MACHINE_USER_TOKEN permissions needed for a Fine-grained PAT?

[stevenharman]

Hello.

The README states that using the MACHINE_USER_TOKEN to approve on behalf of another user requires the repo scope on the PAT (Classic). What permissions are required to make this workflow work with a Fine-grained PAT?

Thank you.

[stevenharman]

Through some trial and error we were able to get Fine-grained PATs working for the MACHINE_USER_TOKEN. The following Repository permissions are needed:

• Metadata: read-only
• Pull Requests: read-only

I'll open a PR to add that to the README.