0
Add audit-only token scope without org:write
Source: getsentry/sentry#120692 · opened by @sentry-junior[bot]
Add audit-only token scope without org:write: SIEM and compliance integrations that only need management-plane audit logs currently require org:write because OrganizationAuditPermission gates GET /api/0/organizations/{org_slug}/audit-logs/ on that scope. That forces over-privileged tokens for a read-only use case.
No pledges yet. Be the first to back this.
Comments
Similar requests
Let an integration rotate its own client secret, and accept GitHub Actions OIDC for release uploads
0 votes · 0 comments
Restrict project creation to org owners and org managers
0 votes · 0 comments
Many org-scoped API endpoints reject project slugs in the ?project= parameter
0 votes · 0 comments
Provide a way to revoke leaked personal auth tokens during offboarding
0 votes · 0 comments
AuditLog for Org Auth Token showing how it was used
1 vote · 0 comments
No comments yet.