iam

type ClientOptions struct {
	Conn *conn.GrpcClientConn
}

type CreateApiClientRequest struct {

	// Required. The descriptive name of the API client to create.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type CreateGroupRootUserRequest struct {

	// The email address of the user being created.
	Email string `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"`
	// The password of the user being created. A value will be generated if not is provided for this field
	Password string `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
	// The ID of the group to which the user will be added. This must either be a billing group ID or an access group ID.
	GroupId string `protobuf:"bytes,3,opt,name=groupId,proto3" json:"groupId,omitempty"`
	// The type of group which is represented by the group ID. Valid values include "billing_group" or "access_group".
	GroupType string `protobuf:"bytes,4,opt,name=groupType,proto3" json:"groupType,omitempty"`
	// This value determines whether the password should be auto-generated or if the plaintext value received with the request should be used. A value of "Auto" will result in an auto-generated password whereas a value of "Custom" will result in the password included with the request being used.
	InputType string `protobuf:"bytes,5,opt,name=inputType,proto3" json:"inputType,omitempty"`
	// The plan associated with the root-user account. Valid values include "trial", "limited3" and "limited4".
	Plan string `protobuf:"bytes,6,opt,name=plan,proto3" json:"plan,omitempty"`
	// Whether or not a notification should be sent to the provided email after the user has been created.
	EmailNotification bool `protobuf:"varint,7,opt,name=emailNotification,proto3" json:"emailNotification,omitempty"`
	// A collection of feature flags and whether or not they should be enabled. For a full list of such flags, see https://labs.alphaus.cloud/docs/blueapi/apis/iam/.
	Meta *api.FeatureFlags `protobuf:"bytes,8,opt,name=meta,proto3" json:"meta,omitempty"`
	// contains filtered or unexported fields
}

type CreateIdentityProviderRequest struct {

	// Required. The IdP name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. Value is `saml`.
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	// Required. The contents of the metadata file from your IdP.
	Metadata string `protobuf:"bytes,3,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type CreateIpFilterRequest struct {

	// Required. The IP input to filter, either blacklist or whitelist. Should be in CIDR format (i.e. `1.2.3.4/32`).
	Value string `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
	// Optional. Can be `whitelist` or `blacklist`. Defaults to `blacklist` if empty.
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	// Optional. If `rootUser` is valid and `subUser` is empty, filter is for this rootuser. If both `rootUser` and `subUser` inputs are empty, filter is at global scope.
	RootUser string `protobuf:"bytes,3,opt,name=rootUser,proto3" json:"rootUser,omitempty"`
	// Optional. If `subuser` is valid, filter is for this subuser; `rootUser` value is discarded. If both `rootUser` and `subUser` inputs are empty, filter is at global scope.
	SubUser string `protobuf:"bytes,4,opt,name=subUser,proto3" json:"subUser,omitempty"`
	// contains filtered or unexported fields
}

type CreatePartnerTokenRequest struct {

	// Required. Partner id or audience for the token.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type CreateRoleRequest struct {

	// Required. The name of the role to create. Role names should have at least 6 characters in length and 32 characters maximum. It should also be alphanumeric. Hyphens and underscores are allowed in between. The regular expression used for validation is `^[A-Za-z0-9][A-Za-z0-9_-]*[A-Za-z0-9]$`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The namespace where this role will belong.
	Namespace string `protobuf:"bytes,2,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Required. The list of permissions to attach to this role.
	Permissions []string `protobuf:"bytes,3,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserRequest struct {

	// Required. Min: 4, max: 18, allowed characters: letters, numbers, `_` (underscore), `.` (period) and `-` (hyphen) characters.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. Minimum of 8 characters.
	Password string `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
	// Optional. Email address of the subuser.
	Email string `protobuf:"bytes,3,opt,name=email,proto3" json:"email,omitempty"`
	// Optional. Nickname or description. It is set to 'name' if empty.
	NickName string `protobuf:"bytes,4,opt,name=nickName,proto3" json:"nickName,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserRoleMappingRequest struct {

	// Optional. The subuser to map the roles. Defaults to caller if not set.
	SubUser string `protobuf:"bytes,1,opt,name=subUser,proto3" json:"subUser,omitempty"`
	// Required. The roles to map to the user. Limited to 5 items.
	Roles []*MapRole `protobuf:"bytes,2,rep,name=roles,proto3" json:"roles,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserRoleMappingResponse struct {
	Success []string `protobuf:"bytes,1,rep,name=success,proto3" json:"success,omitempty"`
	Failed  []string `protobuf:"bytes,2,rep,name=failed,proto3" json:"failed,omitempty"`
	Filters []string `protobuf:"bytes,3,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

type DeleteApiClientRequest struct {

	// Required. The client id to delete.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteGroupRootUserRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteIdentityProviderRequest struct {

	// Required. The IdP id to delete.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteIpFilterRequest struct {

	// The IP filter id to delete.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteRoleRequest struct {

	// Required. The parent namespace.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Required. The role name to delete.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteUserRequest struct {

