1
0
mirror of synced 2025-12-19 18:10:59 -05:00
Files
docs/content/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups.md
2025-04-30 18:03:11 +00:00

5.9 KiB

title, shortTitle, intro, permissions, redirect_from, versions, type
title shortTitle intro permissions redirect_from versions type
Managing access to self-hosted runners using groups Manage access with runner groups You can use policies to limit access to self-hosted runners that have been added to an organization{% ifversion ghec or ghes %} or enterprise{% endif %}. Enterprise accounts, organizations owned by enterprise accounts, and organizations using {% data variables.product.prodname_team %} or {% data variables.product.prodname_free_user %} plans can create and manage additional runner groups using self-hosted runners.<br><br>{% ifversion custom-org-roles %}Users with the "Manage organization runners and runner groups" permission can manage runner groups at the organization level.{% endif %}
/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners
/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners
/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners-using-groups
fpt ghes ghec
* * *
tutorial

{% data reusables.actions.enterprise-github-hosted-runners %}

About runner groups

{% data reusables.actions.about-runner-groups %}

Creating a self-hosted runner group for an organization

{% data reusables.actions.self-hosted-runner-security-admonition %}

{% data reusables.actions.creating-a-runner-group-for-an-organization %}

{% ifversion ghec or ghes %}

Creating a self-hosted runner group for an enterprise

{% data reusables.actions.self-hosted-runner-security-admonition %}

{% data reusables.actions.creating-a-runner-group-for-an-enterprise %}

{% endif %}

{% ifversion ghec or ghes %}

Changing which organizations can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

For runner groups in an enterprise, you can change what organizations in the enterprise can access a runner group.

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-organization-access-for-a-runner-group %}

{% endif %}

Changing which repositories can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

For runner groups in an organization, you can change what repositories in the organization can access a runner group.

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-repository-access-for-a-runner-group %}

{% ifversion ghec or ghes %}

Changing which workflows can access a runner group

{% data reusables.actions.self-hosted-runner-security-admonition %}

{% data reusables.actions.about-restricting-workflow-access-with-runner-groups %}

Changing which workflows can access an organization runner group

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-workflow-access-for-a-runner-group %}

Changing which workflows can access an enterprise runner group

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-workflow-access-for-a-runner-group %}

{% endif %}

Changing the name of a runner group

{% ifversion ghes or ghec %} You can edit the name of your runner groups at the enterprise and organization levels.

Changing the name of an organization runner group

{% endif %}

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.changing-the-name-of-a-runner-group %}

{% ifversion ghes or ghec %}

Changing the name of an enterprise runner group

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.changing-the-name-of-a-runner-group %} {% endif %}

Automatically adding a self-hosted runner to a group

{% data reusables.actions.automatically-adding-a-runner-to-a-group %}

Moving a self-hosted runner to a group

{% data reusables.actions.about-moving-a-runner-to-a-group %} {% ifversion ghes or ghec %}

Moving an organization runner to a group

{% endif %}

{% data reusables.organizations.navigate-to-org %} {% data reusables.organizations.org_settings %} {% data reusables.organizations.settings-sidebar-actions-runners %} {% data reusables.actions.moving-a-runner-to-a-group %}

{% ifversion ghes or ghec %}

Moving an enterprise runner to a group

{% data reusables.enterprise-accounts.access-enterprise %} {% data reusables.enterprise-accounts.policies-tab %} {% data reusables.enterprise-accounts.actions-tab %} {% data reusables.enterprise-accounts.actions-runners-tab %} {% data reusables.actions.moving-a-runner-to-a-group %} {% endif %}

Removing a self-hosted runner group

{% data reusables.actions.about-removing-a-runner-group %} {% ifversion ghes or ghec %}

Removing a runner group from an organization

{% endif %}

{% data reusables.actions.runner-groups-org-navigation %} {% data reusables.actions.removing-a-runner-group %}

{% ifversion ghes or ghec %}

Removing a runner group from an enterprise

{% data reusables.actions.runner-groups-enterprise-navigation %} {% data reusables.actions.removing-a-runner-group %} {% endif %}

{% data reusables.actions.section-using-unique-names-for-runner-groups %}