Registry permissions are the rights a user or token has inside a container registry, such as pulling images for deployment, pushing new versions, or deleting existing artifacts. These permissions are usually tied to an identity and can be scoped to a repository, namespace, or organization.
They matter because a registry is part of the software supply chain. If an attacker gains a token with write or delete access, they may be able to replace a trusted image, publish a malicious one, or remove critical artifacts. Defenders reduce this risk by using least-privilege access, separate credentials for automation, short-lived tokens, and audit logs that track who changed what. In account conversion or ownership changes, permission checks are especially important, because old credentials should not keep acting with the same power under a new trust boundary.