> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-bp-2735-release-notes.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_AddMember

> Team role can add members to the team (maintainer privilege)

<img noZoom src="https://mintcdn.com/specterops-bp-2735-release-notes/2djt2Sp9UeFPjBFr/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=2djt2Sp9UeFPjBFr&q=85&s=a791748158fde5ff3b3b82b51497ab39" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [GH\_TeamRole](/opengraph/extensions/github/nodes/gh_teamrole)
* Destination: [GH\_Team](/opengraph/extensions/github/nodes/gh_team)
* Traversable: ✅

## General Information

The traversable GH\_AddMember edge indicates that a team role with the Maintainer permission level can add new members to the team. This edge is traversable because the ability to add members grants indirect access -- a maintainer can add any user to the team, and that user then inherits all of the team's repository permissions, effectively expanding the attack surface.

```mermaid theme={null}
graph LR
    user("GH_User alice")
    maintainerRole("GH_TeamRole security-team\\maintainer")
    team("GH_Team security-team")
    repoRole("GH_RepoRole GitHound\\admin")
    user -- GH_HasRole --> maintainerRole
    maintainerRole -- GH_AddMember --> team
    team -- GH_HasRole --> repoRole
```