Repository roles for organizations
You can give organization members, outside collaborators, and teams of people different levels of access to repositories owned by an organization by assigning them to roles. Choose the role that best fits each person or team's function in your project without giving people more access to the project than they need.
From least access to most access, the roles for an organization repository are:
- Read: Recommended for non-code contributors who want to view or discuss your project
- Triage: Recommended for contributors who need to proactively manage issues and pull requests without write access
- Write: Recommended for contributors who actively push to your project
- Maintain: Recommended for project managers who need to manage the repository without access to sensitive or destructive actions
- Admin: Recommended for people who need full access to the project, including sensitive and destructive actions like managing security or deleting a repository
Organization owners can set base permissions that apply to all members of an organization when accessing any of the organization's repositories. For more information, see "Setting base permissions for an organization."
Organization owners can also choose to further limit access to certain settings and actions across the organization. For more information on options for specific settings, see "Managing organization settings."
In addition to managing organization-level settings, organization owners have admin access to every repository owned by the organization. For more information, see "Roles in an organization."
Warning: When someone adds a deploy key to a repository, any user who has the private key can read from or write to the repository (depending on the key settings), even if they're later removed from the organization.
Permissions for each role
Note: The roles required to use security features are listed in "Access requirements for security features" below.
| Repository action | Read | Triage | Write | Maintain | Admin |
|---|---|---|---|---|---|
| Manage individual, team, and outside collaborator access to the repository | X | ||||
| Pull from the person or team's assigned repositories | X | X | X | X | X |
| Fork the person or team's assigned repositories | X | X | X | X | X |
| Edit and delete their own comments | X | X | X | X | X |
| Open issues | X | X | X | X | X |
| Close issues they opened themselves | X | X | X | X | X |
| Reopen issues they closed themselves | X | X | X | X | X |
| Have an issue assigned to them | X | X | X | X | X |
| Send pull requests from forks of the team's assigned repositories | X | X | X | X | X |
| Submit reviews on pull requests | X | X | X | X | X |
| View published releases | X | X | X | X | X |
| Edit wikis in public repositories | X | X | X | X | X |
| Edit wikis in private repositories | X | X | X | ||
| Apply/dismiss labels | X | X | X | X | |
| Create, edit, delete labels | X | X | X | ||
| Close, reopen, and assign all issues and pull requests | X | X | X | X | |
| Apply milestones | X | X | X | X | |
| Mark duplicate issues and pull requests | X | X | X | X | |
| Request pull request reviews | X | X | X | X | |
| Merge a pull request | X | X | X | ||
| Push to (write) the person or team's assigned repositories | X | X | X | ||
| Edit and delete anyone's comments on commits, pull requests, and issues | X | X | X | ||
| Hide anyone's comments | X | X | X | ||
| Lock conversations | X | X | X | ||
| Transfer issues (see "Transferring an issue to another repository" for details) | X | X | X | ||
| Act as a designated code owner for a repository | X | X | X | ||
| Mark a draft pull request as ready for review | X | X | X | ||
| Convert a pull request to a draft | X | X | X | ||
| Submit reviews that affect a pull request's mergeability | X | X | X | ||
| Apply suggested changes to pull requests | X | X | X | ||
| Create status checks | X | X | X | ||
| Create and edit releases | X | X | X | ||
| View draft releases | X | X | X | ||
| Edit a repository's description | X | X | |||
| Manage topics | X | X | |||
| Enable wikis and restrict wiki editors | X | X | |||
| Enable project boards | X | X | |||
| Configure pull request merges | X | X | |||
| Configure a publishing source for GitHub Pages | X | X | |||
| Push to protected branches | X | X | |||
| Create and edit repository social cards | X | X | |||
| Delete an issue (see "Deleting an issue") | X | ||||
| Merge pull requests on protected branches, even if there are no approving reviews | X | ||||
| Define code owners for a repository | X | ||||
| Add a repository to a team (see "Managing team access to an organization repository" for details) |