When you create a GitHub App, you set the permissions that define the resources the app can access via the REST API.