ScopeAccessPage
Who has access to a group or repository, and why.
Shape
- advanced_in_usebooleanWhether the organization has given a team access, or defined a custom role or a limit. Until it has, access is five roles given to people, and the page reads as a members list.
entriesarray of AccessEntryEvery grant that reaches here — made here or inherited — oldest first.
- The AccessEntry schema
- created_atstring · date-time
- grant_idGrantId (string · uuid)
roleRoleView
- The RoleView schema
- namestringThe role's display name: a built-in name such as
Developer, or the custom role's name. - rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
- builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
- customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
sourceAccessSource
- The AccessSource schema
atAccessScope
- The AccessScope schema
- full_pathstring
- idstring
- typeScopeTypegrouprepository
- kindAccessSourceKinddirectinheritedWhere an entry on the access page comes from.
- subjectGrantSubject
- expires_atstring · date-time or nulloptional
granted_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- last_exercised_atstring · date-time or nulloptionalWhen the grant last let somebody do something, to the day. Absent until it has.
limited_toarray of AccessLimitoptionalThe limits that take away part of what this grant gives here: set on this group or repository or one above it, naming the grant's holder, a team the person is on, or everyone — or every service account, for one. An organization owner is never limited, so their entries carry none.
- The AccessLimit schema
atAccessScopeWhere the limit is set. It caps its subject there and everywhere beneath, including beneath a group or repository that does not inherit access.
- The AccessScope schema
- full_pathstring
- idstring
- typeScopeTypegrouprepository
- created_atstring · date-time
- limit_idLimitId (string · uuid)
- subjectLimitSubjectEntry
ceilingRoleView or nulloptionalThe most the subject may hold. Absent when the limit allows nothing at all.
- The RoleView schema
- namestringThe role's display name: a built-in name such as
Developer, or the custom role's name. - rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
- builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
- customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
created_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- reasonstring or nulloptional
- reasonstring or nulloptional
organization_ownersOrganizationOwners
- The OrganizationOwners schema
- countinteger · int64
- listedbooleanWhether their grants appear among the entries. They do not when this group or repository stops inheriting access, yet the owners reach it all the same.
scopeAccessPageScope
- The AccessPageScope schema
- full_pathstring
- idstring
- inherits_accessbooleanWhether access granted on the groups above reaches it. When it is
false, only access granted here — and the organization's owners — reach it. - typeScopeTypegrouprepository
- next_tokenstring or nulloptional
Example
Synthesized example{
"advanced_in_use": false,
"entries": [
{
"created_at": "2026-10-08T14:41:16Z",
"grant_id": "ffec5da2-9484-4064-b4bc-8405a4abe73a",
"role": {
"name": "payments-api",
"rank": "guest"
},
"source": {
"at": {
"full_path": "acme/payments-api",
"id": "id-86f3",
"type": "group"
},
"kind": "direct"
},
"subject": {
"principal": {
"id": "d700ec53-33c9-4a70-ac8f-30c4e5c2340d",
"kind": "user",
"username": "tomas"
}
}
}
],
"organization_owners": {
"count": 3,
"listed": false
},
"scope": {
"full_path": "acme/payments-api",
"id": "id-ab72",
"inherits_access": false,
"type": "group"
},
"next_token": "next-token-30ee"
}
Graph
Used inside
No schema contains this one.
Used by
Sent by 0 operations
No operation takes it as a request body.