This guide will walk you through setting up, configuring and managing your GitHub Enterprise Cloud account as an organization or enterprise owner.
Prueba gratuita de GitHub Enterprise Cloud
Part 1: Choosing your account type
GitHub provides two types of Enterprise products:
- GitHub Enterprise Cloud
- GitHub Enterprise Server
The main difference between the products is that GitHub Enterprise Cloud is hosted by GitHub, while GitHub Enterprise Server is self-hosted.
Para obtener más información sobre cómo las empresas pueden usar productos de GitHub para admitir su ciclo de vida de desarrollo de software, consulta "Acerca de GitHub para empresas".
With GitHub Enterprise Cloud, you have the option of using Enterprise Managed Users. Enterprise Managed Users is a feature of GitHub Enterprise Cloud that provides even greater control over enterprise members and resources. With Enterprise Managed Users, all members are provisioned and managed through your identity provider (IdP) instead of users creating their own accounts on GitHub. Team membership can be managed using groups on your IdP. Managed user accounts are restricted to their enterprise and are unable to push code, collaborate, or interact with users, repositories, and organizations outside of their enterprise. For more information, see "About Enterprise Managed Users" in the GitHub Enterprise Cloud documentation.
If you choose to let your members create and manage their own personal accounts instead, there are two types of accounts you can use with GitHub Enterprise Cloud:
- A single organization account
- An enterprise account that contains multiple organizations
1. Understanding the differences between an organization account and enterprise account
Both organization and enterprise accounts are available with GitHub Enterprise Cloud. An organization is a shared account where groups of people can collaborate across many projects at once, and owners and administrators can manage access to data and projects. An enterprise account enables collaboration between multiple organizations, and allows owners to centrally manage policy, billing and security for these organizations. For more information on the differences, see "Organizations and enterprise accounts."
If you choose an enterprise account, keep in mind that some policies can be set only at an organization level, while others can be enforced for all organizations in an enterprise.
Once you choose the account type you would like, you can proceed to setting up your account. In each of the sections in this guide, proceed to either the single organization or enterprise account section based on your account type.
Part 2: Setting up your account
To get started with GitHub Enterprise Cloud, you will want to create your organization or enterprise account and set up and view billing settings, subscriptions and usage.
Setting up a single organization account with GitHub Enterprise Cloud
1. About organizations
Organizations are shared accounts where groups of people can collaborate across many projects at once. With GitHub Enterprise Cloud, owners and administrators can manage their organization with sophisticated user authentication and management, as well as escalated support and security options. For more information, see "About organizations."
2. Creating or upgrading an organization account
To use an organization account with GitHub Enterprise Cloud, you will first need to create an organization. When prompted to choose a plan, select "Enterprise". For more information, see "Creating a new organization from scratch."
Alternatively, if you have an existing organization account that you would like to upgrade, follow the steps in "Upgrading your GitHub subscription."
3. Setting up and managing billing
When you choose to use an organization account with GitHub Enterprise Cloud, you'll first have access to a 30-day trial. If you don't purchase GitHub Enterprise or GitHub Team before your trial ends, your organization will be downgraded to GitHub Free and lose access to any advanced tooling and features that are only included with paid products. For more information, see "Finishing your trial."
Your organization's billing settings page allows you to manage settings like your payment method and billing cycle, view information about your subscription, and upgrade your storage and GitHub Actions minutes. For more information on managing your billing settings, see "Managing your GitHub billing settings."
Only organization members with the owner or billing manager role can access or change billing settings for your organization. A billing manager is a user who manages the billing settings for your organization and does not use a paid license in your organization's subscription. For more information on adding a billing manager to your organization, see "Adding a billing manager to your organization."
Setting up an enterprise account with GitHub Enterprise Cloud
1. About enterprise accounts
An enterprise account allows you to centrally manage policy and settings for multiple GitHub organizations, including member access, billing and usage and security. For more information, see "About enterprise accounts."
2. Creating an enterpise account
GitHub Enterprise Cloud customers paying by invoice can create an enterprise account directly through GitHub. For more information, see "Creating an enterprise account."
GitHub Enterprise Cloud customers not currently paying by invoice can contact GitHub's Sales team to create an enterprise account for you.
3. Adding organizations to your enterprise account
You can create new organizations to manage within your enterprise account. For more information, see "Adding organizations to your enterprise."
Contact your GitHub sales account representative if you want to transfer an existing organization to your enterprise account.
4. Viewing the subscription and usage for your enterprise account
You can view your current subscription, license usage, invoices, payment history, and other billing information for your enterprise account at any time. Both enterprise owners and billing managers can access and manage billing settings for enterprise accounts. For more information, see "Viewing the subscription and usage for your enterprise account."
