
( Introduced in GitLab 15.8.) create_runner Grants permission to create runners. admin_mode Grants permission to perform API actions as an administrator, when Admin Mode is enabled. ( Introduced in GitLab 12.10.) sudo Grants permission to perform API actions as any user in the system, when authenticated as an administrator. Available only when the Container Registry is enabled. write_registry Grants read-write (push) access to a Container Registry images if a project is private and authorization is required. read_registry Grants read-only (pull) access to a Container Registry images if a project is private and authorization is required. write_repository Grants read-write access to repositories on private projects using Git-over-HTTP (not using the API). ( Introduced in GitLab 12.10.) read_repository Grants read-only access to repositories on private projects using Git-over-HTTP or the Repository Files API. read_api Grants read access to the API, including all groups and projects, the container registry, and the package registry.

Also grants access to read-only API endpoints under /users. read_user Grants read-only access to the authenticated user’s profile through the /user API endpoint, which includes username, public email, and full name. Scope Access api Grants complete read/write access to the API, including all groups and projects, the container registry, and the package registry. Personal access tokens no longer being able to access container or package registries introduced in GitLab 16.0.Ī personal access token can perform actions based on the assigned scopes.

To do this, you can append a name parameter and a list of comma-separated scopes You can link directly to the Personal Access Token page and have the form prefilled with a name and Prefill personal access token name and scopes Save the personal access token somewhere safe.

