Minimum permissions for Audit Logs

[Mohammed-Khan-DSO]

Hi,

I am wanting to integrate Github with our Splunk Cloud instance however we are trying to implement a DevSecOps capability so we are wanting to deploy and manage via IAC etc. However I was wanting to confirm if the personal access token scope is required at the level mentioned in the Docs? We have apprehensions on the scopes requiring Admin priviledges, what is the minimum requirements for the scope to allow us to pull the audit logs successfully and via IAC methodology?