Part 3: Managing your organization or enterprise members and teams with GitHub Enterprise Cloud
Managing members and teams in your organization
You can set permissions and member roles, create and manage teams, and give people access to repositories in your organization.
1. Managing members of your organization
Puedes invitar a cualquiera para que sea un miembro de tu organización, siempre y cuando tengan una cuenta personal en GitHub. También puedes eliminar a los miembros y reinstaurar a los miembros anteriores. Para más información, vea "Administración de la pertenencia en la organización".
2. Organization permissions and roles
Cada persona en tu organización tiene un rol que define su nivel de acceso a esta. El rol de miembro es el predeterminado y puedes asignar roles de propietario y gerente de facturación así como permisos de "mantenedor de equipo". Para más información, vea "Roles en una organización".
3. About and creating teams
Los equipos son grupos de miembros de una organización que puedes crear para reflejar la estructura de tu empresa o grupo con menciones y permisos de acceso en cascada. Los miembros de una organización pueden enviar notificaciones a un equipo o solicitar revisiones y los equipos pueden ser visibles o secretos. Para más información, vea "Acerca de los equipos".
Puedes crear equipos independientes o tener niveles múltiples de equipos anidados para reflejar la jerarquía de tu grupo o compañía. Para más información, vea "Creación de un equipo".
4. Managing team settings
Puedes designar un "mantenedor de equipo" para administrar los ajustes y debates del equipo, entre otros privilegios. Para más información, vea "Asignación del rol de mantenedor de equipo a un miembro del equipo".
Puedes administrar las tareas de revisión de código para tu equipo, cambiar la visibilidad de los equipos, administrar los recordatorios programados para tus equipos y más en los ajustes de equipo. Para más información, vea "Organización de miembros en equipos".
5. Giving people and teams access to repositories, project boards and apps
Con los roles de repositorio, puedes otorgar diferentes niveles de acceso a los miembros de la organización, equipos y colaboradores externos para los repositorios que pertenezcan a tu organización. Para más información, vea "Roles de repositorio para una organización".
También puedes personalizar el acceso a los tableros de proyecto de tu organización y permitir que miembros individuales de esta administren las GitHub Apps de ella. Para más información, vea "Administración del acceso a los paneles de proyecto de la organización" y "Administración del acceso a las aplicaciones de la organización".
Managing members of an enterprise account
Managing members of an enterprise is separate from managing members or teams in an organization. It is important to note that enterprise owners or administrators cannot access organization-level settings or manage members for organizations in their enterprise unless they are made an organization owner. For more information, see the above section, "Managing members and teams in your organization."
If your enterprise uses Enterprise Managed Users, your members are fully managed through your identity provider. Adding members, making changes to their membership, and assigning roles is all managed using your IdP. For more information, see "About Enterprise Managed Users."
If your enterprise does not use Enterprise Managed Users, follow the steps below.
1. Assigning roles in an enterprise
By default, everyone in an enterprise is a member of the enterprise. There are also administrative roles, including enterprise owner and billing manager, that have different levels of access to enterprise settings and data. For more information, see "Roles in an enterprise."
2. Inviting people to manage your enterprise
You can invite people to manage your enterprise as enterprise owners or billing managers, as well as remove those who no longer need access. For more information, see "Inviting people to manage your enterprise."
You can also grant enterprise members the ability to manage support tickets in the support portal. For more information, see "Managing support entitlements for your enterprise."
3. Viewing people in your enterprise
To audit access to enterprise-owned resources or user license usage, you can view every enterprise administrator, enterprise member, and outside collaborator in your enterprise. You can see the organizations that a member belongs to and the specific repositories that an outside collaborator has access to. For more information, see "Viewing people in your enterprise."
Part 4: Managing security with GitHub Enterprise Cloud
- Managing security for a single organization
- Managing security for an enterprise with managed users
- Managing security for an enterprise account without managed user accounts
Managing security for a single organization
You can help keep your organization secure by requiring two-factor authentication, configuring security features, reviewing your organization's audit log and integrations, and enabling SAML single sign-on and team synchronization.
1. Requiring two-factor authentication
Puedes ver si los miembros de tu organización tienen habilitada la autenticación bifactorial y elegir requerir la autenticación bifactorial en tu organización. Para más información, vea "Exigencia de la autenticación en dos fases en la organización".
2. Configuring security features for your organization
To keep your organization secure, you can use a variety of GitHub security features, including security policies, dependency graphs, secret scanning and Dependabot security and version updates. For more information, see "Securing your organization" and "Managing security and analysis settings for your organization."
3. Reviewing your organization's audit log and integrations
La bitácora de auditoría de tu organización te permite, como propietario de la organización, revisar las acciones que llevan a cabo los miembros de la organización dentro del mes actual y los últimos seis meses. Para más información, vea "Revisión del registro de auditoría de la organización".
