user | Modifies a user's role in the project. | high |
| Modify user | Modifies a user's role in the organization. | high |
| Remove group user | Removes a user from a group. | high |
| Remove project group | Revokes a group's access to a project. | high |
| Retrieve group | Retrieves a group. | low |
| Retrieve group organization role | Retrieves an organization role assigned to a group. | low |
| Retrieve group user | Retrieves a user in a group. | low |
| Retrieve invite | Retrieves an invite. | low |
| Retrieve organization data retention | Retrieves organization data retention controls. | low |
| Retrieve organization role | Retrieves an organization role. | low |
| Retrieve organization spend alert | Retrieves an organization spend alert. | low |
| Retrieve project | Retrieves a project. | low |
| Retrieve project data retention | Retrieves project data retention controls. | low |
| Retrieve project group | Retrieves a project's group. | low |
| Retrieve project group role | Retrieves a project role assigned to a group. | low |
| Retrieve project hosted tool permissions | Returns hosted tool permissions for a project. | low |
| Retrieve project model permissions | Returns model permissions for a project. | low |
| Retrieve project role | Retrieves a project role. | low |
| Retrieve project service account | Retrieves a service account in the project. | low |
| Retrieve project service tier settings | Retrieve the configured default and enabled service tiers for a project. | low |
| Retrieve project spend alert | Retrieves a project spend alert. | low |
| Retrieve project user | Retrieves a user in the project. | low |
| Retrieve project user role | Retrieves a project role assigned to a user. | low |
| Retrieve user | Retrieves a user by their identifier. | low |
| Retrieve user organization role | Retrieves an organization role assigned to a user. | low |
| Unassign organization role from group | Unassigns an organization role from a group within the organization. | high |
| Unassign organization role from user | Unassigns an organization role from a user within the organization. | high |
| Unassign project role from group | Unassigns a project role from a group within a project. | high |
| Unassign project role from user | Unassigns a project role from a user within a project. | high |
| Update group | Updates a group's information. | high |
| Update organization data retention | Updates organization data retention controls. | high |
| Update organization role | Updates an existing organization role. | high |
| Update organization spend alert | Updates an organization spend alert. | medium |
| Update organization spend limit | Create or replace the organization's hard spend limit. | high |
| Update project data retention | Updates project data retention controls. | high |
| Update project role | Updates an existing project role. | high |
| Update project service account | Updates a service account in the project. | high |
| Update project service tier settings | Update the default or enabled service tiers atomically. Supply at least one field. Omitted fields keep their current values. | high |
| Update project spend alert | Updates a project spend alert. | medium |
| Update project spend limit | Create or replace a project's hard spend limit. | high |