Skip to content

Latest commit

 

History

History
168 lines (104 loc) · 5.93 KB

managing-access-to-self-hosted-runners-using-groups.md

File metadata and controls

168 lines (104 loc) · 5.93 KB
Raw
title shortTitle intro permissions redirect_from versions type
Managing access to self-hosted runners using groups
Manage access with runner groups
You can use policies to limit access to self-hosted runners that have been added to an organization{% ifversion ghec or ghes %} or enterprise{% endif %}.
Enterprise accounts, organizations owned by enterprise accounts, and organizations using {% data variables.product.prodname_team %} can create and manage additional runner groups.<br><br>{% ifversion custom-org-roles %}Users with the "Manage organization runners and runner groups" permission can manage runner groups at the organization level.{% endif %}
/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners
/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners
/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners-using-groups
fpt ghes ghec
*
*
*
tutorial

{% data reusables.actions.enterprise-github-hosted-runners %}

About runner groups

{% data reusables.actions.about-runner-groups %}

Creating a self-hosted runner group for an organization

{% data reusables.actions.self-hosted-runner-security-admonition %}

{% data reusables.actions.creating-a-runner-group-for-an-organization %}

{% ifversion ghec or ghes %}

Creating a self-hosted runner group for an enterprise

{%- ifversion ghec or ghes %}

{% data reusables.actions.self-hosted-runner-security-admonition %}

{%- endif %}

{% data reusables.actions.creating-a-runner-group-for-an-enterprise %}

{% endif %}

{% ifversion ghec or ghes %}

Changing which organizations can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

For runner groups in an enterprise, you can change what organizations in the enterprise can access a runner group.

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-organization-access-for-a-runner-group %}

{% endif %}

Changing which repositories can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

For runner groups in an organization, you can change what repositories in the organization can access a runner group.

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-repository-access-for-a-runner-group %}

{% ifversion restrict-groups-to-workflows %}

Changing which workflows can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

{% data reusables.actions.about-restricting-workflow-access-with-runner-groups %}

Changing which workflows can access an organization runner group

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-workflow-access-for-a-runner-group %}

Changing which workflows can access an enterprise runner group

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-workflow-access-for-a-runner-group %}

{% endif %}

Changing the name of a runner group

{% ifversion ghes or ghec %} You can edit the name of your runner groups at the enterprise and organization levels.

Changing the name of an organization runner group

{% endif %}

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-the-name-of-a-runner-group %}

{% ifversion ghes or ghec %}

Changing the name of an enterprise runner group

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-the-name-of-a-runner-group %} {% endif %}

Automatically adding a self-hosted runner to a group

{% data reusables.actions.automatically-adding-a-runner-to-a-group %}

Moving a self-hosted runner to a group

{% data reusables.actions.about-moving-a-runner-to-a-group %} {% ifversion ghes or ghec %}

Moving an organization runner to a group

{% endif %}

{% data reusables.organizations.navigate-to-org %} {% data reusables.organizations.org_settings %} {% data reusables.organizations.settings-sidebar-actions-runners %} {% data reusables.actions.moving-a-runner-to-a-group %}

{% ifversion ghes or ghec %}

Moving an enterprise runner to a group

{% data reusables.enterprise-accounts.access-enterprise %} {% data reusables.enterprise-accounts.policies-tab %} {% data reusables.enterprise-accounts.actions-tab %} {% data reusables.enterprise-accounts.actions-runners-tab %} {% data reusables.actions.moving-a-runner-to-a-group %} {% endif %}

Removing a self-hosted runner group

{% data reusables.actions.about-removing-a-runner-group %} {% ifversion ghes or ghec %}

Removing a runner group from an organization

{% endif %}

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.removing-a-runner-group %}

{% ifversion ghes or ghec %}

Removing a runner group from an enterprise

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.removing-a-runner-group %} {% endif %}

{% data reusables.actions.section-using-unique-names-for-runner-groups %}