← All permissions
Organization permission·organization_actions_variables:read
Variables: Read
Tier 3 · Low
Why Tier 3
Reads organization Actions variables.
Data plane permissions start at Tier 2. This one is lowered for the reason above.
- Target
- Organization
- Plane
- DataWorkflows: Workflow files and runs, variables, deployments, environments and Pages.
- Granted by
- Fine-grained PAT, GitHub App
- Available on
- Every setup
What it unlocks
3 REST endpoints need this permission. A few of them:
- GET /orgs/{org}/actions/variables
- GET /orgs/{org}/actions/variables/{name}
- GET /orgs/{org}/actions/variables/{name}/repositories
Roles that include it
No built-in role includes it. Only tokens, Apps or custom roles can grant it.
Classic scopes that reach it
Attack paths
No attack technique, escalation or incident on ghtier goes through this yet.