# Organization

Terraform manages the StormTrust organization control plane. Organization settings, owner memberships, Actions policy, repositories, environments, and rulesets live in `org/github/`.

## Access model

Organization owners retain the `admin` role. The default repository permission is ` read`, which does not reduce owner access. Members cannot create repositories outside the Terraform workflow.

Secret values remain outside Terraform state. Terraform manages only the repository allowlists and environment policies that control their use.

## Governance topics

| Intent      | Start here                                                           |
| ----------- | -------------------------------------------------------------------- |
| How-to      | [Review an access change](/stormtrust/org/review-access/)            |
| How-to      | [Manage repositories](/stormtrust/engineering/github/repositories/)  |
| How-to      | [Administer the platform](/stormtrust/engineering/operations/admin/) |
| Explanation | [Organization governance](/stormtrust/org/governance/)               |
| Reference   | [Credentials](/stormtrust/engineering/github/credentials/)           |

## All pages

- [Review an access change](/stormtrust/org/review-access/)
- [Organization governance](/stormtrust/org/governance/)