Advanced Workshop | Expert-level training for GitHub Enterprise Cloud administration, governance, and best practices. This workshop covers enterprise hierarchy, organization strategies, identity management (including Enterprise Managed Users), policy enforcement, security compliance, and the GitHub Well-Architected Framework.
Comprehensive L400-level technical documentation for GitHub Enterprise Cloud administration and governance.
- π Mastering GitHub Administration on EMU β 3-Hour Workshop - Instructor-led workshop for Enterprise Managed Users enterprises, anchored to the Enterprise Adoption Plan; clear learning objectives, decision moments, EMU-specific limits and pitfalls, and embedded reference tables so participants don't need to flip away from the deck
- π Enterprise Hierarchy - GHEC structure, roles, and multi-org management
- π’ Organization Strategies - Single/multi-org patterns, red-green-sandbox-archive
- π Identity & Access Management - SAML SSO, SCIM, enterprise type selection
- β Enterprise Managed Users (EMU) - EMU deep dive, advantages, best practices
- π₯ Teams and Permissions - Team structures, nested teams, permission models
- π Policy Inheritance - Enterprise β Org β Repo policy enforcement
- π¦ Repository Governance - Rulesets, branch protection, templates
- π Security & Compliance - GHAS split SKUs (Secret Protection + Code Security), code scanning, secret scanning, dependency review, audit logs
- β Best Practices & WAF - Azure WAF pillars applied to GitHub Enterprise Cloud (Reliability, Security, Operational Excellence, Performance Efficiency, Cost Optimization); see also wellarchitected.github.com for GitHub's native WAF
- ποΈ Reference Architecture - Architecture diagrams and patterns
- π‘οΈ Security-by-Default Policies - Comprehensive security settings and policy recommendations for Enterprise, Organization, and Repository levels
β οΈ GitHub Actions Security: Echo Command Injection - Echo command injection vulnerability (HackerBot Claw attack) prevention in GitHub Actions workflows
- π€ GitHub Copilot Governance - Enterprise Copilot policies, settings, content exclusions, license management, and best practices, including Copilot cloud agent governance and Copilot Spaces (formerly Knowledge Bases)
- π³ GitHub Copilot Usage-Based Billing Research - Premium requests, AI credits, cost-center allocation, and budget controls for Copilot consumption
- π GitHub Chargeback System Design - Internal cost allocation framework for GitHub Enterprise spend (seats, Actions minutes, Copilot premium requests, GHAS committers)
- π GitHub Organization Rename Impact - Impact analysis of renaming a GitHub organization on Copilot, EMU authentication, and post-rename actions
- π GitHub Onboarding Implementation Plan - Comprehensive priority task list for GitHub Enterprise onboarding including governance, compliance, security-by-default configuration, repository rulesets, migration readiness, and Copilot governance
- βοΈ GitHub Enterprise Cloud Adoption Plan - Phased adoption plan for Azure DevOps to GitHub Enterprise Cloud migration covering repos migration, Azure Pipelines to GitHub Actions, and DevSecOps enablement
- π€ Governed AI SDLC - Enterprise Adoption Plan - Enterprise adoption plan for a governed AI SDLC practice powered by an internal fleet of AI agents, covering golden paths, policy gating, observability, and DORA/SPACE + AI-specific KPIs
- π Governed AI SDLC - Executive Summary - Two-page executive summary of the Governed AI SDLC plan for leadership stakeholders
- π ADO to GitHub Migration Assessment - Comprehensive mapping of ADO DevSecOps recommendations to GitHub equivalents
- π ADO to GitHub Migration Business Case (Markdown) - Strategic business case for migrating from Azure DevOps to GitHub
- π ADO to GitHub Migration Business Case (HTML) - Formatted business case document
- π GitHub Enterprise Importer ADO Guide - Step-by-step guide for using GitHub Enterprise Importer with Azure DevOps
- οΏ½ Azure Pipelines with GitHub Repos Integration - Impact analysis of using Azure Pipelines with GitHub repositories after migration
- π Azure DevOps to GitHub Migration Analysis - Detailed technical analysis of the migration process
- π ADO REST API Authentication Without PATs - Alternatives to Personal Access Tokens for Azure DevOps REST API authentication in CI/CD pipelines
- π§Ή ADO Tenant & Org Cleanup - Post-migration cleanup of Azure DevOps tenant connections, PAT policies, orphaned orgs
- β ADO to GitHub Migration Q&A Guide - Detailed questions and answers about migrating from Azure DevOps to GitHub using GEI
- π¬ Workshop FAQ - Frequently asked questions from GitHub Enterprise Admin workshops, including migration-related topics
Short guided exercises covering foundational GitHub mechanics (webhooks, Actions settings, branch protection, repository templates, REST and GraphQL APIs). These predate the EMU workshop refocus and are useful as standalone skill-builders rather than direct reinforcement of the EMU governance modules β see the workshop's Β§9 lab map for closest touchpoints and an EMU caveat on setup.md.
- Hands-on Lab: > Activity 1
- Hands-on Lab: > Activity 2
- Hands-on Lab: > Activity 3
- Hands-on Lab: > Activity 4
- Hands-on Lab: > Activity 5
Additional resources to continue your GitHub Admin learning journey.
- Microsoft Learn - GitHub Administration Collection
- GitHub Enterprise Onboarding Guide (Enterprise Cloud)
- The Book on GitHub Enterprise Cloud Adoption
- GitHub Skills
- Enterprise administrators
- Organizations
- Repositories
- Roles in an organization
- Configuring SCIM provisioning for Enterprise Managed Users
- About Enterprise Managed Users
- Managing a branch protection rule
- GitHub Blog Enterprise
- GitHub Actions - Security guides
Note: The videos below are from GitHub Universe 2021 and may show superseded UI. For current sessions see https://www.youtube.com/githubtraining .
- What's new for GitHub Enterprise - GitHub Universe 2021 - YouTube
- GitHub in the Enterprise - GitHub Universe 2021 - YouTube
- Enforcing information security policy through GitHub Enterprise - GitHub Universe 2021 - YouTube
- GitHub Universe
- Best practices for organizations and teams using GitHub Enterprise Cloud
- Everything new from GitHub Universe 2022 (2022 β refer to GitHub's blog for more recent announcements)
- Improved management for GitHub Enterprise owners | The GitHub Blog
- How to secure your GitHub organization and enterprise account | The GitHub Blog
- Connect GitHub Enterprise Cloud to Defender for Cloud Apps | Microsoft Docs
- How Defender for Cloud Apps helps protect your GitHub Enterprise environment | Microsoft Docs
- GitHub Workflow Guide
- Removing sensitive data from a repository - GitHub Docs