{"id":306,"date":"2024-12-01T22:12:02","date_gmt":"2024-12-01T22:12:02","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/all-things-azure\/?p=306"},"modified":"2025-02-12T19:50:04","modified_gmt":"2025-02-12T19:50:04","slug":"how-to-subscribe-to-github-enterprise-with-advanced-security-and-copilot","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/all-things-azure\/how-to-subscribe-to-github-enterprise-with-advanced-security-and-copilot\/","title":{"rendered":"How to subscribe to GitHub Enterprise with Advanced Security and Copilot Business\/Enterprise: A Step-by-Step Guide"},"content":{"rendered":"<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-185\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2.png\" alt=\"Image HC0400 MS AzureDeveloperBlogSeries Banner 103124 DC V2 02 2\" width=\"1920\" height=\"792\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2.png 1920w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2-300x124.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2-1024x422.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2-768x317.png 768w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/10\/HC0400_MS_AzureDeveloperBlogSeries-Banner_103124_DC_V2-02-2-1536x634.png 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/a><\/p>\n<p>As GitHub announced <a href=\"https:\/\/github.blog\/changelog\/2024-08-01-introducing-metered-billing-for-github-enterprise-and-github-advanced-security\/\">metered billing,<\/a> anyone with an active Azure subscription can now self-provision a paid <a href=\"https:\/\/github.com\/enterprise\">GitHub Enterprise Cloud<\/a> account, with <a href=\"https:\/\/github.com\/enterprise\/advanced-security\">Advanced Security<\/a> and <a href=\"https:\/\/github.com\/features\/copilot\">GitHub Copilot Business\/Enterprise<\/a>. This post is a screenshot-based step-by-step guide on how you can do so.<\/p>\n<h2>Pre-requisites<\/h2>\n<p><div  class=\"d-flex justify-content-left\"><a class=\"cta_button_link btn-primary mb-24\" href=\"https:\/\/aka.ms\/freetrial\" target=\"_blank\">Try Azure<\/a><\/div><\/p>\n<p>Before we get started, ensure that you have the following:<\/p>\n<ul>\n<li>An active <a href=\"https:\/\/azure.microsoft.com\/\">Microsoft Azure Subscription<\/a>, which is used for billing<\/li>\n<li>An existing <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/identity-access\/microsoft-entra-id\">Microsoft Entra ID<\/a> tenant<\/li>\n<\/ul>\n<p>We will also need the users with the following roles:<\/p>\n<ul>\n<li>A user with <em>Owner<\/em> rights to the Azure subscription<\/li>\n<li>A user with <em>Cloud Application Administrator<\/em> or <em>Global Administrator<\/em> rights to the Entra ID tenant <em>that the Azure subscription is associated with<\/em><\/li>\n<li>A user with\u00a0<em>Cloud Application Administrator <\/em>or\u00a0<em>Global Administrator <\/em>rights to the Entra ID tenant <em>that the users (mostly developers) will authenticate with<\/em><\/li>\n<\/ul>\n<p><div class=\"alert alert-success\"><p class=\"alert-divider\"><i class=\"fabric-icon fabric-icon--Lightbulb\"><\/i><strong>About Your Entra ID Tenant<\/strong><\/p>While it is common to use the same Microsoft Entra ID tenant for both billing and identity configuration, it is not a requirement. Billing and IdP configurations are managed through separate Microsoft Entra ID <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/enterprise-apps\/application-properties\">Enterprise Applications<\/a>. <\/div><\/p>\n<h2>Step-by-Step Guide<\/h2>\n<h3>Step 1: Create a GitHub Enterprise Trial Account<\/h3>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial.png\"><img decoding=\"async\" class=\"alignnone wp-image-802 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial.png\" alt=\"Image ghec trial\" width=\"1239\" height=\"739\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial.png 1239w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial-300x179.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial-1024x611.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/12\/ghec-trial-768x458.png 768w\" sizes=\"(max-width: 1239px) 100vw, 1239px\" \/><\/a><\/p>\n<ol>\n<li>Go to <a href=\"https:\/\/github.com\/enterprise\">https:\/\/github.com\/enterprise<\/a> and click &#8220;Start a free trial&#8221; (Note: This link will require you to log in with your GitHub personal account first. If you\u2019re creating a GHEC EMU account, your personal account will not be needed later).