---
title: "Enable or disable a security feature for an organization"
method: POST
path: "/orgs/{org}/{security_product}/{enablement}"
tags: ["orgs"]
---

# Enable or disable a security feature for an organization

`POST /orgs/{org}/{security_product}/{enablement}`

Enables or disables the specified security feature for all eligible repositories in an organization. For more information, see "[Managing security managers in your organization](https://docs.github.com/enterprise-server@3.8/organizations/managing-peoples-access-to-your-organization-with-roles/managing-security-managers-in-your-organization)."

The authenticated user must be an organization owner or be member of a team with the security manager role to use this endpoint.

OAuth app tokens and personal access tokens (classic) need the `write:org` scope to use this endpoint.

## Path parameters

- `org` string, required
- `security_product` 'dependency_graph' | 'dependabot_alerts' | 'dependabot_security_updates' | 'advanced_security' | 'secret_scanning' | 'secret_scanning_push_protection', required
- `enablement` 'enable_all' | 'disable_all', required

## Response `204`

Action started

## Other responses

- `422` — The action could not be taken due to an in progress enablement, or a policy is preventing enablement

---

[API](https://skmtc.net/github/apis/ghes.md) · [All operations](https://skmtc.net/github/apis/ghes/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/ghes/revisions/5438365412fe/schema)