Enterprise Server 3.20 is currently available as a release candidate.

Assigning roles to people in an enterprise

Govern what people can do in your enterprise by assigning roles to users and teams.

In this article

Enterprise owners can assign custom and predefined enterprise roles to users and teams. Some roles can be assigned to enterprise teams, whereas other roles are only available for individual users. Find the section below for the role you want to assign.

For more information about using roles effectively, see Identifying the roles required by your enterprise.

Assigning app managers, security managers, and custom roles

Note

These roles are in public preview and subject to change.

These roles can be assigned to existing users and teams in your enterprise settings, including users whose accounts were provisioned with SCIM.

Before you assign a role, you may need to create a team. Teams are the best way to manage role assignments at scale. The enterprise security manager role can only be assigned to a team, not to individual users. See Creating enterprise teams.

  1. In the top-right corner of GitHub Enterprise Server, click your profile picture, then click Enterprise settings.
  2. At the top of the page, click People.
  3. In the left sidebar, click Enterprise roles, then click Role assignments.
  4. Click Assign role.
  5. Choose the user or team and the role they should receive, then click Assign role.

Assigning enterprise owners

This role:

  • Can be chosen when you invite a user to your enterprise or provision a user from your identity provider (IdP)
  • Cannot currently be assigned to enterprise teams
  • Can be changed for existing users

Assigning to new users

  • If you have enabled SCIM provisioning, roles are assigned from your IdP via the SCIM roles attribute.
  • Otherwise, you can invite someone as an enterprise owner. See Inviting people to manage your enterprise.

Assigning to existing administrators

You can change an administrator's role or convert them to a regular member once they have joined your enterprise.

  • If you provisioned the user via SCIM, you must do this from your IdP via the SCIM roles attribute.
  • For all other accounts, you can change the role on your enterprise's "Administrators" page, using the menu next to the user's name. See Viewing people in your enterprise.

Assigning roles in an organization

Enterprise owners cannot assign organization-level roles from the enterprise settings. An organization administrator must do this. See Using organization roles.