También puedes revisar y configurar los niveles de permiso de las integraciones instaladas en tu organización. Para más información, vea "Revisión de las integraciones instaladas de la organización".
4. Enabling and enforcing SAML single sign-on for your organization
If you manage your applications and the identities of your organization members with an identity provider (IdP), you can configure SAML single-sign-on (SSO) to control and secure access to organization resources like repositories, issues and pull requests. When members of your organization access organization resources that use SAML SSO, GitHub will redirect them to your IdP to authenticate. For more information, see "About identity and access management with SAML single sign-on."
Organization owners can choose to disable, enable but not enforce, or enable and enforce SAML SSO. For more information, see "Enabling and testing SAML single sign-on for your organization" and "Enforcing SAML single sign-on for your organization."
5. Managing team synchronization for your organization
Organization owners can enable team synchronization between your identity provider (IdP) and GitHub to allow organization owners and team maintainers to connect teams in your organization with IdP groups. For more information, see "Managing team synchronization for your organization."
Managing security for an enterprise with managed users
With Enterprise Managed Users, access and identity is managed centrally through your identity provider. Two-factor authentication and other login requirements should be enabled and enforced on your IdP.
1. Enabling and SAML single sign-on and provisioning in your enterprise with managed users
In an enterprise with managed users, all members are provisioned and managed by your identity provider. You must enable SAML SSO and SCIM provisioning before you can start using your enterprise. For more information on configuring SAML SSO and provisioning for an enterprise with managed users, see "Configuring SAML single sign-on for Enterprise Managed Users."
2. Managing teams in your enterprise with managed users with your identity provider
You can connect teams in your organizations to security groups in your identity provider, managing membership of your teams and access to repositories through your IdP. For more information, see "Managing team memberships with identity provider groups."
3. Managing allowed IP addresses for organizations in your enterprise with managed users
You can configure an allow list for specific IP addresses to restrict access to assets owned by organizations in your enterprise with managed users. For more information, see "Enforcing policies for security settings in your enterprise."
4. Enforcing policies for Advanced Security features in your enterprise with managed users
If you have a GitHub Advanced Security license for your enterprise account, you can enforce policies to manage GitHub Advanced Security features for organizations owned by an enterprise account. For more information, see "Enforcing policies for code security and analysis for your enterprise."
Managing security for an enterprise account without managed user accounts
To manage security for your enterprise, you can require two-factor authentication, manage allowed IP addresses, enable SAML single sign-on and team synchronization at an enterprise level, and sign up for and enforce GitHub Advanced Security features.
1. Requiring two-factor authentication and managing allowed IP addresses for organizations in your enterprise account
Enterprise owners can require that organization members, billing managers, and outside collaborators in all organizations owned by an enterprise account use two-factor authentication to secure their personal accounts. Before doing so, we recommend notifying all who have access to organizations in your enterprise. You can also configure an allow list for specific IP addresses to restrict access to assets owned by organizations in your enterprise account.
For more information on enforcing two-factor authentication and allowed IP address lists, see "Enforcing policies for security settings in your enterprise."
2. Enabling and enforcing SAML single sign-on for organizations in your enterprise account
You can centrally manage access to your enterprise's resources, organization membership and team membership using your IdP and SAM single sign-on (SSO). Enterprise owners can enable SAML SSO across all organizations owned by an enterprise account. For more information, see "About identity and access management for your enterprise."
3. Managing team synchronization
You can enable and manage team synchronization between an identity provider (IdP) and GitHub to allow organizations owned by your enterprise account to manage team membership with IdP groups. For more information, see "Managing team synchronization for organizations in your enterprise account."
4. Enforcing policies for Advanced Security features in your enterprise account
If you have a GitHub Advanced Security license for your enterprise account, you can enforce policies to manage GitHub Advanced Security features for organizations owned by an enterprise account. For more information, see "Enforcing policies for code security and analysis for your enterprise."
Part 5: Managing organization and enterprise level policies and settings
Managing settings for a single organization
To manage and moderate your organization, you can set organization policies, manage permissions for repository changes, and use organization-level community health files.
1. Managing organization policies
Puedes administrar permisos y políticas para varias acciones y características diferentes de tu organización.
Por ejemplo, para proteger los datos de tu organización, puedes restringir la creación de repositorios en la misma. También puedes elegir permitir o prevenir la bifurcación de los repositorios privados que pertenecen a tu organización. Para más información, vea "Restricción de la creación de repositorios en la organización" y "Administración de la directiva de bifurcación para la organización".
Para obtener la lista completa de opciones que puede configurar para la organización, vea "Administración de la configuración de la organización".
2. Managing repository changes
Puedes configurar los permisos para crear, transferir y borrar los repositorios de tu organización, incluyendo qué tipos pueden crear los miembros. Para más información, vea "Restricción de la creación de repositorios en la organización" y "Establecimiento de permisos para eliminar o transferir repositorios".
