> For the complete documentation index, see [llms.txt](https://helpcenter.gitprotect.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://helpcenter.gitprotect.io/backup-and-recovery/devops/github-enterprise/integration/required-permissions.md).

# Required permissions

Required permissions for integrating GitHub Enterprise with GitProtect and protecting its resources.

**Connecting GitHub Enterprise with GitProtect requires appropriate permissions to access and protect repositories and their associated metadata. The required permissions depend on the type of data that needs to be protected.**

***

## General permissions

{% hint style="success" %}
**GitProtect** supports backup and restore for **GitHub Enterprise Cloud** deployments that are separated from the main **GitHub** environment (for example, <kbd>your-org.ghe.com</kbd>). You can integrate isolated **GitHub Enterprise Cloud** instances as **GitHub Enterprise Cloud with Data Residency**.
{% endhint %}

Integrating **GitHub** with **GitProtect** to back up and restore repositories, projects, and associated metadata requires an account with **full administrative privileges**.

To authenticate and access your account, **GitProtect** requires the following permission scopes:

* [x] Personal user data (read-only): access to email addresses and profile information.
* [x] Repositories: access to both public and private repositories.
* [x] Code and resources: access to issues, pull requests, wikis, settings, webhooks and services, deploy keys, collaboration invites, and workflow management (including updating **GitHub Actions** workflow files).

***

## Permissions for personal access tokens (PAT)&#x20;

Personal access tokens are generated in **GitHub Enterprise** account settings under **Tokens** and can be assigned different permissions.

Registering the **GitProtect** application and executing full repository backup and restore tasks requires a token configured with at least **repo** and **workflow** permissions.

{% hint style="danger" %}
**With minimal privileges, certain metadata may not be included in the backup.** Select the permissions based on the specific data you need to protect.
{% endhint %}

<figure><img src="https://696332517-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtsE6XtJyUIEKVdSxPlS3%2Fuploads%2FAEURRzwDzASr76u3nle0%2Fimage.png?alt=media&amp;token=29ab1f7b-38cd-4c8a-baac-930d0c97d83e" alt=""><figcaption></figcaption></figure>

***

## Useful links and items

{% embed url="<https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens>" %}