> For the complete documentation index, see [llms.txt](https://helpcenter.xopero.com/xopero-one-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://helpcenter.xopero.com/xopero-one-en/backup-and-recovery/devops/github-enterprise/integration/required-permissions.md).

# Required permissions

{% hint style="success" %}
**Xopero ONE** supports backup and restore for **GitHub Enterprise Cloud** deployments that are separated from the main **GitHub** environment (for example, <kbd>your-org.ghe.com</kbd>). You can integrate isolated **GitHub Enterprise Cloud** instances as **GitHub Enterprise Cloud with Data Residency**.
{% endhint %}

## Account <a href="#account" id="account"></a>

The application requires the following permissions to log into your account:

* [x] **Personal User Data** — email addresses (**read-only**) and profile information (**read-only**).
* [x] **Repositories** — access to public and private repositories.
* [x] **Code** — includes issues, pull requests, wikis, settings, webhooks and services, deploy keys, collaboration invites, workflows, and updating **GitHub Action** workflow files.

***

## Personal Access Token (PAT) <a href="#personal_access_token" id="personal_access_token"></a>

The minimum authorization permission required for the token to register the **Xopero ONE** application and perform repository backup or restore is **repo**.

{% hint style="info" %}
You can generate a personal access token in the **Tokens** tab of your **GitHub Enterprise** account.
{% endhint %}

{% hint style="danger" %}
**With minimal privileges, certain metadata may not be included in the backup process.** Select the necessary permissions based on the specific data you need to protect.
{% endhint %}