Assign organization roles to users across multiple organizations at once

[github-product-roadmap]

Summary

Some enterprises rely on organizations to manage their repositories and have hundreds to thousands of organizations managed within a single enterprise. To make it easier to manage these organizations at scale, Enterprise and Organization administrators can use a new page in the enterprise settings to assign an enterprise team or user a custom or pre-defined role across a set of organizations. This relieves the administrator of complex automation or manual clicking though dozens of organizations.

Intended Outcome

Both enterprise and organization administrators need to manage their organizations as scale, as we frequently see a set of organizations representing a sub-unit within a company, all of which share the same administrative personnel.

By using enterprise teams and organization roles, administrators can easily ensure that the right sets of people are the organization administrators, security managers, auditors, and DevSecOps managers across all of those organizations.

How will it work?

Enterprise administrators can create organization roles that are owned by the enterprise. Like Repository roles that an organization administrator creates, these roles are available in each organization in the enterprise.

Administrators can then select from these roles (as well as the pre-defined organization roles that GitHub ships with) and apply them to an enterprise team within the context of a select set of organizations. The enterprise team members will become members of each organization, and receive the organization role in each organization.

The organization role that a team gets in one organization does not change their permissions outside of the organization, which allows you to have e.g. a DevOps team with admin roles in the automation organizations, and a custom devops role in all of the other organizations in the enterprise.

You can optionally select all organizations for the assignment, which will add the users to all current and future organizations, with the chosen role.