También puedes restringir u otorgar la capacidad de cambiar la visibilidad de los repositorios. Para más información, vea "Restricción de los cambios de visibilidad del repositorio en la organización".
3. Using organization-level community health files and moderation tools
Puedes crear archivos de salud comunitaria, tales como el archivo CONTRIBUTING.md, un archivo CODE_OF_CONDUCT.md o incluso plantillas de propuestas y de solicitudes de cambios para tu organziación. Estos archivos predeterminados pueden utilizarse para cualquier repositorio que le pertenezca a tu organización y no contenga su propio archivo de este tipo. Para más información, vea "Creación de un archivo de estado de la comunidad predeterminado".
GitHub ofrece varias herramientas para moderar y mantener tu comunidad. Para más información, ea "Herramientas de moderación para la comunidad".
Managing settings for an enterprise account
To manage and moderate your enterprise, you can set policies for organizations within the enterprise, view audit logs, configure webhooks, and restrict email notifications.
1. Managing policies for organizations in your enterprise account
You can choose to enforce a number of policies for all organizations owned by your enterprise, or choose to allow these policies to be set in each organization. Types of policies you can enforce include repository management, project board, and team policies. For more information, see "Setting policies for your enterprise."
2. Viewing audit logs, configuring webhooks, and restricting email notifications for your enterprise
You can view actions from all of the organizations owned by your enterprise account in the enterprise audit log. You can also configure webhooks to receive events from organizations owned by your enterprise account. For more information, see "Reviewing audit logs for your enterprise" and "Monitoring your enterprise."
You can also restrict email notifications for your enterprise account so that enterprise members can only use an email address in a verified or approved domain to receive notifications. For more information, see "Restricting email notifications for your enterprise."
Part 6: Customizing and automating your organization or enterprise's work on GitHub
Members of your organization or enterprise can use tools from the GitHub Marketplace, the GitHub API, and existing GitHub features to customize and automate your work.
1. Using GitHub Marketplace
GitHub Marketplace contiene integraciones que agregan funcionalidad y mejoran tu flujo de trabajo. En GitHub Marketplace, puede descubrir, buscar e instalar herramientas gratuitas y de pago, incluidas GitHub App, OAuth App y GitHub Actions. Para más información, vea "Acerca de GitHub Marketplace".
2. Using the GitHub API
Hay dos versiones de la API de GitHub: la API de REST y la API de GraphQL. Puede usar las API de GitHub para automatizar tareas comunes, realizar copias de seguridad de los datos o crear integraciones que amplíen GitHub. Para más información, vea "Acerca de las API de GitHub".
3. Building GitHub Actions
With GitHub Actions, you can automate and customize GitHub.com's development workflow on GitHub. You can create your own actions, and use and customize actions shared by the GitHub community. For more information, see "Learn GitHub Actions."
4. Publishing and managing GitHub Packages
GitHub Packages es un servicio de alojamiento de paquete de software que te permite alojar tus paquetes de software de forma privada o pública y usar paquetes como dependencias en tus proyectos. Para más información, vea "Introducción a GitHub Packages".
5. Using GitHub Pages
GitHub Pages is a static site hosting service that takes HTML, CSS, and JavaScript files straight from a repository and publishes a website. You can manage the publication of GitHub Pages sites at the organization level. For more information, see "Managing the publication of GitHub Pages sites for your organization" and "About GitHub Pages."
Part 7: Participating in GitHub's community
Members of your organization or enterprise can use GitHub's learning and support resources to get the help they need. You can also support the open source community.
1. Reading about GitHub Enterprise Cloud on GitHub Docs
You can read documentation that reflects the features available with GitHub Enterprise Cloud. For more information, see "About versions of GitHub Docs."
Para obtener información sobre cómo la empresa puede usar GitHub de forma más eficaz, consulta "Procedimientos recomendados para empresas".
2. Learning with GitHub Skills
Members of your organization or enterprise can learn new skills by completing fun, realistic projects in your very own GitHub repository with GitHub Skills. Each course is a hands-on lesson created by the GitHub community and taught by a friendly bot.
For more information, see "Git and GitHub learning resources."
3. Supporting the open source community
GitHub Sponsors te permite hacer un pago mensual recurrente a un desarrollador u organización que diseñe, cree o mantenga proyectos de código abierto de los cuales dependas. Para más información, vea "Acerca de GitHub Sponsors".
4. Contacting Soporte de GitHub
Soporte de GitHub puede ayudarte a solucionar los problemas con los que te encuentres cuando utilices GitHub. Para más información, vea "Acerca de Soporte de GitHub".
GitHub Enterprise Cloud allows you to submit priority support requests with a target eight-hour response time. For more information, see "GitHub Enterprise Cloud support."