What is the point of per-project limits when any org member can charge the Default Project? I have a team and need to keep each team member to a strict individual budget. I cannot trust my team to not jump into the Default Project and spend up to the org hard limit.
2 Likes
Don’t invite people.
Distribute API keys.
Then, expect that OpenAI’s project limiter will not shut off a key with timeliness, allowing massive overage of a monthly budget by an attacker.
I obviously know that. But users can only track usage / cost through the dashboard via invited accounts. If I give anyone access to the dashboard, they have full access to spend our entire org’s budget.
I need to be able to give a less trusted user access to a limited budget (through project-specific API keys), but also need to give them the ability to track their own budget (cannot be done through the API).
The API is to build user-facing products, not to be a user product.