ghtier
← All scopes
Classic scope

admin:org

Tier 0 · CriticalControl

Why Tier 0

Tier 0 because it reaches Administration: Write (organization), Members: Write (organization).

GitHub: Fully manage the organization and its teams, projects, and memberships.

Available on: Every setup. Source

Includes write:org, read:org.

Permissions it reaches (41)

TierPermissionEvidence
T0sets tierMembers: Writeorganization6 documented endpoints
  • DELETE /orgs/{org}/organization-roles/teams/{team_slug}
  • DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}
  • DELETE /orgs/{org}/organization-roles/users/{username}
T0sets tierAdministration: Writeorganization24 documented endpoints
  • DELETE /orgs/{org}/actions/oidc/customization/properties/repo/{custom_property_name}
  • DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}
  • DELETE /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}
T1Custom organization roles: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/organization-roles/{role_id}
  • PATCH /orgs/{org}/organization-roles/{role_id}
  • POST /orgs/{org}/organization-roles
T1Custom repository roles: Writeorganization6 documented endpoints
  • DELETE /orgs/{org}/custom-repository-roles/{role_id}
  • DELETE /orgs/{org}/custom_roles/{role_id}
  • PATCH /orgs/{org}/custom-repository-roles/{role_id}
T1Organization private registries: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/private-registries/{secret_name}
  • PATCH /orgs/{org}/private-registries/{secret_name}
  • POST /orgs/{org}/private-registries
T1Secrets: Writeorganization5 documented endpoints
  • DELETE /orgs/{org}/actions/secrets/{secret_name}
  • DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}
  • PUT /orgs/{org}/actions/secrets/{secret_name}
T1Self-hosted runners: Writeorganization17 documented endpoints
  • DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}
  • DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}
  • DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}
T2Codespaces lifecycle admin: Writerepository1 documented endpoint
  • POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop
T2Codespaces: Writerepository1 documented endpoint
  • DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}
T2Variables: Writeorganization6 documented endpoints
  • DELETE /orgs/{org}/actions/variables/{name}
  • DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}
  • PATCH /orgs/{org}/actions/variables/{name}
T2Agent secrets: Writeorganization5 documented endpoints
  • DELETE /orgs/{org}/agents/secrets/{secret_name}
  • DELETE /orgs/{org}/agents/secrets/{secret_name}/repositories/{repository_id}
  • PUT /orgs/{org}/agents/secrets/{secret_name}
T2Agent variables: Writeorganization6 documented endpoints
  • DELETE /orgs/{org}/agents/variables/{name}
  • DELETE /orgs/{org}/agents/variables/{name}/repositories/{repository_id}
  • PATCH /orgs/{org}/agents/variables/{name}
T2Organization codespaces secrets: Writeorganization5 documented endpoints
  • DELETE /orgs/{org}/codespaces/secrets/{secret_name}
  • DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}
  • PUT /orgs/{org}/codespaces/secrets/{secret_name}
T2Organization codespaces settings: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/codespaces/access/selected_users
  • POST /orgs/{org}/codespaces/access/selected_users
  • PUT /orgs/{org}/codespaces/access
T2Organization codespaces: Writeorganization2 documented endpoints
  • DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}
  • POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop
T2Copilot agent settings: Writeorganization4 documented endpoints
  • DELETE /orgs/{org}/copilot/coding-agent/permissions/repositories/{repository_id}
  • PUT /orgs/{org}/copilot/coding-agent/permissions
  • PUT /orgs/{org}/copilot/coding-agent/permissions/repositories
T2Copilot Spaces: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}
  • POST /orgs/{org}/copilot-spaces/{space_number}/resources
  • PUT /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}
T2Organization dependabot secrets: Writeorganization5 documented endpoints
  • DELETE /orgs/{org}/dependabot/secrets/{secret_name}
  • DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}
  • PUT /orgs/{org}/dependabot/secrets/{secret_name}
