PaaC alows users from an organisation from where the repo belongs too.

There was previously an issue with the API call where only public members could get listed, this don't seem to be the case anymore as per https://docs.github.com/en/rest/orgs/members?apiVersion=2022-11-28#list-organization-members

List all users who are members of an organization. If the authenticated user is also a member of this organization then both concealed and public members will be returned.