Required permissions

Account

When logging into your Bitbucket account, the app requests the following permissions:

• Account Information (read and modify your personal account details).

• Administer Repositories (full administrative control over your repositories).

• Authorize workspace (grants access to your workspace for authentication).

• Delete Repositories (permanently delete repositories).

• Issues (read and update issues in your repositories).

• Manage runners (access and edit your workspace/repository runners).

• Pipelines (access build pipelines and configure their variables).

• Project Settings (read and update workspace project settings, including repository transfers).

• Repositories & Pull Requests (read, update, and manage repositories and pull requests).

• Snippets (read and modify code snippets).

• Team Membership (read and update team membership details).

• Webhooks (read and update repository webhooks).

• Wikis (read and update repository wikis).

---

Token and password

The following permissions are the minimum required to register the Xopero ONE application in your Bitbucket account and access your repositories:

• Account — read

• Repositories — read and admin

You can generate an app password by navigating to the App passwords tab in your Bitbucket account settings.

With minimal privileges, some metadata (e.g., issues) may not be included in the backup. Select the necessary permissions based on the data you need to protect— keep in mind that if you grant only read permissions, backups will work, but restoring data will require generating a new token or password with write permissions.

---

Application password

Application passwords can be configured with specific permission levels. The following list details the permissions required to back up repository metadata within your organization:

• Account — read permission required to assign an organization to Xopero ONE.

• Issues — read permission required to back up issues inside the repository.

• Pipelines — read permission required to back up pipelines, pipeline schedules, known hosts, and pipeline settings.

• Projects — read permission required to record which project a repository belongs to.

• Pull Requests — read permission required to back up pull requests inside the repository.

• Repositories — read and admin permissions required to access repositories and perform backups.

• Wikis — read permission required to back up repository wikis.

Granting only read permissions allows backups to be performed; however, restoring data will require generating a new application password with write permissions.

---

Useful links and items

API tokens | Bitbucket Cloud | Atlassian SupportAtlassian Support