Permissions required for fine-grained personal access tokens

About permissions required for fine-grained personal access token

When you create a fine-grained personal access token, you grant it a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see Managing your personal access tokens.

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see Troubleshooting the REST API.

These permissions are required to access private resources. Some endpoints can also be used to access public resources without these permissions. To see whether an endpoint can access public resources without a permission, see the documentation for that endpoint.

Some endpoints require more than one permission. Other endpoints work with any one permission from a set of permissions. In these cases, the "Additional permissions" column will include a checkmark. For full details about the permissions that are required to use the endpoint, see the documentation for that endpoint.

Organization permissions for "Administration"

Endpoint	Access	Additional permissions
PATCH /orgs/{org}	write
DELETE /orgs/{org}	write
PUT /orgs/{org}/actions/oidc/customization/sub	write
PUT /orgs/{org}/actions/permissions	write
PUT /orgs/{org}/actions/permissions/repositories	write
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/permissions/selected-actions	write
PUT /orgs/{org}/actions/permissions/workflow	write
GET /orgs/{org}/code-security/configurations	write
POST /orgs/{org}/code-security/configurations	write
GET /orgs/{org}/code-security/configurations/defaults	write
DELETE /orgs/{org}/code-security/configurations/detach	write
GET /orgs/{org}/code-security/configurations/{configuration_id}	write
PATCH /orgs/{org}/code-security/configurations/{configuration_id}	write
DELETE /orgs/{org}/code-security/configurations/{configuration_id}	write
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach	write
PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults	write
GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories	write
GET /orgs/{org}/rulesets	write
POST /orgs/{org}/rulesets	write
GET /orgs/{org}/rulesets/rule-suites	write
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}	write
GET /orgs/{org}/rulesets/{ruleset_id}	write
PUT /orgs/{org}/rulesets/{ruleset_id}	write
DELETE /orgs/{org}/rulesets/{ruleset_id}	write
PUT /orgs/{org}/security-managers/teams/{team_slug}	write
DELETE /orgs/{org}/security-managers/teams/{team_slug}	write
POST /orgs/{org}/{security_product}/{enablement}	write
GET /organizations/{organization_id}/custom_roles	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/actions/cache/usage	read
GET /orgs/{org}/actions/cache/usage-by-repository	read
GET /orgs/{org}/actions/oidc/customization/sub	read
GET /orgs/{org}/actions/permissions	read
GET /orgs/{org}/actions/permissions/repositories	read
GET /orgs/{org}/actions/permissions/selected-actions	read
GET /orgs/{org}/actions/permissions/workflow	read
GET /orgs/{org}/audit-log	read
GET /orgs/{org}/custom-repository-roles	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles/{role_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/installations	read
GET /orgs/{org}/repository-fine-grained-permissions	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/security-managers	read
GET /orgs/{org}/settings/billing/advanced-security	read

Organization permissions for "Custom organization roles"

Endpoint	Access	Additional permissions
POST /orgs/{org}/organization-roles	write
PATCH /orgs/{org}/organization-roles/{role_id}	write
DELETE /orgs/{org}/organization-roles/{role_id}	write
GET /orgs/{org}/organization-fine-grained-permissions	read
GET /orgs/{org}/organization-roles	read
GET /orgs/{org}/organization-roles/{role_id}	read

Organization permissions for "Custom properties"

Endpoint	Access	Additional permissions
PATCH /orgs/{org}/properties/schema	admin
PUT /orgs/{org}/properties/schema/{custom_property_name}	admin
DELETE /orgs/{org}/properties/schema/{custom_property_name}	admin
PATCH /orgs/{org}/properties/values	write
GET /orgs/{org}/properties/schema	read
GET /orgs/{org}/properties/schema/{custom_property_name}	read
GET /orgs/{org}/properties/values	read

Organization permissions for "Custom repository roles"

Endpoint	Access	Additional permissions
POST /orgs/{org}/custom-repository-roles	write
PATCH /orgs/{org}/custom-repository-roles/{role_id}	write
DELETE /orgs/{org}/custom-repository-roles/{role_id}	write
GET /organizations/{organization_id}/custom_roles	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles/{role_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/repository-fine-grained-permissions	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Organization permissions for "Events"

Endpoint	Access	Additional permissions
GET /users/{username}/events/orgs/{org}	read

Organization permissions for "Members"

