As someone paying the bill, and where the server is being used by various users I think will be responsible and others who won't, I'd like to control who gets to ask OpenAI for a summary.

Not everyone is going to realize that invoking a summary is going to cost money. Not everyone is going to care. As the buyer, I want control who can cost me money.