---
title: "Get default workflow permissions for an enterprise"
method: GET
path: "/enterprises/{enterprise}/actions/permissions/workflow"
tags: ["actions"]
---

# Get default workflow permissions for an enterprise

`GET /enterprises/{enterprise}/actions/permissions/workflow`

Gets the default workflow permissions granted to the `GITHUB_TOKEN` when running workflows in an enterprise,
as well as whether GitHub Actions can submit approving pull request reviews. For more information, see
"[Enforcing a policy for workflow permissions in your enterprise](https://docs.github.com/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-workflow-permissions-in-your-enterprise)."

OAuth tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint.

## Path parameters

- `enterprise` string, required

## Response `200`

Success response

- ActionsGetDefaultWorkflowPermissions
  - `default_workflow_permissions` 'read' | 'write', required — The default workflow permissions granted to the GITHUB_TOKEN when running workflows.
  - `can_approve_pull_request_reviews` boolean, required — Whether GitHub Actions can approve pull requests. Enabling this can be a security risk.

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-2.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-2/versions/8ae6d0c8716e/schema)