| Git provider| Required scopes for Git Runtime token|

| ----------------------------| ------------------------------|

| GitHub and GitHub Enterprise|{::nomarkdown}<ul><li>Classic:<ul><li><codeclass="highlighter-rouge">repo</code></li><li><codeclass="highlighter-rouge">admin:repo_hook</code></li></ul><li>Fine-grained:<ul><li>Repository access: <codeclass="highlighter-rouge">All repositories</code> or <codeclass="highlighter-rouge">Only select repositories</code></li><li>Repository permissions:<ul><li>Administration: <codeclass="highlighter-rouge">Read and write</code></li><li>Contents: <codeclass="highlighter-rouge">Read and write</code></li><li>Metadata: <codeclass="highlighter-rouge">Read-only</code></li><li>Webhook: <codeclass="highlighter-rouge">Read and write</code></li></ul></li></ul></li></ul>{:/}|

| GitLab Cloud and GitLab Server|{::nomarkdown}<ul><li><codeclass="highlighter-rouge">api</code> (includes <codeclass="highlighter-rouge">read_api</code>, <codeclass="highlighter-rouge">read_repository</code>, and <codeclass="highlighter-rouge">write_repository</code>)</li></ul> {:/}|

| GitHub and GitHub Enterprise|{::nomarkdown}<ul><li>Classic:<ul><li><codeclass="highlighter-rouge">repo</code></li><li><codeclass="highlighter-rouge">admin:repo_hook</code></li></ul><li>Fine-grained (personal or group-based):<ul><li>Repository access: <codeclass="highlighter-rouge">All repositories</code> or <codeclass="highlighter-rouge">Only select repositories</code> including all repos that Argo CD syncs from</li><li>Repository permissions:<ul><li>Administration: <codeclass="highlighter-rouge">Read and write</code></li><li>Contents: <codeclass="highlighter-rouge">Read and write</code></li><li>Metadata: <codeclass="highlighter-rouge">Read-only</code></li><li>Webhook: <codeclass="highlighter-rouge">Read and write</code></li></ul></li></ul></li></ul>{:/}|

| GitLab Cloud and GitLab Server|Can be personal or group-based:{::nomarkdown}<ul><li><codeclass="highlighter-rouge">api</code> (includes <codeclass="highlighter-rouge">read_api</code>, <codeclass="highlighter-rouge">read_repository</code>, and <codeclass="highlighter-rouge">write_repository</code>)</li></ul> {:/}**NOTE**<br>For_personal_ tokens, the token must have`write` access to the[Shared Configuration Repository]({{site.baseurl}}/docs/installation/gitops/shared-configuration/), and`read` access to all the repositories that Argo CD syncs from.<br>For_group_ tokens, the group must include all the repositories that Argo CD syncs from.|

| Bitbucket Cloud and Bitbucket Server| {::nomarkdown} <ul><li>Account: <codeclass="highlighter-rouge">Read</code></li><li>Workspace membership: <codeclass="highlighter-rouge">Read</code></li><li>Webhooks: <codeclass="highlighter-rouge">Read and write</code></li><li>Repositories: <codeclass="highlighter-rouge">Write, Admin </code></li></ul>{:/}|