# GitHub 앱에 필요한 권한

앱에 부여된 GitHub App각 권한에 대해 앱에서 사용할 수 있는 REST API 엔드포인트입니다.

## 사용 권한 정보 GitHub App

```
          GitHub Apps 는 사용 권한 집합을 사용하여 만들어집니다. 권한은 API를 GitHub App 통해 액세스할 수 있는 리소스를 정의합니다. 자세한 내용은 [AUTOTITLE](/apps/creating-github-apps/creating-github-apps/setting-permissions-for-github-apps)을(를) 참조하세요.
```

올바른 사용 권한을 선택하는 데 도움이 되도록 REST API 응답에서 `X-Accepted-GitHub-Permissions` 헤더를 받게 됩니다. 헤더는 엔드포인트에 액세스하는 데 필요한 권한을 알려줍니다. 자세한 내용은 [REST API 문제 해결](/ko/rest/overview/troubleshooting#resource-not-accessible)을(를) 참조하세요.

프라이빗 리소스에 액세스하려면 이러한 권한이 필요합니다. 일부 엔드포인트는 이러한 권한 없이 퍼블릭 리소스에 액세스하는 데 사용할 수도 있습니다. 엔드포인트가 권한 없이 퍼블릭 리소스에 액세스할 수 있는지 확인하려면 해당 엔드포인트에 대한 설명서를 참조하세요.

일부 엔드포인트에는 둘 이상의 권한이 필요합니다. 다른 엔드포인트는 사용 권한 집합에서 하나의 권한으로 작동합니다. 이러한 경우 "추가 권한" 열에는 확인 표시가 포함됩니다. 엔드포인트를 사용하는 데 필요한 권한에 대한 자세한 내용은 해당 엔드포인트에 대한 설명서를 참조하세요.

**Token types:** UAT = user access token, IAT = installation access token

## Enterprise permissions for "Enterprise Copilot metrics"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-1-day` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-28-day/latest` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/copilot/metrics/reports/users-1-day` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/copilot/metrics/reports/users-28-day/latest` | read | UAT, IAT | ✗ |

## Enterprise permissions for "Enterprise teams"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /enterprises/{enterprise}/teams` | write | UAT, IAT | ✗ |
| `POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add` | write | UAT, IAT | ✗ |
| `POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove` | write | UAT, IAT | ✗ |
| `PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}` | write | UAT, IAT | ✗ |
| `POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/add` | write | UAT, IAT | ✗ |
| `POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/remove` | write | UAT, IAT | ✗ |
| `PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}` | write | UAT, IAT | ✗ |
| `DELETE /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}` | write | UAT, IAT | ✗ |
| `PATCH /enterprises/{enterprise}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `DELETE /enterprises/{enterprise}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/teams/{team_slug}` | read | UAT, IAT | ✗ |

