← All permissions
Organization permission·members:read
Members: Read
Tier 3 · Low
Why Tier 3
Lists members, teams, invitations and role assignments. Useful recon for picking targets.
Control plane permissions start at Tier 0. This one is lowered for the reason above.
- Target
- Organization
- Plane
- ControlIdentity: Members, teams, SCIM provisioning and the credentials attached to an account.
- Granted by
- Fine-grained PAT, GitHub App
- Available on
- Every setup
What it unlocks
34 REST endpoints need this permission. A few of them:
- GET /orgs/{org}/failed_invitations
- GET /orgs/{org}/invitations
- GET /orgs/{org}/invitations/{invitation_id}/teams
- GET /orgs/{org}/members
Roles that include it
- T0OwnerThe organization and every repository in it
- T1Security managerThe organization and every repository in it
- T1App managerGitHub Apps owned by the organization
- T2MemberThe organization
- T2ModeratorThe organization's public spaces
Classic scopes that reach it
Attack paths
No attack technique, escalation or incident on ghtier goes through this yet.