From d07da2d77b15f9de459478c4f8c145f25a5c6886 Mon Sep 17 00:00:00 2001
From: Jared Atkinson <jatkinson@specterops.io>
Date: Fri, 4 Sep 2026 10:32:17 -0700
Subject: [PATCH] BED-9658: add enterprise owners Tier Zero rule

---
 .../privilege_zone_rules/t0-enterprise-owners-role.json   | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 extension/privilege_zone_rules/t0-enterprise-owners-role.json

diff --git a/extension/privilege_zone_rules/t0-enterprise-owners-role.json b/extension/privilege_zone_rules/t0-enterprise-owners-role.json
new file mode 100644
index 0000000..51811c2
--- /dev/null
+++ b/extension/privilege_zone_rules/t0-enterprise-owners-role.json
@@ -0,0 +1,8 @@
+{
+  "name": "GitHub: Tier Zero Enterprise Owners Role",
+  "description": "The enterprise owners role grants administrative control over the GitHub Enterprise account, including enterprise organizations, members, identity provider configuration, and enterprise-wide security settings.",
+  "cypher": "MATCH (n:GH_EnterpriseRole {short_name:'owners'})\nRETURN n",
+  "enabled": true,
+  "zone": "Tier Zero",
+  "allow_disable": true
+}