← All permissions
User permission·keys:write
Git SSH keys: Write
Tier 1 · High
Why Tier 1
Adds SSH keys to the user's account. A key added here gives lasting Git access as that user in every organization they belong to.
Control plane permissions start at Tier 0. This one is lowered for the reason above.
- Target
- User
- Plane
- ControlIdentity: Members, teams, SCIM provisioning and the credentials attached to an account.
- Granted by
- Fine-grained PAT, GitHub App
- Available on
- Every setup
What it unlocks
2 REST endpoints need this permission. A few of them:
- POST /user/keys
- DELETE /user/keys/{key_id}
Roles that include it
No built-in role includes it. Only tokens, Apps or custom roles can grant it.
Classic scopes that reach it
- T1admin:public_keydocumented
- T1write:public_keydocumented
Attack paths
No attack technique, escalation or incident on ghtier goes through this yet.