Permissions required for GitHub Apps

About GitHub App permissions

GitHub Apps are created with a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see Choosing permissions for a GitHub App.

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see Troubleshooting the REST API.

These permissions are required to access private resources. Some endpoints can also be used to access public resources without these permissions. To see whether an endpoint can access public resources without a permission, see the documentation for that endpoint.

Some endpoints require more than one permission. Other endpoints work with any one permission from a set of permissions. In these cases, the "Additional permissions" column will include a checkmark. For full details about the permissions that are required to use the endpoint, see the documentation for that endpoint.

Enterprise permissions for "Copilot usage records"

Endpoint	Access	Token types	Additional permissions
GET /enterprises/{enterprise}/copilot/usage-records	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Enterprise permissions for "Custom enterprise roles"

Endpoint	Access	Token types
DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}	write	UAT IAT
PUT /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/users/{username}	write	UAT IAT
PUT /enterprises/{enterprise}/enterprise-roles/users/{username}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/users/{username}/{role_id}	write	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}/teams	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}/users	read	UAT IAT

Enterprise permissions for "Custom properties"

Endpoint	Access	Token types
PATCH /enterprises/{enterprise}/properties/schema	write	UAT IAT
PUT /enterprises/{enterprise}/properties/schema/organizations/{org}/{custom_property_name}/promote	write	UAT IAT
PUT /enterprises/{enterprise}/properties/schema/{custom_property_name}	write	UAT IAT
DELETE /enterprises/{enterprise}/properties/schema/{custom_property_name}	write	UAT IAT
GET /enterprises/{enterprise}/properties/schema	read	UAT IAT
GET /enterprises/{enterprise}/properties/schema/{custom_property_name}	read	UAT IAT

Enterprise permissions for "Enterprise AI controls"

Endpoint	Access	Token types
PUT /enterprises/{enterprise}/copilot/content_exclusion	write	UAT IAT
PUT /enterprises/{enterprise}/copilot/custom-agents/source	write	UAT IAT
DELETE /enterprises/{enterprise}/copilot/custom-agents/source	write	UAT IAT
GET /enterprises/{enterprise}/copilot/content_exclusion	read	UAT IAT
GET /enterprises/{enterprise}/copilot/custom-agents	read	UAT IAT
GET /enterprises/{enterprise}/copilot/custom-agents/source	read	UAT IAT

Enterprise permissions for "Enterprise Copilot metrics"

Endpoint	Access	Token types
GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-28-day/latest	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/repos-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/user-teams-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/users-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/users-28-day/latest	read	UAT IAT

Enterprise permissions for "Enterprise Licensing"

Endpoint	Access	Token types
PUT /enterprises/{enterprise}/visual-studio-subscriptions/{visual_studio_subscription_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/visual-studio-subscriptions/{visual_studio_subscription_id}	write	UAT IAT
GET /enterprises/{enterprise}/visual-studio-subscriptions	read	UAT IAT

Enterprise permissions for "Enterprise SCIM"

Endpoint	Access	Token types
POST /scim/v2/enterprises/{enterprise}/Groups	write	UAT IAT
PUT /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
PATCH /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
DELETE /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
POST /scim/v2/enterprises/{enterprise}/Users	write	UAT IAT
PUT /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
PATCH /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
DELETE /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Groups	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Users	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	read	UAT IAT

Enterprise permissions for "Enterprise billing"

Endpoint	Access	Token types	Additional permissions
POST /enterprises/{enterprise}/settings/billing/budgets	write	UAT IAT
PATCH /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	write	UAT IAT
POST /enterprises/{enterprise}/settings/billing/cost-centers	write	UAT IAT
PATCH /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	write	UAT IAT
POST /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}/resource	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}/resource	write	UAT IAT
GET /enterprises/{enterprise}/settings/billing/ai_credit/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets/{budget_id}/user-states	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/cost-centers	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/premium_request/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/reports	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /enterprises/{enterprise}/settings/billing/reports	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/settings/billing/reports/{report_id}	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/settings/billing/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/usage/summary	read	UAT IAT

