1
0
mirror of synced 2026-01-01 09:04:46 -05:00
Files
docs/content/rest/overview/permissions-required-for-github-apps.md
2022-11-29 00:42:36 +00:00

77 KiB

title, intro, redirect_from, versions, topics, miniTocMaxHeadingLevel, shortTitle
title intro redirect_from versions topics miniTocMaxHeadingLevel shortTitle
Permissions required for GitHub Apps You can find the required permissions for each {% data variables.product.prodname_github_app %}-compatible endpoint.
/v3/apps/permissions
/rest/reference/permissions-required-for-github-apps
fpt ghes ghae ghec
* * * *
API
3 GitHub App permissions

About {% data variables.product.prodname_github_app %} permissions

{% data variables.product.prodname_github_apps %} are created with a set of permissions. Permissions define what resources the {% data variables.product.prodname_github_app %} can access via the API. For more information, see "Setting permissions for GitHub Apps."

Actions

{% ifversion fpt or ghec or ghes > 3.4 %}- GET /repos/{owner}/{repo}/actions/cache/usage (read){% endif %} {% ifversion ghes > 3.4 %}- GET /repos/{owner}/{repo}/actions/cache/usage-policy (read){% endif %} {% ifversion fpt or ghec or ghes > 3.6 %}- GET /repos/{owner}/{repo}/actions/caches (read){% endif %} {% ifversion fpt or ghec or ghes > 3.6 %}- DELETE /repos/{owner}/{repo}/actions/caches (write){% endif %} {% ifversion fpt or ghec or ghes > 3.6 %}- DELETE /repos/{owner}/{repo}/actions/caches/{cache_id} (write){% endif %}

Administration

{% ifversion ghes > 3.4 %}- PATCH /repos/{owner}/{repo}/actions/cache/usage-policy (write){% endif %} {% ifversion fpt or ghec %}- PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name} (write){% endif %} {% ifversion fpt or ghec %}- DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name} (write){% endif %} {% ifversion fpt or ghec %}- GET /repos/{owner}/{repo}/interaction-limits (read){% endif %} {% ifversion fpt or ghec %}- PUT /repos/{owner}/{repo}/interaction-limits (write){% endif %} {% ifversion fpt or ghec %}- DELETE /repos/{owner}/{repo}/interaction-limits (write){% endif %}

{% ifversion fpt or ghec %}

Blocking

{% endif %}

Checks

{% ifversion fpt or ghec %}

Codespaces

Codespaces lifecycle admin

Codespaces metadata

Codespaces secrets

Codespaces user secrets

{% endif %}

Contents

{% ifversion fpt or ghec or ghae or ghes > 3.4 %}- GET /repos/{owner}/{repo}/codeowners/errors (read){% endif %}

{% ifversion fpt or ghec or ghes > 3.3 %}

Dependabot secrets

{% endif %}

Deployments

{% ifversion fpt or ghec or ghes %}- POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments (read){% endif %}

{% ifversion fpt or ghec or ghes %}

Emails

{% ifversion fpt or ghec %}- PATCH /user/email/visibility (write){% endif %} {% ifversion fpt or ghec or ghes %}- GET /user/emails (read){% endif %} {% ifversion fpt or ghec or ghes %}- POST /user/emails (write){% endif %} {% ifversion fpt or ghec or ghes %}- DELETE /user/emails (write){% endif %} {% ifversion fpt or ghec or ghes %}- GET /user/public_emails (read){% endif %}

{% endif %}

{% ifversion fpt or ghec or ghes > 3.3 %}

Enterprise administration

{% ifversion fpt or ghec or ghes > 3.3 %}- GET /enterprises/{enterprise}/settings/billing/advanced-security (write){% endif %} {% ifversion fpt or ghec or ghes > 3.4 %}- GET /enterprises/{enterprise}/actions/cache/usage (write){% endif %} {% ifversion ghes > 3.4 %}- GET /enterprises/{enterprise}/actions/cache/usage-policy (write){% endif %} {% ifversion ghes > 3.4 %}- PATCH /enterprises/{enterprise}/actions/cache/usage-policy (write){% endif %}

