Organizations Custom Role View Org Credentials Permission

[mbainter]

🏷️ Discussion Type

Question

Body

When creating an Organization Custom Role one of the permission options is "View Organization Credentials" (or Manage Organization Credentials) but it isn't clear what that means and it isn't documented.

Does anyone know what this actually affects?

[TheJudge26]

they frequently push new granular permission checkboxes to the live UI weeks or even months before their documentation team actually updates that exact page to explain what they do. Right now, "View/Manage Organization Credentials" is an undocumented, unannounced feature.

Given its name, it is almost certainly being rolled out to control visibility into either:

SAML SSO / SCIM provisioning tokens.

Enterprise Personal Access Token (PAT) routing policies.

GitHub App installation credentials.

Since the official docs won't help until GitHub updates them, the only way to know 100% what it affects today is to do a quick sandbox test:
Create a test custom role with only that credential permission checked, assign it to a dummy user, and see which specific tabs suddenly become visible in the Organization Settings sidebar.

If you do end up testing it, let us know what it unlocks! Otherwise, you'd have to open a ticket with Enterprise Support to get a definitive answer from their engineers.