What are the benefits of using the github app over user?

[nitrocode]

Besides a PAT that rotates every hour for the gh app, are there other benefits of using the app over the gh user?

It would be nice to document the pros and cons on this page

https://www.runatlantis.io/docs/access-credentials.html

user

Pros

• multiple installs
• higher api call limits on a webhook
• works with more than one github organization

Cons

• requires a static pat
• requires a github user
• requires adding gh user with write perms to each repo

app

Pros

• ephemeral token
• no user required
• only app permissions needed

Cons

• single atlantis install per app?
  • I'm unsure of this so I asked in a separate discussion thread
• lower api call limits (unless on enterprise plan)
• haven't figured out how to allow it to work for more than one github organization

[stasostrovskyi]

I would like to add a couple of pros towards GitHub app:

• For big (more than 50 users) organizations on Enterprise Plan they have much higher API call limits (up to 15k)
• Much easier to manage permissions - no need to regenerate token. Difference is especially noticeable when using SSO - having a SSO for a service user is cumbersome.

[cathex-matt]

1 cons for the app maybe: not possible to automate an end to end deployment. At least with Terraform as the github provider does not offer an org app resource yet due to some github api limitations.