ghtier
← All permissions
User permission·gists:write

Gists: Write

Tier 3 · Low

Why Tier 3

Creates and edits the user's gists. Content outside the organization's repositories.

Data plane permissions start at Tier 2. This one is lowered for the reason above.

Target
User
Plane
DataAccount: A user's own profile, follows, stars, gists and blocks.
Granted by
Fine-grained PAT, GitHub App
Available on
Every setup

What it unlocks

9 REST endpoints need this permission. A few of them:

  • POST /gists
  • PATCH /gists/{gist_id}
  • DELETE /gists/{gist_id}
  • POST /gists/{gist_id}/comments

Roles that include it

No built-in role includes it. Only tokens, Apps or custom roles can grant it.

Classic scopes that reach it

  • T3giststated by GitHub

Attack paths

No attack technique, escalation or incident on ghtier goes through this yet.

GitHub Docs: User permissions for "Gists"