Skip to main content
Manage Entire access grants and organization membership.
Grants are managed at three levels: membership in an organization, access to a project, and access to a repository. A grantee is addressed as a provider-qualified handle, such as github:alice, or as an account ULID. Orgs, projects, and repositories are addressed by name or ULID. Every subcommand accepts --json to print raw JSON instead of a table. Under grant repo, every subcommand also accepts --project PROJECT (the owning project by name or ULID). This flag is required whenever REPO is a name.
Access to a GitHub mirror follows GitHub collaborator permissions and syncs hourly, rather than being managed with entire grant. See Mirror Access and Permissions.

grant org

Manage organization membership.

entire grant org add

Add a member to an org.

entire grant org list

List org members.

entire grant org remove

Remove a member from an org.

grant project

Manage project access.

entire grant project add

Grant a user access to a project.

entire grant project list

List project members.

entire grant project remove

Revoke a grantee’s access to a project.

grant repo

Manage repository access.

entire grant repo add

Grant a user access to a repository.

entire grant repo list

List repository grants.

entire grant repo remove

Revoke a grantee’s access to a repository.

Continue With

repo visibility

Make a repository readable by all authenticated Entire users.

Mirror Access and Permissions

Understand GitHub-synced access for mirrors.