I will note that at least for our GitHub enterprise setup permissions are all granular, tokens are managed by the org and require an approval process. I’m not

I will note that at least for our GitHub enterprise setup permissions are all granular, tokens are managed by the org and require an approval process. I’m not sure how much of this is “standard” for an org though.