Grant PAT Access to Private Organization Repos owned by my Personal Account

[dvargas92495]

Select Topic Area

Question

Body

Related Question here

I'd like to create a Personal Access Token (fine-grained) that is both:

• assigned to me (dvargas92495) as the Resource owner
• has access to private repos owned by organizations that I am a part of (samepage-network)

Is this possible today? If not, are there suitable workarounds?

The farthest I was able to get was a PAT that could clone private repos owned by me but not by orgs that I'm a part of. Therefore, the only workaround I could think of is forking the private repo into the personal account, but then it's a manual process to keep that up to date.

[KittyChiu]

For org repos, it really depends what type of org it is. Good operations practices will have some sort of data loss controls. You will need to contact your org owner concerning your need.

[dvargas92495]

I am the org owner. How could I enable this functionality?

[ffjlabo]

Hi. Sorry for the sudden.

I also have the same demand and solve it by editing the settings of personal access token on my org setting page like below↓

After that, I got to choose the org as "Resource owner" on the settings page of the personal access token.
You might be able to solve it.

ref: https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization

[dvargas92495]

Yea I am able to pick my org as a Resource owner. I was wondering if there was a way to maintain myself as the resource owner, but still have access to whatever private repo I have access to.

It's looking more and more like the answer is no and that is the wrong way to think about resource owners w.r.t PAT