[asmor]

I remember a time when the v3 API didn't even have IDs and whenever someone in your org changed their username or renamed a repo you'd be left guessing who it is.

This is also the reason I wrote our current user onboarding / repo management code from scratch, because the terraform provider sucks and without any management you'll have a wave of "x got offboarded but they were the only admin on this repo" requests. Every repo is owned by a team. Access is only ever per-team.

[embedding-shape]

> Every repo is owned by a team. Access is only ever per-team.

This is indeed the working pattern, and applies not just to GitHub and organizing teams there, it's a useful pattern to use everywhere. Don't think "Give access to this user" but rather "Give access to this team, which this user is current a part of" and it solves a lot of bothersome issues.

[asmor]

The problem is that GitHub gives admin access to the person who clicked the create repository button personally and then calls it a day.

And the only real way around this is to make people create repositories elsewhere, on a self-service dashboard.