Skip to main content

Permissions required for fine-grained personal access tokens

In this article

These are the permissions required for a fine-grained personal access token to use each REST API endpoint that works with fine-grained personal access tokens.

About permissions required for fine-grained personal access token

When you create a fine-grained personal access token, you grant it a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Managing your personal access tokens."

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see "Troubleshooting the REST API."

These permissions are required to access private resources with the following endpoints. Some endpoints can also be used to access public resources without these permissions.

Some endpoints require additional permissions. When this is the case, the "Additional permissions" column will indicate the other permissions that are required to use the endpoint.

Organization permissions for "Administration"

EndpointAccessAdditional permissions
PATCH /orgs/{org}write✖️
DELETE /orgs/{org}write✖️
PUT /orgs/{org}/actions/oidc/customization/subwrite✖️
PUT /orgs/{org}/actions/permissionswrite✖️
PUT /orgs/{org}/actions/permissions/repositorieswrite✖️
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}write
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}write
PUT /orgs/{org}/actions/permissions/selected-actionswrite✖️
PUT /orgs/{org}/actions/permissions/workflowwrite✖️
DELETE /orgs/{org}/credential-authorizations/{credential_id}write✖️
PUT /orgs/{org}/interaction-limitswrite✖️
DELETE /orgs/{org}/interaction-limitswrite✖️
GET /orgs/{org}/rulesetswrite✖️
POST /orgs/{org}/rulesetswrite✖️
GET /orgs/{org}/rulesets/rule-suiteswrite✖️
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}write✖️
GET /orgs/{org}/rulesets/{ruleset_id}write✖️
PUT /orgs/{org}/rulesets/{ruleset_id}write✖️
DELETE /orgs/{org}/rulesets/{ruleset_id}write✖️
PUT /orgs/{org}/security-managers/teams/{team_slug}write✖️
DELETE /orgs/{org}/security-managers/teams/{team_slug}write✖️
POST /orgs/{org}/{security_product}/{enablement}write✖️
GET /enterprise-installation/{enterprise_or_org}/server-statisticsread
GET /organizations/{organization_id}/custom_rolesread
GET /orgs/{org}/actions/cache/usageread✖️
GET /orgs/{org}/actions/cache/usage-by-repositoryread✖️
GET /orgs/{org}/actions/oidc/customization/subread✖️
GET /orgs/{org}/actions/permissionsread✖️
GET /orgs/{org}/actions/permissions/repositoriesread✖️
GET /orgs/{org}/actions/permissions/selected-actionsread✖️
GET /orgs/{org}/actions/permissions/workflowread✖️
GET /orgs/{org}/audit-logread✖️
GET /orgs/{org}/credential-authorizationsread✖️
GET /orgs/{org}/custom-repository-rolesread
GET /orgs/{org}/custom-repository-roles/{role_id}read
GET /orgs/{org}/custom_roles/{role_id}read
GET /orgs/{org}/fine_grained_permissionsread
GET /orgs/{org}/installationsread✖️
GET /orgs/{org}/interaction-limitsread✖️
GET /orgs/{org}/security-managersread✖️
GET /orgs/{org}/settings/billing/actionsread✖️
GET /orgs/{org}/settings/billing/advanced-securityread✖️
GET /orgs/{org}/settings/billing/packagesread✖️
GET /orgs/{org}/settings/billing/shared-storageread✖️

Organization permissions for "Members"

