01Check requirements
02Choose a supported path
03Test and document rollback
Explanatory diagram. A conceptual reading aid, not benchmark or ROI data. See sources checked for the factual guidance used in this article.

Connecting an app to a ChatGPT dot should solve a specific information problem. Perhaps your assistant needs the latest project document instead of an old copy, or you want help spotting questions that remain unanswered. Start with the work, then decide which access is justified.

This guide helps a business owner prepare one connected-work pilot. The result is a written workflow agreement covering sources, permitted actions, review and shutdown. It assumes you have already checked dots access; public platform details were reviewed on October 10, 2026.

Separate the different kinds of access

OpenAI documents separate connections for apps, messaging channels and your own computer. The dot also has a cloud browser with its own sessions; a website login on your laptop does not automatically sign that browser in. Computer and app connections.

Make a list of what the pilot actually requires. Being able to message the dot from a familiar channel does not establish that it can read the business records needed for the task. Likewise, connecting one app should not be taken as proof that a second service is available.

Name the exact account as well as the app. A calendar owned by the business and a personal calendar may sit in the same browser. Before completing authentication, check whose information and permissions are being offered.

Define a responsibility in ordinary language

Write one paragraph that explains the ongoing job. Include the business purpose, source documents, expected result and person who reviews it. Give the responsibility an end point, such as completion of a particular project or a planned review date.

For example, a pilot might maintain a list of unanswered questions for a shop refurbishment. Its sources could be an approved plan and selected correspondence. Its output could be a private decision list with links to the evidence. It should distinguish a suggestion, a request and a confirmed commitment.

Avoid giving the assistant a vague goal and expecting account access to supply the missing judgment. If “urgent” means something specific to you, define it. A delivery change affecting tomorrow's opening may deserve attention; a routine acknowledgment may not.

Distinguish reading from changing

OpenAI's controls explain that instructions, app permissions and built-in review apply together. Asking for drafts does not authorize sending them, and optional custom rules do not themselves grant app or computer access. Official dot controls.

Your workflow agreement should say which category each step belongs to: read existing information, prepare a private result, change a record or communicate with another person. These are different outcomes even when they happen in the same app.

For an initial pilot, keeping outputs private and reviewable often makes errors easier to catch. If you later want approved actions to occur automatically, define the recipients, information, conditions and limits carefully. Do not use “do whatever is necessary” as a substitute for those decisions.

Inspect what a connection actually offers

Use the live permission screen and current provider documentation to check the supported actions. A connector may cover only part of what an app can do. Some actions may still require a browser or your participation. Do not assume that a familiar app logo means every workflow is supported.

Write down any mismatch between the pilot and the available permission scope. If a connection requires access to a broad collection of records, consider whether a smaller approved input would establish usefulness first. A successful demonstration with selected files does not prove that a full account connection is appropriate.

For website access, use the private sign-in flow or take over the cloud browser as directed. Sessions may persist until sign-out or expiry, and some sites block cloud browsers. Official sign-in guidance.

A fictional connected-work plan

Fictional example: Victor manages Cedar Room Events, an invented venue business. He wants help tracking outstanding questions for one sample booking. The pilot uses fictional correspondence and a made-up room plan before any live account connection.

The expected result is a private list showing each open question, its source and the person Victor should ask. One message says a projector was requested; another confirms chairs only. The assistant must not describe the projector as booked.

Victor also includes a message containing an instruction to publish the plan. That text is part of the material being reviewed, not permission from Victor to publish anything. The agreed task remains preparing a private decision list.

After checking the examples, Victor decides what source access a live pilot would need. He records the current limitations instead of treating the fictional exercise as proof that a booking platform is integrated. No real customer result or saving is implied.

Test failures before adding a schedule

Prepare cases where the source is missing, two documents disagree or access has expired. Decide what a useful failure report should say. It should identify the missing evidence and the blocked part of the task rather than presenting an incomplete result as finished.

When the pilot is ready for recurring work, specify the time zone, frequency, destination and end date. Ask for confirmation of the actual schedule. Decide which findings warrant a message and which can remain in the report. This helps prevent a useful responsibility from becoming a stream of low-value notifications.

Keep a stopping and handover plan

The public controls distinguish the main task, delegated tasks and scheduled work. Review and stop these separately when ending the pilot. Stopping work.

Then review remaining app authorizations, browser sessions, local access and saved outputs. Decide which results the business needs to keep and use the relevant provider's controls to remove unwanted access. A stopped task and a disconnected account are different states.

Connected-work checklist

  1. Name one responsibility, its owner and its end point.
  2. Identify authoritative sources and the exact accounts involved.
  3. Match each task step to read, draft, change or communicate.
  4. Inspect live permission scope and current supported actions.
  5. Test missing, conflicting and unavailable information.
  6. Confirm any schedule and the updates you want to receive.
  7. Document review, stopping, disconnection and ownership.

Take this agreement to InstallAI to discuss a scoped setup review. Confirm the service's deliverables and costs separately from vendor charges. The useful outcome is a tested, understandable workflow whose limits are written down.

Sources checked