Enterprise permissions for "Enterprise credentials"

Endpoint	Access	Token types
DELETE /enterprises/{enterprise}/credential-authorizations	write	IAT
POST /enterprises/{enterprise}/credential-authorizations/revoke-all	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/revoke-credential-type	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/{username}/revoke	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/{username}/revoke-credential-type	write	UAT IAT

Enterprise permissions for "Enterprise custom properties for organizations"

Endpoint	Access	Token types
PATCH /enterprises/{enterprise}/org-properties/schema	admin	UAT IAT
PUT /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	admin	UAT IAT
DELETE /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	admin	UAT IAT
PATCH /enterprises/{enterprise}/org-properties/values	write	UAT IAT
GET /enterprises/{enterprise}/org-properties/schema	read	UAT IAT
GET /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	read	UAT IAT
GET /enterprises/{enterprise}/org-properties/values	read	UAT IAT

Enterprise permissions for "Enterprise innersource vulnerabilities"

Endpoint	Access	Token types	Additional permissions
POST /enterprises/{enterprise}/innersource-vulnerabilities/sync	write	IAT
GET /enterprises/{enterprise}/innersource-vulnerabilities/sync/status/{job_id}	write	IAT

Enterprise permissions for "Enterprise organization installation repositories"

Endpoint	Access	Token types	Additional permissions
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories/add	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories/remove	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/apps/installable_organizations/{org}/accessible_repositories	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Enterprise permissions for "Enterprise organization installations"

Endpoint	Access	Token types	Additional permissions
POST /enterprises/{enterprise}/apps/organizations/{org}/installations	write	UAT IAT
DELETE /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}	write	UAT IAT
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories/add	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PATCH /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories/remove	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/apps/installable_organizations	read	UAT IAT
GET /enterprises/{enterprise}/apps/installable_organizations/{org}/accessible_repositories	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /enterprises/{enterprise}/apps/organizations/{org}/installations	read	UAT IAT
GET /enterprises/{enterprise}/apps/organizations/{org}/installations/{installation_id}/repositories	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Enterprise permissions for "Enterprise teams"

Endpoint	Access	Token types
POST /enterprises/{enterprise}/teams	write	UAT IAT
POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add	write	UAT IAT
POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove	write	UAT IAT
PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}	write	UAT IAT
DELETE /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}	write	UAT IAT
POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/add	write	UAT IAT
POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/remove	write	UAT IAT
PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}	write	UAT IAT
DELETE /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}	write	UAT IAT
PATCH /enterprises/{enterprise}/teams/{team_slug}	write	UAT IAT
DELETE /enterprises/{enterprise}/teams/{team_slug}	write	UAT IAT
GET /enterprises/{enterprise}/members/{username}/teams	read	UAT IAT
GET /enterprises/{enterprise}/teams	read	UAT IAT
GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships	read	UAT IAT
GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}	read	UAT IAT
GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations	read	UAT IAT
GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}	read	UAT IAT
GET /enterprises/{enterprise}/teams/{team_slug}	read	UAT IAT

Organization permissions for "API Insights"

Endpoint	Access	Token types
GET /orgs/{org}/insights/api/route-stats/{actor_type}/{actor_id}	read	UAT IAT
GET /orgs/{org}/insights/api/subject-stats	read	UAT IAT
GET /orgs/{org}/insights/api/summary-stats	read	UAT IAT
GET /orgs/{org}/insights/api/summary-stats/users/{user_id}	read	UAT IAT
GET /orgs/{org}/insights/api/summary-stats/{actor_type}/{actor_id}	read	UAT IAT
GET /orgs/{org}/insights/api/time-stats	read	UAT IAT
GET /orgs/{org}/insights/api/time-stats/users/{user_id}	read	UAT IAT
GET /orgs/{org}/insights/api/time-stats/{actor_type}/{actor_id}	read	UAT IAT
GET /orgs/{org}/insights/api/user-stats/{user_id}	read	UAT IAT

