Required permissions

Account

To log in to your account, Xopero ONE requires the following permissions:

1. Access the authenticated user’s API — Xopero needs read and write access to the API, including:

   1. All groups and projects.

   2. The container registry.

   3. The package registry.

---

Personal Access Token (PAT)

Xopero ONE supports legacy tokens; for proper system operation, it is recommended to use them instead of fine-grained tokens.

The following permissions are the minimum needed to register the Xopero ONE application in your account and access repositories:

• read_api

• read_repository

With minimal privileges, some metadata (such as issues) may not be included in the backup. Select the necessary permissions based on the data you need to protect— if you grant only read permissions, backups can be performed, but restoring data will require a new token or password with write permissions.

By creating Personal Access Token, you can assign various types of permissions. Below is a list of permissions that will allow you to backup the repository metadata you are interested in in your organization.

read_api - Read permission required to assign an organization to GitLab.

api - Grants complete read/write access to the API, including all groups and projects.

read_repository - it is required to access the list of repositories and to be able to back them up.

write_repository - it is required to access to restore repository.

read_registry - grants read access to a Container Registry images if a project is private and authorization is required.

By creating a personal access token, you can assign different types of permissions. The following permissions allow you to back up the repository metadata in your organization:

• read_api — required to assign an organization to GitLab.

• api — grants full read/write access to the API, including all groups and projects.

• read_repository — required to access the list of repositories and perform backups.

• write_repository — required to restore a repository.

• read_registry — grants read access to Container Registry images when a project is private and authorization is required.

For more information about personal access tokens, visit the official GitLab website.