Create access token for organization

[eamonburns]

Select Topic Area

Question

Body

How do I create a personal access token for my organization, so that I can read/clone a private repository?
I can see that I can create a PAT policy in "Organization > Settings > Personal Access Tokens" but I don't see where I can make (or request) a new one

[gitstua]

Hi @Agent-E11,

Personal Access Tokens are created for the user and can be assigned permissions to your repos and organizations.

The to generate a PAT, follow these steps:

1. Navigate to your personal settings, by clicking on your profile photo in the upper right corner and selecting Settings.
2. In the left sidebar, click Personal access tokens.
3. Click Generate new token.
4. In the "Note" field enter a descriptive name for your token.
5. To set an expiration for your token, select Expiration, then choose a default option or click Custom to enter a date.
6. Select the scopes you'd like to grant this token. Keep in mind, to use your token to access repositories from the command line, you should select repo.
7. Click Generate token.
8. Optionally, click the clipboard icon to copy the new token

Hope this helps!

[trusktr]

But how do we make the token apply only to a repo in an org? When I try to select a repo, I do not see the org repo in the list!

EDIT: Doh! That's what the "Resource owner" option is for!

[pmverma]

There is no "Resource owner" option anymore!!

[battlesnake]

Github UX makes me miss AWS Console

[alelom]

There is no "Resource owner" option anymore!!

Yes there is (leaving this comment for future me, mostly):

[Malix-Labs]

Not for classic tokens.

[eamonburns]

It did help, going through the steps (and knowing that it was possible) made me realize I forgot to select the organization instead of my username under "Resource owner".
Thank you

[cbm755]

probably 1.5 hours trying again and again, never even noticed the "resource owner", rather embarrassed ;-)

[shawnwall]

for me for some reason, only my name is under resource owner, and none of the organizations i belong to or admin

[shawnwall]

nevermind, had to go and set up access for the organization to allow them.

[Aetherinox]

Honestly this shouldn't be this difficult. Under organization settings where you enable access tokens for an organization, they should have just added the ability to create a PAT from that section, and then list it in the organization. Not having to run back to your personal settings and then tweak the owner.

[mr-kushan]

Use Developer settings.

[drcongo]

I realise this is an old and "answered" thread, but the option to select my organisation as the "Resource owner" has disappeared from my personal access token (classic) create screen. How do I make it come back?

This is what I see in the org settings at /organizations/my-org/settings/personal-access-tokens?tab=classic...

And this is what I see on the generate token screen...

[drcongo]

We know that, we're asking where it's gone for classic.

[jflamy]

I have the exact same problem.

[EspressoKris]

I came across this problem and realised that my organisation wasn't set up.

Access your organisation, then go to settings, scroll down to the third-party Access tab and click on Personal-access tokens. Complete the configuration and enrol your organisation and you will now find it under Resource owner in the fine-grained tokens page.

[drcongo]

It's not the fine-grained tokens we want / need, it's the classic tokens.

Every time I see there's been activity in this thread I get excited only to find out that it's people suggesting the fine-grained tokens again. 😭

[excalq]

We're stuck with classic tokens until FG-PATs support GH (NPM) package registry.

[davidt-gh]

So there is no option to create a global token? what if I want to create a github token to make calls between GitHub actions in organization but the user leave the organization after one year? what then?

[karfau]

One way to workaround this is to create (and pay for) a company owned github user account with the credentials available to the admins/people responsible for managing such secrets.

[tahoward]

Just ran into this as well, I just want classic tokens for my organization. 😩

[ozkary]

I was able to create an organization token by using the fine-grained token options. Under the owner, select the organization not your name. We also need to set the permissions.

It is getting harder with all these platform's outdated documentation. Things are done one way, then moved around, leaving us with some older documentation.

[drcongo]

Everybody is able to create an org-scoped fine-grained token. This thread is specifically about it being missing from the classic tokens. Some of us need classic tokens still.

[Tectract]

How do I create a personal access token for my organization, so that I can read/clone a private repository?

Can anyone give me a straight answer here?

what in the literal FUCK. HOW DO I CLONE A REPO???

do not give me some bullshit about an APP. Why the F am I supposed to use an app to CLONE MY REPO??? THIS IS SUPPOSED TO BE A COMMAND LINE COMMAND YOU IDIOTS.

what is the URL to set the token for my org???

What are the command-line commands to clone a repo, for my org???

[Abhishek-More]

valid crashout

[levelupsec]

@drcongo

It looks like classic tokens will Just Work(TM) on organizations your account has access to. git clone https://<classic token>@github.com/<org>/<repo>.git. You don't actually need to set the org for a classic. So long as your account has access to the org, the classic token will work on it

[KonnorRogers]

@drcongo

It looks like classic tokens will Just Work(TM) on organizations your account has access to. git clone https://<classic token>@github.com/<org>/<repo>.git. You don't actually need to set the org for a classic. So long as your account has access to the org, the classic token will work on it

But doesn't work when you try to use the token in GH actions since its not associated to a user.

[cognivore]

valid crashout

I'm in the middle of one right now and I'm happy that I don't have to type it all out.

Thank you @Tectract!

[cognivore]

Namely — putting them under "Developer settings"...

...as opposed to what other settings? "Project manager settings"? Developers are like 99.99% of users of this website. 🤡

[STS-SW]

Hi everyone,
sorry for bringing this topic back up.
I'm trying to upload a NuGet package to my organization's NuGet repository.
What kind of token should I use, and with which permissions?
To provide more context:

• I'm not using GitHub Actions — I'm trying to publish the package from the powershell command line
• The user generating the token is an administrator of the organization
• The repositories in the organization are private

Thanks in advance.
Cheers, Stefano

[reggie319]

I need to create a PAT (Person Access Token -Fine grained) to upload NuGet packages to my Organization.
I created the PAT but I don't see/know which permission to use that allows Admin access to the NuGet packages.

Thanks

[STS-SW]

A -> Choose the resource owner, here you can find your company
B -> Choose the token expiration
C -> Choose the repositories
D -> Choose the permissions

[reggie319]

But this token doesn't have the ability to manage NuGet packages (that I can see).
I need NuGet packages to be part of my Organization (Fine-Grain), not at the User level like PAT (classis) does.

[Tectract]

It's still impossible to even FIND the "fine-grained access tokens" part of this site. Every time I have to deal with it, I spit curses out of my mouth for github making us use this idiotic thing. All my keys are named "F_GITHUB" lol.