Organization permissions for "Administration"

Endpoint	Access	Token types	Additional permissions
PUT /organizations/{org}/actions/cache/retention-limit	write	UAT IAT
PUT /organizations/{org}/actions/cache/storage-limit	write	UAT IAT
PATCH /orgs/{org}	write	UAT IAT
DELETE /orgs/{org}	write	UAT IAT
POST /orgs/{org}/actions/hosted-runners	write	UAT IAT
PATCH /orgs/{org}/actions/hosted-runners/{hosted_runner_id}	write	UAT IAT
DELETE /orgs/{org}/actions/hosted-runners/{hosted_runner_id}	write	UAT IAT
POST /orgs/{org}/actions/oidc/customization/properties/repo	write	UAT IAT
DELETE /orgs/{org}/actions/oidc/customization/properties/repo/{custom_property_name}	write	UAT IAT
PUT /orgs/{org}/actions/oidc/customization/sub	write	UAT IAT
PUT /orgs/{org}/actions/permissions	write	UAT IAT
PUT /orgs/{org}/actions/permissions/artifact-and-log-retention	write	UAT IAT
PUT /orgs/{org}/actions/permissions/fork-pr-contributor-approval	write	UAT IAT
PUT /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos	write	UAT IAT
PUT /orgs/{org}/actions/permissions/repositories	write	UAT IAT
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/permissions/selected-actions	write	UAT IAT
PUT /orgs/{org}/actions/permissions/self-hosted-runners	write	UAT IAT
PUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories	write	UAT IAT
PUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/actions/permissions/workflow	write	UAT IAT
GET /orgs/{org}/bypass-requests/push-rules	write	UAT IAT
PATCH /orgs/{org}/code-scanning/ai-scan	write	UAT IAT
POST /orgs/{org}/code-security/configurations	write	UAT IAT
DELETE /orgs/{org}/code-security/configurations/detach	write	UAT IAT
PATCH /orgs/{org}/code-security/configurations/{configuration_id}	write	UAT IAT
DELETE /orgs/{org}/code-security/configurations/{configuration_id}	write	UAT IAT
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach	write	UAT IAT
PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults	write	UAT IAT
POST /orgs/{org}/copilot/billing/selected_teams	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/copilot/billing/selected_teams	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /orgs/{org}/copilot/billing/selected_users	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/copilot/billing/selected_users	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /orgs/{org}/credential-authorizations/revoke-all	write	UAT IAT
POST /orgs/{org}/credential-authorizations/revoke-credential-type	write	UAT IAT
DELETE /orgs/{org}/credential-authorizations/{credential_id}	write	UAT IAT
POST /orgs/{org}/credential-authorizations/{username}/revoke	write	UAT IAT
POST /orgs/{org}/credential-authorizations/{username}/revoke-credential-type	write	UAT IAT
PATCH /orgs/{org}/dependabot/repository-access	write	UAT IAT
PUT /orgs/{org}/dependabot/repository-access/default-level	write	UAT IAT
PUT /orgs/{org}/interaction-limits	write	UAT IAT
DELETE /orgs/{org}/interaction-limits	write	UAT IAT
GET /orgs/{org}/interaction-limits/pulls/creation-cap	write	UAT IAT
PATCH /orgs/{org}/interaction-limits/pulls/creation-cap	write	UAT IAT
GET /orgs/{org}/rulesets	write	UAT IAT
POST /orgs/{org}/rulesets	write	UAT IAT
GET /orgs/{org}/rulesets/rule-suites	write	UAT IAT
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}	write	UAT IAT
GET /orgs/{org}/rulesets/{ruleset_id}	write	UAT IAT
PUT /orgs/{org}/rulesets/{ruleset_id}	write	UAT IAT
DELETE /orgs/{org}/rulesets/{ruleset_id}	write	UAT IAT
GET /orgs/{org}/rulesets/{ruleset_id}/history	write	UAT IAT
GET /orgs/{org}/rulesets/{ruleset_id}/history/{version_id}	write	UAT IAT
POST /orgs/{org}/secret-scanning/custom-patterns	write	UAT IAT
DELETE /orgs/{org}/secret-scanning/custom-patterns	write	UAT IAT
PATCH /orgs/{org}/secret-scanning/custom-patterns/{pattern_id}	write	UAT IAT
