[embedding-shape]

> Every repo is owned by a team. Access is only ever per-team.

This is indeed the working pattern, and applies not just to GitHub and organizing teams there, it's a useful pattern to use everywhere. Don't think "Give access to this user" but rather "Give access to this team, which this user is current a part of" and it solves a lot of bothersome issues.

[_cenw]

The problem is that GitHub gives admin access to the person who clicked the create repository button personally and then calls it a day.

And the only real way around this is to make people create repositories elsewhere, on a self-service dashboard.