GH_RepoRole

General Information

Represents a repository-level permission role. Each repository has five default roles (Read, Write, Admin, Triage, Maintain) plus any custom repository roles defined at the organization level. Repo roles define what actions a user or team can perform on a specific repository. Default roles form an inheritance hierarchy (Triage -> Read, Maintain -> Write, Admin includes all), and custom roles inherit from one of the base roles.

Properties

Property	Type	Description
`name`	`string`	The node name used for matching and display.
`displayname`	`string`	The human-readable display name.
`environmentid`	`string`	The identifier of the GitHub environment where this node was collected.
`last_seen`	`datetime`	The timestamp when this node was last observed during collection.
`node_id`	`string`	The stable identifier used as the OpenGraph node ID; this is the native GitHub node ID where available.
`short_name`	`string`	The short role name (e.g., `read`, `write`, `admin`, `triage`, `maintain`, or custom role name).
`repository_name`	`string`	The name of the repository this role belongs to.
`repository_id`	`string`	The node_id of the repository this role belongs to.
`environment_name`	`string`	The name of the environment (GitHub organization).
`type`	`string`	`default` for built-in roles or `custom` for custom repository roles.
`query_explicit_users`	`string`	Query for explicit users.
`query_explicit_teams`	`string`	Query for explicit teams.
`query_unrolled_members`	`string`	Query for unrolled members.
`query_repository_permissions`	`string`	Query for repository permissions.

Diagram

Edges

The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
GH_HasBaseRole	GH_RepoRole	✅
GH_HasRole	GH_Team, GH_User	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
GH_AddAssignee	GH_Repository	❌
GH_AddLabel	GH_Repository	❌
GH_AdminTo	GH_Repository	✅
GH_BypassBranchProtection	GH_Repository	❌
GH_CanCreateBranch	GH_Repository	✅
GH_CanCreateEnvironment	GH_Repository	✅
GH_CanDeployToEnvironment	GH_Environment	✅
GH_CanEditEnvironment	GH_Environment	✅
GH_CanEditProtection	GH_Branch	✅
GH_CanPwnRequest	GH_Branch, GH_Repository	✅
GH_CanReadSecretScanningAlert	GH_SecretScanningAlert	✅
GH_CanWriteBranch	GH_Branch	✅
GH_CloseDiscussion	GH_Repository	❌
GH_CloseIssue	GH_Repository	❌
GH_ClosePullRequest	GH_Repository	❌
GH_ConvertIssuesToDiscussions	GH_Repository	❌
GH_CreateDiscussionCategory	GH_Repository	❌
GH_CreateSoloMergeQueueEntry	GH_Repository	❌
GH_CreateTag	GH_Repository	❌
GH_DeleteAlertsCodeScanning	GH_Repository	❌
GH_DeleteDiscussion	GH_Repository	❌
GH_DeleteDiscussionComment	GH_Repository	❌
GH_DeleteIssue	GH_Repository	❌
GH_DeleteTag	GH_Repository	❌
GH_EditCategoryOnDiscussion	GH_Repository	❌
GH_EditDiscussionCategory	GH_Repository	❌
GH_EditDiscussionComment	GH_Repository	❌
GH_EditRepoAnnouncementBanners	GH_Repository	❌
GH_EditRepoCustomPropertiesValues	GH_Repository	❌
GH_EditRepoMetadata	GH_Repository	❌
GH_EditRepoProtections	GH_Repository	❌
GH_HasBaseRole	GH_RepoRole	✅
GH_JumpMergeQueue	GH_Repository	❌
GH_ManageDeployKeys	GH_Repository	❌
GH_ManageDiscussionBadges	GH_Repository	❌
GH_ManageRepoSecurityProducts	GH_Repository	❌
GH_ManageSecurityProducts	GH_Repository	❌
GH_ManageSettingsMergeTypes	GH_Repository	❌
GH_ManageSettingsPages	GH_Repository	❌
GH_ManageSettingsProjects	GH_Repository	❌
GH_ManageSettingsWiki	GH_Repository	❌
GH_ManageTopics	GH_Repository	❌
GH_ManageWebhooks	GH_Repository	❌
GH_MarkAsDuplicate	GH_Repository	❌
GH_PushProtectedBranch	GH_Repository	❌
GH_ReadCodeScanning	GH_Repository	❌
GH_ReadRepoContents	GH_Repository	❌
GH_RemoveAssignee	GH_Repository	❌
GH_RemoveLabel	GH_Repository	❌
GH_ReopenDiscussion	GH_Repository	❌
GH_ReopenIssue	GH_Repository	❌
GH_ReopenPullRequest	GH_Repository	❌
GH_RequestPrReview	GH_Repository	❌
GH_ResolveDependabotAlerts	GH_Repository	❌
GH_ResolveSecretScanningAlerts	GH_Repository	❌
GH_RunOrgMigration	GH_Repository	❌
GH_SetInteractionLimits	GH_Repository	❌
GH_SetIssueType	GH_Repository	❌
GH_SetMilestone	GH_Repository	❌
GH_SetSocialPreview	GH_Repository	❌
GH_ToggleDiscussionAnswer	GH_Repository	❌
GH_ToggleDiscussionCommentMinimize	GH_Repository	❌
GH_ViewDependabotAlerts	GH_Repository	❌
GH_ViewSecretScanningAlerts	GH_Repository	❌
GH_WriteCodeScanning	GH_Repository	❌
GH_WriteRepoContents	GH_Repository	❌
GH_WriteRepoPullRequests	GH_Repository	❌

Properties

Property	Type	Description
`name`	`str`	-
`displayname`	`str`	-
`environmentid`	`str`	-
`last_seen`	`datetime`	-
`node_id`	`str`	-
`short_name`	`str`	The short role name (e.g., `read`, `write`, `admin`, `triage`, `maintain`, or custom role name).
`repository_name`	`str`	The name of the repository this role belongs to.
`repository_id`	`str`	The node_id of the repository this role belongs to.
`environment_name`	`str`	The name of the environment (GitHub organization).
`type`	`str`	`default` for built-in roles or `custom` for custom repository roles.
`query_explicit_users`	`str \| None`	Query for explicit users.
`query_explicit_teams`	`str \| None`	Query for explicit teams.
`query_unrolled_members`	`str \| None`	Query for unrolled members.
`query_repository_permissions`	`str \| None`	Query for repository permissions.

Get Started with BloodHound

Install a Data Collector

Collect Data

OpenGraph

OpenHound

Analyze Attack Path Data

Manage BloodHound

API & Integrations

On-premises BloodHound Enterprise

Resources

General Information

Properties

Diagram

Edges

Inbound Edges

Outbound Edges

Properties

​General Information

​Properties

​Diagram

​Edges

​Inbound Edges

​Outbound Edges

​Properties

General Information

Properties

Diagram

Edges

Inbound Edges

Outbound Edges

Properties