{"resourceId":"cu-anschutz-chatgpt-edu-agents-codex-by-request-20261019","versions":[{"version":"external-e3f9cf4cdc70bc636bfe05e4e49dd4e9cb37e3491539f2c5de1b99277f75015f","resource":{"id":"cu-anschutz-chatgpt-edu-agents-codex-by-request-20261019","title":"CU Anschutz turns on agents and plugins in ChatGPT Edu for all eligible users and offers Codex, Work and Microsoft 365 connectors by request with a file-deletion risk acknowledgement","organization":"University of Colorado Anschutz Medical Campus, Information Strategy and Services (ISS)","sector":"Public academic medical campus: enterprise AI access and IT security","geography":"Aurora, Colorado, United States","publishedAt":"19 October 2026 (ISS news)","publicationDate":"2026-10-19","eventDate":"2026-10-19","sourceName":"CU Anschutz Information Strategy and Services","sourceLabel":"Institutional IT announcement","sourceUrl":"https://www.cuanschutz.edu/offices/iss/news---projects/iss-news/news-article/it-security-action-and-awareness-cu-chatgpt-edu-advanced-features-available","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["developers-agents","knowledge-work","data-security","governance-procurement"],"finding":"CU Anschutz says the university expanded its OpenAI agreement so all eligible faculty, staff and students get advanced Plus features in CU ChatGPT Edu at no added cost, and that these may be used with HIPAA, FERPA and highly confidential data inside the university environment. Voice, skills, agents, plugins and higher reasoning modes are on automatically. Codex, Work, Microsoft Plugins (connecting to Microsoft 365 data) and Office add-ins require completed AI training, separate request forms and agreement to proper use, because these features carry a greater risk of file deletion. Codex and Work require the desktop app.","sledRelevance":"A two-tier model for agentic features: lower-risk agent features on by default, while tools that act on files and Microsoft 365 data require training, a request and an explicit risk acknowledgement. In the same university system, the Boulder faculty assembly has called for non-renewal of its campus OpenAI contract.","evidence":"IT announcement. Data-class claims are the institution's; the underlying contract terms are not quoted.","architectureImplications":"Agentic tools reach Microsoft 365 data through plugins and run locally via a desktop app, which widens the endpoint and connector surface IT must manage.","governanceImplications":"Access to higher-risk features is gated by training, request forms and acknowledgement, giving IT a record of who has them.","securityPrivacyImplications":"Allowing HIPAA and highly confidential data in an environment where agents can delete files raises the stakes for permission scoping, backup and logging; the announcement itself flags file-deletion risk.","caveats":"No outcomes or incident data. The data-class approval is stated, not documented here. Applies to the Anschutz campus, not necessarily other CU campuses.","streamIds":["campus-operations"],"roles":{"sales":"Sales framing: CU Anschutz has switched on agentic features in a regulated-data environment and named file deletion as a risk. That points to bounded work on agent permission reviews, backup checks and Microsoft 365 connector scoping. Do not claim the configuration is safe or compliant; the source states the approval but shows no assessment. Interest will likely sit with the CISO and privacy office rather than IT service owners.","engineering":"Engineering framing: Codex and Work run through a desktop app and Microsoft Plugins read Microsoft 365 data, so validate connector scopes, file-system access and restore paths before approving requests. Confirm whether agent actions are logged centrally. Test deletion recovery for OneDrive and SharePoint content touched by agents. Check that the desktop app is covered by endpoint management and that training completion is enforced before request-tier features switch on.","delivery":"Delivery framing: the request-based tier needs an operational owner for approvals, training checks and offboarding. ISS owns the service; data stewards should review Microsoft 365 connector use with sensitive data. Proposed acceptance: every Codex or Work user has a recorded training completion and acknowledgement, and a tested restore exists for agent-caused deletions. Offboarding must remove request-tier access when people leave or change roles."},"roleDetails":{"sales":{"customerProblem":"A health-sciences campus has enabled agentic AI tools that can act on files and Microsoft 365 data, including regulated data.","stakeholders":["CIO and CISO","Privacy officer","Data stewards","Research computing","Clinical department administrators"],"discoveryQuestions":["How are agent actions on Microsoft 365 data logged and reviewed?","What is the restore process if an agent deletes files?","How many users have requested Codex or Work?"],"valueHypothesis":"Interpretation: a scoped permission and recovery review may reduce agent-related data-loss risk; no evidence here measures that risk.","potentialEngagement":"A two-week agent permission, logging and restore review for the request-based tier.","unsupportedClaims":["That agentic use with HIPAA data is risk-free","Productivity effects","Adoption levels"]},"engineering":{"fit":"Agentic tools in a regulated-data environment.","architectureIntegration":"ChatGPT Edu tenant with Microsoft 365 plugins and a desktop app for Codex and Work.","prerequisites":["Microsoft 365 connector scopes","Endpoint management for the desktop app","Backup and restore for Microsoft 365 content"],"constraints":["Applies to the Anschutz agreement","Regulated data allowed only in the university environment"],"security":"File-deletion risk is acknowledged; logging and restore controls are not described.","proofOfValue":["Test agent deletion and restore on a sandbox library","Verify connector scopes match least privilege"]},"delivery":{"work":"Operate a request, training and acknowledgement process for higher-risk agent features.","dependencies":["Training platform","Service portal forms","Vendor feature changes"],"ownership":"ISS owns the service; data stewards own sensitive data use.","skillsAdoption":"Required AI training; separate acknowledgement for agent tools.","governanceCheckpoints":["Training completion before access","Acknowledgement of file-deletion risk"],"acceptanceCriteria":["Proposed: 100% of request-tier users have recorded training and acknowledgement","Proposed: restore of agent-deleted files tested quarterly"],"risks":["Agent deletes regulated data","Plugins expose more data than intended","Access not removed on departure"]}},"retrievedAt":"2026-10-19T21:56:40-05:00","enrichedAt":"2026-10-19T22:05:34-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"No added cost removes price barriers; the training requirement may slow uptake.","procurementImplications":"Feature expansion came through amending an existing vendor agreement, not a new procurement.","operatingModelImplications":"The service desk handles separate request flows for different agentic features.","sourceVerification":{"openedUrl":"https://www.cuanschutz.edu/offices/iss/news---projects/iss-news/news-article/it-security-action-and-awareness-cu-chatgpt-edu-advanced-features-available","referenceExcerpt":"Agree to the proper use of these tools for data security and collaboration (these features have a greater risk of file deletion).","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}