You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Managing the security manager role in your organization
3
-
intro: 'Organization owners can assign the security manager role to the organization''s security teams to give them the level of access they need.'
3
+
intro: 'You can give your security team the least access they need to your organization by assigning a team to the security manager role.'
4
4
versions:
5
5
fpt: '*'
6
6
ghes: '>=3.3'
@@ -9,6 +9,7 @@ topics:
9
9
- Organizations
10
10
- Teams
11
11
shortTitle: Security manager role
12
+
permissions: Organization owners can assign the security manager role.
12
13
---
13
14
14
15
{% note %}
@@ -17,17 +18,17 @@ shortTitle: Security manager role
17
18
18
19
{% endnote %}
19
20
20
-
Members of your organization's Owners team can grant a team the permissions to manage security alerts and settings across your organization, as well as read permissions on all organization repositories, by assigning the security manager role.
21
+
Organization owners can grant a team the permissions they need to manage security alerts and settings across your organization, as well as read access on all organization repositories, by assigning the security manager role.
21
22
22
23
## Permissions for the security manager role
23
24
24
-
Members of a team with the security manager role assigned have the following permissions:
25
+
Members of a team with the security manager role have only the permissions required to effectively manage security for the organization.
25
26
26
-
- Read permission on all repositories in the organization
27
-
- Write permission on all security alerts in the organization
28
-
- Access to **Security Overview** in the organization's **Security** tab
29
-
-Write permission on security settings at the organization level, including the ability to enable or disable {% data variables.product.prodname_GH_advanced_security %}
30
-
-Write permission on security settings at the repository level, including the ability to enable or disable {% data variables.product.prodname_GH_advanced_security %}
27
+
- Read access on all repositories in the organization, in addition to any existing repository access
28
+
- Write access on all security alerts in the organization
29
+
- Access to the organization's security overview
30
+
-The ability to configure security settings at the organization level, including the ability to enable or disable {% data variables.product.prodname_GH_advanced_security %}
31
+
-The ability to configure security settings at the repository level, including the ability to enable or disable {% data variables.product.prodname_GH_advanced_security %}
31
32
32
33
While a team will be granted read permission on all organization repositories upon being added as security managers, any existing repository permissions that the team had will stay the same. If a team has the security manager role, only organization owners will be able to change team access to repositories in the **Repositories** tab.
33
34
@@ -39,14 +40,19 @@ Repository owners will be able to see if a security manager team has access to t
39
40
{% data reusables.profile.access_org %}
40
41
{% data reusables.profile.org_settings %}
41
42
{% data reusables.organizations.security-and-analysis %}
42
-
1. Under **Security managers**, search and select the team to which you want to assign the role. Once selected, the team will appear in a list below the search bar.
43
+
1. Under **Security managers**, search for and select the team to give the role. Each team you select will appear in a list below the search bar.
## Removing the security manager role from a team in your organization
45
46
46
-
Note that while removing the security manager role will remove the ability to manage security alerts and settings across the organization, it will not remove the read permissions on repositories that were granted when the role was assigned. You will need to remove any unwanted read permissions manually in the team's **Repositories** tab.
47
+
48
+
{% warning %}
49
+
50
+
**Warning:** Removing the security manager role from a team will remove the team's ability to manage security alerts and settings across the organization, but the team will retain read access to repositories that was granted when the role was assigned. You must remove any unwanted read access manually. For more information, see "[Managing team access to an organization repository](/organizations/managing-access-to-your-organizations-repositories/managing-team-access-to-an-organization-repository#removing-a-teams-access-to-a-repository)."
51
+
52
+
{% end warning %}
47
53
48
54
{% data reusables.profile.access_org %}
49
55
{% data reusables.profile.org_settings %}
50
56
{% data reusables.organizations.security-and-analysis %}
51
-
1. Under **Security managers**, click the **X** icon to the right of the team from which you want to remove the security manager role.
57
+
1. Under **Security managers**, to the right of the team you want to remove as security managers, click {% octicon "x" aria-label="The X icon" %}.
Copy file name to clipboardExpand all lines: content/organizations/managing-peoples-access-to-your-organization-with-roles/roles-in-an-organization.md
+2-3Lines changed: 2 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,7 @@ shortTitle: Roles in an organization
20
20
21
21
You can give organization members, outside collaborators and teams of people varying levels of access to repositories by assigning repository roles. For more information, see "[Repository roles for an organization](/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization)."
22
22
23
-
Team-level roles are roles that give permissions specific to a team. You can give any individual member of a team the *team maintainer* role, which gives them a number of administrative permissions over a team. For more information, see "[Giving "team maintainer" permissions to an organization member](/organizations/managing-peoples-access-to-your-organization-with-roles/giving-team-maintainer-permissions-to-an-organization-member)."
23
+
Team-level roles are roles that give permissions to manage a team. You can give any individual member of a team the team maintainer role, which gives the member a number of administrative permissions over a team. For more information, see "[Giving "team maintainer" permissions to an organization member](/organizations/managing-peoples-access-to-your-organization-with-roles/giving-team-maintainer-permissions-to-an-organization-member)."
24
24
25
25
Organization-level roles are different sets of permissions that can be assigned to individuals or teams to manage an organization and the repositories, teams and settings within it. For more information on each organization-level role, see [Roles for an organization](#roles-for-an-organization).
26
26
@@ -47,7 +47,7 @@ Billing managers are users who can manage the billing settings for your organiza
47
47
48
48
Security manager is an organization-level role that can be assigned to any team in an organization. When applied, it gives every member of the team permissions to manage security alerts and settings across your organization, as well as read permissions for all repositories in the organization.
49
49
50
-
This role is useful for organizations with security teams, as it gives members of the team the permissions they need to do their job without any extra permissions they do not require. For more information, see "[Managing the security manager role in your organization](/organizations/managing-peoples-access-to-your-organization-with-roles/managing-the-security-manager-role-in-your-organization)."
50
+
If your organization has a security team, you can use the security manager role to give members of that team the permissions they need to do their job without any extra permissions they do not require. For more information, see "[Managing the security manager role in your organization](/organizations/managing-peoples-access-to-your-organization-with-roles/managing-the-security-manager-role-in-your-organization)."
51
51
{% endif %}
52
52
### {% data variables.product.prodname_github_app %} managers
53
53
By default, only organization owners can manage the settings of {% data variables.product.prodname_github_apps %} owned by an organization. To allow additional users to manage {% data variables.product.prodname_github_apps %} owned by an organization, an owner can grant them {% data variables.product.prodname_github_app %} manager permissions.
@@ -217,5 +217,4 @@ Some of the features listed below are limited to organizations using {% data var
217
217
## Further reading
218
218
219
219
- "[Repository roles for an organization](/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization)"
- "[Project board permissions for an organization](/organizations/managing-access-to-your-organizations-project-boards/project-board-permissions-for-an-organization)"
0 commit comments