Endpoint	Access	Additional permissions
GET /orgs/{org}/external-group/{group_id}	write
GET /orgs/{org}/external-groups	write
DELETE /orgs/{org}/members/{username}	write
PUT /orgs/{org}/memberships/{username}	write
DELETE /orgs/{org}/memberships/{username}	write
DELETE /orgs/{org}/organization-roles/teams/{team_slug}	write
PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}	write
DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}	write
DELETE /orgs/{org}/organization-roles/users/{username}	write
PUT /orgs/{org}/organization-roles/users/{username}/{role_id}	write
DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}	write
PUT /orgs/{org}/outside_collaborators/{username}	write
DELETE /orgs/{org}/outside_collaborators/{username}	write
PUT /orgs/{org}/public_members/{username}	write
DELETE /orgs/{org}/public_members/{username}	write
POST /orgs/{org}/teams	write
GET /orgs/{org}/teams/{team_slug}/external-groups	write
PATCH /orgs/{org}/teams/{team_slug}/external-groups	write
DELETE /orgs/{org}/teams/{team_slug}/external-groups	write
PUT /teams/{team_id}/members/{username}	write
DELETE /teams/{team_id}/members/{username}	write
PATCH /user/memberships/orgs/{org}	write
GET /orgs/{org}/members	read
GET /orgs/{org}/members/{username}	read
GET /orgs/{org}/memberships/{username}	read
GET /orgs/{org}/organization-roles/{role_id}/teams	read
GET /orgs/{org}/organization-roles/{role_id}/users	read
GET /orgs/{org}/outside_collaborators	read
GET /orgs/{org}/public_members	read
GET /orgs/{org}/public_members/{username}	read
GET /orgs/{org}/teams	read
GET /teams/{team_id}/members/{username}	read
GET /user/memberships/orgs/{org}	read

Organization permissions for "Organization announcement banners"

Endpoint	Access	Additional permissions
PATCH /orgs/{org}/announcement	write
DELETE /orgs/{org}/announcement	write
GET /orgs/{org}/announcement	read

Organization permissions for "Organization dependabot secrets"

Endpoint	Access	Additional permissions
PUT /orgs/{org}/dependabot/secrets/{secret_name}	write
DELETE /orgs/{org}/dependabot/secrets/{secret_name}	write
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories	write
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/dependabot/secrets	read
GET /orgs/{org}/dependabot/secrets/public-key	read
GET /orgs/{org}/dependabot/secrets/{secret_name}	read
GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories	read

Organization permissions for "Personal access token requests"

Endpoint	Access	Additional permissions
POST /orgs/{org}/personal-access-token-requests	write
POST /orgs/{org}/personal-access-token-requests/{pat_request_id}	write
GET /orgs/{org}/personal-access-token-requests	read
GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories	read

Organization permissions for "Personal access tokens"

Endpoint	Access	Additional permissions
POST /orgs/{org}/personal-access-tokens	write
POST /orgs/{org}/personal-access-tokens/{pat_id}	write
GET /orgs/{org}/personal-access-tokens	read
GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories	read

Organization permissions for "Pre-receive hooks"

Endpoint	Access	Additional permissions
PATCH /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}	write
DELETE /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}	write
GET /orgs/{org}/pre-receive-hooks	read
GET /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}	read

Organization permissions for "Projects"

Endpoint	Access	Additional permissions
GET /projects/{project_id}/collaborators	admin	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /projects/{project_id}/collaborators/{username}	admin	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/{project_id}/collaborators/{username}	admin	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}/collaborators/{username}/permission	admin	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /orgs/{org}/projects	write
PATCH /projects/columns/cards/{card_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/columns/cards/{card_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/cards/{card_id}/moves	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /projects/columns/{column_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/columns/{column_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/{column_id}/cards	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/{column_id}/moves	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /projects/{project_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/{project_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/{project_id}/columns	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/projects	read
GET /projects/columns/cards/{card_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/columns/{column_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/columns/{column_id}/cards	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}/columns	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Organization permissions for "Secrets"

Endpoint	Access	Additional permissions
PUT /orgs/{org}/actions/secrets/{secret_name}	write
DELETE /orgs/{org}/actions/secrets/{secret_name}	write
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories	write
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/actions/secrets	read
GET /orgs/{org}/actions/secrets/public-key	read
GET /orgs/{org}/actions/secrets/{secret_name}	read
GET /orgs/{org}/actions/secrets/{secret_name}/repositories	read

Organization permissions for "Self-hosted runners"

