diff --git a/roles/github2fedmsg/templates/github2fedmsg.ini b/roles/github2fedmsg/templates/github2fedmsg.ini
index 412f80e63b..597061ab02 100644
--- a/roles/github2fedmsg/templates/github2fedmsg.ini
+++ b/roles/github2fedmsg/templates/github2fedmsg.ini
@@ -31,7 +31,7 @@ mako.directories=github2fedmsg:templates
 github.secret_oauth_access_token = {{github2fedmsg_gh_secret_oauth_access_token}}
 velruse.github.consumer_key = {{github2fedmsg_gh_app_key}}
 velruse.github.consumer_secret = {{github2fedmsg_gh_app_secret}}
-velruse.github.scope = repo
+velruse.github.scope = read:org,admin:repo_hook
 velruse.openid.identifier = https://id.fedoraproject.org/
 velruse.openid.realm = https://apps.fedoraproject.org/github2fedmsg
 github.callback = https://apps.fedoraproject.org/github2fedmsg/webhook
@@ -40,7 +40,7 @@ github.secret = {{github2fedmsgGHSecret}}
 github.secret_oauth_access_token = {{github2fedmsg_gh_secret_oauth_access_token_staging}}
 velruse.github.consumer_key = {{github2fedmsg_gh_app_key_staging}}
 velruse.github.consumer_secret = {{github2fedmsg_gh_app_secret_staging}}
-velruse.github.scope = public_repo
+velruse.github.scope = read:org,admin:repo_hook
 velruse.openid.identifier = https://id.stg.fedoraproject.org/
 velruse.openid.realm = https://apps.stg.fedoraproject.org/github2fedmsg
 github.callback = https://apps.stg.fedoraproject.org/github2fedmsg/webhook