Required permissions

Account

To install the Xopero ONE application, you must use an account with sufficient privileges, typically an administrator account. Additionally, the application requires the following permissions to function correctly:

• Full control of projects

• Read team discussions

• Read organization and team membership, read organization projects

• Read all user profile data

• Full control of private repositories

• Access user email addresses (read-only)

• Update GitHub Action workflows

These permissions ensure seamless integration and proper functionality of the application within the intended environment.

💡 Below you can find examples of different types of permissions along with their explanations.

PERMISSIONS

TYPE	LEVEL
Owner	default	Full backup and restore.
	admin	Full backup and restore.
	write	Full backup and restore.
	read	Full backup. Restore only to your own account.
Member	admin	Full backup. Restore only to your own account.
	maintain	Full backup. Restore only to your own account.
	write	Full backup. Restore only to your own account.
	triage	Backup (excluding collaborators). Restore only to your own account.
Collaborator (external in the organization)	read	Backup (excluding collaborators). Restore only to your own account.
Collaborator (outside the organization)	default	Backup (excluding collaborators). Restore only to your own account.

---

Personal Access Token (PAT)

The minimum authorization permissions required for the token to register the Xopero ONE application and perform repository backup and restore are: repo and workflow.

With minimal privileges, certain metadata may not be included in the backup process. Select the necessary permissions based on the specific data you need to protect.

You can generate a personal access token in the Developer settings > Personal access tokens section of your GitHub account. When creating a PAT, you can assign different types of permissions— the list below outlines the permissions required to back up specific repository metadata within your organization:

1. admin:org — allows you to read the organization's projects.

2. project — allows you to read the projects from which the repository comes.

3. read:discussion — allows you to read team discussions.

4. read:public_key — grants access to keys.

5. read:repo_hook — grants access to webhooks.

6. repo — grants access to repositories.

Learn more about user access tokens in the official GitHub documentation.

If you grant only read permissions, you will be able to perform a backup, but restoring data will require generating a new token with write permissions.