Endpoint	Access	Additional permissions
POST /orgs/{org}/actions/runner-groups	write
PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}	write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}	write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories	write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners	write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}	write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}	write
POST /orgs/{org}/actions/runners/generate-jitconfig	write
POST /orgs/{org}/actions/runners/registration-token	write
POST /orgs/{org}/actions/runners/remove-token	write
DELETE /orgs/{org}/actions/runners/{runner_id}	write
POST /orgs/{org}/actions/runners/{runner_id}/labels	write
PUT /orgs/{org}/actions/runners/{runner_id}/labels	write
DELETE /orgs/{org}/actions/runners/{runner_id}/labels	write
DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}	write
GET /orgs/{org}/actions/runner-groups	read
GET /orgs/{org}/actions/runner-groups/{runner_group_id}	read
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories	read
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runners	read
GET /orgs/{org}/actions/runners	read
GET /orgs/{org}/actions/runners/downloads	read
GET /orgs/{org}/actions/runners/{runner_id}	read
GET /orgs/{org}/actions/runners/{runner_id}/labels	read

Organization permissions for "Team discussions"

Endpoint	Access	Additional permissions
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}	write
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}	write

Organization permissions for "Variables"

Endpoint	Access	Additional permissions
POST /orgs/{org}/actions/variables	write
PATCH /orgs/{org}/actions/variables/{name}	write
DELETE /orgs/{org}/actions/variables/{name}	write
PUT /orgs/{org}/actions/variables/{name}/repositories	write
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/actions/variables	read
GET /orgs/{org}/actions/variables/{name}	read
GET /orgs/{org}/actions/variables/{name}/repositories	read

Organization permissions for "Webhooks"

Endpoint	Access	Additional permissions
POST /orgs/{org}/hooks	write
PATCH /orgs/{org}/hooks/{hook_id}	write
DELETE /orgs/{org}/hooks/{hook_id}	write
PATCH /orgs/{org}/hooks/{hook_id}/config	write
POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts	write
POST /orgs/{org}/hooks/{hook_id}/pings	write
GET /orgs/{org}/hooks	read
GET /orgs/{org}/hooks/{hook_id}	read
GET /orgs/{org}/hooks/{hook_id}/config	read
GET /orgs/{org}/hooks/{hook_id}/deliveries	read
GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}	read

Repository permissions for "Actions"

Endpoint	Access	Additional permissions
DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}	write
DELETE /repos/{owner}/{repo}/actions/caches	write
DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}	write
POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun	write
PUT /repos/{owner}/{repo}/actions/oidc/customization/sub	write
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel	write
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs	write
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable	write
POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches	write
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable	write
GET /repos/{owner}/{repo}/actions/artifacts	read
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}	read
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}	read
GET /repos/{owner}/{repo}/actions/cache/usage	read
GET /repos/{owner}/{repo}/actions/cache/usage-policy	read
GET /repos/{owner}/{repo}/actions/caches	read
GET /repos/{owner}/{repo}/actions/jobs/{job_id}	read
GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs	read
GET /repos/{owner}/{repo}/actions/oidc/customization/sub	read
GET /repos/{owner}/{repo}/actions/runs	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs	read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments	read
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/actions/workflows	read
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}	read
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs	read
GET /repos/{owner}/{repo}/environments	read
GET /repos/{owner}/{repo}/environments/{environment_name}	read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies	read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}	read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules	read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}	read

Repository permissions for "Administration"

