ghtier

Tier calculator

Build a token, an App or a role before you create it in GitHub, and see its tier change as you go. It uses the same tiers as the Access Tiers tables: the strongest permission sets the tier, and a higher level includes the lower ones. The selection is kept in the page address, so a link shows the same result.

Repository, organization and account permissions a fine-grained personal access token can hold.

Repository permissions

  • Actions
  • Administration
  • Agent secrets
  • Agent variables
  • Artifact metadata
  • Attestations
  • Code quality
  • Code scanning alerts
  • Codespaces
  • Codespaces lifecycle admin
  • Codespaces metadata
  • Codespaces secrets
  • Commit statuses
  • Contents
  • Copilot agent settings
  • Custom properties
  • Dependabot alerts
  • Dependabot secrets
  • Deployments
  • Environments
  • GitHub App installation repository access
  • Issues
  • Metadata
  • Pages
  • Pull requests
  • Repository creation
  • Repository security advisories
  • Secret scanning alert dismissal requests
  • Secret scanning alerts
  • Secret scanning push protection bypass requests
  • Secrets
  • Variables
  • Webhooks
  • Workflows

Organization permissions

  • Administration
  • Agent secrets
  • Agent variables
  • API Insights
  • Blocking users
  • Campaigns
  • Copilot agent settings
  • Copilot content exclusion
  • Copilot Spaces
  • Custom organization roles
  • Custom properties
  • Custom properties for organizations
  • Custom repository roles
  • Events
  • External custom properties for repositories
  • GitHub Copilot Business
  • Hosted runner custom images
  • Issue Fields
  • Issue Types
  • Members
  • Network configurations
  • Organization announcement banners
  • Organization bypass requests for secret scanning
  • Organization codespaces
  • Organization codespaces secrets
  • Organization codespaces settings
  • Organization Copilot metrics
  • Organization dependabot secrets
  • Organization dismissal requests for code scanning
  • Organization dismissal requests for Dependabot
  • Organization private registries
  • Projects
  • Secret scanning alert dismissal requests
  • Secrets
  • Self-hosted runners
  • Variables
  • Webhooks

Account permissions

  • Block another user
  • Codespaces user secrets
  • Email addresses
  • Followers
  • Gists
  • Git SSH keys
  • GPG keys
  • Interaction limits
  • Private repository invitations
  • Profile
  • SSH signing keys
  • Starring
  • Watching