<\/li>\n<li>Choose between\u00a0<em>\u201cEnterprise with personal accounts\u201d<\/em>\u00a0(also called Non-EMU) or\u00a0<em>\u201cEnterprise with managed users\u201d<\/em> (also called EMU). <em><em>(Tip: Most organizations with an existing identity provider like <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/admin\/managing-iam\/understanding-iam-for-enterprises\/about-enterprise-managed-users\">Microsoft Entra ID<\/a> will choose &#8220;Enterprise with managed users&#8221;. See <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/admin\/managing-iam\/understanding-iam-for-enterprises\/about-enterprise-managed-users\">here<\/a> to learn more.)<\/em><\/em><\/li>\n<li>Go through the trial creation process and fill in the required information. Some fields need to be globally unique (e.g., the screenshot shows that\u00a0<code class=\"language-plaintext highlighter-rouge\">raztype<\/code> is already taken).<\/li>\n<li>Click\u00a0<strong>Create your enterprise<\/strong>.<\/li>\n<li>Set the initial root admin password.<\/li>\n<\/ol>\n<h3>Step 2: Add an Azure Subscription<\/h3>\n<ol>\n<li>Go to\u00a0<code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/enterprises\/{enterprise-slug}<\/code>, where\u00a0<code class=\"language-plaintext highlighter-rouge\">{enterprise-slug}<\/code>\u00a0is the unique name you chose during the trial creation.<\/li>\n<li>On the left, go to\u00a0<strong>Billing &amp; Licensing \u2192 Payment information<\/strong><\/li>\n<li>Complete the\u00a0<em>Billing information<\/em>\u00a0and\u00a0<em>Shipping information<\/em>\u00a0forms.<\/li>\n<li>Under\u00a0<em>Payment method<\/em>, select\u00a0<strong>Azure subscription<\/strong>\u00a0and click the\u00a0<strong>Add Azure Subscription<\/strong> button.<a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation.png\"><img decoding=\"async\" class=\"alignnone wp-image-335 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation.png\" alt=\"Image 20241115 ghec paymentinformation\" width=\"1270\" height=\"1306\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation.png 1270w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation-292x300.png 292w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation-996x1024.png 996w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation-768x790.png 768w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation-24x24.png 24w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-paymentinformation-48x48.png 48w\" sizes=\"(max-width: 1270px) 100vw, 1270px\" \/><\/a><\/li>\n<li>Sign in with your Microsoft Entra ID\u00a0<em>Cloud Application Administrator<\/em>\u00a0account.<\/li>\n<li>Select the Azure subscription you want to associate with this GitHub Enterprise account and click\u00a0<strong>Connect<\/strong>.<a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-353\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure.png\" alt=\"Image 20241115 ghec addazure\" width=\"1235\" height=\"450\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure.png 1235w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure-300x109.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure-1024x373.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-addazure-768x280.png 768w\" sizes=\"(max-width: 1235px) 100vw, 1235px\" \/><\/a><\/li>\n<li><strong>Activate<\/strong>\u00a0the GitHub Enterprise account.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated.png\"><img decoding=\"async\" class=\"alignnone size-large wp-image-337\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated-1024x164.png\" alt=\"Image 20241115 ghec activated\" width=\"1024\" height=\"164\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated-1024x164.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated-300x48.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated-768x123.png 768w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-activated.png 1236w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/p>\n<h3>Step 3: [For EMU accounts only] Configure Entra ID as the GitHub Identity Provider (IdP)<\/h3>\n<p>If you chose\u00a0<em>&#8220;Enterprise with managed users&#8221;<\/em> in step 1.2, you will need to integrate your GitHub Enterprise account with your identity provider. GitHub supports a number of <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/admin\/managing-iam\/understanding-iam-for-enterprises\/about-enterprise-managed-users\">identity providers<\/a> including Microsoft Entra ID. With Microsoft Entra ID, we can choose to integrate by SAML or OIDC. The process for these are well documented in the following:<\/p>\n<ul>\n<li>SAML Integration: <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/saas-apps\/github-enterprise-managed-user-tutorial\">SSO tutorial (part 1)<\/a> and <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/saas-apps\/github-enterprise-managed-user-provisioning-tutorial\">SCIM automated user provisioning tutorial (part 2)<\/a><\/li>\n<li>OIDC Integration: <a href=\"https:\/\/learn.microsoft.com\/en-gb\/entra\/identity\/saas-apps\/github-enterprise-managed-user-oidc-provisioning-tutorial\">SSO and SCIM automated provisioning tutorial<\/a><\/li>\n<\/ul>\n<p><div class=\"alert alert-success\"><p class=\"alert-divider\"><i class=\"fabric-icon fabric-icon--Lightbulb\"><\/i><strong>Should you use SAML or OIDC?