Enterprise role·Every organization in the enterprise

Enterprise security manager

Tier 1 · HighData

Why Tier 1

Tier 1 because it includes Secret scanning alerts: Read (repository).

Manages security configurations and alerts enterprise-wide (public preview).

Available on: Enterprise Cloud (public preview), EMU (public preview), Server (public preview). Source

Tier	Permission	From
T1sets tier	Secret scanning alerts: Readrepository	They have read access for code in all repositories and write access for all security alerts in the enterprise. documented
T2	Secret scanning alerts: Writerepository	They have read access for code in all repositories and write access for all security alerts in the enterprise. documented
T2	Code scanning alerts: Writerepository	They have read access for code in all repositories and write access for all security alerts in the enterprise. documented
T2	Dependabot alerts: Writerepository	They have read access for code in all repositories and write access for all security alerts in the enterprise. documented
T3	Contents: Readrepository	They have read access for code in all repositories and write access for all security alerts in the enterprise. documented

Clone private repos with a stolen token Read or expose private code · through Contents: Read
Get an agent to copy private code into public Read or expose private code · through Contents: Read

Harvest leaked secrets from scanning alerts: Live credentials found in code and history: cloud keys, tokens and passwords, often for systems outside GitHub. · through Secret scanning alerts: Read