Question

An organization on GitHub Enterprise Cloud has its base permission set to 'Write', meaning all organization members can push to every repository. A contractor who is NOT a member of the organization needs to contribute code to only one private repository. The security team requires that this contractor be able to access that single repository and nothing else in the organization. How should the enterprise administrator grant this access while respecting the least-privilege requirement?

Accepted Answer

Invite the contractor as an outside collaborator on the specific repository with the 'Write' role.

Answer

Add the contractor as an organization member and rely on the base permission of 'Write' to scope their access.

Answer

Lower the organization base permission to 'Read' and add the contractor as an organization member.

Answer

Create a new team, add the contractor to it, and grant the team 'Write' access to the repository.