Creating enterprise teams

To simplify administration at scale, you can create enterprise teams. Enterprise teams can:

• Receive Copilot Business licenses directly from the enterprise.
• Be assigned predefined and custom enterprise roles, giving members access to enterprise settings.
• Be added to organizations, where organization administrators can grant the team additional access and permissions.
• Receive bypass access on rulesets.

Adding a user to a team grants them the privileges associated with the team. Removing a user from a team removes those privileges, but does not remove the user from the enterprise account.

There are limits on enterprise teams. You can create up to 100 teams for a single enterprise and add up to 500 users to each team. Each team can be assigned to a maximum of 1,000 organizations.

1. Navigate to the enterprise teams page

1. In the top-right corner of GitHub, click your profile picture.
2. Depending on your environment, click Enterprise, or click Enterprises then click the enterprise you want to view.
3. At the top of the page, click People.
4. In the left sidebar, click Enterprise teams.

2. Create a team

1. On the enterprise teams page, click Create Enterprise team.

2. Choose the team's name, description, and organization access.

   When you give a team access to organizations, members of the team are added directly to those organizations, without an invitation, and receive the same access as other organization members.

   • Unaffiliated users and outside collaborators in the team become standard enterprise members, meaning they have access to your enterprise's internal repositories and consume a GitHub Enterprise license.
   • Team members receive the base level of repository permissions for the organization.
   • Organization administrators can give the team additional repository access and assign them organization-level roles, but cannot remove any permissions granted by enterprise administrators.

3. Click Create Enterprise team.

3. Add users

There are multiple ways to add users to an enterprise team.

• Adding users manually
• Syncing with an IdP group (Enterprise Managed Users only)
• Using the REST API endpoints for enterprise team memberships

Enterprise teams can contain organization members, unaffiliated users, and outside collaborators.

Adding users manually

1. On the enterprise teams page, click the team you want to add users to.
2. Click Add members, then search for and select the users you want to add.
3. Click Add.

Syncing with an IdP group

If you use Enterprise Managed Users, you can sync membership of an enterprise team to a group in your identity provider. That way, any changes made to the group in the IdP (such as adding or removing a user) will be synced to the enterprise team via SCIM. For details and requirements, see Managing team memberships with identity provider groups.

1. On the enterprise teams page, click the team you want to sync.
2. Ensure the team contains no manually assigned users. You can remove users by using the menu next to the user's name in the member list.
3. Next to the team's name, click Edit.
4. Under "Manage members", click Identity provider group.
5. Click Select group, then choose the external IdP group to sync to the team. Members from the IdP group will display in the team's member list.
6. Click Update team.

Limits on IdP group sizes

If an IdP group goes over the team size limit of 500 users, the team will stop being synced.

For example:

• An enterprise team is initially synced with an IdP group of 5 users.
• 500 more users are added to the IdP group. Because the IdP group now has 505 users, the group isn't synced and the enterprise team remains at 5 members.
• 5 users are removed from the IdP group to bring it to 500 users. Syncing resumes and the enterprise team now contains the same 500 users as the IdP group.

4. Assign licenses

You can assign GitHub Copilot licenses to an enterprise team. This allows you to manage Copilot access through team membership, independent of organizations. Once you have assigned licenses to a team, users will gain or lose access to Copilot when they are added or removed from the team.

For instructions, see Granting users access to GitHub Copilot in your enterprise.

5. Assign roles

You can assign custom enterprise roles and certain predefined roles to enterprise teams. This allows you to delegate administrative duties to specific teams or provide non-administrators with permissions that will help them work independently. See Assigning roles to people in an enterprise.