<\/strong><\/p>One of the practical advantages of OIDC is that it allows you to use <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/admin\/managing-iam\/configuring-authentication-for-enterprise-managed-users\/about-support-for-your-idps-conditional-access-policy\">Entra ID&#8217;s Conditional Access Policies (CAP)<\/a> for blocking GitHub access using <em>SSH keys<\/em> or <em>Personal Access Tokens (PAT)<\/em>. Many organizations prefer to use OIDC because of this additional capability. However, if you are planning to have multiple GitHub Enterprise accounts in the future (including <a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/how-to-subscribe-for-github-copilot-business-without-github-enterprise\/\">GitHub Copilot Business for Non-GHE<\/a>), do choose wisely as there is a current limitation where an Entra ID tenant can only connect to 1 GitHub Enterprise via OIDC. <\/div><\/p>\n<p>In this step, we recommend creating at adding <em>at least<\/em> two Entra ID groups:<\/p>\n<ol>\n<li>An Entra ID group for your GitHub Admins (role = Enterprise Owner).<\/li>\n<li>One or more Entra ID groups for your developers (role = User).<\/li>\n<\/ol>\n<h3>Step 4: Create Organizations and Repositories<\/h3>\n<p>At this point, you are now able to use GitHub Enterprise (repos, actions, etc.). This allows you to create multiple or<em>ganizations, <\/em>where each\u00a0organization can contain multiple <em>repositories<\/em>. Each organization and repository will have assigned <i>owners (admins) <\/i>and\u00a0<em>members\u00a0<\/em>(not to mention other roles and permissions).<\/p>\n<h4>Creating Organizations<\/h4>\n<ol>\n<li>Go to\u00a0<code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/enterprises\/{enterprise-slug}<\/code><\/li>\n<li>On the left, go to <strong>Organizations<\/strong> and click\u00a0<strong>New Organization\u00a0<\/strong>(Note: the new organization URL will be <code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/{organization-name}<\/code> and needs to be globally unique.)<\/li>\n<li>Add other owners\/admins as needed.<\/li>\n<li>Repeat steps to add more organizations.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations.png\"><img decoding=\"async\" class=\"alignnone wp-image-342 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations.png\" alt=\"Image 20241115 ghec organizations\" width=\"1240\" height=\"723\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations.png 1240w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations-300x175.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations-1024x597.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-organizations-768x448.png 768w\" sizes=\"(max-width: 1240px) 100vw, 1240px\" \/><\/a><\/p>\n<h4>Creating Repositories<\/h4>\n<ol>\n<li>Go to\u00a0<code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/{organization-name}<\/code><\/li>\n<li>On top, click on <strong>Repositories<\/strong>\u00a0and click\u00a0<strong>New Respository\u00a0<\/strong>(or simply click <strong>New\u00a0<\/strong>in the <strong>Overview<\/strong> tab)<\/li>\n<li>Input the name and other information as needed.<\/li>\n<li>Start pushing your code in this git repository!<\/li>\n<li>Repeat steps for other repositories<\/li>\n<\/ol>\n<h3>Step 5: Enable GitHub Advanced Security (GHAS) for your Organizations and Repositories<\/h3>\n<p><a href=\"https:\/\/github.com\/enterprise\/advanced-security\">GitHub Advanced Security (GHAS)<\/a>\u00a0is available by default, but admins can control if this can be enabled by the GitHub organization and GitHub repository admins. This is set in the GitHub enterprise policies:<\/p>\n<ol>\n<li>Go to\u00a0<code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/enterprises\/{enterprise-slug}<\/code><\/li>\n<li>On the left, go to\u00a0<strong>Policies \u2192 Code security<\/strong><\/li>\n<li>Configure policies to for organizations\/repositories<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies.png\"><img decoding=\"async\" class=\"alignnone wp-image-344 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies.png\" alt=\"Image 20241115 ghec ghas policies\" width=\"1270\" height=\"1306\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies.png 1270w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies-292x300.png 