coderabbit-enterprise-rbac

npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill coderabbit-enterprise-rbac --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

# CodeRabbit Enterprise RBAC ## Overview Manage CodeRabbit AI code review access across an enterprise organization. CodeRabbit inherits repository permissions from your Git provider -- if a developer has write access to a repo and opens a PR, CodeRabbit reviews it. Enterprise controls focus on seat management, repository scoping, organization-level configuration, and review policy enforcement. ## Prerequisites - CodeRabbit Pro or Enterprise plan - GitHub Organization admin or GitLab Group owner role - CodeRabbit GitHub App installed on the organization - Access to CodeRabbit dashboard at app.coderabbit.ai ## Access Control Model ``` GitHub/GitLab Org Permissions │ ▼ ┌─────────────────────────┐ │ CodeRabbit GitHub App │ │ Repository Access: │ │ ├── All repositories │ ← Reviews every PR in the org │ └── Select repos only │ ← Reviews only selected repos └─────────┬───────────────┘ │ ▼ ┌─────────────────────────┐ │ Seat Assignment │ │ ├── Active committers │ ← Auto-assigns seats to PR authors │ └── Manual assignment │ ← Admin picks who gets seats └─────────┬───────────────┘ │ ▼ ┌─────────────────────────┐ │ .coderabbit.yaml │ │ ├── Org-level defaults │ ← .github repo │ └── Repo-level o

set -euo pipefail
echo "=== CodeRabbit Org-Wide Review Audit ==="
echo "Organization: $ORG"
echo ""
List repos with CodeRabbit installed
echo "--- Repos with CodeRabbit ---"
for REPO in $(gh repo list "$ORG" --limit 50 --json name --jq '.[].name'); do
if [ "$INSTALLED" = "coderabbitai" ]; then
head -5 | xargs -I{} gh api "repos/$ORG/$REPO/pulls/{}/reviews" \
awk '{sum+=$1} END {print sum+0}')