CustomGPT.ai public and internal assistants: keep knowledge boundaries clear

Distinguish public visibility, private deployment and identity-provider access

CustomGPT.ai’s current documentation says public agents can be accessed without authentication, while private agent deployment requires users to log in with appropriate permissions. Its private deployment guide identifies Teams functionality as a requirement. Check this route separately from ordinary public sharing. See how private agent deployment works.

For a small internal pilot, the practical question is whether the intended colleagues have the supported accounts and permissions. For a wider partner or staff portal, an organization’s identity provider may be a more suitable route. Do not assume an administrator’s subscription seat count establishes how every end user should authenticate.

CustomGPT.ai also documents an IdP end-user route using an existing identity provider. The current access guide requires an Enterprise plan with SSO and end-user IdP enabled, plus role mapping. This is a separate deployment requirement, not an inclusion inferred from Standard or Premium seats. The IdP access overview explains the route.

In the hypothetical company, prospective learners use the public helper without signing in. Delivery staff use the chosen private route. The company does not publish the internal agent publicly merely to avoid setting up accounts or identity access.

Keep the website’s login and the assistant’s login aligned

Putting a widget on a page behind a website login does not automatically establish every access control for the widget’s own service. Inspect how the assistant authenticates the user and what happens if its share link or embed route is reached separately. Treat the complete path as a deployment requirement.

CustomGPT.ai’s IdP setup guide says its IdP authentication applies to portal URLs and embedded deployments, rather than every alternative sharing route. It also requires the agent to be private. Review the organization deployment guide before treating a portal configuration as protection for a direct link or a custom API application.

If a developer builds a custom front end, have them review its server-side authorization and credential handling as part of that application. A browser-visible API key is not an acceptable substitute for user access controls. Confirm the supported integration pattern rather than improvising a private service through a public embed.

Test with an ordinary user and a signed-out browser, not only the account owner. Owners often have access that the intended audience does not. A working administrator preview therefore says little about whether a visitor is denied or a staff member can use the final page.

Build two small source collections with explicit owners

Give the public and internal collections separate registers. Record the document title, owner, intended audience and effective version. A document’s folder location alone may not communicate whether it is an approved policy or an obsolete draft. Make that status clear in the content and publishing process.

For the public helper, the course manager approves the current dates and prerequisites. For the internal assistant, the delivery lead approves setup and handover procedures. When a trainer notices an error, the correction goes to the appropriate source owner rather than becoming an unreviewed instruction in a conversation.

This separation also improves answers. A public visitor receives readable explanations of the offer. A colleague receives operational detail appropriate to their job. Neither has to sort through a mixed collection filled with both sales wording and internal exceptions.

CustomGPT.ai is worth considering when your business already has knowledge worth organizing and a recurring audience that needs supported answers. Evaluate its access route with your actual audience before making the source collection larger.

Review citations as another information surface

An answer can be appropriately short while its citation exposes an internal file name or leads to material with a broader audience than intended. Check the answer, source label, linked destination and any document-viewing experience together. Test them as the actual end user.

CustomGPT.ai’s settings documentation lists citation controls, source-name behavior, conversation sharing and exporting, domain controls and visibility settings. These are distinct decisions, not interchangeable privacy switches. See the agent settings guide.

For the training company’s public helper, a citation should lead to the approved course information. For the internal assistant, an authorized colleague should be able to inspect the relevant procedure through the intended route. Do not solve a permissions error by making the original internal document public.

Also inspect conversation sharing and exports. A copied answer or exported conversation can outlive the account’s access to the assistant. Communicate appropriate handling to staff and keep unnecessary confidential details out of a general-purpose question when they are not needed.

Plan for access changes before a colleague leaves

An internal assistant needs a defined offboarding process. Identify who removes the identity or role, who verifies the result, and what happens to retained conversation material. Do this before the first contractor finishes a project, not during an urgent access incident.

The current CustomGPT.ai IdP revocation guide states that active sessions can continue for up to 24 hours after role or attribute changes. It says an agent can be disabled to cut off that agent’s access before session expiry, affecting other users as well. Review the access update and revocation guide and decide whether that window fits the material involved.

For the example company, the delivery procedure library may tolerate that documented behavior under its approved policy; a different collection might require another access design. Do not promise instant individual revocation if the selected route does not provide it. Confirm what support and your administrator can actually do.