292w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies-996x1024.png 996w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies-768x790.png 768w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies-24x24.png 24w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-policies-48x48.png 48w\" sizes=\"(max-width: 1270px) 100vw, 1270px\" \/><\/a><\/p>\n<p>Once allowed by the enterprise, a repository owner\/admin can:<\/p>\n<ol>\n<li>Go to\u00a0<code class=\"language-default\">https:\/\/github.com\/orgs\/{organization-name}\/{repository-name}\/settings<\/code><\/li>\n<li>On the left, click on\u00a0<strong>Code security<\/strong> and start enabling <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/code-security\/getting-started\/dependabot-quickstart-guide\">Dependabot<\/a>, <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/code-security\/code-scanning\/introduction-to-code-scanning\/about-code-scanning\">Code Scanning<\/a> and <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/code-security\/secret-scanning\/introduction\/about-secret-scanning\">Secret Scanning<\/a><\/li>\n<li>On the top nav bar, click on\u00a0<strong>Security<\/strong> and start seeing the vulnerability alerts (you may have to wait for a few minutes for the scans to finish).<\/li>\n<li>Repeat steps for other organizations\/repositories.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies.png\"><img decoding=\"async\" class=\"alignnone wp-image-345 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies.png\" alt=\"Image 20241115 ghec ghas repo policies\" width=\"1254\" height=\"782\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies.png 1254w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies-300x187.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies-1024x639.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-repo-policies-768x479.png 768w\" sizes=\"(max-width: 1254px) 100vw, 1254px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard.png\"><img decoding=\"async\" class=\"alignnone wp-image-346 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard.png\" alt=\"Image 20241115 ghec ghas dashboard\" width=\"1260\" height=\"772\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard.png 1260w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard-300x184.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard-1024x627.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-ghas-dashboard-768x471.png 768w\" sizes=\"(max-width: 1260px) 100vw, 1260px\" \/><\/a><\/p>\n<p><div class=\"alert alert-warning\"><p class=\"alert-divider\"><i class=\"fabric-icon fabric-icon--Warning\"><\/i><strong>GitHub Advanced Security Billing<\/strong><\/p>When GitHub Advanced Security is enabled in a repository, charges will begin based on all active committers in that repository. To know more about how this is computed, see <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/billing\/managing-billing-for-your-products\/managing-billing-for-github-advanced-security\/about-billing-for-github-advanced-security\">About billing for GitHub Advanced Security<\/a>. <\/div><\/p>\n<h3>Step 6: Enable GitHub Copilot for your Organizations<\/h3>\n<p>Similar to GHAS, GitHub Copilot is available by default, but admins control which organizations will have either GitHub Copilot Business, Enterprise, or none at all.<\/p>\n<ol>\n<li>Go to\u00a0<code class=\"language-plaintext highlighter-rouge\">https:\/\/github.com\/enterprises\/{enterprise-slug}<\/code><\/li>\n<li>On the left, go to\u00a0<strong>Policies \u2192 Copilot<\/strong><\/li>\n<li>Under\u00a0<strong>Access management<\/strong>, choose if GitHub Copilot allowed for <em>All organizations<\/em> or\u00a0<em>Specific organizations.\u00a0<\/em>Also select what Copilot tier (business or enterprise) is applied to each organization<\/li>\n<li>Under\u00a0<strong>Policies<\/strong>, choose the GitHub Copilot features that you want enabled (i.e. GitHub Copiot Chat, CLI, Bing Search, etc.)<\/li>\n<li>Under\u00a0<strong>Content exclusion<\/strong>, set files, folder paths and repos that you want excluded by GitHub Copilot (learn more about it <a href=\"https:\/\/docs.github.com\/en\/copilot\/managing-copilot\/configuring-and-auditing-content-exclusion\/excluding-content-from-github-copilot\">here<\/a>)<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access.png\"><img decoding=\"async\" class=\"alignnone wp-image-349 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access.png\" alt=\"Image 20241115 ghec copilot ent access\" width=\"1257\" height=\"1120\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access.png 1257w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access-300x267.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access-1024x912.