Define how to control access to actions within the enterprise

​

1. Enterprise-Level Policies

1. Navigate to Policies → Actions in your enterprise account.
2. Review the available settings for enabling or disabling GitHub Actions.
3. Optionally allow organizations to manage self-hosted runners at the repository level.

• Enable or disable Actions for every organization.
• Grant or revoke permission to self-manage self-hosted runners.

​

1.1 Allowing a Specific Action Across Your Enterprise

1. Under Policies → Actions, choose Allow specific actions.
2. Enter the action reference, for example:

rtcamp/action-slack-notify@v2

3. Click Save to enforce this setting for all organizations.

1. Go to any organization in your enterprise.
2. Select Settings → Actions → General.
3. Observe that organization-level controls are disabled and display your enterprise policy.

​

2. Repository-Level Policies

​

2.1 Viewing and Selecting Repositories

​

2.2 Configuring Actions Permissions

• Disable Actions
• Allow all Actions
• Allow local Actions only
• Allow specific Actions and reusable workflows

​

Personal Repository Example

1. Navigate to the repository.
2. Click Settings → Actions → General.
3. Set your desired permission level.

​

3. Summary of Policy Levels

​

Links and References

• GitHub Actions Documentation
• Managing GitHub Enterprise policies
• Self-hosted runners guide