ghtier
← All scopes
Classic scope·part of admin:org

write:org

Tier 1 · HighManagement

Why Tier 1

Tier 1 because it reaches Administration: Write (organization) in part.

GitHub: Read and write access to organization membership and organization projects.

Available on: Every setup. Source

Permissions it reaches (4)

TierPermissionEvidence
T1sets tierAdministration: Writeorganization

In part, counts as T1 (the full permission is T0): Only security configuration, but that is enough to switch secret scanning and push protection off across the organization.

Stated by GitHub: Its documented Administration endpoints are code security configurations, secret scanning custom patterns and Dependabot access.
T2Copilot Spaces: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}
  • POST /orgs/{org}/copilot-spaces/{space_number}/resources
  • PUT /orgs/{org}/copilot-spaces/{space_number}/resources/{space_resource_id}
T3Administration: Readorganization1 documented endpoint
  • GET /orgs/{org}/code-security/configurations/{configuration_id}
T3GitHub Copilot Business: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}
  • POST /orgs/{org}/copilot-spaces/{space_number}/collaborators
  • PUT /orgs/{org}/copilot-spaces/{space_number}/collaborators/{actor_type}/{actor_identifier}