PATCH /orgs/{org}/secret-scanning/pattern-configurations	write	UAT IAT
PUT /orgs/{org}/security-managers/teams/{team_slug}	write	UAT IAT
DELETE /orgs/{org}/security-managers/teams/{team_slug}	write	UAT IAT
PUT /orgs/{org}/settings/immutable-releases	write	UAT IAT
PUT /orgs/{org}/settings/immutable-releases/repositories	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
PUT /orgs/{org}/settings/immutable-releases/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/settings/immutable-releases/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /orgs/{org}/{security_product}/{enablement}	write	UAT IAT
GET /enterprise-installation/{enterprise_or_org}/server-statistics	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /organizations/{organization_id}/custom_roles	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /organizations/{org}/actions/cache/retention-limit	read	UAT IAT
GET /organizations/{org}/actions/cache/storage-limit	read	UAT IAT
GET /orgs/{org}/actions/cache/usage	read	UAT IAT
GET /orgs/{org}/actions/cache/usage-by-repository	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/github-owned	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/partner	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/limits	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/machine-sizes	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/platforms	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/{hosted_runner_id}	read	UAT IAT
GET /orgs/{org}/actions/oidc/customization/properties/repo	read	UAT IAT
GET /orgs/{org}/actions/oidc/customization/sub	read	UAT IAT
GET /orgs/{org}/actions/permissions	read	UAT IAT
GET /orgs/{org}/actions/permissions/artifact-and-log-retention	read	UAT IAT
GET /orgs/{org}/actions/permissions/fork-pr-contributor-approval	read	UAT IAT
GET /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos	read	UAT IAT
GET /orgs/{org}/actions/permissions/repositories	read	UAT IAT
GET /orgs/{org}/actions/permissions/selected-actions	read	UAT IAT
GET /orgs/{org}/actions/permissions/self-hosted-runners	read	UAT IAT
GET /orgs/{org}/actions/permissions/self-hosted-runners/repositories	read	UAT IAT
GET /orgs/{org}/actions/permissions/workflow	read	UAT IAT
GET /orgs/{org}/audit-log	read	UAT IAT
GET /orgs/{org}/code-scanning/ai-scan	read	UAT IAT
GET /orgs/{org}/code-security/configurations	read	UAT IAT
GET /orgs/{org}/code-security/configurations/defaults	read	UAT IAT
GET /orgs/{org}/code-security/configurations/{configuration_id}	read	UAT IAT
GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories	read	UAT IAT
GET /orgs/{org}/copilot/billing	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/copilot/billing/seats	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/credential-authorizations	read	UAT IAT
GET /orgs/{org}/custom-repository-roles	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles/{role_id}	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom_roles/{role_id}	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/dependabot/repository-access	read	UAT IAT
GET /orgs/{org}/fine_grained_permissions	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/installations	read	UAT IAT
GET /orgs/{org}/interaction-limits	read	UAT IAT
GET /orgs/{org}/members/{username}/copilot	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/repository-fine-grained-permissions	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/secret-scanning/custom-patterns	read	UAT IAT
GET /orgs/{org}/secret-scanning/pattern-configurations	read	UAT IAT
GET /orgs/{org}/security-managers	read	UAT IAT
GET /orgs/{org}/settings/billing/advanced-security	read	UAT IAT
GET /orgs/{org}/settings/immutable-releases	read	UAT IAT
GET /orgs/{org}/settings/immutable-releases/repositories	read	UAT IAT