## Organization permissions for "API Insights"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/insights/api/route-stats/{actor_type}/{actor_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/subject-stats` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/summary-stats` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/summary-stats/users/{user_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/summary-stats/{actor_type}/{actor_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/time-stats` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/time-stats/users/{user_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/time-stats/{actor_type}/{actor_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/insights/api/user-stats/{user_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Administration"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /organizations/{org}/actions/cache/retention-limit` | write | UAT, IAT | ✗ |
| `PUT /organizations/{org}/actions/cache/storage-limit` | write | UAT, IAT | ✗ |
| `PATCH /organizations/{org}/settings/billing/budgets/{budget_id}` | write | UAT, IAT | ✗ |
| `DELETE /organizations/{org}/settings/billing/budgets/{budget_id}` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/hosted-runners` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/actions/hosted-runners/{hosted_runner_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/hosted-runners/{hosted_runner_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/oidc/customization/properties/repo` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/oidc/customization/properties/repo/{custom_property_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/oidc/customization/sub` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/artifact-and-log-retention` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/fork-pr-contributor-approval` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/actions/permissions/selected-actions` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/self-hosted-runners` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/actions/permissions/workflow` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/code-security/configurations` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/code-security/configurations/detach` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/code-security/configurations/{configuration_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/code-security/configurations/{configuration_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/code-security/configurations/{configuration_id}/attach` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/copilot/billing/selected_teams` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/copilot/billing/selected_teams` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/copilot/billing/selected_users` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/copilot/billing/selected_users` | write | UAT, IAT | ✓ |
| `PATCH /orgs/{org}/dependabot/repository-access` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/repository-access/default-level` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/interaction-limits` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/interaction-limits` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/rulesets` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/rule-suites` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/{ruleset_id}/history` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/{ruleset_id}/history/{version_id}` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/secret-scanning/pattern-configurations` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/security-managers/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/security-managers/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/settings/immutable-releases` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/settings/immutable-releases/repositories` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/settings/immutable-releases/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/settings/immutable-releases/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/{security_product}/{enablement}` | write | UAT, IAT | ✗ |
| `GET /organizations/{org}/actions/cache/retention-limit` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/actions/cache/storage-limit` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/settings/billing/budgets` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/settings/billing/budgets/{budget_id}` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/settings/billing/premium_request/usage` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/settings/billing/usage` | read | UAT, IAT | ✗ |
| `GET /organizations/{org}/settings/billing/usage/summary` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/cache/usage` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/cache/usage-by-repository` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/github-owned` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/partner` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/limits` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/machine-sizes` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/platforms` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/{hosted_runner_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/oidc/customization/properties/repo` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/oidc/customization/sub` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/artifact-and-log-retention` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/fork-pr-contributor-approval` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/selected-actions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/self-hosted-runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/self-hosted-runners/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/workflow` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/defaults` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/{configuration_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/billing` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot/billing/seats` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot/metrics` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/dependabot/repository-access` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/installations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/interaction-limits` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/members/{username}/copilot` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/secret-scanning/pattern-configurations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/security-managers` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/immutable-releases` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/immutable-releases/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/team/{team_slug}/copilot/metrics` | read | UAT, IAT | ✓ |

## Organization permissions for "Blocking users"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/blocks/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/blocks/{username}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/blocks` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/blocks/{username}` | read | UAT, IAT | ✗ |

## Organization permissions for "Campaigns"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/campaigns` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/campaigns/{campaign_number}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/campaigns/{campaign_number}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/campaigns` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/campaigns/{campaign_number}` | read | UAT, IAT | ✗ |

## Organization permissions for "Copilot Spaces"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/copilot-spaces` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/copilot-spaces/{space_number}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/copilot-spaces/{space_number}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/copilot-spaces/{space_number}/resources` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot-spaces` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot-spaces/{space_number}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot-spaces/{space_number}/resources` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Copilot agent settings"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/copilot/coding-agent/permissions` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/copilot/coding-agent/permissions/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/copilot/coding-agent/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/copilot/coding-agent/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot/coding-agent/permissions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/coding-agent/permissions/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Copilot content exclusion"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/copilot/content_exclusion` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/content_exclusion` | read | UAT, IAT | ✗ |

## Organization permissions for "Custom organization roles"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/organization-roles` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Custom properties"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /orgs/{org}/properties/schema` | admin | UAT, IAT | ✗ |
| `PUT /orgs/{org}/properties/schema/{custom_property_name}` | admin | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/properties/schema/{custom_property_name}` | admin | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/properties/values` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/schema` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/schema/{custom_property_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/values` | read | UAT, IAT | ✗ |

## Organization permissions for "Events"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /users/{username}/events/orgs/{org}` | read | UAT | ✗ |

