Skip to content

Commit 5e6890e

Browse files
lecoursenmattpollardsubatoigithub-actionsSiaraMist
authored
Admin Visibility & Access to EMU namespace repositories (#37419)
Co-authored-by: Matt Pollard <[email protected]> Co-authored-by: Ben Ahmady <[email protected]> Co-authored-by: github-actions <[email protected]> Co-authored-by: Siara <[email protected]>
1 parent 8d00038 commit 5e6890e

File tree

10 files changed

+79
-6
lines changed

10 files changed

+79
-6
lines changed
Loading
Loading

content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1086,7 +1086,8 @@ Before you'll see `git` category actions, you must enable Git events in the audi
10861086

10871087
| Action | Description
10881088
|--------|-------------
1089-
| `repo.access` | The visibility of a repository changed.
1089+
| `repo.access` | The visibility of a repository changed.{% ifversion emu-owned-repos %}
1090+
| `repo.temporary_access_granted` | Triggered when an enterprise owner temporarily enables access to a repository. For more information, see "[AUTOTITLE](/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise)."{% endif %}
10901091
| `repo.actions_enabled` | {% data variables.product.prodname_actions %} was enabled for a repository.
10911092
| `repo.add_member` | A collaborator was added to a repository.
10921093
| `repo.add_topic` | A topic was added to a repository.

content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ Across all organizations owned by your enterprise, you can allow members to crea
8787
If you allow members to create repositories in your organizations, you can choose which types of repositories (public, private, and internal) that members can create.
8888

8989
{% ifversion enterprise-namespace-repo-setting %}
90-
{% ifversion ghec %}If your enterprise uses {% data variables.product.prodname_emus %}, you{% else %}You{% endif %} can also prevent users from creating repositories owned by their user accounts.
90+
{% ifversion ghec %}If your enterprise uses {% data variables.product.prodname_emus %}, you{% else %}You{% endif %} can also prevent users from creating repositories owned by their user accounts. {% ifversion emu-owned-repos %}If you allow users to create repositories owned by their user accounts, you can view and temporarily access those repositories at any time. For more information, see "[AUTOTITLE](/admin/user-management/managing-repositories-in-your-enterprise/viewing-user-owned-repositories-in-your-enterprise)" and "[AUTOTITLE](/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise)."{% endif %}
9191
{% endif %}
9292

9393
{% data reusables.repositories.internal-repo-default %} For more information about internal repositories, see "[AUTOTITLE](/repositories/creating-and-managing-repositories/creating-a-new-repository)."
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
title: Accessing user-owned repositories in your enterprise
3+
intro: "You can temporarily access a repository owned by a user within your enterprise."
4+
permissions: Enterprise owners can temporarily access user-owned repositories.
5+
versions:
6+
feature: 'emu-owned-repos'
7+
type: how_to
8+
topics:
9+
- Enterprise
10+
- Repositories
11+
shortTitle: Access user-owned repos
12+
---
13+
14+
{% note %}
15+
16+
**Note:** Temporarily accessing user-owned repositories is currently in beta for {% data variables.product.prodname_emus %} and subject to change.
17+
18+
{% endnote %}
19+
20+
## About temporary access to user-owned repositories
21+
22+
If your enterprise uses {% data variables.product.prodname_emus %}, and you've allowed users to create repositories owned by their user accounts, you can temporarily access any user-owned repository within your enterprise.
23+
24+
When you temporarily access a repository, you get admin access to the repository for two hours. You can take all the same actions as the repository owner, including editing the repository, changing the repository's settings, transferring the repository, and deleting the repository.
25+
26+
The repository owner will receive an email informing them that you have enabled temporary access to the repository, and a `repo.temporary_access_granted` event will be added to the audit log for your enterprise and the user's security log.
27+
28+
## Temporarily accessing a repository
29+
30+
{% data reusables.enterprise-accounts.access-enterprise %}
31+
{% data reusables.enterprise-accounts.policies-tab %}
32+
{% data reusables.enterprise-accounts.repositories-tab %}
33+
{% data reusables.enterprise.view-user-namespace-repos %}
34+
1. To the right of the repository you want to access, select the {% octicon "kebab-horizontal" aria-label="Access repository" %} dropdown menu, then click **Enable temporary access**.
35+
36+
![Screenshot of the list of user namespace repositories. To the right of a repository, a kebab icon is outlined in dark orange.](/assets/images/help/business-accounts/user-namespace-repo-kebab.png)
37+
1. Read the warnings, then click **Yes, enable temporary access**.

