It's now possible to add user-level permissions to your GitHub App to access certain user resources, such as user emails.
Unlike repository and organization-level permissions, which are granted at the time of installation on an organization or user account, these permissions are granted by individual users as part of the user authorization flow.
This new type of permission can be requested just like existing repository and organization-level permissions within your GitHub App's settings.
Since these permissions are granted on an individual user basis, you can add them to your existing integration without prompting administrators to upgrade their integration. You will, however, need to send existing users through the user authorization flow to authorize the new permission and get a new user-to-server token for these requests.
Note: This update only affects users of GitHub.com and future versions of GitHub Enterprise.
If you have any questions or feedback, please let us know!