## Organization permissions for "GitHub Copilot Business"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/copilot-spaces/{space_number}/collaborators` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/copilot/billing/selected_teams` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/copilot/billing/selected_teams` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/copilot/billing/selected_users` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/copilot/billing/selected_users` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot-spaces/{space_number}/collaborators` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/billing` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot/billing/seats` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/copilot/metrics` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/members/{username}/copilot` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/team/{team_slug}/copilot/metrics` | read | UAT, IAT | ✓ |

## Organization permissions for "Hosted runner custom images"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/custom` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}` | read | UAT, IAT | ✗ |

## Organization permissions for "Issue Fields"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/issue-fields` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/issue-fields/{issue_field_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/issue-fields/{issue_field_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/issue-fields` | read | UAT, IAT | ✗ |

## Organization permissions for "Issue Types"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/issue-types` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/issue-types/{issue_type_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/issue-types/{issue_type_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/issue-types` | read | UAT, IAT | ✗ |

## Organization permissions for "Members"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/invitations` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/invitations/{invitation_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/members/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/users/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/organization-roles/users/{username}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/outside_collaborators/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/outside_collaborators/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/public_members/{username}` | write | UAT | ✗ |
| `DELETE /orgs/{org}/public_members/{username}` | write | UAT | ✗ |
| `POST /orgs/{org}/teams` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/teams/{team_slug}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}` | write | UAT, IAT | ✗ |
| `PATCH /teams/{team_id}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}` | write | UAT, IAT | ✗ |
| `PUT /teams/{team_id}/members/{username}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}/members/{username}` | write | UAT, IAT | ✗ |
| `PUT /teams/{team_id}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}/memberships/{username}` | write | UAT, IAT | ✗ |
| `PATCH /user/memberships/orgs/{org}` | write | UAT | ✗ |
| `GET /orgs/{org}/failed_invitations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/invitations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/invitations/{invitation_id}/teams` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/members/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}/teams` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}/users` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/outside_collaborators` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/public_members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/public_members/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/invitations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/repos` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/teams/{team_slug}/teams` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/invitations` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/members` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/members/{username}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/repos` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `PUT /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `DELETE /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `GET /teams/{team_id}/teams` | read | UAT, IAT | ✗ |
| `GET /user/memberships/orgs/{org}` | read | UAT | ✗ |

## Organization permissions for "Network configurations"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/settings/network-configurations` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/settings/network-configurations/{network_configuration_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/settings/network-configurations/{network_configuration_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/network-configurations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/network-configurations/{network_configuration_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/network-settings/{network_settings_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization Copilot metrics"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/copilot/metrics/reports/organization-1-day` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/metrics/reports/organization-28-day/latest` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/metrics/reports/users-1-day` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/copilot/metrics/reports/users-28-day/latest` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization codespaces secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/codespaces/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/codespaces/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/codespaces/secrets` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/codespaces/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/codespaces/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/codespaces/secrets/{secret_name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization codespaces settings"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/codespaces/access` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/codespaces/access/selected_users` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/codespaces/access/selected_users` | write | UAT, IAT | ✗ |

## Organization permissions for "Organization codespaces"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/codespaces` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/members/{username}/codespaces` | read | UAT, IAT | ✓ |

## Organization permissions for "Organization dependabot secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/dependabot/secrets` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization private registries"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/private-registries` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/private-registries/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/private-registries/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries/{secret_name}` | read | UAT, IAT | ✗ |

## Organization permissions for "Personal access token requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/personal-access-token-requests` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/personal-access-token-requests/{pat_request_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-token-requests` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Personal access tokens"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/personal-access-tokens` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/personal-access-tokens/{pat_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-tokens` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Projects"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/projectsV2/{project_number}/drafts` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/projectsV2/{project_number}/fields` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/projectsV2/{project_number}/items` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/projectsV2/{project_number}/items/{item_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/projectsV2/{project_number}/items/{item_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/projectsV2/{project_number}/views` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}/fields` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}/fields/{field_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}/items` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}/items/{item_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/projectsV2/{project_number}/views/{view_number}/items` | read | UAT, IAT | ✗ |