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-access-768x684.png 768w\" sizes=\"(max-width: 1257px) 100vw, 1257px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies.png\"><img decoding=\"async\" class=\"alignnone wp-image-350 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies.png\" alt=\"Image 20241115 ghec copilot ent policies\" width=\"1270\" height=\"1306\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies.png 1270w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies-292x300.png 292w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies-996x1024.png 996w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies-768x790.png 768w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies-24x24.png 24w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-ent-policies-48x48.png 48w\" sizes=\"(max-width: 1270px) 100vw, 1270px\" \/><\/a><\/p>\n<p>Once enterprise admins are done with the configuration, the organization owners\/admins can now start giving their <a href=\"https:\/\/docs.github.com\/en\/enterprise-cloud@latest\/organizations\/managing-membership-in-your-organization\/inviting-users-to-join-your-organization\">organization members<\/a> GitHub Copilot licenses.<\/p>\n<ol>\n<li>Go to\u00a0<code class=\"language-default\">https:\/\/github.com\/{organization-name}<\/code><\/li>\n<li>On top, click\u00a0<strong>Settings \u2192 Copilot \u2192 Access<\/strong> and start assigning GitHub Copilot licenses to <em>&#8220;all members in the organization&#8221;<\/em> or\u00a0<em>&#8220;selected members&#8221;<\/em><\/li>\n<li>Go through the other <strong>Settings \u2192 Copilot<\/strong> \u2192<strong> Policies\/Content exclusion\/etc.<\/strong> and configure settings allowed by your enterprise owners<\/li>\n<li>Repeat steps for members of other organizations.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access.png\"><img decoding=\"async\" class=\"alignnone wp-image-351 size-full\" src=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access.png\" alt=\"Image 20241115 ghec copilot org access\" width=\"1245\" height=\"825\" srcset=\"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access.png 1245w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access-300x199.png 300w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access-1024x679.png 1024w, https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-content\/uploads\/sites\/83\/2024\/11\/20241115-ghec-copilot-org-access-768x509.png 768w\" sizes=\"(max-width: 1245px) 100vw, 1245px\" \/><\/a><\/p>\n<h2>Start Coding<\/h2>\n<p>That&#8217;s it! At this point, you will have GitHub Enterprise, Advanced Security, and Copilot Business\/Enterprise activated. Share the news with your developers and happy coding!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As GitHub announced metered billing, anyone with an active Azure subscription can now self-provision a paid GitHub Enterprise Cloud account, with Advanced Security and GitHub Copilot Business\/Enterprise. This post is a screenshot-based step-by-step guide on how you can do so. Pre-requisites Before we get started, ensure that you have the following: An active Microsoft Azure [&hellip;]<\/p>\n","protected":false},"author":172717,"featured_media":272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,20,19],"tags":[2,8,27,26,10,25,22,24,14],"class_list":["post-306","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-developer-productivity","category-github-copilot","tag-azure","tag-enterprise-managed-users","tag-ghas","tag-ghe","tag-ghec-emu","tag-github-advanced-security","tag-github-copilot","tag-github-enterprise","tag-microsoft-entra-id"],"acf":[],"blog_post_summary":"<p>As GitHub announced metered billing, anyone with an active Azure subscription can now self-provision a paid GitHub Enterprise Cloud account, with Advanced Security and GitHub Copilot Business\/Enterprise. This post is a screenshot-based step-by-step guide on how you can do so. Pre-requisites Before we get started, ensure that you have the following: An active Microsoft Azure [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/posts\/306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/users\/172717"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/comments?post=306"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/posts\/306\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/media\/272"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/media?parent=306"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/categories?post=306"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/all-things-azure\/wp-json\/wp\/v2\/tags?post=306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}