Enterprise-level repository roles

[rbague-sirt]

🏷️ Discussion Type

Question

Body

When using GitHub Enteprise, an administrator can create custom repository roles in a organization to give users extra permissions, or to allow them to bypass rulesets.
This works great, but these roles must be created at the organization level, and need to be replicated manually in every organization in the enterprise, as they cannot be created at the enterprise to be shared with all of its organizations. Is there any way that we can create custom repository roles in the enterprise (as we do now with custom enteprise and organization roles) so that its organizations can inherit and use them?

[Light0777]

This seems like a very sensible feature request. I wonder whether the primary reason this isn't available now is because GitHub's model closely links repository permissions to the organization border.

Although enterprise-level inheritance may seem straightforward, it likely raises complex issues with overrides, auditing, permission modifications, and organisations seeking alternative access models.

However, implementing the identical unique repository roles everywhere is a lot of needless administrative effort for big businesses that oversee dozens or hundreds of organisations.

This would likely be resolved well with an enterprise-level role template/inheritance approach (with the opportunity for organisations to override or opt out).