Assigning roles to people in an enterprise

Govern what people can do in your enterprise by assigning roles to users and teams.

In this article

Enterprise owners can assign custom and predefined enterprise roles to users and teams. Some roles can be assigned to enterprise teams, whereas other roles are only available for individual users. Find the section below for the role you want to assign.

For more information about using roles effectively, see Identifying the roles required by your enterprise.

Assigning app managers, security managers, and custom roles

Note

These roles are in public preview and subject to change.

These roles can be assigned to existing users and teams in your enterprise settings, including managed user accounts.

Before you assign a role, you may need to create a team. Teams are the best way to manage role assignments at scale. The enterprise security manager role can only be assigned to a team, not to individual users. See Creating enterprise teams.

  1. In the top-right corner of GitHub, click your profile picture.
  2. Depending on your environment, click Enterprise, or click Enterprises then click the enterprise you want to view.
  3. At the top of the page, click People.
  4. In the left sidebar, click Enterprise roles, then click Role assignments.
  5. Click Assign role.
  6. Choose the user or team and the role they should receive, then click Assign role.

Assigning enterprise owners, billing managers, and guest collaborators

These predefined roles are chosen when you invite a user to your enterprise or provision a managed user account from your identity provider (IdP).

These roles cannot currently be assigned to enterprise teams, but they can be changed for existing users.

Assigning these roles to new users

Assigning these roles to existing administrators

You can change an administrator's role or convert them to a regular member once they have joined your enterprise.

  • If you use Enterprise Managed Users, you must do this from your IdP via the SCIM roles attribute.
  • If you use an enterprise with personal accounts, you can change the role on your enterprise's "Administrators" page, using the menu next to the user's name. See Viewing people in your enterprise.

Assigning roles in an organization

Enterprise owners cannot assign organization-level roles from the enterprise settings. An organization administrator must do this. See Using organization roles.