TMA-GITHUB-1.3.3
Ensure minimum number of administrators are set for the organization
Description
Ensure the organization has a minimum number of administrators. Organization administrators have the highest level of permissions, including the ability to add/remove collaborators, create or delete repositories, change branch protection policy, and convert to a publicly-accessible ... Reported as a manual review item: no reliable read-only gh api check exists for this control.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify the minimum number of administrators in your organization by performing the following: 1. In the top right corner of GitHub, click your profile photo, then click Your profile. 2. On the left side of your profile page, under "Organizations", click the icon for your organization. 3. Under your organization name, click People. 4. In the Role drop-down, choose Owners. 5. If there are minimum number of members in the list, you are compliant.
How it is fixed
Fix method: Guidance or infrastructure patch
Set the minimum number of administrators in your organization by performing the following: 1. In the top right corner of GitHub, click your profile photo, then click Your profile. 2. On the left side of your profile page, under "Organizations", click the icon for your organization. 3. Under your organization name, click People. 4. In the Role drop-down, choose Owners. 5. Select the person or people you'd like to remove from owner role. 6. Above the list of members, use the drop-down menu and click Change role. 7. Select Member, then click Change role.
Properties
- Operating systems
- Any
- Tags
- githubsource-code
- Reference
- CIS GitHub Benchmark v1.2.0 - 1.3.3 Ensure minimum number of administrators are set for the organization