Create HTTP Access Token for git usage

Due to security reasons, you cannot use your password inside a git client when you connect to Bitbucket. Instead, you have to use an HTTP Access Token. To generate one, log in to the DevOps Portal and click "HTTP Access Tokens" in the Bitbucket tile of the dashboard. See screenshot below:

The vendor documentation well describes How to create HTTP access tokens on Bitbucket, but does not specify which Project and Repository permissions should be chosen for git clients.

Normal git clients will not interact with the proprietary APIs of Bitbucket, e.g. for handling pull-requests. Instead, git clients just use the standardized git protocol for actions like git clone, pull, and push. The recommended settings for an HTTP access token following the least-privilege principle are:

Project read and Repository write. See the following screenshot: