Skip to content

Commit 887b72d

Browse files
Merge branch 'main' into patch-1
2 parents 5f57817 + e412b59 commit 887b72d

77 files changed

Lines changed: 9463 additions & 1813 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
-30 KB
Binary file not shown.
-19.8 KB
Binary file not shown.
-69.6 KB
Binary file not shown.
Binary file not shown.
-35.1 KB
Binary file not shown.

content/admin/configuring-settings/hardening-security-for-your-enterprise/restricting-access-to-githubcom-using-a-corporate-proxy.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,21 @@ This will prevent people on your network from accessing these endpoints with use
6161

6262
>[!NOTE] Access to `github.com/login` is required to create support tickets. To ensure users with support entitlements can request help, you may want to exempt these users from the restriction.
6363
64+
## Enabling access restrictions for multiple enterprises
65+
66+
Enterprise owners can enforce the restriction across multiple enterprise accounts.
67+
68+
1. Enable the feature for each enterprise account. See [Enabling access restrictions](#enabling-access-restrictions).
69+
1. Inject a header into all traffic going to certain supported endpoints. The header is in the following format.
70+
71+
```text
72+
sec-GitHub-allowed-enterprise: ENTERPRISE1-ID, ENTERPRISE2-ID, ENTERPRISE3-ID ... ENTERPRISE20-ID.
73+
```
74+
75+
Enterprise owners can find the correct enterprise ID to use in the header for each of the enterprises. See [Finding the header](#finding-the-header).
76+
77+
> [!NOTE] We currently support up to 20 unique enterprise IDs to be included in the header.
78+
6479
### Lifting the restriction for certain users
6580

6681
You may want to lift the restriction for certain users who need to contribute to open source resources using a personal account, or who may need to create support tickets in case of issues. To handle this, you must configure your network to inject the header only for users that you intend to restrict.

content/admin/guides.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ includeGuides:
119119
- /admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-projects-using-jira
120120
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise
121121
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise
122-
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise
122+
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/abilities-of-roles
123123
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/viewing-and-managing-a-users-saml-access-to-your-enterprise
124124
- /admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/viewing-people-in-your-enterprise
125125
- /admin/user-management/managing-repositories-in-your-enterprise/migrating-to-internal-repositories

content/admin/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ featuredLinks:
7373
startHere:
7474
- '{% ifversion ghec %}/admin/managing-iam/understanding-iam-for-enterprises/choosing-an-enterprise-type-for-github-enterprise-cloud{% endif %}'
7575
- /admin/managing-iam/understanding-iam-for-enterprises/about-identity-and-access-management
76-
- '{% ifversion ghec %}/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise{% endif %}'
76+
- '{% ifversion ghec %}/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/abilities-of-roles{% endif %}'
7777
- /admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/best-practices-for-structuring-organizations-in-your-enterprise
7878
- '{% ifversion ghes %}/admin/getting-started-with-enterprise/about-upgrades-to-new-releases{% endif %}'
7979
- '{% ifversion ghes %}/billing/how-tos/set-up-payment/manage-enterprise-invoice{% endif %}'
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
---
2+
title: Creating custom organization roles in an enterprise
3+
intro: Create roles with fine-grained permissions for a consistent experience across your organizations.
4+
versions:
5+
feature: ent-owner-custom-org-roles
6+
type: how_to
7+
topics:
8+
- Enterprise
9+
- Organizations
10+
shortTitle: Custom organization roles
11+
---
12+
13+
To define consistent sets of permissions for settings and repositories, you can create custom organization roles for use in all of the enterprise's organizations. This allows centralized management of common roles such as "Developer" or "SRE team."
14+
15+
Custom organization roles created at the enterprise level use the same organization and repository permissions and base roles as roles created at the organization level. There is no difference in how these roles function or what they can allow. For more information, see [AUTOTITLE](/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles).
16+
17+
Enterprise owners can create and edit custom organization roles, but cannot assign them. Organization owners can assign custom roles in an organization.
18+
19+
>[!NOTE] An enterprise can create up to 20 custom organization roles. This limit applies to the enterprise: each organization can also create up to 20 custom organization roles.
20+
21+
{% data reusables.enterprise-accounts.access-enterprise %}
22+
{% data reusables.enterprise-accounts.people-tab %}
23+
1. In the left sidebar, select **Organization roles**.
24+
1. Click **Create custom role**.
25+
1. Enter the details, then click **Create role**.

content/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/index.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ children:
2525
- /configuring-visibility-for-organization-membership
2626
- /preventing-users-from-creating-organizations
2727
- /requiring-two-factor-authentication-for-an-organization
28+
- /custom-organization-roles
2829
- /managing-your-role-in-an-organization-owned-by-your-enterprise
2930
- /managing-requests-for-copilot-business-from-organizations-in-your-enterprise
3031
- /removing-organizations-from-your-enterprise

0 commit comments

Comments
 (0)