Organization permissions for "Agent secrets"

Endpoint	Access	Token types	Additional permissions
PUT /orgs/{org}/agents/secrets/{secret_name}	write	UAT IAT
DELETE /orgs/{org}/agents/secrets/{secret_name}	write	UAT IAT
PUT /orgs/{org}/agents/secrets/{secret_name}/repositories	write	UAT IAT
PUT /orgs/{org}/agents/secrets/{secret_name}/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/agents/secrets/{secret_name}/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/agents/secrets	read	UAT IAT
GET /orgs/{org}/agents/secrets/public-key	read	UAT IAT
GET /orgs/{org}/agents/secrets/{secret_name}	read	UAT IAT
GET /orgs/{org}/agents/secrets/{secret_name}/repositories	read	UAT IAT

Organization permissions for "Agent variables"

Endpoint	Access	Token types	Additional permissions
POST /orgs/{org}/agents/variables	write	UAT IAT
PATCH /orgs/{org}/agents/variables/{name}	write	UAT IAT
DELETE /orgs/{org}/agents/variables/{name}	write	UAT IAT
PUT /orgs/{org}/agents/variables/{name}/repositories	write	UAT IAT
PUT /orgs/{org}/agents/variables/{name}/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/agents/variables/{name}/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/agents/variables	read	UAT IAT
GET /orgs/{org}/agents/variables/{name}	read	UAT IAT
GET /orgs/{org}/agents/variables/{name}/repositories	read	UAT IAT

Organization permissions for "Blocking users"

Endpoint	Access	Token types
PUT /orgs/{org}/blocks/{username}	write	UAT IAT
DELETE /orgs/{org}/blocks/{username}	write	UAT IAT
GET /orgs/{org}/blocks	read	UAT IAT
GET /orgs/{org}/blocks/{username}	read	UAT IAT

Organization permissions for "Campaigns"

Endpoint	Access	Token types
POST /orgs/{org}/campaigns	write	UAT IAT
PATCH /orgs/{org}/campaigns/{campaign_number}	write	UAT IAT
DELETE /orgs/{org}/campaigns/{campaign_number}	write	UAT IAT
GET /orgs/{org}/campaigns	read	UAT IAT
GET /orgs/{org}/campaigns/{campaign_number}	read	UAT IAT

Organization permissions for "Copilot Spaces"

Endpoint	Access	Token types
POST /orgs/{org}/copilot-spaces	write	UAT IAT
PUT /orgs/{org}/copilot-spaces/{space_number}	write	UAT IAT
DELETE /orgs/{org}/copilot-spaces/{space_number}	write	UAT IAT
POST /orgs/{org}/copilot-spaces/{space_number}/resources	write	UAT IAT
PUT /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}	write	UAT IAT
DELETE /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}	write	UAT IAT
GET /orgs/{org}/copilot-spaces	read	UAT IAT
GET /orgs/{org}/copilot-spaces/{space_number}	read	UAT IAT
GET /orgs/{org}/copilot-spaces/{space_number}/resources	read	UAT IAT
GET /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}	read	UAT IAT

Organization permissions for "Copilot agent settings"

Endpoint	Access	Token types	Additional permissions
PUT /orgs/{org}/copilot/coding-agent/permissions	write	UAT IAT
PUT /orgs/{org}/copilot/coding-agent/permissions/repositories	write	UAT IAT
PUT /orgs/{org}/copilot/coding-agent/permissions/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/copilot/coding-agent/permissions/repositories/{repository_id}	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/copilot/coding-agent/permissions	read	UAT IAT
GET /orgs/{org}/copilot/coding-agent/permissions/repositories	read	UAT IAT

Organization permissions for "Copilot content exclusion"

Endpoint	Access	Token types	Additional permissions
PUT /orgs/{org}/copilot/content_exclusion	write	UAT IAT
GET /orgs/{org}/copilot/content_exclusion	read	UAT IAT

Organization permissions for "Custom organization roles"