## Organization permissions for "Secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/secrets/{secret_name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/actions/secrets` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/{secret_name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Self-hosted runners"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/actions/runner-groups` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/generate-jitconfig` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/registration-token` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/remove-token` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}/hosted-runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/downloads` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/{runner_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/{runner_id}/labels` | read | UAT, IAT | ✗ |

## Organization permissions for "Variables"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/actions/variables` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/variables/{name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/actions/variables` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/variables/{name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/variables/{name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Webhooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/hooks` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/hooks/{hook_id}/config` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/hooks/{hook_id}/pings` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/config` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/deliveries` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Actions"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/caches` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/oidc/customization/sub` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runs/{run_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/approve` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/cache/storage-limit` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/cache/usage` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/caches` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/jobs/{job_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/oidc/customization/sub` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/timing` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timing` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Administration"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/repos` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/cache/retention-limit` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/cache/storage-limit` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/access` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/artifact-and-log-retention` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-workflows-private-repos` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/selected-actions` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/workflow` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/registration-token` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/remove-token` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/autolinks` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/automated-security-fixes` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/automated-security-fixes` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/code-scanning/default-setup` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/collaborators/{username}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/collaborators/{username}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/environments/{environment_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/forks` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/immutable-releases` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/immutable-releases` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/interaction-limits` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/interaction-limits` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/invitations/{invitation_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/invitations/{invitation_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/keys` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/keys/{key_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pages/health` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/private-vulnerability-reporting` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/private-vulnerability-reporting` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/rulesets` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history/{version_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/topics` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/transfer` | write | UAT | ✗ |
| `PUT /repos/{owner}/{repo}/vulnerability-alerts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/vulnerability-alerts` | write | UAT, IAT | ✗ |
| `POST /repos/{template_owner}/{template_repo}/generate` | write | UAT, IAT | ✓ |
| `PUT /teams/{team_id}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `DELETE /teams/{team_id}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `POST /user/repos` | write | UAT | ✗ |
| `PATCH /user/repository_invitations/{invitation_id}` | write | UAT | ✗ |
| `DELETE /user/repository_invitations/{invitation_id}` | write | UAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/cache/retention-limit` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/access` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/artifact-and-log-retention` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/fork-pr-workflows-private-repos` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/selected-actions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/workflow` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/downloads` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/{runner_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/autolinks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/autolinks/{autolink_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/automated-security-fixes` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/default-setup` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-security-configuration` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/immutable-releases` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/interaction-limits` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/invitations` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/keys` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/keys/{key_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/rule-suites` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/teams` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/traffic/clones` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/traffic/popular/paths` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/traffic/popular/referrers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/traffic/views` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/vulnerability-alerts` | read | UAT, IAT | ✗ |
| `GET /user/repository_invitations` | read | UAT | ✗ |

## Repository permissions for "Artifact metadata"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/artifacts/metadata/deployment-record` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/artifacts/metadata/deployment-record/cluster/{cluster}` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/artifacts/metadata/storage-record` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/artifacts/{subject_digest}/metadata/deployment-records` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/artifacts/{subject_digest}/metadata/storage-records` | read | UAT, IAT | ✓ |

## Repository permissions for "Attestations"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/attestations/delete-request` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/attestations/digest/{subject_digest}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/attestations/{attestation_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/attestations` | write | UAT, IAT | ✗ |
| `POST /users/{username}/attestations/delete-request` | write | UAT, IAT | ✗ |
| `DELETE /users/{username}/attestations/digest/{subject_digest}` | write | UAT, IAT | ✗ |
| `DELETE /users/{username}/attestations/{attestation_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/attestations/repositories` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/attestations/{subject_digest}` | read | UAT, IAT | ✗ |

## Repository permissions for "Checks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/check-runs` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-suites` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/check-suites/preferences` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-runs/{check_run_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-suites/{check_suite_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/check-runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/check-suites` | read | UAT, IAT | ✗ |

