Managing users in your enterprise

Learn which roles you can assign to control access to your enterprise's settings and data.

Outside of instance-level security measures (SSL, subdomain isolation, configuring a firewall) that a site administrator can implement, there are steps your users can take to help protect your enterprise.

You can add and remove enterprise owners for your enterprise account.

Certain words are reserved for internal use and cannot be used as usernames.

Site administrators can promote any normal user account to a site administrator, as well as demote other site administrators to regular users.

To audit access to enterprise-owned resources or user license usage, enterprise owners can view every administrator and member of the enterprise.

The audit log dashboard shows site administrators the actions performed by all users and organizations across your enterprise within the last 180 days. The audit log includes details such as who performed the action, what the action was, and when the action was performed.

You can impersonate users and perform actions on their behalf, for troubleshooting, unblocking, and other legitimate reasons.

By default, a user account is considered to be dormant if it has not been active for 90 days. You can configure the length of time a user must be inactive to be considered dormant and choose to suspend dormant users to release user licenses.

If a user leaves or moves to a different part of the company, you should remove or modify their ability to access your GitHub Enterprise Server instance.

You can delete a user's account to permanently remove their data from your GitHub Enterprise Server instance.

You can place a legal hold on a user or organization to ensure that repositories they own cannot be permanently removed from your enterprise.

Site administrators can initiate an instance-wide audit of SSH keys.

You may need to rebuild contributions data to link existing commits to a user account.