You can audit user activity and manage user settings.
Outside of instance-level security measures (SSL, subdomain isolation, configuring a firewall) that a site administrator can implement, there are steps your users can take to help protect your enterprise.
Auditing users across your enterprise→
The audit log dashboard shows site administrators the actions performed by all users and organizations across your enterprise within the past 90 days, including details such as who performed the action, what the action was, and when the action was performed.
A user account is considered to be dormant if it has not been active for at least a month. You may choose to suspend dormant users to free up user licenses.
如果用户离开公司或者调动到公司的其他部门，您应当移除或修改他们访问 your GitHub Enterprise Server instance 的能力。
You can place a legal hold on a user or organization to ensure that repositories they own cannot be permanently removed from your enterprise.
审核 SSH 密钥→
站点管理员可以发起 SSH 密钥的实例级审核。
Customizing user messages for your enterprise→
You can create custom messages that users will see on the sign in and sign out pages.
管理全局 web 挂钩→
Site administrators can view, add, edit, and delete global webhooks to track events for the enterprise.