Endpoint	Access	Token types
POST /orgs/{org}/organization-roles	write	UAT IAT
PATCH /orgs/{org}/organization-roles/{role_id}	write	UAT IAT
DELETE /orgs/{org}/organization-roles/{role_id}	write	UAT IAT
GET /orgs/{org}/organization-fine-grained-permissions	read	UAT IAT
GET /orgs/{org}/organization-roles	read	UAT IAT
GET /orgs/{org}/organization-roles/{role_id}	read	UAT IAT

Organization permissions for "Custom properties for organizations"

Endpoint	Access	Token types	Additional permissions
PATCH /organizations/{org}/org-properties/values	write	UAT IAT
GET /organizations/{org}/org-properties/values	read	UAT IAT

Organization permissions for "Custom properties"

Endpoint	Access	Token types
PATCH /orgs/{org}/properties/schema	admin	UAT IAT
PUT /orgs/{org}/properties/schema/{custom_property_name}	admin	UAT IAT
DELETE /orgs/{org}/properties/schema/{custom_property_name}	admin	UAT IAT
PATCH /orgs/{org}/properties/values	write	UAT IAT
GET /orgs/{org}/properties/schema	read	UAT IAT
GET /orgs/{org}/properties/schema/{custom_property_name}	read	UAT IAT
GET /orgs/{org}/properties/values	read	UAT IAT

Organization permissions for "Custom repository roles"

Endpoint	Access	Token types	Additional permissions
POST /orgs/{org}/custom-repository-roles	write	UAT IAT
PATCH /orgs/{org}/custom-repository-roles/{role_id}	write	UAT IAT
DELETE /orgs/{org}/custom-repository-roles/{role_id}	write	UAT IAT
POST /orgs/{org}/custom_roles	write	UAT IAT
PATCH /orgs/{org}/custom_roles/{role_id}	write	UAT IAT
DELETE /orgs/{org}/custom_roles/{role_id}	write	UAT IAT
GET /organizations/{organization_id}/custom_roles	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom-repository-roles/{role_id}	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/custom_roles/{role_id}	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/fine_grained_permissions	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/repository-fine-grained-permissions	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Organization permissions for "Events"

Endpoint	Access	Token types	Additional permissions
GET /users/{username}/events/orgs/{org}	read	UAT

Organization permissions for "GitHub Copilot Business"

Endpoint	Access	Token types	Additional permissions
POST /orgs/{org}/copilot-spaces/{space_number}/collaborators	write	UAT IAT
PUT /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}	write	UAT IAT
DELETE /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}	write	UAT IAT
POST /orgs/{org}/copilot/billing/selected_teams	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/copilot/billing/selected_teams	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
POST /orgs/{org}/copilot/billing/selected_users	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
DELETE /orgs/{org}/copilot/billing/selected_users	write	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/copilot-spaces/{space_number}/collaborators	read	UAT IAT
GET /orgs/{org}/copilot/billing	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/copilot/billing/seats	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.
GET /orgs/{org}/members/{username}/copilot	read	UAT IAT	Multiple permissions are required, or a different permission may be used. For more information about the permissions, see the documentation for this endpoint.

Organization permissions for "Hosted runner custom images"

Endpoint	Access	Token types
DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}	write	UAT IAT
DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}	write	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/custom	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions	read	UAT IAT
GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}	read	UAT IAT

Organization permissions for "Issue Fields"

Endpoint	Access	Token types
POST /orgs/{org}/issue-fields	write	UAT IAT
PATCH /orgs/{org}/issue-fields/{issue_field_id}	write	UAT IAT
DELETE /orgs/{org}/issue-fields/{issue_field_id}	write	UAT IAT
GET /orgs/{org}/issue-fields	read	UAT IAT

Organization permissions for "Issue Types"

Endpoint	Access	Token types
POST /orgs/{org}/issue-types	write	UAT IAT
PUT /orgs/{org}/issue-types/{issue_type_id}	write	UAT IAT
DELETE /orgs/{org}/issue-types/{issue_type_id}	write	UAT IAT
GET /orgs/{org}/issue-types	read	UAT IAT