EndpointAccessAdditional permissions
GET /orgs/{org}/external-group/{group_id}write✖️
GET /orgs/{org}/external-groupswrite✖️
POST /orgs/{org}/invitationswrite✖️
DELETE /orgs/{org}/invitations/{invitation_id}write✖️
DELETE /orgs/{org}/members/{username}write✖️
PUT /orgs/{org}/memberships/{username}write✖️
DELETE /orgs/{org}/memberships/{username}write✖️
DELETE /orgs/{org}/organization-roles/teams/{team_slug}write✖️
PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/users/{username}write✖️
PUT /orgs/{org}/organization-roles/users/{username}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}write✖️
PUT /orgs/{org}/outside_collaborators/{username}write✖️
DELETE /orgs/{org}/outside_collaborators/{username}write✖️
PUT /orgs/{org}/public_members/{username}write✖️
DELETE /orgs/{org}/public_members/{username}write✖️
GET /orgs/{org}/team-sync/groupswrite✖️
POST /orgs/{org}/teamswrite✖️
GET /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
PATCH /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
DELETE /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
POST /scim/v2/organizations/{org}/Userswrite✖️
PUT /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
PATCH /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
DELETE /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
PUT /teams/{team_id}/members/{username}write✖️
DELETE /teams/{team_id}/members/{username}write✖️
PATCH /user/memberships/orgs/{org}write✖️
GET /orgs/{org}/failed_invitationsread✖️
GET /orgs/{org}/invitationsread✖️
GET /orgs/{org}/invitations/{invitation_id}/teamsread✖️
GET /orgs/{org}/membersread✖️
GET /orgs/{org}/members/{username}read✖️
GET /orgs/{org}/memberships/{username}read✖️
GET /orgs/{org}/organization-roles/{role_id}/teamsread✖️
GET /orgs/{org}/organization-roles/{role_id}/usersread✖️
GET /orgs/{org}/outside_collaboratorsread✖️
GET /orgs/{org}/public_membersread✖️
GET /orgs/{org}/public_members/{username}read✖️
GET /orgs/{org}/teamsread✖️
GET /scim/v2/organizations/{org}/Usersread✖️
GET /scim/v2/organizations/{org}/Users/{scim_user_id}read✖️
GET /teams/{team_id}/members/{username}read✖️
GET /user/memberships/orgs/{org}read✖️

Organization permissions for "Projects"

EndpointAccessAdditional permissions
GET /projects/{project_id}/collaboratorsadmin
PUT /projects/{project_id}/collaborators/{username}admin
DELETE /projects/{project_id}/collaborators/{username}admin
GET /projects/{project_id}/collaborators/{username}/permissionadmin
POST /orgs/{org}/projectswrite✖️
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
POST /projects/{project_id}/columnswrite
GET /orgs/{org}/projectsread✖️
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread

Organization permissions for "Self-hosted runners"

EndpointAccessAdditional permissions
POST /orgs/{org}/actions/runner-groupswrite✖️
PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}write✖️
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}write✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositorieswrite✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runnerswrite✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write✖️
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write✖️
POST /orgs/{org}/actions/runners/generate-jitconfigwrite✖️
POST /orgs/{org}/actions/runners/registration-tokenwrite✖️
POST /orgs/{org}/actions/runners/remove-tokenwrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}write✖️
POST /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
PUT /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}write✖️
GET /orgs/{org}/actions/runner-groupsread✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}read✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositoriesread✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runnersread✖️
GET /orgs/{org}/actions/runnersread✖️
GET /orgs/{org}/actions/runners/downloadsread✖️
GET /orgs/{org}/actions/runners/{runner_id}read✖️
GET /orgs/{org}/actions/runners/{runner_id}/labelsread✖️

Repository permissions for "Actions"

EndpointAccessAdditional permissions
DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}write✖️
DELETE /repos/{owner}/{repo}/actions/cacheswrite✖️
DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}write✖️
POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerunwrite✖️
PUT /repos/{owner}/{repo}/actions/oidc/customization/subwrite✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}write✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/approvewrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancelwrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancelwrite✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logswrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerunwrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobswrite✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disablewrite✖️
POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatcheswrite✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enablewrite✖️
GET /repos/{owner}/{repo}/actions/artifactsread✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}read✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}read✖️
GET /repos/{owner}/{repo}/actions/cache/usageread✖️
GET /repos/{owner}/{repo}/actions/cachesread✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}read✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logsread✖️
GET /repos/{owner}/{repo}/actions/oidc/customization/subread✖️
GET /repos/{owner}/{repo}/actions/runsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}read✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvalsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifactsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}read✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/logsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/timingread✖️
GET /repos/{owner}/{repo}/actions/workflowsread✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}read✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runsread✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timingread✖️
GET /repos/{owner}/{repo}/environmentsread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}read✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policiesread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}read✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rulesread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/appsread✖️

Repository permissions for "Administration"

