ghtier
← All permissions
Organization permission·organization_api_insights:read

API Insights: Read

Tier 3 · Low

Why Tier 3

Reads API usage statistics per actor, which shows which tokens and Apps are active.

Data plane permissions start at Tier 2. This one is lowered for the reason above.

Target
Organization
Plane
DataInsights and billing: Metrics, events, usage, billing and licensing.
Granted by
Fine-grained PAT, GitHub App
Available on
Free, Team, Enterprise Cloud, EMU

What it unlocks

9 REST endpoints need this permission. A few of them:

  • GET /orgs/{org}/insights/api/route-stats/{actor_type}/{actor_id}
  • GET /orgs/{org}/insights/api/subject-stats
  • GET /orgs/{org}/insights/api/summary-stats
  • GET /orgs/{org}/insights/api/summary-stats/users/{user_id}

Roles that include it

No built-in role includes it. Only tokens, Apps or custom roles can grant it.

Classic scopes that reach it

No classic scope reaches it. Only fine-grained PATs, Apps or GITHUB_TOKEN can grant it.

Attack paths

No attack technique, escalation or incident on ghtier goes through this yet.

GitHub Docs: Organization permissions for "API Insights"