ghtier
← All permissions
Enterprise permission·enterprise_teams:write

Enterprise teams: Write

Tier 0 · Critical

Why Tier 0

Adds people to enterprise teams and teams to organizations. Teams carry enterprise and organization roles, so membership is role assignment.

Context-dependent: the tier shown is the typical case. What the target is used for decides the real one.

Target
Enterprise
Plane
ControlIdentity: Members, teams, SCIM provisioning and the credentials attached to an account.
Granted by
GitHub App
Available on
Enterprise Cloud, EMU, Server

What it unlocks

11 REST endpoints need this permission. A few of them:

  • POST /enterprises/{enterprise}/teams
  • POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add
  • POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove
  • PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}

Roles that include it

Classic scopes that reach it

No classic scope reaches it. Only fine-grained PATs, Apps or GITHUB_TOKEN can grant it.

Attack paths

No attack technique, escalation or incident on ghtier goes through this yet.

Other levels

GitHub Docs: Enterprise permissions for "Enterprise teams"