Skip to content

Commit 1f2e5b1

Browse files
bss-mcjusuchin85
andauthored
Add limitation on assigning maintainer role in GitHub team linked to an IdP group (#62624)
Co-authored-by: Justin Alex <1155821+jusuchin85@users.noreply.github.com>
1 parent 2c5a8c3 commit 1f2e5b1

3 files changed

Lines changed: 7 additions & 3 deletions

File tree

content/admin/managing-iam/provisioning-user-accounts-with-scim/managing-team-memberships-with-identity-provider-groups.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,8 @@ When a change to an IdP group or a new team connection results in a user joining
3333

3434
Teams connected to IdP groups cannot be parents of other teams nor a child of another team. If the team you want to connect to an IdP group is a parent or child team, we recommend creating a new team or removing the nested relationships that make your team a parent team.
3535

36+
If you are managing a team's membership with an IdP group, you cannot assign the team maintainer role to a member of that team. For more information, see [AUTOTITLE](/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member).
37+
3638
To manage repository access for any team in your enterprise, including teams connected to an IdP group, you must make changes on {% data variables.product.prodname_dotcom %}. For more information, see [AUTOTITLE](/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-team-access-to-an-organization-repository).
3739

3840
## Requirements for connecting IdP groups with teams
@@ -70,7 +72,7 @@ Any member of an organization can create a new team and connect the team to an I
7072

7173
## Managing the connection between an existing organization team and an IdP group
7274

73-
Organization owners {% ifversion ghes %}and team maintainers {% endif %}can manage the existing connection between an IdP group and a team.{% ifversion ghec %} If your enterprise does not use {% data variables.enterprise.prodname_managed_users %}, team maintainers can also manage the connection.{% endif %}
75+
Organization owners can manage the existing connection between an IdP group and a team.
7476

7577
> [!NOTE]
7678
> Before you connect an existing team on {% data variables.product.prodname_dotcom %} to an IdP group for the first time, all members of the team on {% data variables.product.prodname_dotcom %} must first be removed. For more information, see [AUTOTITLE](/organizations/organizing-members-into-teams/removing-organization-members-from-a-team).

content/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,10 +33,10 @@ People with the team maintainer role can manage team membership and settings.
3333
* [Manage code review assignment for the team](/organizations/organizing-members-into-teams/managing-code-review-settings-for-your-team){% ifversion fpt or ghec %}
3434
* [Manage scheduled reminders for pull requests](/organizations/organizing-members-into-teams/managing-scheduled-reminders-for-your-team){% endif %}
3535

36-
{% ifversion ghec %}
36+
{% ifversion ghec or ghes %}
3737

3838
> [!NOTE]
39-
> If your enterprise uses {% data variables.enterprise.prodname_managed_users %} and manages a team's membership with an identity provider (IdP) group, you cannot assign the team maintainer role manually for that team. For more information, see [AUTOTITLE](/admin/managing-iam/provisioning-user-accounts-with-scim/managing-team-memberships-with-identity-provider-groups).
39+
> If you are managing a team's membership with an identity provider (IdP) group, you cannot assign the team maintainer role to a member of that team.
4040
4141
{% endif %}
4242

content/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,8 @@ To manage repository access for any {% data variables.product.github %} team, in
4141

4242
{% ifversion ghec %}You can also manage team synchronization with the API. For more information, see [AUTOTITLE](/rest/teams/team-sync).{% endif %}
4343

44+
If you are managing a team's membership with an IdP group, you cannot assign the team maintainer role to a member of that team. For more information, see [AUTOTITLE](/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member).
45+
4446
{% ifversion ghec %}
4547

4648
## Requirements for members of synchronized teams

0 commit comments

Comments
 (0)