Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Everything you need to know about GitHub Administration, the GitHub exam for the people who run GitHub Enterprise for everyone else, as of October 2026. This guide covers the GH-100 exam, the five domains in the July 2026 outline and their weights, the format and passing score, why the study guide now says GitHub Enterprise Administrator, the two-year validity, and the roles it fits.
GitHub Administration, earned by passing exam GH-100, is the GitHub certification for the people who run a GitHub Enterprise account. It tests whether you can manage identity and access, govern the enterprise, secure the code that moves through it, run GitHub Actions at scale, and read the usage data that shows what all of it costs.
The credential is GitHub-branded, but Microsoft administers it. You register with a Microsoft Learn account, schedule through Pearson VUE, and the record lives in your Microsoft Learn profile. Since the July 2026 rewrite, the study guide carries the title GitHub Enterprise Administrator, while the certification itself is still called GitHub Administration.
Microsoft rates GH-100 at the intermediate level and writes it for system administrators, software developers, application administrators and IT professionals with GitHub Enterprise administration experience, and it expects you to support both Cloud and Server deployments. The skills measured outline is current as of July 2026 and is published on Microsoft Learn.
Managed users versus personal accounts, SAML SSO, 2FA, SCIM, team sync, roles and rulesets. 15 to 20%.
Admin versus GitHub Support, support bundles, deployment scenarios, licensing and billing. 10 to 15%.
Policies, audit logging, secret scanning, CodeQL, Dependabot, tokens and apps. 25 to 30%.
Reusable workflows, Actions policies, runner groups, private networking, secrets and vaults. 20 to 25%.
Audit logs, API usage, adoption patterns, metered usage reports and license savings. 10 to 15%.
Four things that set GitHub Administration apart from the rest of the GitHub track in 2026.
Most GitHub certification exams measure what you can do with the platform or one of its features, whether that’s an Actions workflow, a Copilot prompt or a CodeQL alert. GH-100 asks whether you can run the enterprise account all of that lives in, on GitHub Enterprise Cloud or GitHub Enterprise Server, and Microsoft tags it for administrators, DevOps engineers and technology managers.
Microsoft’s change log says GH-100 changed significantly in July 2026, with new objectives added, some removed and all reworded. The study guide now reads GitHub Enterprise Administrator. Our guide to the 2026 GitHub certification track covers what moved across the rest of the track.
Secure software development carries 25 to 30 percent and GitHub Actions another 20 to 25, so 45 to 55 percent of GH-100 sits on ground the Actions and Advanced Security exams cover in more depth. The angle is different, though. GH-100 asks how you govern those features across an enterprise, not how you write one workflow or triage one alert.
GitHub Administration is valid for two years. GitHub is moving its certifications onto Microsoft’s recertification process, and any GitHub certification that expires before that process is ready gets a six-month extension. GH-100 is offered only in English, and Microsoft lets you request 30 extra minutes when an exam isn’t available in your preferred language. It is not a DoD 8140 credential and does not appear on the Approved Qualifications Matrix. The current matrix is published at the DoD Cyber Exchange.
The case for it is practical. Whoever owns the GitHub Enterprise account decides who can sign in, which apps can touch the code, where runners execute and how many seats the company pays for, and GH-100 is the credential built around that role.
Everything you need to know about the certification, the GH-100 exam, and what happens after you pass, as of October 2026.
GH-100 gives you the administrator’s view of the whole platform. The right next exam depends on which part of it takes up your week, and the three below build most directly on GH-100 objectives.
GH-100 covers Actions from the governance side: policies, runner groups, networking and secrets. GH-200 adds the author’s side, from writing and troubleshooting workflows to building and publishing custom actions. Its five skill areas were rewritten in January 2026, and its enterprise domain covers much of the same runner and secrets ground.
GH-100 asks you to switch on secret scanning, CodeQL and Dependabot and to define a security response plan. GH-500, rewritten in July 2026, spends six skill areas on the security suites themselves, from Secret Protection, supply chain security and Code Security to security operations and suites administration. It suits admins who end up owning the security program as well.
Copilot seats and policies often end up with the team that runs the enterprise. GH-300, last updated August 7, 2026, covers responsible use, Copilot features including organization-wide policy management and audit log events, data and architecture, prompt engineering, productivity and privacy safeguards.
