About programmatic access
GitHub Apps, OAuth Apps, and personal access tokens can be used to make API requests that read or write resources owned by an organization. As an organization owner, you can control access to your organization by GitHub Apps, OAuth Apps, and personal access tokens.
GitHub Apps
Organization owners can install GitHub Apps on their organization. Repository admins can also install a GitHub App on the organization if the app does not request organization resources and if they only grant the app access to repositories where they are an admin. Organization members can submit a request for their organization owner to install a GitHub App on the organization. For more information, see "Установка Приложение GitHub в организации."
Organization owners can prevent outside collaborators from requesting GitHub Apps or from installing a GitHub App even if the collaborator is a repository admin. For more information, see "Ограничение запросов на доступ к приложениям OAuth и приложениям GitHub."
Organization owners can review the GitHub Apps that are installed on their organization and modify the repositories that each app can access. For more information, see "Просмотр приложений GitHub, установленных в вашей организации."
To help maintain GitHub Apps owned by their organization, organization owners can designate other users in their organization as GitHub App managers. GitHub App managers can manage the settings of some or all of the GitHub Apps that are owned by the organization. The GitHub App manager role does not grant users permission to install GitHub Apps on an organization. For more information, see "Добавление и удаление руководителей Приложение GitHub в организации."
OAuth Apps
Organization managers can restrict OAuth Apps from accessing organization resources. When these restrictions are enabled, organization members and outside collaborators can still request approval for individual OAuth Apps. For more information, see "Сведения об ограничениях доступа к приложению OAuth."
Personal access tokens
Organization owners can prevent fine-grained personal access tokens and personal access tokens (classic) from accessing resources owned by the organization. Organization owners can also require approval for each fine-grained personal access token that can access the organization. For more information, see "Настройка политики личного маркера доступа для организации."
Organization owners can view all fine-grained personal access tokens that can access resources owned by the organization. Organization owners can also revoke access by fine-grained personal access tokens. For more information, see "Проверка и отзыв личных маркеров доступа в организации."