Creating enterprise teams

Use teams to manage permissions and access.

Who can use this feature?

Enterprise owners or organization owners

In this article

Note

Enterprise teams are in public preview and subject to change.

1. Navigate to the enterprise teams page

  1. In the top-right corner of GitHub, click your profile picture.
  2. Depending on your environment, click Enterprise, or click Enterprises then click the enterprise you want to view.
  3. At the top of the page, click People.
  4. In the left sidebar, click Enterprise teams.

2. Create a team

  1. On the enterprise teams page, click Create Enterprise team.

  2. Choose the team's name, description, and organization access.

    When you give a team access to organizations, members of the team are added directly to those organizations, without an invitation, and receive the same access as other organization members.

    • Unaffiliated users and outside collaborators in the team become standard enterprise members, meaning they have access to your enterprise's internal repositories and consume a GitHub Enterprise license.
    • Team members receive the base level of repository permissions for the organization.
    • Organization administrators can give the team additional repository access and assign them organization-level roles, but cannot remove any permissions granted by enterprise administrators.

  3. Click Create Enterprise team.

3. Add users

There are multiple ways to add users to an enterprise team.

Enterprise teams can contain organization members, unaffiliated users, and outside collaborators.

Adding users manually

  1. On the enterprise teams page, click the team you want to add users to.
  2. Click Add members, then search for and select the users you want to add.
  3. Click Add.

Syncing with an IdP group

If you use Enterprise Managed Users, you can sync membership of an enterprise team to a group in your identity provider. That way, any changes made to the group in the IdP (such as adding or removing a user) will be synced to the enterprise team via SCIM. For details and requirements, see Managing team memberships with identity provider groups.

  1. On the enterprise teams page, click the team you want to sync.
  2. Ensure the team contains no manually assigned users. You can remove users by using the menu next to the user's name in the member list.
  3. Next to the team's name, click Edit.
  4. Under "Manage members", click Identity provider group.
  5. Click Select group, then choose the external IdP group to sync to the team. Members from the IdP group will display in the team's member list.
  6. Click Update team.

Limits on IdP group sizes

If an IdP group goes over the team size limit of 500 users, the team will stop being synced.

For example:

  • An enterprise team is initially synced with an IdP group of 5 users.
  • 500 more users are added to the IdP group. Because the IdP group now has 505 users, the group isn't synced and the enterprise team remains at 5 members.
  • 5 users are removed from the IdP group to bring it to 500 users. Syncing resumes and the enterprise team now contains the same 500 users as the IdP group.

Next steps

Next, assign roles to teams to manage their access to settings and resources. See Assigning roles to teams and users.