GH-100 sits in the middle of the GitHub track. GH-900 is optional groundwork below it, and from here the track branches into automation, security and AI-assisted development.
Optional groundwork
Run the enterprise account
Automation, security or AI
Two questions to answer before you commit: can you sit it, and should you pursue GH-100 specifically. Here’s a straight answer to both.
No prerequisite certification, but it’s written at intermediate level.
Microsoft lists no prerequisite for GH-100. You create a Microsoft Learn account, register with a personal Microsoft account rather than a work account so the record stays with you when you change jobs, and schedule through Pearson VUE. The audience profile assumes you already administer GitHub Enterprise, including identity and access, GitHub Actions, enterprise governance and security features such as GitHub Advanced Security.
A personal account never shows you most of this exam.
SAML SSO, SCIM, Enterprise Managed Users, runner groups, IP allow lists and enterprise license reports only exist at the organization or enterprise level. If your employer runs GitHub Enterprise, ask for a sandbox organization. If not, GitHub offers a 30-day GitHub Enterprise Cloud trial with no payment method required, and it can be set up with managed users. Work through each objective there before you book.
GH-100 maps most directly to GitHub Enterprise administration, but its outline reaches into identity, automation, security and cost. These are the six roles where that mix is part of the job.
Owns the enterprise account: SAML single sign-on, SCIM provisioning, Enterprise Managed Users, organization policies and rulesets. GH-100 is written for this job, and since July 2026 its study guide carries the same title.
Runs the shared Actions setup other teams build on, from runner groups and self-hosted runners to IP allow lists and organization secrets. Manage GitHub Actions is 20 to 25 percent of GH-100, and GH-200 takes the authoring side further.
Builds the paved road developers ship on, with reusable workflows and agreed standards for branching, reviews and releases. GH-100 tests both, the Actions reuse model in one domain and the developer process standards in another.
Connects GitHub to the company’s identity provider and keeps access clean through SAML SSO, two-factor enforcement, SCIM and team synchronization. Identity and access is 15 to 20 percent of GH-100, and access audits are part of it.
Turns on secret scanning, CodeQL and Dependabot across repositories and writes the plan for when an alert turns real. Secure software development is the heaviest GH-100 domain at 25 to 30 percent, and GH-500 is the deeper follow-on.
Answers for seat counts, metered usage and the GitHub bill. GH-100 covers licensing and billing models, usage reports for metered products and spotting underused features, which is the data a manager needs to defend a budget or cut one.
GH-100 sits beside the other intermediate GitHub exams. Here’s how it lines up against GH-900, the fundamentals exam below it, and against GH-200 and GH-500, the two exams whose material overlaps it most.
| GitHub Administration (GH-100) | GitHub Foundations (GH-900) | GitHub Actions (GH-200) | GitHub Advanced Security (GH-500) | |
|---|---|---|---|---|
| Issuer | GitHub, administered by Microsoft | GitHub, administered by Microsoft | GitHub, administered by Microsoft | GitHub, administered by Microsoft |
| Level | Intermediate | Fundamentals | Intermediate | Intermediate |
| Focus | Running a GitHub Enterprise account | Working in GitHub | CI/CD with GitHub Actions | Securing code, secrets and dependencies |
| Current Outline | July 2026 | January 2026 | January 2026 | July 2026 |
| Domains | 5 | 7 | 5 | 6 |
| Exam Time | 100 min | 100 min | 100 min | 100 min |
| Passing Score | 700 of 1000 | 700 of 1000 | 700 of 1000 | 700 of 1000 |
| Cost (US) | $99 | $99 | $99 | $99 |
| Languages | English only | 5 languages | 5 languages | 5 languages |
| Validity | 2 years | Does not expire | 2 years | 2 years |
| Best For | Enterprise and organization administrators | New GitHub users and non-developer roles | Developers and DevOps engineers who own pipelines | AppSec and DevSecOps engineers |
Microsoft prices exams by the country where you test, so fees vary outside the United States. GH-900 details come from our GitHub Foundations guide, and GH-200 and GH-500 details come from their Microsoft Learn certification pages and study guides as of October 2026. The five languages are English, Spanish, Portuguese (Brazil), Korean and Japanese. None of these GitHub certifications appear on the DoD 8140 Matrix, and the two-year credentials are moving onto Microsoft’s recertification process, so check your expiration date in your Microsoft Learn profile.
