MACHINE_USER_TOKEN permissions needed for a Fine-grained PAT?

[stevenharman]

Hello.

The README states that using the MACHINE_USER_TOKEN to approve on behalf of another user requires the repo scope on the PAT (Classic). What permissions are required to make this workflow work with a Fine-grained PAT?

Thank you.

[stevenharman]

Through some trial and error we were able to get Fine-grained PATs working for the MACHINE_USER_TOKEN. The following Repository permissions are needed:

• Metadata: read-only
• Pull Requests: read-only

I'll open a PR to add that to the README.

[foosinn]

Hey,

we have tried with:

• Metadata: read-only
• Pull Requests: read-write

Still had to revert back to a classic token.

It only outputs Not found as error message, so not sure which of the steps actually fails.

[stevenharman]

Hmm, it's still working for us using

• Metadata: read-only
• Pull Requests: read/write

Have you also selected the specific Repos you want the PAT to apply to? Here's what our token's overview looks like.