Permissions Assistant

The Permissions Assistant is a GitLab Duo agent that helps you choose the right fine-grained permissions when creating a personal access token.

Describe what you need the token to do, and the Permissions Assistant selects the appropriate permissions on the creation form. You can ask follow-up questions or refine your request until the selection matches your needs.

Prerequisites

• Meet the prerequisites for the GitLab Duo Agent Platform.
• Have foundational agents turned on.
• Have fine-grained personal access tokens enabled. This feature depends on the granular_personal_access_tokens feature flag, which is enabled by default on GitLab.com. On GitLab Self-Managed and GitLab Dedicated, an administrator must enable it.

Use the Permissions Assistant

The Permissions Assistant is available on the fine-grained personal access token creation page in the GitLab UI.

To use the Permissions Assistant:

1. In the upper-right corner, select your avatar.

2. Select Edit profile.

3. In the left sidebar, select Access > Personal access tokens.

4. From the Generate token dropdown list, select Fine-grained token.

5. Select Add permissions with Duo.

   A Duo Chat panel opens with the Permissions Assistant pre-selected.

6. Describe what you need the token to do, or select one of the suggested prompts.

   The Permissions Assistant selects the appropriate permissions on the form.

7. Review the selected permissions and refine your request if needed.

8. Complete the remaining token fields and select Generate token.

Tips for best results

• Describe your use case specifically. For example, “I need to read issues and create merge requests in a single project” gives better results than “I need API access.”
• If the initial selection is too broad or too narrow, ask for adjustments.
• Use the suggested prompts as a starting point if you are unsure how to describe your needs.

Example prompts

• “I want to read and write to repositories via the API.”
• “I need to manage CI/CD pipelines and read job logs.”
• “I want to automate issue and merge request management.”
• “I need read-only access to projects and groups.”