Managing access with runner groups

If you register your runners at the organization or enterprise level, runner groups are used to control access to the self-hosted runners. Enterprise administrators can configure access policies that control which organizations in an enterprise have access to runner groups, and organization administrators can configure access policies that control which repositories in the organization have access to runner groups. Every enterprise and every organization has a default runner group named Default that cannot be deleted.

Note

A runner can only be in one runner group at a time.

To manage access, open Policies at the enterprise level or Settings at the organization level and locate Actions | Runner Groups in the menu. Here, you can create a new runner group or click on an existing one to adjust its access settings. Depending on whether your level is enterprise or organization, you can either allow access to specific organizations or repositories...