Skip to content

Commit 89088d4

Browse files
isaacmbrownlecoursenerikaxu
authored
Add a conceptual article on teams in an enterprise (#57711)
Co-authored-by: Laura Coursen <[email protected]> Co-authored-by: erikaxu <[email protected]>
1 parent f629ab2 commit 89088d4

File tree

4 files changed

+64
-3
lines changed

4 files changed

+64
-3
lines changed

content/admin/managing-iam/provisioning-user-accounts-with-scim/managing-team-memberships-with-identity-provider-groups.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ If you use Microsoft Entra ID (previously known as Azure AD) as your IdP, you ca
5757

5858
Enterprise owners can create teams at the enterprise level. {% data reusables.copilot.direct-assignment-rollout %}
5959

60-
For instructions on creating an enterprise team and syncing it with an IdP group, see [AUTOTITLE](/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/create-enterprise-teams).
60+
Most of the instructions in this article apply to organization-level teams. For instructions on creating an enterprise team and syncing it with an IdP group, see [AUTOTITLE](/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/create-enterprise-teams).
6161

6262
{% endif %}
6363

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
---
2+
title: About teams in an enterprise
3+
intro: 'Learn how teams simplify administration of user access, licensing, and communication.'
4+
versions:
5+
ghec: '*'
6+
shortTitle: About teams
7+
type: overview
8+
topics:
9+
- Enterprise
10+
- Fundamentals
11+
---
12+
13+
## What are teams?
14+
15+
Teams are **groups of users** in an enterprise or organization. By creating teams, you can manage users at scale and simplify access, licensing, and communication. For example, you could create an auditor team for users who need access to audit logs, or a {% data variables.product.prodname_copilot_short %} team for users who receive {% data variables.product.prodname_copilot_short %} licenses.
16+
17+
Administrators can create teams in an enterprise account or in organizations within an enterprise.
18+
19+
* **Enterprise teams** are managed by enterprise owners and can include users from across the enterprise and its organizations. Currently, enterprise teams are used to manage {% data variables.product.prodname_copilot %} licenses for directly assigned users. {% data variables.product.company_short %} plans to expand the capabilities in the near future to include organization and role assignment.
20+
* **Organization teams** are managed by organization administrators and can only include members of a single organization. Organization administrators can grant teams access to organization repositories, and organization members can mention teams in issues and discussions or add them as reviewers on pull requests.
21+
22+
## Can I manage teams from an identity provider?
23+
24+
If you have integrated {% data variables.product.github %} with an identity provider (IdP), you can link teams on {% data variables.product.github %} with groups in your IdP. When membership of the IdP group changes, the change is reflected in the {% data variables.product.github %} team, allowing you to centralize access management.
25+
26+
The capabilities of this feature depend on whether you use {% data variables.product.prodname_emus %} or personal accounts.
27+
28+
### {% data variables.product.prodname_emus %}
29+
30+
You can make changes to IdP groups to manage repository access, add or remove users from organizations, or grant or remove {% data variables.product.prodname_copilot %} licenses. For example, if a new user is added to an IdP group that is linked to a team with access to an organization, the user receives access to that organization. For more information, see [AUTOTITLE](/admin/managing-iam/provisioning-user-accounts-with-scim/managing-team-memberships-with-identity-provider-groups#about-team-management-with-enterprise-managed-users).
31+
32+
This feature is available with both enterprise and organization teams.
33+
34+
### Personal accounts
35+
36+
Team synchronization allows you to centrally manage any privileges linked to an organization team, such as repository access and CODEOWNER status. However, team sync cannot be used to add users to organizations where they don't already have access. For more information, see [AUTOTITLE](/admin/managing-iam/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise).
37+
38+
Team sync with personal accounts is only available with organization teams, and you must use Entra ID or Okta as an IdP.
39+
40+
## What kind of team should I use?
41+
42+
To simplify administration at scale, {% data variables.product.company_short %} recommends using enterprise teams wherever possible. However, you may need to create organization teams if the functionality you need is not covered by enterprise teams. {% data variables.product.company_short %} plans to address some of these limitations in the near future.
43+
44+
Unlike organization teams, enterprise teams currently do **not** support:
45+
46+
* Repository or organization access
47+
* `@-mentions` of the team name in organizations
48+
* Team sync if you use {% data variables.product.prodname_ghe_cloud %} with personal accounts
49+
* CODEOWNER status
50+
* Secret teams
51+
* Nested teams
52+
* Team maintainers
53+
54+
In addition, enterprise teams are currently limited to 50 teams for a single enterprise and 500 users to each team.
55+
56+
For more information about the capabilities of organization teams, see [AUTOTITLE](/organizations/organizing-members-into-teams/about-teams).

content/admin/overview/index.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ children:
1919
- /best-practices-for-enterprises
2020
- /establishing-a-governance-framework-for-your-enterprise
2121
- /accessing-compliance-reports-for-your-enterprise
22+
- /about-teams
2223
---
2324

2425
For more information, or to purchase {% data variables.product.prodname_enterprise %}, see [{% data variables.product.prodname_enterprise %}](https://github.com/enterprise).

content/organizations/organizing-members-into-teams/about-teams.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,13 @@ allowTitleToDifferFromFilename: true
1818

1919
You can use teams to manage access for people in an organization, and for sending notifications. Organization owners and team maintainers can give teams admin, read, or write access to organization repositories. Organization members can send a notification to an entire team by mentioning the team's name. Teams can only be made up of members of your organization, outside collaborators are unable to be on a team.
2020

21-
Organization owners and team maintainers can disable team notifications. For more information, see [AUTOTITLE](/organizations/organizing-members-into-teams/configuring-team-notifications).
21+
{% ifversion not ghes %}
2222

23-
Organization members can also send a notification to an entire team by requesting a review from that team. Organization members can request reviews from specific teams with read access to the repository where the pull request is opened. Teams can be designated as owners of certain types or areas of code in a CODEOWNERS file.
23+
>![TIP] If you use an enterprise account, you can also create teams at the enterprise level. For more information, see [AUTOTITLE](/enterprise-cloud@latest/admin/overview/about-teams).
24+
25+
{% endif %}
26+
27+
Organization members can send a notification to an entire team by requesting a review from that team. Organization members can request reviews from specific teams with read access to the repository where the pull request is opened. Teams can be designated as owners of certain types or areas of code in a CODEOWNERS file.
2428

2529
For more information, see:
2630
* [AUTOTITLE](/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-team-access-to-an-organization-repository)

0 commit comments

Comments
 (0)