ghtier
← All scopes
Classic scope

admin:enterprise

Tier 0 · CriticalControl

Why Tier 0

Tier 0 because it reaches Custom enterprise roles: Write (enterprise).

GitHub: Gives full control of enterprise functionality. For more information, see Managing enterprise accounts in the GraphQL API documentation. Includes `manage_runners:enterprise`, `manage_billing:enterprise`, and `read:enterprise`.

Available on: Enterprise Cloud, EMU, Server. Source

Includes manage_runners:enterprise, manage_billing:enterprise, read:enterprise.

Permissions it reaches (7)

TierPermissionEvidence
T0sets tierCustom enterprise roles: Writeenterprise6 documented endpoints
  • DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}
  • DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}/{role_id}
  • DELETE /enterprises/{enterprise}/enterprise-roles/users/{username}
T1Enterprise credentials: Writeenterprise4 documented endpoints
  • POST /enterprises/{enterprise}/credential-authorizations/revoke-all
  • POST /enterprises/{enterprise}/credential-authorizations/revoke-credential-type
  • POST /enterprises/{enterprise}/credential-authorizations/{username}/revoke
T1Self-hosted runners: WriteorganizationStated by GitHub: Manages self-hosted runners at the enterprise level.
T2Enterprise AI controls: Writeenterprise2 documented endpoints
  • DELETE /enterprises/{enterprise}/copilot/custom-agents/source
  • PUT /enterprises/{enterprise}/copilot/custom-agents/source
T2Enterprise billing: WriteenterpriseStated by GitHub: Manages enterprise billing.
T3Enterprise AI controls: Readenterprise2 documented endpoints
  • GET /enterprises/{enterprise}/copilot/custom-agents
  • GET /enterprises/{enterprise}/copilot/custom-agents/source
T3Copilot usage records: Readenterprise1 documented endpoint
  • GET /enterprises/{enterprise}/copilot/usage-records