1.4 KiB
To control access to runners at the organization{% ifversion ghec or ghes or ghae %} and/or enterprise levels, enterprise administrators can use runner groups.{% else %} level, organizations using the {% data variables.product.prodname_team %} plan can use runner groups. {% endif %}
{%- ifversion ghec or ghes or ghae %}Enterprise administrators can configure access policies that control which organizations {% ifversion restrict-groups-to-workflows %}and workflows {% endif %}in an enterprise have access to the runner group.{% else %}Organization administrators can configure access policies that control which repositories in an organization have access to the runner group.{% endif %}
When you grant access access to a runner group, you can see the runner group listed in the organization's runner settings. Optionally, you can assign additional granular repository{% ifversion restrict-groups-to-workflows %} and workflow{% endif %} access policies to the runner group.
When new runners are created, they are automatically assigned to the default group. Runners can only be in one group at a time. You can move runners from the default group to another group. For more information, see "Moving a runner to a group."
{% ifversion target-runner-groups %} For information on how to route jobs to runners in a specific group, see "AUTOTITLE." {% endif %}