Access controls what people can do
GitHub organizations and repositories provide different permission levels. The exact role names and capabilities depend on whether you are working with a personal repository or an organization.
Use least privilege
Give a person or team only the permissions needed for their responsibilities. Administrative access should be limited because it can affect repository settings, secrets, branches and integrations.
Review access periodically
Teams change over time. Remove access that is no longer required and review outside collaborators and installed integrations.
ADVERTISEMENT