Endpoint	Access	Additional permissions
POST /orgs/{org}/repos	write
PATCH /repos/{owner}/{repo}	write
DELETE /repos/{owner}/{repo}	write
PATCH /repos/{owner}/{repo}/actions/cache/usage-policy	write
PUT /repos/{owner}/{repo}/actions/permissions	write
PUT /repos/{owner}/{repo}/actions/permissions/access	write
PUT /repos/{owner}/{repo}/actions/permissions/selected-actions	write
PUT /repos/{owner}/{repo}/actions/permissions/workflow	write
POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig	write
POST /repos/{owner}/{repo}/actions/runners/registration-token	write
POST /repos/{owner}/{repo}/actions/runners/remove-token	write
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}	write
POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels	write
PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels	write
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels	write
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}	write
POST /repos/{owner}/{repo}/autolinks	write
DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}	write
PUT /repos/{owner}/{repo}/branches/{branch}/protection	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins	write
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures	write
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts	write
PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps	write
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams	write
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams	write
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users	write
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users	write
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users	write
PATCH /repos/{owner}/{repo}/code-scanning/default-setup	write
PUT /repos/{owner}/{repo}/collaborators/{username}	write
DELETE /repos/{owner}/{repo}/collaborators/{username}	write
PUT /repos/{owner}/{repo}/environments/{environment_name}	write
DELETE /repos/{owner}/{repo}/environments/{environment_name}	write
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies	write
PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}	write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}	write
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules	write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}	write
POST /repos/{owner}/{repo}/forks	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/invitations/{invitation_id}	write
DELETE /repos/{owner}/{repo}/invitations/{invitation_id}	write
POST /repos/{owner}/{repo}/keys	write
DELETE /repos/{owner}/{repo}/keys/{key_id}	write
POST /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/rulesets	write
GET /repos/{owner}/{repo}/rulesets/rule-suites	write
GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}	write
PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}	write
DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}	write
POST /repos/{owner}/{repo}/tags/protection	write
DELETE /repos/{owner}/{repo}/tags/protection/{tag_protection_id}	write
PUT /repos/{owner}/{repo}/topics	write
POST /repos/{owner}/{repo}/transfer	write
PUT /repos/{owner}/{repo}/vulnerability-alerts	write
DELETE /repos/{owner}/{repo}/vulnerability-alerts	write
POST /repos/{template_owner}/{template_repo}/generate	write
POST /user/repos	write
PATCH /user/repository_invitations/{invitation_id}	write
DELETE /user/repository_invitations/{invitation_id}	write
GET /repos/{owner}/{repo}/actions/permissions	read
GET /repos/{owner}/{repo}/actions/permissions/access	read
GET /repos/{owner}/{repo}/actions/permissions/selected-actions	read
GET /repos/{owner}/{repo}/actions/permissions/workflow	read
GET /repos/{owner}/{repo}/actions/runners	read
GET /repos/{owner}/{repo}/actions/runners/downloads	read
GET /repos/{owner}/{repo}/actions/runners/{runner_id}	read
GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels	read
GET /repos/{owner}/{repo}/autolinks	read
GET /repos/{owner}/{repo}/autolinks/{autolink_id}	read
GET /repos/{owner}/{repo}/automated-security-fixes	read
GET /repos/{owner}/{repo}/branches/{branch}/protection	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams	read
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users	read
GET /repos/{owner}/{repo}/code-scanning/default-setup	read
GET /repos/{owner}/{repo}/code-security-configuration	read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps	read
GET /repos/{owner}/{repo}/invitations	read
GET /repos/{owner}/{repo}/keys	read
GET /repos/{owner}/{repo}/keys/{key_id}	read
GET /repos/{owner}/{repo}/replicas/caches	read
GET /repos/{owner}/{repo}/tags/protection	read
GET /repos/{owner}/{repo}/teams	read
GET /repos/{owner}/{repo}/vulnerability-alerts	read
GET /user/repository_invitations	read

Repository permissions for "Checks"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/check-runs	write
PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}	write
POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest	write
POST /repos/{owner}/{repo}/check-suites	write
PATCH /repos/{owner}/{repo}/check-suites/preferences	write
POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/check-runs/{check_run_id}	read
GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations	read
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}	read
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs	read
GET /repos/{owner}/{repo}/commits/{ref}/check-runs	read
GET /repos/{owner}/{repo}/commits/{ref}/check-suites	read

Repository permissions for "Code scanning alerts"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}	write
DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}	write
POST /repos/{owner}/{repo}/code-scanning/sarifs	write
GET /orgs/{org}/code-scanning/alerts	read
GET /repos/{owner}/{repo}/code-scanning/alerts	read
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}	read
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances	read
GET /repos/{owner}/{repo}/code-scanning/analyses	read
GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}	read
GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}	read

Repository permissions for "Commit statuses"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/statuses/{sha}	write
GET /repos/{owner}/{repo}/commits/{ref}/status	read
GET /repos/{owner}/{repo}/commits/{ref}/statuses	read