content/admin/user-management/managing-repositories-in-your-enterprise/index.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,22 @@
11
---
22
title: Managing repositories in your enterprise
3-
intro: You can manage the settings available to repository administrators in your enterprise.
3+
intro: You can manage repositories in your enterprise.
44
redirect_from:
55
- /enterprise/admin/user-management/repositories
66
- /enterprise/admin/user-management/managing-repositories-in-your-enterprise
77
versions:
8+
ghec: '*'
89
ghes: '*'
910
ghae: '*'
1011
topics:
1112
- Enterprise
1213
children:
14+
- /viewing-user-owned-repositories-in-your-enterprise
15+
- /accessing-user-owned-repositories-in-your-enterprise
1316
- /configuring-git-large-file-storage-for-your-enterprise
1417
- /migrating-to-internal-repositories
1518
- /disabling-git-ssh-access-on-your-enterprise
1619
- /restoring-a-deleted-repository
1720
- /troubleshooting-service-hooks
1821
shortTitle: Manage repositories
1922
---
20-
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
---
2+
title: Viewing user-owned repositories in your enterprise
3+
intro: "You can view all repositories owned by users within your enterprise."
4+
permissions: Enterprise owners can view user-owned repositories.
5+
versions:
6+
feature: 'emu-owned-repos'
7+
type: how_to
8+
topics:
9+
- Enterprise
10+
- Repositories
11+
shortTitle: View user-owned repos
12+
---
13+
14+
{% note %}
15+
16+
**Note:** Viewing user-owned repositories is currently in beta for {% data variables.product.prodname_emus %} and subject to change.
17+
18+
{% endnote %}
19+
20+
If your enterprise uses {% data variables.product.prodname_emus %}, and you've allowed users to create repositories owned by their user accounts, you can view all user-owned repositories within your enterprise.
21+
22+
You can also temporarily access any user-owned repository. For more information, see "[AUTOTITLE](/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise)."
23+
24+
{% data reusables.enterprise-accounts.access-enterprise %}
25+
{% data reusables.enterprise-accounts.policies-tab %}
26+
{% data reusables.enterprise-accounts.repositories-tab %}
27+
{% data reusables.enterprise.view-user-namespace-repos %}

content/authentication/keeping-your-account-and-data-secure/security-log-events.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,8 @@ topics:
119119

120120
| Action | Description
121121
|------------------|-------------------
122-
| `access` | Triggered when you [change the visibility of a repository](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility).
122+
| `access` | Triggered when you [change the visibility of a repository](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility).{% ifversion emu-owned-repos %}
123+
| `temporary_access_granted` | Triggered when an enterprise owner enables temporary access to a repository. For more information, see "[AUTOTITLE](/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise)."{% endif %}
123124
| `add_member` | Triggered when a {% data variables.product.product_name %} user is {% ifversion fpt or ghec %}[invited to have collaboration access](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository){% else %}[given collaboration access](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository){% endif %} to a repository.
124125
| `add_topic` | Triggered when a repository owner [adds a topic](/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics) to a repository.
125126
| `archived` | Triggered when a repository owner [archives a repository](/repositories/archiving-a-github-repository/archiving-repositories).{% ifversion ghes %}
@@ -135,7 +136,7 @@ topics:
135136
| `remove_member` | Triggered when a {% data variables.product.product_name %} user is [removed from a repository as a collaborator](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-a-collaborator-from-a-personal-repository).
136137
| `remove_topic` | Triggered when a repository owner removes a topic from a repository.
137138
| `rename` | Triggered when [a repository is renamed](/repositories/creating-and-managing-repositories/renaming-a-repository).
138-
| `staff_unlock` | Triggered when an enterprise owner or {% data variables.contact.github_support %} (with permission from a repository administrator) temporarily unlocked the repository. The visibility of the repository isn't changed.
139+
| `staff_unlock` | Triggered when an enterprise owner or {% data variables.contact.github_support %} (with permission from a repository administrator) temporarily unlocks the repository. The visibility of the repository isn't changed.
139140
| `transfer` | Triggered when [a repository is transferred](/repositories/creating-and-managing-repositories/transferring-a-repository).
140141
| `transfer_start` | Triggered when a repository transfer is about to occur.
141142
| `unarchived` | Triggered when a repository owner unarchives a repository.

data/features/emu-owned-repos.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
versions:
2+
ghec: '*'
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
1. In the "Repository creation" section, under "Block the creation of user namespace repositories," click **View user namespace repositories in your enterprise**.
2+
3+
![Screenshot of the "Repository creation" section of the "Repository policies" page. A link, labeled with an eye icon and "View user namespace repositories in your enterprise," is outlined in orange.](/assets/images/help/business-accounts/view-user-namespace-repos.png)

0 commit comments

Comments
 (0)