EndpointAccessAdditional permissions
POST /orgs/{org}/reposwrite✖️
PATCH /repos/{owner}/{repo}write✖️
DELETE /repos/{owner}/{repo}write✖️
PUT /repos/{owner}/{repo}/actions/permissionswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/accesswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/selected-actionswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/workflowwrite✖️
POST /repos/{owner}/{repo}/actions/runners/generate-jitconfigwrite✖️
POST /repos/{owner}/{repo}/actions/runners/registration-tokenwrite✖️
POST /repos/{owner}/{repo}/actions/runners/remove-tokenwrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}write✖️
POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}write✖️
POST /repos/{owner}/{repo}/autolinkswrite✖️
DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}write✖️
PUT /repos/{owner}/{repo}/automated-security-fixeswrite✖️
DELETE /repos/{owner}/{repo}/automated-security-fixeswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protectionwrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protectionwrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictionswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
PATCH /repos/{owner}/{repo}/code-scanning/default-setupwrite✖️
PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
PUT /repos/{owner}/{repo}/collaborators/{username}write✖️
DELETE /repos/{owner}/{repo}/collaborators/{username}write✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}write✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}write✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policieswrite✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_ruleswrite✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}write✖️
POST /repos/{owner}/{repo}/forkswrite
PUT /repos/{owner}/{repo}/interaction-limitswrite✖️
DELETE /repos/{owner}/{repo}/interaction-limitswrite✖️
PATCH /repos/{owner}/{repo}/invitations/{invitation_id}write✖️
DELETE /repos/{owner}/{repo}/invitations/{invitation_id}write✖️
POST /repos/{owner}/{repo}/keyswrite✖️
DELETE /repos/{owner}/{repo}/keys/{key_id}write✖️
POST /repos/{owner}/{repo}/pageswrite
PUT /repos/{owner}/{repo}/pageswrite
DELETE /repos/{owner}/{repo}/pageswrite
GET /repos/{owner}/{repo}/pages/healthwrite
PUT /repos/{owner}/{repo}/private-vulnerability-reportingwrite✖️
DELETE /repos/{owner}/{repo}/private-vulnerability-reportingwrite✖️
POST /repos/{owner}/{repo}/rulesetswrite✖️
GET /repos/{owner}/{repo}/rulesets/rule-suiteswrite✖️
GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}write✖️
PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}write✖️
DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}write✖️
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forkswrite
POST /repos/{owner}/{repo}/tags/protectionwrite✖️
DELETE /repos/{owner}/{repo}/tags/protection/{tag_protection_id}write✖️
PUT /repos/{owner}/{repo}/topicswrite✖️
POST /repos/{owner}/{repo}/transferwrite✖️
PUT /repos/{owner}/{repo}/vulnerability-alertswrite✖️
DELETE /repos/{owner}/{repo}/vulnerability-alertswrite✖️
POST /user/reposwrite✖️
PATCH /user/repository_invitations/{invitation_id}write✖️
DELETE /user/repository_invitations/{invitation_id}write✖️
GET /repos/{owner}/{repo}/actions/permissionsread✖️
GET /repos/{owner}/{repo}/actions/permissions/accessread✖️
GET /repos/{owner}/{repo}/actions/permissions/selected-actionsread✖️
GET /repos/{owner}/{repo}/actions/permissions/workflowread✖️
GET /repos/{owner}/{repo}/actions/runnersread✖️
GET /repos/{owner}/{repo}/actions/runners/downloadsread✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}read✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labelsread✖️
GET /repos/{owner}/{repo}/autolinksread✖️
GET /repos/{owner}/{repo}/autolinks/{autolink_id}read✖️
GET /repos/{owner}/{repo}/automated-security-fixesread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protectionread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signaturesread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checksread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictionsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/usersread✖️
GET /repos/{owner}/{repo}/interaction-limitsread✖️
GET /repos/{owner}/{repo}/invitationsread✖️
GET /repos/{owner}/{repo}/keysread✖️
GET /repos/{owner}/{repo}/keys/{key_id}read✖️
GET /repos/{owner}/{repo}/tags/protectionread✖️
GET /repos/{owner}/{repo}/teamsread✖️
GET /repos/{owner}/{repo}/traffic/clonesread✖️
GET /repos/{owner}/{repo}/traffic/popular/pathsread✖️
GET /repos/{owner}/{repo}/traffic/popular/referrersread✖️
GET /repos/{owner}/{repo}/traffic/viewsread✖️
GET /repos/{owner}/{repo}/vulnerability-alertsread✖️
GET /user/repository_invitationsread✖️