Repository permissions for "Contents"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/branches/{branch}/rename	write
PATCH /repos/{owner}/{repo}/comments/{comment_id}	write
DELETE /repos/{owner}/{repo}/comments/{comment_id}	write
POST /repos/{owner}/{repo}/comments/{comment_id}/reactions	write
DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}	write
PUT /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/dependency-graph/snapshots	write
POST /repos/{owner}/{repo}/dispatches	write
POST /repos/{owner}/{repo}/git/blobs	write
POST /repos/{owner}/{repo}/git/commits	write
POST /repos/{owner}/{repo}/git/refs	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/git/refs	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/git/refs/{ref}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/git/refs/{ref}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/git/refs/{ref}	write
POST /repos/{owner}/{repo}/git/tags	write
POST /repos/{owner}/{repo}/git/trees	write
POST /repos/{owner}/{repo}/merge-upstream	write
POST /repos/{owner}/{repo}/merges	write
PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge	write
POST /repos/{owner}/{repo}/releases	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/releases	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}	write
DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}	write
POST /repos/{owner}/{repo}/releases/generate-notes	write
PATCH /repos/{owner}/{repo}/releases/{release_id}	write
DELETE /repos/{owner}/{repo}/releases/{release_id}	write
POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses	write
GET /repos/{owner}/{repo}/activity	read
GET /repos/{owner}/{repo}/branches	read
GET /repos/{owner}/{repo}/branches/{branch}	read
GET /repos/{owner}/{repo}/codeowners/errors	read
GET /repos/{owner}/{repo}/commits	read
GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head	read
POST /repos/{owner}/{repo}/commits/{commit_sha}/comments	read
GET /repos/{owner}/{repo}/commits/{ref}	read
GET /repos/{owner}/{repo}/compare/{basehead}	read
GET /repos/{owner}/{repo}/contents/{path}	read
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}	read
GET /repos/{owner}/{repo}/dependency-graph/sbom	read
POST /repos/{owner}/{repo}/forks	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/git/blobs/{file_sha}	read
GET /repos/{owner}/{repo}/git/commits/{commit_sha}	read
GET /repos/{owner}/{repo}/git/matching-refs/{ref}	read
GET /repos/{owner}/{repo}/git/ref/{ref}	read
GET /repos/{owner}/{repo}/git/tags/{tag_sha}	read
GET /repos/{owner}/{repo}/git/trees/{tree_sha}	read
GET /repos/{owner}/{repo}/pulls/{pull_number}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/releases	read
GET /repos/{owner}/{repo}/releases/assets/{asset_id}	read
GET /repos/{owner}/{repo}/releases/latest	read
GET /repos/{owner}/{repo}/releases/tags/{tag}	read
GET /repos/{owner}/{repo}/releases/{release_id}	read
GET /repos/{owner}/{repo}/releases/{release_id}/assets	read
GET /repos/{owner}/{repo}/tarball/{ref}	read
GET /repos/{owner}/{repo}/zipball/{ref}	read

Repository permissions for "Custom properties"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/properties/values	write

Repository permissions for "Dependabot alerts"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}	write
GET /orgs/{org}/dependabot/alerts	read
GET /repos/{owner}/{repo}/dependabot/alerts	read
GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}	read

Repository permissions for "Dependabot secrets"

Endpoint	Access	Additional permissions
PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}	write
DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}	write
GET /repos/{owner}/{repo}/dependabot/secrets	read
GET /repos/{owner}/{repo}/dependabot/secrets/public-key	read
GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}	read

Repository permissions for "Deployments"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/deployments	write
DELETE /repos/{owner}/{repo}/deployments/{deployment_id}	write
POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses	write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/deployments	read
GET /repos/{owner}/{repo}/deployments/{deployment_id}	read
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses	read
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}	read

Repository permissions for "Environments"

Endpoint	Access	Additional permissions
PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/environments/{environment_name}/variables	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/variables	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Repository permissions for "Issues"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/issues	write
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions	write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}	write
PATCH /repos/{owner}/{repo}/issues/{issue_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/assignees	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/comments	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/issues/{issue_number}/lock	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/reactions	write
DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}	write
POST /repos/{owner}/{repo}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/milestones	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/assignees	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/assignees/{assignee}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues	read
GET /repos/{owner}/{repo}/issues/comments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/comments/{comment_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions	read
GET /repos/{owner}/{repo}/issues/events	read
GET /repos/{owner}/{repo}/issues/events/{event_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}	read
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/comments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/events	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/reactions	read
GET /repos/{owner}/{repo}/issues/{issue_number}/timeline	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/labels/{name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones/{milestone_number}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Repository permissions for "Metadata"

