About GitHub App permissions
GitHub Apps are created with a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Choosing permissions for a GitHub App."
Some endpoints require additional permissions. When this is the case, the "Additional permissions" column will indicate the other permissions that are required to use the endpoint.
Business permissions for "Enterprise administration"
| Endpoint | Access | Token types | Additional permissions |
|---|---|---|---|
| GET /enterprises/{enterprise}/settings/billing/advanced-security | write | UAT IAT | ✖️ |
| GET /enterprises/{enterprise}/audit-log | read | UAT IAT | ✖️ |
Organization permissions for "Administration"
Organization permissions for "Custom repository roles"
| Endpoint | Access | Token types | Additional permissions |
|---|---|---|---|
| GET /organizations/{organization_id}/custom_roles | read | UAT IAT |
Organization permissions for "Events"
| Endpoint | Access | Token types | Additional permissions |
|---|---|---|---|
| GET /users/{username}/events/orgs/{org} | read | UAT | ✖️ |
Organization permissions for "Members"
Organization permissions for "Organization dependabot secrets"
| Endpoint | Access | Token types | Additional permissions |
|---|---|---|---|