## Repository permissions for "Code scanning alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/code-scanning/sarifs` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/analyses` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Codespaces lifecycle admin"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop` | write | UAT, IAT | ✓ |
| `POST /user/codespaces/{codespace_name}/exports` | write | UAT | ✗ |
| `POST /user/codespaces/{codespace_name}/start` | write | UAT | ✗ |
| `POST /user/codespaces/{codespace_name}/stop` | write | UAT | ✗ |
| `GET /user/codespaces/{codespace_name}/exports/{export_id}` | read | UAT | ✗ |

## Repository permissions for "Codespaces metadata"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /repos/{owner}/{repo}/codespaces/devcontainers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/codespaces/machines` | read | UAT, IAT | ✗ |
| `GET /user/codespaces/{codespace_name}/machines` | read | UAT | ✗ |

## Repository permissions for "Codespaces secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /repos/{owner}/{repo}/codespaces/secrets` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/codespaces/secrets/public-key` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}` | write | UAT, IAT | ✗ |

## Repository permissions for "Codespaces"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/codespaces` | write | UAT | ✗ |
| `GET /repos/{owner}/{repo}/codespaces/new` | write | UAT | ✗ |
| `GET /repos/{owner}/{repo}/codespaces/permissions_check` | write | UAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaces` | write | UAT | ✗ |
| `POST /user/codespaces` | write | UAT | ✗ |
| `PATCH /user/codespaces/{codespace_name}` | write | UAT | ✗ |
| `DELETE /user/codespaces/{codespace_name}` | write | UAT | ✗ |
| `POST /user/codespaces/{codespace_name}/publish` | write | UAT | ✗ |
| `GET /orgs/{org}/codespaces` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/members/{username}/codespaces` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/codespaces` | read | UAT | ✗ |
| `GET /user/codespaces` | read | UAT | ✗ |
| `GET /user/codespaces/{codespace_name}` | read | UAT | ✗ |

## Repository permissions for "Commit statuses"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/statuses/{sha}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/status` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/statuses` | read | UAT, IAT | ✗ |

## Repository permissions for "Contents"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/artifacts/metadata/deployment-record` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/artifacts/metadata/deployment-record/cluster/{cluster}` | write | UAT, IAT | ✓ |
| `POST /orgs/{org}/artifacts/metadata/storage-record` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/branches/{branch}/rename` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix/commits` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/dependency-graph/snapshots` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/dispatches` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/blobs` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/commits` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/tags` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/trees` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/import` | write | UAT | ✗ |
| `PATCH /repos/{owner}/{repo}/import` | write | UAT | ✗ |
| `DELETE /repos/{owner}/{repo}/import` | write | UAT | ✗ |
| `PATCH /repos/{owner}/{repo}/import/authors/{author_id}` | write | UAT | ✗ |
| `PATCH /repos/{owner}/{repo}/import/lfs` | write | UAT | ✗ |
| `POST /repos/{owner}/{repo}/merge-upstream` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/merges` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/releases/generate-notes` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses` | write | UAT | ✗ |
| `POST /markdown` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/artifacts/{subject_digest}/metadata/deployment-records` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/artifacts/{subject_digest}/metadata/storage-records` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/activity` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/codeql/databases` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/codeowners/errors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/commits/{commit_sha}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/community/profile` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/compare/{basehead}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/contents/{path}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/sbom` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/sbom/fetch-report/{sbom_uuid}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/sbom/generate-report` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/forks` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/git/blobs/{file_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/commits/{commit_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/matching-refs/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/ref/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/tags/{tag_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/trees/{tree_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/import` | read | UAT | ✗ |
| `GET /repos/{owner}/{repo}/import/authors` | read | UAT | ✗ |
| `GET /repos/{owner}/{repo}/import/large_files` | read | UAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/readme` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/readme/{dir}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/assets/{asset_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/latest` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/tags/{tag}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/{release_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/{release_id}/assets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/tarball/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/zipball/{ref}` | read | UAT, IAT | ✗ |
| `POST /repos/{template_owner}/{template_repo}/generate` | read | UAT, IAT | ✓ |

