GitHub应用所需的权限

对于授予某个 GitHub App 的每项权限，以下是应用可以使用的 REST API 终结点。

在本文中

关于 GitHub App 权限

GitHub Apps 使用一组权限创建。权限定义了 GitHub App 可通过 API 访问的资源。有关详细信息，请参阅“为GitHub应用选择权限”。

为帮助正确选择权限，在 REST API 响应中将会收到 X-Accepted-GitHub-Permissions 标头。标头将会提示访问端点所需的权限。有关详细信息，请参阅“REST API 故障排除”。

需要拥有这些权限才能访问专用资源。某些端点也可以用来访问不具有这些权限的公共资源。若要查看端点是否可以在没有权限的情况下访问公共资源，请参阅该端点的文档。

某些端点需要多个权限。其他端点使用一组权限中的任何一个权限。在这些情况下，“其他权限”列将包含复选标记。有关使用端点所需的权限的完整详细信息，请参阅该端点的文档。

Enterprise permissions for "Copilot settings"

终结点	访问	令牌类型	其他权限
POST /enterprises/{enterprise}/copilot/billing/selected_enterprise_teams	write	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。
DELETE /enterprises/{enterprise}/copilot/billing/selected_enterprise_teams	write	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。

Enterprise permissions for "Copilot usage records"

终结点	访问	令牌类型	其他权限
GET /enterprises/{enterprise}/copilot/usage-records	read	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。

Enterprise permissions for "Custom enterprise roles"

终结点	访问	令牌类型
DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}	write	UAT IAT
PUT /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/teams/{team_slug}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/users/{username}	write	UAT IAT
PUT /enterprises/{enterprise}/enterprise-roles/users/{username}/{role_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/enterprise-roles/users/{username}/{role_id}	write	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}/teams	read	UAT IAT
GET /enterprises/{enterprise}/enterprise-roles/{role_id}/users	read	UAT IAT

Enterprise permissions for "Custom properties"

终结点	访问	令牌类型
PATCH /enterprises/{enterprise}/properties/schema	write	UAT IAT
PUT /enterprises/{enterprise}/properties/schema/organizations/{org}/{custom_property_name}/promote	write	UAT IAT
PUT /enterprises/{enterprise}/properties/schema/{custom_property_name}	write	UAT IAT
DELETE /enterprises/{enterprise}/properties/schema/{custom_property_name}	write	UAT IAT
GET /enterprises/{enterprise}/properties/schema	read	UAT IAT
GET /enterprises/{enterprise}/properties/schema/{custom_property_name}	read	UAT IAT

Enterprise permissions for "Enterprise AI controls"

终结点	访问	令牌类型
PUT /enterprises/{enterprise}/copilot/content_exclusion	write	UAT IAT
PUT /enterprises/{enterprise}/copilot/custom-agents/source	write	UAT IAT
DELETE /enterprises/{enterprise}/copilot/custom-agents/source	write	UAT IAT
GET /enterprises/{enterprise}/copilot/content_exclusion	read	UAT IAT
GET /enterprises/{enterprise}/copilot/custom-agents	read	UAT IAT
GET /enterprises/{enterprise}/copilot/custom-agents/source	read	UAT IAT

Enterprise permissions for "Enterprise Copilot metrics"

终结点	访问	令牌类型
GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-28-day/latest	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/repos-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/user-teams-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/users-1-day	read	UAT IAT
GET /enterprises/{enterprise}/copilot/metrics/reports/users-28-day/latest	read	UAT IAT

Enterprise permissions for "Enterprise Licensing"

终结点	访问	令牌类型
PUT /enterprises/{enterprise}/visual-studio-subscriptions/{visual_studio_subscription_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/visual-studio-subscriptions/{visual_studio_subscription_id}	write	UAT IAT
GET /enterprises/{enterprise}/visual-studio-subscriptions	read	UAT IAT

Enterprise permissions for "Enterprise SCIM"

终结点	访问	令牌类型
POST /scim/v2/enterprises/{enterprise}/Groups	write	UAT IAT
PUT /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
PATCH /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
DELETE /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	write	UAT IAT
POST /scim/v2/enterprises/{enterprise}/Users	write	UAT IAT
PUT /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
PATCH /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
DELETE /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	write	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Groups	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Users	read	UAT IAT
GET /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}	read	UAT IAT

Enterprise permissions for "Enterprise billing"

终结点	访问	令牌类型	其他权限
POST /enterprises/{enterprise}/settings/billing/budgets	write	UAT IAT
PATCH /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	write	UAT IAT
POST /enterprises/{enterprise}/settings/billing/cost-centers	write	UAT IAT
PATCH /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	write	UAT IAT
POST /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}/resource	write	UAT IAT
DELETE /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}/resource	write	UAT IAT
GET /enterprises/{enterprise}/settings/billing/ai_credit/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets/{budget_id}	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/budgets/{budget_id}/user-states	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/cost-centers	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/cost-centers/{cost_center_id}	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/premium_request/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/reports	read	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。
POST /enterprises/{enterprise}/settings/billing/reports	read	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。
GET /enterprises/{enterprise}/settings/billing/reports/{report_id}	read	UAT IAT	需要多个权限，或者可以使用不同的权限。有关权限的更多信息，请参阅此终结点的文档。
GET /enterprises/{enterprise}/settings/billing/usage	read	UAT IAT
GET /enterprises/{enterprise}/settings/billing/usage/summary	read	UAT IAT

Enterprise permissions for "Enterprise credentials"

终结点	访问	令牌类型
POST /enterprises/{enterprise}/credential-authorizations	write	IAT
DELETE /enterprises/{enterprise}/credential-authorizations	write	IAT
POST /enterprises/{enterprise}/credential-authorizations/revoke-all	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/revoke-credential-type	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/{username}/revoke	write	UAT IAT
POST /enterprises/{enterprise}/credential-authorizations/{username}/revoke-credential-type	write	UAT IAT
GET /enterprises/{enterprise}/credentials	read	UAT IAT
POST /enterprises/{enterprise}/credentials/exports	read	UAT IAT
GET /enterprises/{enterprise}/credentials/exports/{export_id}	read	UAT IAT
GET /enterprises/{enterprise}/credentials/{inventory_id}	read	UAT IAT

Enterprise permissions for "Enterprise custom properties for organizations"

终结点	访问	令牌类型
PATCH /enterprises/{enterprise}/org-properties/schema	admin	UAT IAT
PUT /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	admin	UAT IAT
DELETE /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	admin	UAT IAT
PATCH /enterprises/{enterprise}/org-properties/values	write	UAT IAT
GET /enterprises/{enterprise}/org-properties/schema	read	UAT IAT
GET /enterprises/{enterprise}/org-properties/schema/{custom_property_name}	read	UAT IAT
GET /enterprises/{enterprise}/org-properties/values	read	UAT IAT

Enterprise permissions for "Enterprise innersource vulnerabilities"

终结点	访问