{% endif %}

Followers

Gists

{% ifversion fpt or ghec or ghes > 3.6 %}

Git signing ssh public keys

{% endif %}

Gpg keys

{% ifversion fpt or ghec %}

Interaction limits

{% endif %}

Issues

Keys

Members

{% ifversion ghec or ghae or ghes > 3.5 %}- PATCH /orgs/{org}/teams/{team_slug}/external-groups (write){% endif %} {% ifversion ghec or ghae or ghes > 3.5 %}- DELETE /orgs/{org}/teams/{team_slug}/external-groups (write){% endif %} {% ifversion ghec or ghae or ghes > 3.5 %}- GET /orgs/{org}/external-group/{group_id} (write){% endif %} {% ifversion ghec or ghae or ghes > 3.5 %}- GET /orgs/{org}/external-groups (write){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/failed_invitations (read){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/invitations (read){% endif %} {% ifversion fpt or ghec %}- POST /orgs/{org}/invitations (write){% endif %} {% ifversion fpt or ghec %}- DELETE /orgs/{org}/invitations/{invitation_id} (write){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/invitations/{invitation_id}/teams (read){% endif %}

Metadata

{% ifversion fpt or ghec %}- GET /user/codespaces/secrets/{secret_name}/repositories (read){% endif %} {% ifversion fpt or ghec %}- PUT /user/codespaces/secrets/{secret_name}/repositories (read){% endif %} {% ifversion fpt or ghec %}- PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id} (read){% endif %} {% ifversion fpt or ghec %}- DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id} (read){% endif %}

Notifications

Organization administration

{% ifversion ghec or ghae or ghes %}- GET /orgs/{org}/audit-log (read){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/settings/billing/actions (read){% endif %} {% ifversion fpt or ghec or ghes > 3.3 %}- GET /orgs/{org}/settings/billing/advanced-security (read){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/settings/billing/packages (read){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/settings/billing/shared-storage (read){% endif %} {% ifversion fpt or ghec %}- GET /enterprise-installation/{enterprise_or_org}/server-statistics (read){% endif %} {% ifversion fpt or ghec %}- GET /orgs/{org}/interaction-limits (read){% endif %} {% ifversion fpt or ghec %}- PUT /orgs/{org}/interaction-limits (write){% endif %} {% ifversion fpt or ghec %}- DELETE /orgs/{org}/interaction-limits (write){% endif %} {% ifversion fpt or ghec or ghes > 3.4 %}- GET /orgs/{org}/actions/cache/usage (read){% endif %} {% ifversion fpt or ghec or ghes > 3.4 %}- GET /orgs/{org}/actions/cache/usage-by-repository (read){% endif %}

{% ifversion fpt or ghec %}

Organization codespaces

Organization codespaces secrets

Organization codespaces settings

{% endif %}

{% ifversion fpt or ghec or ghes > 3.3 %}

Organization custom roles

{% endif %}

{% ifversion fpt or ghec or ghes > 3.3 %}

Organization dependabot secrets

{% endif %}

Organization events

Organization hooks

{% ifversion ghes %}

Organization pre receive hooks

{% endif %}

Organization projects

Organization secrets

Organization self hosted runners

{% ifversion fpt or ghec %}

Organization user blocking

{% endif %}

Pages

{% ifversion fpt or ghec %}

Plan

{% endif %}

Profile

Pull requests

Repository hooks

{% ifversion ghes %}

Repository pre receive hooks

{% endif %}

Repository projects

Secret scanning alerts

{% ifversion fpt or ghec or ghes %}- GET /orgs/{org}/secret-scanning/alerts (read){% endif %}

Secrets

Security events

{% ifversion fpt or ghec or ghae or ghes > 3.4 %}- GET /orgs/{org}/code-scanning/alerts (read){% endif %}

Starring

Statuses

Team discussions

{% ifversion fpt or ghec %}

Vulnerability alerts

{% endif %}

Watching