With branch protection "fix" action, admin-write is needed. Update operator.md and anywhere else permissions are described. (I thought I already had an issue for this, so may be a duplicate)