Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?

Question

Options

• AEnterprise policies and organization policies are independent, with organization policies taking
• BEnterprise policies configure mandatory settings for organizations.
• CEnterprise policies apply only to public repositories, while organization policies apply to public,
• DEnterprise policies can block specific actions, while organization policies can only enable or

• A
  4% (1)
• B
  89% (25)
• D
  7% (2)

Explanation

Option B is correct because GitHub's permission model is hierarchical: enterprise policies sit at the top and establish mandatory guardrails that all organizations within the enterprise must follow, meaning enterprise owners can enforce settings that organization admins cannot override. A is wrong because the relationship is not independent - enterprise policies constrain what organization policies can do, not the other way around. C is wrong because enterprise policies apply across all repository visibility types (public, private, and internal), not just public repos. D is wrong because both enterprise and organization policies can block or enable specific actions; the real distinction is authority level, not capability type.

Memory tip: Think of it like a franchise - the franchisor (enterprise) sets non-negotiable rules, and individual franchise owners (organizations) can only customize within those bounds.

No community discussion yet for this question.