Hi, It would be great to have guidance on which permissions are needed when using fine-grained tokens. Thanks!