T3Codespaces: Readrepository2 documented endpoints
  • GET /orgs/{org}/codespaces
  • GET /orgs/{org}/members/{username}/codespaces
T3Issue Fields: Readorganization1 documented endpoint
  • GET /orgs/{org}/issue-fields
T3Issue Fields: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/issue-fields/{issue_field_id}
  • PATCH /orgs/{org}/issue-fields/{issue_field_id}
  • POST /orgs/{org}/issue-fields
T3Issue Types: Readorganization1 documented endpoint
  • GET /orgs/{org}/issue-types
T3Issue Types: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/issue-types/{issue_type_id}
  • POST /orgs/{org}/issue-types
  • PUT /orgs/{org}/issue-types/{issue_type_id}
T3Members: Readorganization2 documented endpoints
  • GET /orgs/{org}/organization-roles/{role_id}/teams
  • GET /orgs/{org}/organization-roles/{role_id}/users
  • GET /orgs/{org}/teams/{team_slug}/repos
T3Variables: Readorganization3 documented endpoints
  • GET /orgs/{org}/actions/variables
  • GET /orgs/{org}/actions/variables/{name}
  • GET /orgs/{org}/actions/variables/{name}/repositories
T3Administration: Readorganization16 documented endpoints
  • GET /organizations/{organization_id}/custom_roles
  • GET /orgs/{org}/actions/permissions
  • GET /orgs/{org}/actions/permissions/artifact-and-log-retention
T3Agent secrets: Readorganization4 documented endpoints
  • GET /orgs/{org}/agents/secrets
  • GET /orgs/{org}/agents/secrets/public-key
  • GET /orgs/{org}/agents/secrets/{secret_name}
T3Agent variables: Readorganization3 documented endpoints
  • GET /orgs/{org}/agents/variables
  • GET /orgs/{org}/agents/variables/{name}
  • GET /orgs/{org}/agents/variables/{name}/repositories
T3Organization codespaces secrets: Readorganization4 documented endpoints
  • GET /orgs/{org}/codespaces/secrets
  • GET /orgs/{org}/codespaces/secrets/public-key
  • GET /orgs/{org}/codespaces/secrets/{secret_name}
T3Organization codespaces: Readorganization2 documented endpoints
  • GET /orgs/{org}/codespaces
  • GET /orgs/{org}/members/{username}/codespaces
T3Copilot agent settings: Readorganization2 documented endpoints
  • GET /orgs/{org}/copilot/coding-agent/permissions
  • GET /orgs/{org}/copilot/coding-agent/permissions/repositories
T3Organization Copilot metrics: Readorganization6 documented endpoints
  • GET /orgs/{org}/copilot/metrics/reports/organization-1-day
  • GET /orgs/{org}/copilot/metrics/reports/organization-28-day/latest
  • GET /orgs/{org}/copilot/metrics/reports/repos-1-day
T3GitHub Copilot Business: Readorganization1 documented endpoint
  • GET /orgs/{org}/copilot-spaces/{space_number}/collaborators
T3GitHub Copilot Business: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}
  • POST /orgs/{org}/copilot-spaces/{space_number}/collaborators
  • PUT /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}
T3Copilot Spaces: Readorganization4 documented endpoints
  • GET /orgs/{org}/copilot-spaces
  • GET /orgs/{org}/copilot-spaces/{space_number}
  • GET /orgs/{org}/copilot-spaces/{space_number}/resources
T3Custom organization roles: Readorganization3 documented endpoints
  • GET /orgs/{org}/organization-fine-grained-permissions
  • GET /orgs/{org}/organization-roles
  • GET /orgs/{org}/organization-roles/{role_id}
T3Custom repository roles: Readorganization6 documented endpoints
  • GET /organizations/{organization_id}/custom_roles
  • GET /orgs/{org}/custom-repository-roles
  • GET /orgs/{org}/custom-repository-roles/{role_id}
T3Organization dependabot secrets: Readorganization4 documented endpoints
  • GET /orgs/{org}/dependabot/secrets
  • GET /orgs/{org}/dependabot/secrets/public-key
  • GET /orgs/{org}/dependabot/secrets/{secret_name}
T3Organization private registries: Readorganization3 documented endpoints
  • GET /orgs/{org}/private-registries
  • GET /orgs/{org}/private-registries/public-key
  • GET /orgs/{org}/private-registries/{secret_name}
T3Secrets: Readorganization4 documented endpoints
  • GET /orgs/{org}/actions/secrets
  • GET /orgs/{org}/actions/secrets/public-key
  • GET /orgs/{org}/actions/secrets/{secret_name}
T3Self-hosted runners: Readorganization10 documented endpoints
  • GET /orgs/{org}/actions/runner-groups
  • GET /orgs/{org}/actions/runner-groups/{runner_group_id}
  • GET /orgs/{org}/actions/runner-groups/{runner_group_id}/hosted-runners