Organization permissions for "Members"

Endpoint	Access	Token types
GET /orgs/{org}/external-group/{group_id}	write	UAT IAT
GET /orgs/{org}/external-groups	write	UAT IAT
POST /orgs/{org}/invitations	write	UAT IAT
DELETE /orgs/{org}/invitations/{invitation_id}	write	UAT IAT
DELETE /orgs/{org}/members/{username}	write	UAT IAT
PUT /orgs/{org}/memberships/{username}	write	UAT IAT
DELETE /orgs/{org}/memberships/{username}	write	UAT IAT
DELETE /orgs/{org}/organization-roles/teams/{team_slug}	write	UAT IAT
PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /orgs/{org}/organization-roles/users/{username}	write	UAT IAT
PUT /orgs/{org}/organization-roles/users/{username}/{role_id}	write	UAT IAT
DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}	write	UAT IAT
PUT /orgs/{org}/outside_collaborators/{username}	write	UAT IAT
DELETE /orgs/{org}/outside_collaborators/{username}	write	UAT IAT
PUT /orgs/{org}/public_members/{username}	write	UAT
DELETE /orgs/{org}/public_members/{username}	write	UAT
GET /orgs/{org}/team-sync/groups	write	UAT IAT
POST /orgs/{org}/teams	write	UAT IAT
PATCH /orgs/{org}/teams/{team_slug}	write	UAT IAT
DELETE /orgs/{org}/teams/{team_slug}	write	UAT IAT
GET /orgs/{org}/teams/{team_slug}/external-groups	write	UAT IAT
PATCH /orgs/{org}/teams/{team_slug}/external-groups	write	UAT IAT
DELETE /orgs/{org}/teams/{team_slug}/external-groups	write	UAT IAT
PUT /orgs/{org}/teams/{team_slug}/memberships/{username}	write	UAT IAT
DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}	write	UAT IAT
GET /orgs/{org}/teams/{team_slug}/team-sync/group-mappings	write	UAT IAT
PATCH /orgs/{org}/teams/{team_slug}/team-sync/group-mappings	write	UAT IAT
POST /scim/v2/organizations/{org}/Users	write	UAT IAT
PUT /scim/v2/organizations/{org}/Users/{scim_user_id}	write	UAT IAT
PATCH /scim/v2/organizations/{org}/Users/{scim_user_id}	write	UAT IAT
DELETE /scim/v2/organizations/{org}/Users/{scim_user_id}	write	UAT IAT
PATCH /teams/{team_id}	write	UAT IAT
DELETE /teams/{team_id}	write	UAT IAT
PUT /teams/{team_id}/members/{username}	write	UAT IAT
DELETE /teams/{team_id}/members/{username}	write	UAT IAT
PUT /teams/{team_id}/memberships/{username}	write	UAT IAT
DELETE /teams/{team_id}/memberships/{username}	write	UAT IAT
GET /teams/{team_id}/team-sync/group-mappings	write	UAT IAT
PATCH /teams/{team_id}/team-sync/group-mappings	write	UAT IAT
PATCH /user/memberships/orgs/{org}	write	UAT
GET /orgs/{org}/failed_invitations	read	UAT IAT
GET /orgs/{org}/invitations	read	UAT IAT
GET /orgs/{org}/invitations/{invitation_id}/teams	read	UAT IAT
GET /orgs/{org}/members	read	UAT IAT
GET /orgs/{org}/members/{username}	read	UAT IAT
GET /orgs/{org}/memberships/{username}	read	UAT IAT
GET /orgs/{org}/organization-roles/{role_id}/teams	read	UAT IAT
GET /orgs/{org}/organization-roles/{role_id}/users	read	UAT IAT
GET /orgs/{org}/outside_collaborators	read	UAT IAT
GET /orgs/{org}/public_members	read

In this article