Enterprise owners can now install public GitHub Apps created outside their enterprise on their enterprise account. This allows third-party integrators to build apps for enterprise management scenarios. Enterprise installations grant access to the enterprise account itself; they do not grant access to organizations or repositories in the enterprise.

To support this integrator scenario, all users and organizations can now create GitHub Apps with enterprise permissions.

For security, apps with the Enterprise organization installations and Enterprise organization installation repositories permissions cannot be installed across enterprise boundaries. This API set is extremely powerful because it can manage all app installations across organizations in an enterprise. Additional safeguards and controls are required before it can be released for cross-enterprise use. If your app uses this permission, it cannot be installed across enterprises. If your app is installed across multiple enterprises then it cannot add this permission.

Screenshot showing the permission-based restriction, allowing only one enterprise for the app

To get started, see Installing a GitHub App on your enterprise. Share feedback in the GitHub Community discussion about enterprise installations.