← All permissions
Repository permission·codespaces:write
Codespaces: Write
Tier 2 · Medium
Why Tier 2
Creates codespaces, which run the repository's dev container with the user's access.
- Target
- Repository
- Plane
- DataCodespaces: Creating and running cloud development environments.
- Granted by
- Fine-grained PAT, GitHub App
- Available on
- Free, Team, Enterprise Cloud, EMU
What it unlocks
9 REST endpoints need this permission. A few of them:
- POST /repos/{owner}/{repo}/codespaces
- POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaces
- POST /user/codespaces
- PATCH /user/codespaces/{codespace_name}
Roles that include it
- T0OwnerThe organization and every repository in it
- T0All-repository adminEvery repository in the organization
- T1WriteOne repository
- T1MaintainOne repository
- T1AdminOne repository
- T1All-repository writeEvery repository in the organization
- T1All-repository maintainEvery repository in the organization
- T2TriageOne repository(in part: A codespace with the person's own access and no repository secrets.)
- T2All-repository triageEvery repository in the organization(in part: A codespace with the person's own access and no repository secrets.)
- T3ReadOne repository(in part: A codespace with the person's own access and no repository secrets.)
- T3All-repository readEvery repository in the organization(in part: A codespace with the person's own access and no repository secrets.)
Classic scopes that reach it
Attack paths
No attack technique, escalation or incident on ghtier goes through this yet.