Repository permissions for "Contents"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/branches/{branch}/renamewrite✖️
PATCH /repos/{owner}/{repo}/comments/{comment_id}write✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}write✖️
POST /repos/{owner}/{repo}/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}write✖️
PUT /repos/{owner}/{repo}/contents/{path}write✖️
DELETE /repos/{owner}/{repo}/contents/{path}write✖️
POST /repos/{owner}/{repo}/dependency-graph/snapshotswrite✖️
POST /repos/{owner}/{repo}/dispatcheswrite✖️
POST /repos/{owner}/{repo}/git/blobswrite✖️
POST /repos/{owner}/{repo}/git/commitswrite✖️
POST /repos/{owner}/{repo}/git/refswrite
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
DELETE /repos/{owner}/{repo}/git/refs/{ref}write✖️
POST /repos/{owner}/{repo}/git/tagswrite✖️
POST /repos/{owner}/{repo}/git/treeswrite✖️
PUT /repos/{owner}/{repo}/importwrite✖️
PATCH /repos/{owner}/{repo}/importwrite✖️
DELETE /repos/{owner}/{repo}/importwrite✖️
PATCH /repos/{owner}/{repo}/import/authors/{author_id}write✖️
PATCH /repos/{owner}/{repo}/import/lfswrite✖️
POST /repos/{owner}/{repo}/merge-upstreamwrite✖️
POST /repos/{owner}/{repo}/mergeswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/mergewrite✖️
POST /repos/{owner}/{repo}/releaseswrite
PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}write✖️
DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}write✖️
POST /repos/{owner}/{repo}/releases/generate-noteswrite✖️
PATCH /repos/{owner}/{repo}/releases/{release_id}write✖️
DELETE /repos/{owner}/{repo}/releases/{release_id}write✖️
GET /repos/{owner}/{repo}/activityread✖️
GET /repos/{owner}/{repo}/branchesread✖️
GET /repos/{owner}/{repo}/branches/{branch}read✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databasesread✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}read✖️
GET /repos/{owner}/{repo}/codeowners/errorsread✖️
GET /repos/{owner}/{repo}/commitsread✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-headread✖️
POST /repos/{owner}/{repo}/commits/{commit_sha}/commentsread✖️
GET /repos/{owner}/{repo}/commits/{ref}read✖️
GET /repos/{owner}/{repo}/community/profileread✖️
GET /repos/{owner}/{repo}/compare/{basehead}read✖️
GET /repos/{owner}/{repo}/contents/{path}read✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}read
GET /repos/{owner}/{repo}/dependency-graph/sbomread✖️
POST /repos/{owner}/{repo}/forksread
GET /repos/{owner}/{repo}/git/blobs/{file_sha}read✖️
GET /repos/{owner}/{repo}/git/commits/{commit_sha}read✖️
GET /repos/{owner}/{repo}/git/matching-refs/{ref}read✖️
GET /repos/{owner}/{repo}/git/ref/{ref}read✖️
GET /repos/{owner}/{repo}/git/tags/{tag_sha}read✖️
GET /repos/{owner}/{repo}/git/trees/{tree_sha}read✖️
GET /repos/{owner}/{repo}/importread✖️
GET /repos/{owner}/{repo}/import/authorsread✖️
GET /repos/{owner}/{repo}/import/large_filesread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/releasesread✖️
GET /repos/{owner}/{repo}/releases/assets/{asset_id}read✖️
GET /repos/{owner}/{repo}/releases/latestread✖️
GET /repos/{owner}/{repo}/releases/tags/{tag}read✖️
GET /repos/{owner}/{repo}/releases/{release_id}read✖️
GET /repos/{owner}/{repo}/releases/{release_id}/assetsread✖️
GET /repos/{owner}/{repo}/tarball/{ref}read✖️
GET /repos/{owner}/{repo}/zipball/{ref}read✖️

