Guidance on permissions for fine-grained tokens #365

Activity

1. eilidhmae commented on Jan 24, 2025

   

   eilidhmae

   on Jan 24, 2025

   More actions

   Second this. I am blocked, and find this step too vague to proceed.
2. backspace commented on Oct 30, 2025

   

   backspace

   on Oct 30, 2025

   More actions

   yes, did something change about permissions for tokens? I remember it being a checklist with code-like names as described in the documentation (org:read) but in the Github UI they’re all English-y names now

   
3. backspace commented on Oct 30, 2025

   

   backspace

   on Oct 30, 2025

   More actions

   Following up, I found that these permissions are what worked:

   

   I didn’t iterate this one step at a time because I needed someone to approve permissions changes for me, but this is probably the minimal set, or close to it, for our structure, at least.
4. KevinWu098 commented on Jan 5, 2026

   

   KevinWu098

   on Jan 5, 2026

   Last edited by KevinWu098

   More actions

   Implemented PAT on an org recently. Based on this comment in a similar thread, I was able to get it working. My settings being:

   Actions: Read/Write
   Contents: Read/Write
   Metadata: Read (required)

   Happy to put up a PR to add this guidance to the docs, lmk @peter-evans