Endpoint	Access	Additional permissions
GET /notifications	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/repos	read
GET /repos/{owner}/{repo}	read
GET /repos/{owner}/{repo}/collaborators	read
GET /repos/{owner}/{repo}/collaborators/{username}	read
GET /repos/{owner}/{repo}/collaborators/{username}/permission	read
GET /repos/{owner}/{repo}/comments	read
GET /repos/{owner}/{repo}/comments/{comment_id}	read
GET /repos/{owner}/{repo}/comments/{comment_id}/reactions	read
GET /repos/{owner}/{repo}/commits/{commit_sha}/comments	read
GET /repos/{owner}/{repo}/contributors	read
GET /repos/{owner}/{repo}/events	read
GET /repos/{owner}/{repo}/forks	read
GET /repos/{owner}/{repo}/languages	read
GET /repos/{owner}/{repo}/license	read
GET /repos/{owner}/{repo}/properties/values	read
GET /repos/{owner}/{repo}/rules/branches/{branch}	read
GET /repos/{owner}/{repo}/rulesets	read
GET /repos/{owner}/{repo}/rulesets/{ruleset_id}	read
GET /repos/{owner}/{repo}/stargazers	read
GET /repos/{owner}/{repo}/stats/code_frequency	read
GET /repos/{owner}/{repo}/stats/commit_activity	read
GET /repos/{owner}/{repo}/stats/contributors	read
GET /repos/{owner}/{repo}/stats/participation	read
GET /repos/{owner}/{repo}/stats/punch_card	read
GET /repos/{owner}/{repo}/subscribers	read
GET /repos/{owner}/{repo}/tags	read
GET /repos/{owner}/{repo}/topics	read
GET /repositories	read
GET /search/labels	read
GET /user/installations/{installation_id}/repositories	read
GET /user/repos	read
GET /user/starred/{owner}/{repo}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /user/starred/{owner}/{repo}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /user/starred/{owner}/{repo}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /users/{username}/repos	read

Repository permissions for "Pages"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/pages	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/pages/builds	write
POST /repos/{owner}/{repo}/pages/deployments	write
POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel	write
GET /repos/{owner}/{repo}/pages	read
GET /repos/{owner}/{repo}/pages/builds	read
GET /repos/{owner}/{repo}/pages/builds/latest	read
GET /repos/{owner}/{repo}/pages/builds/{build_id}	read
GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}	read

Repository permissions for "Pre-receive hooks"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}	write
DELETE /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}	write
GET /repos/{owner}/{repo}/pre-receive-hooks	read
GET /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}	read

Repository permissions for "Projects"

Endpoint	Access	Additional permissions
PATCH /projects/columns/cards/{card_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/columns/cards/{card_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/cards/{card_id}/moves	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /projects/columns/{column_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/columns/{column_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/{column_id}/cards	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/columns/{column_id}/moves	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /projects/{project_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/{project_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}/collaborators	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /projects/{project_id}/collaborators/{username}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /projects/{project_id}/collaborators/{username}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}/collaborators/{username}/permission	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /projects/{project_id}/columns	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/projects	write
GET /projects/columns/cards/{card_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/columns/{column_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/columns/{column_id}/cards	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /projects/{project_id}/columns	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/projects	read

Repository permissions for "Pull requests"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/issues/{issue_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/assignees	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/comments	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /repos/{owner}/{repo}/issues/{issue_number}/lock	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/labels	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/labels/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/milestones	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/pulls	write
PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}	write
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}	write
POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions	write
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}	write
PATCH /repos/{owner}/{repo}/pulls/{pull_number}	write
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments	write
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies	write
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers	write
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers	write
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews	write
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}	write
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}	write
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals	write
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events	write
PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch	write
GET /repos/{owner}/{repo}/assignees	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/assignees/{assignee}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls	read
GET /repos/{owner}/{repo}/issues/comments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/comments/{comment_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/events/{event_id}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/comments	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/events	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/issues/{issue_number}/timeline	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/labels/{name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones/{milestone_number}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/pulls	read
GET /repos/{owner}/{repo}/pulls/comments	read
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}	read
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions	read
GET /repos/{owner}/{repo}/pulls/{pull_number}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/pulls/{pull_number}/comments	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/commits	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/files	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/merge	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}	read
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments	read

Repository permissions for "Secret scanning alerts"

Endpoint	Access	Additional permissions
PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}	write
GET /orgs/{org}/secret-scanning/alerts	read
GET /repos/{owner}/{repo}/secret-scanning/alerts	read
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}	read
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations	read

