← All roles
Enterprise role·GitHub Apps owned by the enterprise
Enterprise App manager
Tier 1 · HighManagement
Why Tier 1
Managing an App registration is not a permission on the reference. It decides what an enterprise-owned App asks for and where its webhooks go, which reaches every organization the App is installed in.
Views, creates, edits and deletes enterprise-owned App registrations. Cannot install or uninstall Apps.
Available on: Enterprise Cloud, EMU, Server. Source
Attack paths
No attack technique, escalation or incident on ghtier goes through this yet.