Establishing AI managers in your enterprise

Overview

You can use custom roles and enterprise teams to delegate AI administration permissions without granting enterprise ownership. AI managers can view and manage nearly all AI features in your enterprise's AI Controls, including agentic AI features, Copilot features, and Model Context Protocol (MCP) features.

Unless you grant additional permissions beyond those listed in this article, AI managers cannot access the following:

• Access management settings for Copilot
• Settings in the "Billing" section of the Copilot page
• Settings in the "Metrics" section of the Copilot page

1. Create a custom role for AI management

To get started, you need to create a custom role with the necessary permissions for AI management.

1. GitHub の右上隅にあるプロフィール画像をクリックします。

2. ご自分の環境に応じて、[Your enterprise] または [Your enterprises] をクリックし、表示するエンタープライズをクリックします。

3. ページの上部にある [ People] をクリックします。

4. In the left sidebar, click Enterprise roles, then click Role management.

5. Click Create custom role.

6. To clarify the purpose of the role, give it a name and description.

7. In the "Add permissions" section, use the search bar to find and select the following permissions:

   • Manage enterprise AI controls: Allows this role to view and manage all settings in the "AI Controls" tab for your enterprise
   • Read enterprise audit logs: Allows this role to view all audit log events for your enterprise, helping your AI managers monitor agentic activity

8. Click Create role.

2. Create an enterprise team for AI management

Now that you have created your AI manager role, you need to set up an enterprise team and add your future AI managers as members.

1. In the sidebar of the "People" tab, click Enterprise teams.
2. Click Create Enterprise team.
3. Give your team a name, then click Create Enterprise team.
4. On the team page, select the Add members dropdown menu, then click the members of your enterprise you want to grant AI management permissions to.
5. To confirm your selections, click Add.

3. Assign the AI management role to your team

With both your AI management role and team created, you can now assign the role to your team, granting management permissions to your team members.

1. In the sidebar of the "People" tab, select Enterprise roles, then click Role assignments.
2. On the "Enterprise role assignments" page, click Assign role.
3. In the "Assign role to" section, select the Select user or team dropdown menu, then click your AI management team.
4. In the "Select role" section, click your AI management role.
5. At the bottom of the page, click Assign role.

4. Grant your AI managers bypass permissions for agent profiles

If you have created a ruleset targeting agent profiles in your enterprise, you can grant bypass access to allow your AI managers to create and edit those profiles. This access also lets your AI managers merge pull requests modifying those files, allowing your developers to propose custom agents while maintaining your enterprise's security standards.

1. At the top of the page, click AI controls.

2. In the "Only enterprise admins can edit agent files" field, click Edit ruleset .

   

3. In the "Bypass list" section, select the Add bypass dropdown menu, then click your AI management team.

4. At the bottom of the page, click Save changes.

Next steps

Now that you have established AI managers for your enterprise, help them customize and manage your enterprise's AI experience by sharing the following resources:

• Enterprise での GitHub Copilot のポリシーと機能の管理
• Creating custom agents