Question

You manage a GitHub Enterprise Cloud organization with 200 repositories. Your CISO wants a dedicated group of five security engineers to be able to view all security alerts across every repository and manage security configurations for the organization, but they should NOT receive owner-level administrative control (such as deleting repositories or managing billing). What is the correct way to grant these permissions at scale?

Accepted Answer

Create a team, add the five engineers to it, and assign that team the security manager role in the organization settings

Answer

Add each of the five engineers as organization owners so they can access all security alerts

Answer

Grant each engineer admin permission on all 200 repositories individually through repository access settings

Answer

Assign the five engineers the 'Write' role on the organization and enable security overview access