The GitHub connector supports permission synchronization, which ensures that users can only access documents they have permissions to view in GitHub. When enabled, this feature:
Syncs user permissions from GitHub repositories and organizations
Ensures that users only see search results for repositories they have access to
Maintains consistent access control between GitHub and Onyx
Permission sync is available only on Cloud and the Enterprise Edition of Onyx, and it requires additional token permissions beyond those needed for basic indexing.
VERY IMPORTANT: For permission sync to work, users must have their email address publicly visible in their GitHub profile. If a user’s email is set to private, they will not get access to any documents through Onyx.How to Make Your Email Public on GitHub:
Log in to your GitHub account
Click on your profile picture in the top-right corner
Select Settings from the dropdown menu
In the left sidebar, click on Emails
Scroll down to Keep my email addresses private and uncheck this option
Now go back to the left sidebar and click on Public profile
Scroll down to the Public email section
Select your email address from the dropdown
Click Update profile to save the changes
Why is this required?Onyx uses the public email to match GitHub users with Onyx users for permission synchronization. Without a public email, the system cannot identify which GitHub permissions apply to which Onyx user.