## Repository permissions for "Custom properties"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/properties/values` | write | UAT, IAT | ✗ |

## Repository permissions for "Dependabot alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}` | read | UAT, IAT | ✗ |

## Repository permissions for "Dependabot secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Deployments"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/deployment_protection_rule` | write | IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/deployments` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/deployments/{deployment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Environments"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/variables` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Issues"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/issues` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/comments/{comment_id}/pin` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/pin` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/issues/{issue_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/comments` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by/{issue_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values/{issue_field_id}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/sub_issue` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/sub_issues` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/issues/{issue_number}/sub_issues/priority` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/labels` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/milestones` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/events` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/events/{event_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocking` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/events` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/parent` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/sub_issues` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/timeline` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels/{name}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels` | read | UAT, IAT | ✓ |

## Repository permissions for "Metadata"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/repos` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators/{username}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators/{username}/permission` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments/{comment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/contributors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/events` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/forks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/languages` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/license` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/private-vulnerability-reporting` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/properties/values` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rules/branches/{branch}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/{ruleset_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stargazers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/code_frequency` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/commit_activity` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/contributors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/participation` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/punch_card` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/subscribers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/tags` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/topics` | read | UAT, IAT | ✗ |
| `GET /repositories` | read | UAT, IAT | ✗ |
| `GET /search/labels` | read | UAT, IAT | ✗ |
| `GET /user/installations/{installation_id}/repositories` | read | UAT | ✗ |
| `GET /user/repos` | read | UAT | ✗ |
| `GET /users/{username}/repos` | read | UAT, IAT | ✗ |

## Repository permissions for "Pages"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/pages/builds` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages/deployments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/health` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pages` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds/latest` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds/{build_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Pull requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/issues/{issue_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/comments` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values/{issue_field_id}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/labels` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/milestones` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/pulls` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/pulls/{pull_number}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/archive` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/{pull_number}/archive` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/comments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/assignees` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/events/{event_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/events` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/timeline` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels/{name}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pulls` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments/{comment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/commits` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/files` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/merge` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments` | read | UAT, IAT | ✗ |

## Repository permissions for "Repository security advisories"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/security-advisories` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/security-advisories` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/security-advisories/reports` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/security-advisories` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks` | read | UAT, IAT | ✓ |

## Repository permissions for "Secret scanning alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/secret-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/scan-history` | read | UAT, IAT | ✗ |

## Repository permissions for "Secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/organization-secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets/{secret_name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Variables"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/actions/variables` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/organization-variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/variables/{name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Webhooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/hooks` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/config` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/pings` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/tests` | read | UAT, IAT | ✗ |

## Repository permissions for "Workflows"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |

## User permissions for "Block another user"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/blocks/{username}` | write | UAT | ✗ |
| `DELETE /user/blocks/{username}` | write | UAT | ✗ |
| `GET /user/blocks` | read | UAT | ✗ |
| `GET /user/blocks/{username}` | read | UAT | ✗ |

## User permissions for "Codespaces user secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/codespaces/secrets/{secret_name}` | write | UAT | ✗ |
| `DELETE /user/codespaces/secrets/{secret_name}` | write | UAT | ✗ |
| `PUT /user/codespaces/secrets/{secret_name}/repositories` | write | UAT | ✗ |
| `PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}` | write | UAT | ✓ |
| `DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}` | write | UAT | ✓ |
| `GET /user/codespaces/secrets` | read | UAT | ✗ |
| `GET /user/codespaces/secrets/public-key` | read | UAT | ✗ |
| `GET /user/codespaces/secrets/{secret_name}` | read | UAT | ✗ |
| `GET /user/codespaces/secrets/{secret_name}/repositories` | read | UAT | ✗ |