Certification Matchups puts the published facts, strengths and weak spots of two certifications side by side.
Our GitHub Enterprise Certification Track Boot Camp is a five-day track that covers four exams: GH-100, GH-200, GH-300 and GH-500. Administration comes first, on Day 1, with labs in a hosted GitHub Enterprise organization. You get Official Microsoft Courseware, vouchers for all four exams, a free retake and 180 days of instructor help after class, live online or in person.
The full GitHub track, the Microsoft program that runs its exams, the MFA failures behind an April 2026 breach, and how to prepare for exam day.
How each GitHub exam was structured as of September 2026, which ones were rewritten this year, and why GH-100 is the hardest of them to prepare for without access to a real enterprise account.
Five eras of Microsoft certification, the 2026 reshuffle, and the 2025 move that put GitHub’s exams on Microsoft Learn and Pearson VUE.
The Microsoft catalog as of September 2026, with the retirements already applied, so you can see where a GitHub credential sits next to the Azure and security paths in the same profile.
Admin accounts with no MFA and a tampered CI/CD pipeline that stole GitHub tokens. The April 2026 breaches read like a list of the controls GH-100 asks you to enforce.
Microsoft publishes its objectives as a study guide on Microsoft Learn. How to read the verbs and weights in one so your study hours follow the exam rather than your comfort zone.
Why Microsoft’s 700 on a 1 to 1,000 scale isn’t 70 percent, and how to read a practice result, including the free Microsoft Learn practice assessment, by domain before you book.
Check-in, ID matching, online proctoring and retake windows compared across vendors, including how Microsoft handles a waiver when a Pearson VUE session fails.
The GH-100 exam is organized into five domains, each carrying its own weight. Secure software development and compliance is the heaviest at 25 to 30 percent, Manage GitHub Actions follows at 20 to 25 percent, and the other three sit between 10 and 20 percent. Click any domain for what it covers.
How managed users differ from personal accounts, how to configure and enforce SAML single sign-on and two-factor authentication, and where SCIM provisioning and team synchronization differ. Also covers choosing an identity provider, GitHub’s authentication and authorization model, organization and repository roles, enterprise teams, access audits, and the settings, policies and rulesets that decide what members can do.
Which problems an administrator can fix and which need GitHub Support, how to generate support bundles and diagnostics, and how to set standards for workflows, branching, reviews and releases. Also covers the four deployment scenarios (Enterprise Cloud with Enterprise Managed Users, Enterprise Cloud with data residency and EMU, Enterprise Cloud with personal accounts, and GitHub Enterprise Server), plus licensing, billing and license consumption.
Organization and enterprise policies, security posture and data protection, and audit logging and reporting. Also covers vulnerability alerts, secret scanning, CodeQL, Dependabot and security advisories, a security response plan, and API access: personal access tokens, rate limits for tokens and GitHub Apps, GitHub Apps versus OAuth Apps, and approving or denying apps by policy. The heaviest domain on the exam.
Reusing actions and workflows across the enterprise and applying organization policies for GitHub Actions. Also covers runner groups, GitHub-hosted versus self-hosted runners, IP allow lists and networking including Azure private networking, runner troubleshooting, and encrypted secrets: their scope, organization and repository level secrets, and third-party vault integration.
Analyzing audit logs and API usage, separating administrator responsibilities from GitHub Support, and reading enterprise usage patterns to find adoption gaps and underused features. Also covers interpreting usage reports for metered products and recommending ways to cut license and resource waste.
Domains and weights reflect the Microsoft Learn GH-100 study guide (GitHub Enterprise Administrator), skills measured as of July 2026, the release Microsoft says changed the exam significantly. Microsoft refreshes GitHub exams periodically, so confirm the current outline on Microsoft Learn before scheduling.
The questions candidates ask most often when researching the GitHub Administration certification.
GitHub Administration, earned by passing exam GH-100, is the GitHub certification for people who run GitHub Enterprise. It covers identities and access, the enterprise environment, secure software development and compliance, GitHub Actions, and monitoring and optimizing usage. Microsoft rates it intermediate and writes it for administrators who support both GitHub Enterprise Cloud and GitHub Enterprise Server.
Yes, both names point to exam GH-100. The certification on Microsoft Learn is still called GitHub Administration, and passing GH-100 earns it. When the exam changed in July 2026, Microsoft retitled the GH-100 study guide GitHub Enterprise Administrator, so you’ll see both names in prep material and course listings.