Repository permissions for "Secrets"

Endpoint	Access	Additional permissions
PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}	write
DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}	write
PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/actions/organization-secrets	read
GET /repos/{owner}/{repo}/actions/secrets	read
GET /repos/{owner}/{repo}/actions/secrets/public-key	read
GET /repos/{owner}/{repo}/actions/secrets/{secret_name}	read
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Repository permissions for "Variables"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/actions/variables	write
PATCH /repos/{owner}/{repo}/actions/variables/{name}	write
DELETE /repos/{owner}/{repo}/actions/variables/{name}	write
POST /repos/{owner}/{repo}/environments/{environment_name}/variables	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/actions/organization-variables	read
GET /repos/{owner}/{repo}/actions/variables	read
GET /repos/{owner}/{repo}/actions/variables/{name}	read
GET /repos/{owner}/{repo}/environments/{environment_name}/variables	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Repository permissions for "Webhooks"

Endpoint	Access	Additional permissions
POST /repos/{owner}/{repo}/hooks	write
PATCH /repos/{owner}/{repo}/hooks/{hook_id}	write
DELETE /repos/{owner}/{repo}/hooks/{hook_id}	write
PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config	write
POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts	write
GET /repos/{owner}/{repo}/hooks	read
GET /repos/{owner}/{repo}/hooks/{hook_id}	read
GET /repos/{owner}/{repo}/hooks/{hook_id}/config	read
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries	read
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}	read
POST /repos/{owner}/{repo}/hooks/{hook_id}/pings	read
POST /repos/{owner}/{repo}/hooks/{hook_id}/tests	read

Repository permissions for "Workflows"

Endpoint	Access	Additional permissions
PUT /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /repos/{owner}/{repo}/contents/{path}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/git/refs	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /repos/{owner}/{repo}/git/refs/{ref}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /repos/{owner}/{repo}/releases	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

User permissions for "Email addresses"

Endpoint	Access	Additional permissions
POST /user/emails	write
DELETE /user/emails	write
GET /user/emails	read
GET /user/public_emails	read

User permissions for "Followers"

Endpoint	Access	Additional permissions
PUT /user/following/{username}	write
DELETE /user/following/{username}	write
GET /user/followers	read
GET /user/following	read
GET /user/following/{username}	read

User permissions for "GPG keys"

Endpoint	Access	Additional permissions
POST /user/gpg_keys	write
DELETE /user/gpg_keys/{gpg_key_id}	write
GET /user/gpg_keys	read
GET /user/gpg_keys/{gpg_key_id}	read

User permissions for "Gists"

Endpoint	Access	Additional permissions
POST /gists	write
PATCH /gists/{gist_id}	write
DELETE /gists/{gist_id}	write
POST /gists/{gist_id}/comments	write
PATCH /gists/{gist_id}/comments/{comment_id}	write
DELETE /gists/{gist_id}/comments/{comment_id}	write
POST /gists/{gist_id}/forks	write
PUT /gists/{gist_id}/star	write
DELETE /gists/{gist_id}/star	write

User permissions for "Git SSH keys"

Endpoint	Access	Additional permissions
POST /user/keys	write
DELETE /user/keys/{key_id}	write
GET /user/keys	read
GET /user/keys/{key_id}	read
GET /users/{username}/keys	read

User permissions for "Notifications"

Endpoint	Access	Additional permissions
GET /notifications	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

User permissions for "Profile"

Endpoint	Access	Additional permissions
PATCH /user	write
POST /user/social_accounts	write
DELETE /user/social_accounts	write

User permissions for "SSH signing keys"

Endpoint	Access	Additional permissions
POST /user/ssh_signing_keys	write
DELETE /user/ssh_signing_keys/{ssh_signing_key_id}	write
GET /user/ssh_signing_keys	read
GET /user/ssh_signing_keys/{ssh_signing_key_id}	read

User permissions for "Starring"

Endpoint	Access	Additional permissions
PUT /user/starred/{owner}/{repo}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /user/starred/{owner}/{repo}	write	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /user/starred	read
GET /user/starred/{owner}/{repo}	read	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /users/{username}/starred	read

User permissions for "Watching"

Endpoint	Access	Additional permissions
GET /user/subscriptions	read
GET /users/{username}/subscriptions	read

Permissions required for fine-grained personal access tokens

In this article