Restoring a deleted organization on GHES (#25663)

Author: lecoursen

assets/images/enterprise/stafftools/recreate-organization.png

@@ -136,5 +136,6 @@ includeGuides:
   - /admin/user-management/requiring-two-factor-authentication-for-an-organization
   - /admin/user-management/suspending-and-unsuspending-users
   - /admin/overview/creating-an-enterprise-account
+  - /admin/user-management/managing-organizations-in-your-enterprise/restoring-a-deleted-organization
 ---
 

assets/images/enterprise/stafftools/search-field.png

@@ -27,6 +27,7 @@ children:
   - /streaming-the-audit-logs-for-organizations-in-your-enterprise-account
   - /removing-users-from-teams-and-organizations
   - /removing-organizations-from-your-enterprise
+  - /restoring-a-deleted-organization
   - /managing-projects-using-jira
   - /continuous-integration-using-jenkins
 shortTitle: Manage organizations

content/admin/guides.md

@@ -0,0 +1,53 @@
+---
+title: Restoring a deleted organization
+intro: "You can partially restore an organization that was previously deleted on {% data variables.product.product_location %}."
+versions:
+  ghes: '*'
+type: how_to
+topics:
+  - Administrator
+  - Enterprise
+  - Organizations
+shortTitle: Restore organization
+permissions: Site administers can restore an organization on {% data variables.product.product_name %}.
+---
+
+## About organization restoration
+
+You can use the site admin dashboard to restore an organization that was previously deleted on {% data variables.product.product_location %}, as long as the audit log Elasticsearch indices contain the data for the `org.delete` event.
+
+Immediately after you restore an organization, the organization will not be exactly the same as it was prior to the deletion. You'll have to manually restore any repositories that were owned by the organization. For more information, see "[Restoring a deleted repository](/admin/user-management/managing-repositories-in-your-enterprise/restoring-a-deleted-repository)."
+
+You can also use the audit log to help you manually re-add teams and organization members. For more information, see "[Restoring members and teams](#restoring-members-and-teams)."
+
+## Restoring an organization
+
+{% data reusables.enterprise_site_admin_settings.access-settings %}
+1. Under "Search users, organizations, enterprises, teams, repositories, gists, and applications", search for the organization.
+
+  ![Screenshot of the search field and Search button](/assets/images/enterprise/stafftools/search-field.png)
+
+1. Under "Deleted accounts", to the right of the organization you want to restore, select the {% octicon "kebab-horizontal" aria-label="The edit icon" %} dropdown menu, then click **Recreate**.
+
+   ![Screenshot of the dropdown menu for a deleted organization](/assets/images/enterprise/stafftools/recreate-organization.png)
+
+## Restoring members and teams
+
+You can use the audit log to find a list of the previous members and teams of the organization, then recreate them manually. For more information about using the audit log, see "[Auditing users across your enterprise](/admin/user-management/managing-users-in-your-enterprise/auditing-users-across-your-enterprise)."
+
+In all the search phrases below, replace ORGANIZATION with the name of the organization and TEAM with the name of the team.
+
+### Restoring organization members
+
+1. To find all users who were added to and removed from the organization, search the audit log for `action:org.add_member org:ORGANIZATION` and `action:org.remove_member org:ORGANIZATION`.
+1. Manually add to the organization each user that should still be a member. For more information, see "[Adding people to your organization](/organizations/managing-membership-in-your-organization/adding-people-to-your-organization)."
+
+### Restoring teams
+
+1. To find each team name, search the audit log for `action:team.create org:ORGANIZATION`.
+1. Manually recreate the team. For more information, see "[Creating a team](/organizations/organizing-members-into-teams/creating-a-team)."
+1. To find the members that have been added to each team, search for `action:team.add_member team:"ORGANIZATION/TEAM"`.
+1. Manually re-add the team members. For more information, see "[Adding organization members to a team](/organizations/organizing-members-into-teams/adding-organization-members-to-a-team)."
+1. To find the repositories that the team was granted access to, search for `action:team.add_repository team:"ORGANIZATION/TEAM"`.
+1. To find the access level that the team was granted for each repository, search for `action:team.update_repository_permission team:"ORGANIZATION/TEAM"`.
+1. Manually give the team access again. For more information, see "[Managing team access to an organization repository](/organizations/managing-access-to-your-organizations-repositories/managing-team-access-to-an-organization-repository)."

content/admin/user-management/managing-organizations-in-your-enterprise/index.md

@@ -12,7 +12,7 @@ versions:
 topics:
   - Organizations
   - Teams
-shortTitle: Delete organization account
+shortTitle: Delete organization
 ---
 
 {% ifversion fpt or ghec %}
@@ -26,7 +26,15 @@ shortTitle: Delete organization account
 
 ## 1. Back up your organization content
 
-Once you delete an organization, GitHub **cannot restore your content**. Therefore, before you delete your organization, make sure you have a copy of all repositories, wikis, issues, and project boards from the account.
+{% ifversion not ghes %} After you delete an organization, {% data variables.product.company_short %} **cannot restore your content**. Therefore, before{% else %}Before{% endif %} you delete your organization, make sure you have a copy of all repositories, wikis, issues, and project boards from the account.
+
+{% ifversion ghes %}
+{% note %}
+
+**Note:** If necessary, a site administrator for {% data variables.product.product_location %} may be able to partially restore a deleted organization. For more information, see "[Restoring a deleted organization](/admin/user-management/managing-organizations-in-your-enterprise/restoring-a-deleted-organization)."
+
+{% endnote %}
+{% endif %}
 
 ## 2. Delete the organization