Repository permissions for "Issues"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/issueswrite✖️
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}write✖️
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/issues/{issue_number}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}write✖️
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issuesread✖️
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/issues/eventsread✖️
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}read✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/reactionsread✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread

Repository permissions for "Metadata"

EndpointAccessAdditional permissions
POST /gistsread
PATCH /gists/{gist_id}read
DELETE /gists/{gist_id}read
POST /gists/{gist_id}/commentsread
GET /gists/{gist_id}/comments/{comment_id}read✖️
PATCH /gists/{gist_id}/comments/{comment_id}read
DELETE /gists/{gist_id}/comments/{comment_id}read
POST /gists/{gist_id}/forksread
PUT /gists/{gist_id}/starread
DELETE /gists/{gist_id}/starread
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}read
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}read
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}read
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
GET /orgs/{org}/reposread✖️
GET /repos/{owner}/{repo}read✖️
GET /repos/{owner}/{repo}/collaboratorsread✖️
GET /repos/{owner}/{repo}/collaborators/{username}read✖️
GET /repos/{owner}/{repo}/collaborators/{username}/permissionread✖️
GET /repos/{owner}/{repo}/commentsread✖️
GET /repos/{owner}/{repo}/comments/{comment_id}read✖️
GET /repos/{owner}/{repo}/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/commentsread✖️
GET /repos/{owner}/{repo}/contributorsread✖️
GET /repos/{owner}/{repo}/eventsread✖️
GET /repos/{owner}/{repo}/forksread✖️
GET /repos/{owner}/{repo}/languagesread✖️
GET /repos/{owner}/{repo}/licenseread✖️
GET /repos/{owner}/{repo}/properties/valuesread✖️
GET /repos/{owner}/{repo}/rules/branches/{branch}read✖️
GET /repos/{owner}/{repo}/rulesetsread✖️
GET /repos/{owner}/{repo}/rulesets/{ruleset_id}read✖️
GET /repos/{owner}/{repo}/stargazersread✖️
GET /repos/{owner}/{repo}/stats/code_frequencyread✖️
GET /repos/{owner}/{repo}/stats/commit_activityread✖️
GET /repos/{owner}/{repo}/stats/contributorsread✖️
GET /repos/{owner}/{repo}/stats/participationread✖️
GET /repos/{owner}/{repo}/stats/punch_cardread✖️
GET /repos/{owner}/{repo}/subscribersread✖️
GET /repos/{owner}/{repo}/tagsread✖️
GET /repos/{owner}/{repo}/topicsread✖️
POST /repos/{template_owner}/{template_repo}/generateread✖️
GET /repositoriesread✖️
GET /search/labelsread✖️
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
GET /user/reposread✖️
GET /users/{username}/reposread✖️

Repository permissions for "Projects"

EndpointAccessAdditional permissions
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
GET /projects/{project_id}/collaboratorswrite
PUT /projects/{project_id}/collaborators/{username}write
DELETE /projects/{project_id}/collaborators/{username}write
GET /projects/{project_id}/collaborators/{username}/permissionwrite
POST /projects/{project_id}/columnswrite
POST /repos/{owner}/{repo}/projectswrite✖️
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread
GET /repos/{owner}/{repo}/projectsread✖️

Repository permissions for "Pull requests"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
POST /repos/{owner}/{repo}/pullswrite✖️
PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}write✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}write✖️
POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}write✖️
PATCH /repos/{owner}/{repo}/pulls/{pull_number}write✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/commentswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replieswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviewswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissalswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/eventswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branchwrite✖️
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/commits/{commit_sha}/pullsread✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}read
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread
GET /repos/{owner}/{repo}/pullsread✖️
GET /repos/{owner}/{repo}/pulls/commentsread✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}read✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/pulls/{pull_number}/commentsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/commitsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/filesread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/mergeread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewersread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviewsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}read✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/commentsread✖️

User permissions for "Profile"

EndpointAccessAdditional permissions
PATCH /userwrite✖️
POST /user/social_accountswrite✖️
DELETE /user/social_accountswrite✖️