Microsoft administers it, but the credential stays GitHub-branded. You register with a Microsoft Learn account, schedule through Pearson VUE, and the certification appears in your Microsoft Learn profile, but the title is GitHub Administration rather than a Microsoft Certified credential. Microsoft recommends a personal Microsoft account for registration, since exam records tied to a work account are lost if you leave that employer.
There’s no prerequisite certification, so anyone can register. The audience profile does assume experience administering GitHub Enterprise environments, including identity and access management, GitHub Actions, enterprise-level governance and security features such as GitHub Advanced Security. GH-900 is optional, but it helps if the platform basics are still new to you.
The five domains are Manage GitHub identities and access (15 to 20 percent), Administer GitHub Enterprise environment (10 to 15 percent), Implement secure software development and compliance (25 to 30 percent), Manage GitHub Actions (20 to 25 percent), and Monitor and optimize GitHub usage (10 to 15 percent). Secure development carries the most weight, and together with Actions it makes up roughly half the exam.
Microsoft doesn’t publish a question count for GH-100. You have 100 minutes, the exam is proctored, and Microsoft says it may include interactive components. Unlike Microsoft’s associate and expert exams, GitHub exams don’t give you access to Microsoft Learn during the test, so every answer has to come from what you already know.
You need 700 on a scale of 1 to 1,000. Microsoft uses scaled scoring, so 700 doesn’t mean 70 percent correct, and the passing line reflects the difficulty of the questions you were given. If you fail a first attempt, you can retake after 24 hours, with longer waits for later attempts.
As of October 2026, the GH-100 exam costs $99 USD in the United States, scheduled through Pearson VUE. Microsoft prices by the country where the exam is proctored, so check the exam page for your region. Training Camp’s GitHub Enterprise Certification Track includes vouchers for GH-100, GH-200, GH-300 and GH-500 in the program fee, along with a free retake.
Microsoft’s change log says the exam changed significantly in July 2026, with new objectives added, some removed and all reworded, and the study guide now carries the title GitHub Enterprise Administrator. The current outline names four deployment scenarios (Enterprise Cloud with Enterprise Managed Users, Enterprise Cloud with data residency and EMU, Enterprise Cloud with personal accounts, and GitHub Enterprise Server) and covers runner networking including Azure private networking, support bundles, and usage reports for metered products. Check the skills measured date on any study material before you rely on it.
No. GitHub certifications don’t appear on the DoD 8140 Approved Qualifications Matrix, so GH-100 on its own won’t satisfy a cyber-coded position requirement. Its value comes from the role instead. An enterprise administrator sets the sign-in rules, app access, runner placement and seat spend for every development team, and GH-100 is the credential built around that work. See the full DoD 8140 work role paths.
Yes. GitHub certifications, GH-100 included, are valid for two years. GitHub is moving them onto Microsoft’s recertification process so holders can renew without retaking the full exam, and certifications that expire before that process is available are extended by six months. If yours has already expired, GitHub says to contact learn@github.com for one exam voucher toward your first renewal attempt.
GH-100 fits GitHub Enterprise administrators, DevOps and platform engineers who run shared runners and workflows, identity and access administrators who connect GitHub to an identity provider, DevSecOps and application security engineers who roll out security features, and engineering managers who answer for licensing and usage. It backs up hands-on experience in those roles rather than replacing it.
Pick by the part of the platform you spend your week in. Admins who own runners and workflow policy should go to GH-200 GitHub Actions, and those who also run the security program belong in GH-500 Advanced Security. If your team is rolling out Copilot, GH-300 covers its features and governance, and anyone running AI agents inside a development workflow should look at GH-600. Training Camp’s GitHub Enterprise Certification Track covers GH-100, GH-200, GH-300 and GH-500 in one five-day program.
For anyone who administers GitHub Enterprise, or is about to, yes. It costs $99, the July 2026 outline reflects the current GitHub Enterprise options from Enterprise Managed Users and data residency to Azure private networking for runners, and it’s the GitHub exam whose whole outline is administration. It’s a weaker fit if you’ve never had enterprise-level access, since most of the exam lives in settings a personal account never shows you.
If you’re weighing the certification, planning the GitHub track for yourself, or arranging GitHub Enterprise training for a platform team, tell us where you are and we’ll help you map out the right path.