## User permissions for "Email addresses"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /user/email/visibility` | write | UAT | ✗ |
| `POST /user/emails` | write | UAT | ✗ |
| `DELETE /user/emails` | write | UAT | ✗ |
| `GET /user/emails` | read | UAT | ✗ |
| `GET /user/public_emails` | read | UAT | ✗ |

## User permissions for "Followers"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/following/{username}` | write | UAT | ✗ |
| `DELETE /user/following/{username}` | write | UAT | ✗ |
| `GET /user/followers` | read | UAT | ✗ |
| `GET /user/following` | read | UAT | ✗ |
| `GET /user/following/{username}` | read | UAT | ✗ |

## User permissions for "GPG keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/gpg_keys` | write | UAT | ✗ |
| `DELETE /user/gpg_keys/{gpg_key_id}` | write | UAT | ✗ |
| `GET /user/gpg_keys` | read | UAT | ✗ |
| `GET /user/gpg_keys/{gpg_key_id}` | read | UAT | ✗ |

## User permissions for "Gists"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /gists` | write | UAT | ✗ |
| `PATCH /gists/{gist_id}` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}` | write | UAT | ✗ |
| `POST /gists/{gist_id}/comments` | write | UAT | ✗ |
| `PATCH /gists/{gist_id}/comments/{comment_id}` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}/comments/{comment_id}` | write | UAT | ✗ |
| `POST /gists/{gist_id}/forks` | write | UAT | ✗ |
| `PUT /gists/{gist_id}/star` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}/star` | write | UAT | ✗ |

## User permissions for "Git SSH keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/keys` | write | UAT | ✗ |
| `DELETE /user/keys/{key_id}` | write | UAT | ✗ |
| `GET /user/keys` | read | UAT | ✗ |
| `GET /user/keys/{key_id}` | read | UAT | ✗ |
| `GET /users/{username}/keys` | read | UAT, IAT | ✗ |

## User permissions for "Interaction limits"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/interaction-limits` | write | UAT | ✗ |
| `DELETE /user/interaction-limits` | write | UAT | ✗ |
| `GET /user/interaction-limits` | read | UAT | ✗ |

## User permissions for "Plan"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /users/{username}/settings/billing/premium_request/usage` | read | UAT | ✗ |
| `GET /users/{username}/settings/billing/usage` | read | UAT | ✗ |
| `GET /users/{username}/settings/billing/usage/summary` | read | UAT | ✗ |

## User permissions for "Private repository invitations"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /repos/{owner}/{repo}/invitations` | read | UAT, IAT | ✓ |

## User permissions for "Profile"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /user` | write | UAT | ✗ |
| `POST /user/social_accounts` | write | UAT | ✗ |
| `DELETE /user/social_accounts` | write | UAT | ✗ |

## User permissions for "SSH signing keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/ssh_signing_keys` | write | UAT | ✗ |
| `DELETE /user/ssh_signing_keys/{ssh_signing_key_id}` | write | UAT | ✗ |
| `GET /user/ssh_signing_keys` | read | UAT | ✗ |
| `GET /user/ssh_signing_keys/{ssh_signing_key_id}` | read | UAT | ✗ |

## User permissions for "Starring"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/starred/{owner}/{repo}` | write | UAT | ✓ |
| `DELETE /user/starred/{owner}/{repo}` | write | UAT | ✓ |
| `GET /user/starred` | read | UAT | ✗ |
| `GET /user/starred/{owner}/{repo}` | read | UAT | ✓ |
| `GET /users/{username}/starred` | read | UAT, IAT | ✗ |

## User permissions for "Watching"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /user/subscriptions` | read | UAT | ✗ |
| `GET /users/{username}/subscriptions` | read | UAT, IAT | ✗ |