It would be great if you would note what the minimum permissions needed for the personal access token are.