	// Required. The subuser name to delete.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetFeatureFlagsRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetGroupRootRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetUserRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GrpcClient struct {
	IamClient
	// contains filtered or unexported fields
}

type IamClient interface {
	// Gets user information about the caller. This call includes all of the user metadata.
	// See [https://alphauslabs.github.io/blueapi/] for the list of supported attributes.
	WhoAmI(ctx context.Context, in *WhoAmIRequest, opts ...grpc.CallOption) (*api.User, error)
	// Lists all subusers.
	ListUsers(ctx context.Context, in *ListUsersRequest, opts ...grpc.CallOption) (Iam_ListUsersClient, error)
	// Gets subuser information. This call includes all of the subuser metadata. See
	// [https://alphauslabs.github.io/blueapi/] for the list of supported attributes.
	// If the `{name}` parameter is `me` or `-`, returns the caller information, which
	// is equivalent to `WhoAmI()` or `GET:/iam/v*/whoami`.
	GetUser(ctx context.Context, in *GetUserRequest, opts ...grpc.CallOption) (*api.User, error)
	// Creates a subuser.
	CreateUser(ctx context.Context, in *CreateUserRequest, opts ...grpc.CallOption) (*api.User, error)
	// Deletes a subuser.
	DeleteUser(ctx context.Context, in *DeleteUserRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Creates a new root user for a billing group or access group.
	CreateGroupRootUser(ctx context.Context, in *CreateGroupRootUserRequest, opts ...grpc.CallOption) (*api.GroupRootUser, error)
	// WORK-IN-PROGRESS: Retrieves all the existing group root users asscoiated with the organization.
	ListGroupRootUsers(ctx context.Context, in *ListGroupRootUsersRequest, opts ...grpc.CallOption) (Iam_ListGroupRootUsersClient, error)
	// WORK-IN-PROGRESS: Retrieves a group root user.
	GetGroupRootUser(ctx context.Context, in *GetGroupRootRequest, opts ...grpc.CallOption) (*api.GroupRootUser, error)
	// WORK-IN-PROGRESS: Deletes an existing group root user.
	DeleteGroupRootUser(ctx context.Context, in *DeleteGroupRootUserRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Retrieves the features available to a user on an Alphaus product.
	//
	// For a list of valid feature flags, see our documentation at https://labs.alphaus.cloud/docs/blueapi/apis/iam/.
	GetFeatureFlags(ctx context.Context, in *GetFeatureFlagsRequest, opts ...grpc.CallOption) (*api.FeatureFlags, error)
	// WORK-IN-PROGRESS: Updates the features available to a user on an Alphaus product.
	//
	// For a list of valid feature flags, see our documentation at https://labs.alphaus.cloud/docs/blueapi/apis/iam/.
	UpdateFeatureFlags(ctx context.Context, in *UpdateFeatureFlagsRequest, opts ...grpc.CallOption) (*api.FeatureFlags, error)
	// Lists all API clients belonging to the caller.
	ListApiClients(ctx context.Context, in *ListApiClientsRequest, opts ...grpc.CallOption) (Iam_ListApiClientsClient, error)
	// Creates an API client for the caller.
	CreateApiClient(ctx context.Context, in *CreateApiClientRequest, opts ...grpc.CallOption) (*api.ApiClient, error)
	// Deletes an API client belonging to the caller.
	DeleteApiClient(ctx context.Context, in *DeleteApiClientRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Lists all permissions based on the input's scope. For reference, supported permissions can be found on [https://github.com/mobingi/rbac-permissions].
	ListPermissions(ctx context.Context, in *ListPermissionsRequest, opts ...grpc.CallOption) (*ListPermissionsResponse, error)
	// WORK-IN-PROGRESS: Lists all available roles.
	ListRoles(ctx context.Context, in *ListRolesRequest, opts ...grpc.CallOption) (*ListRolesResponse, error)
	// WORK-IN-PROGRESS: Creates a role. If your `permissions` list contains an `Admin` entry, all other entries will be discarded except `Admin`. Roles are root user-level. That means all roles created by the root user, or any subuser that has permissions to create roles, are available to all subusers.
	CreateRole(ctx context.Context, in *CreateRoleRequest, opts ...grpc.CallOption) (*api.Role, error)
	// WORK-IN-PROGRESS: Updates a role. If role name is different, rename mapped role name.
	UpdateRole(ctx context.Context, in *UpdateRoleRequest, opts ...grpc.CallOption) (*api.Role, error)
	// WORK-IN-PROGRESS: Deletes a role. Deleting a role will also remove all mappings.
	DeleteRole(ctx context.Context, in *DeleteRoleRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Lists roles attached to the caller or the input.
	ListUserRoleMappings(ctx context.Context, in *ListUserRoleMappingsRequest, opts ...grpc.CallOption) (*ListUserRoleMappingsResponse, error)
	// WORK-IN-PROGRESS: Maps roles to a subuser. You can only map (or attach) up to 5 roles to a user per namespace. There is no limit for filtering rules per user.
	CreateUserRoleMapping(ctx context.Context, in *CreateUserRoleMappingRequest, opts ...grpc.CallOption) (*CreateUserRoleMappingResponse, error)
	// WORK-IN-PROGRESS: Updates user-to-role mappings. You can only map (or attach) up to 5 roles to a user per namespace. There is no limit for filtering rules per user.
	UpdateUserRoleMapping(ctx context.Context, in *UpdateUserRoleMappingRequest, opts ...grpc.CallOption) (*UpdateUserRoleMappingResponse, error)
	// Lists all SSO Identity Providers (IdP).
	ListIdentityProviders(ctx context.Context, in *ListIdentityProvidersRequest, opts ...grpc.CallOption) (*ListIdentityProvidersResponse, error)
	// Registers an SSO Identity Provider (IdP).
	CreateIdentityProvider(ctx context.Context, in *CreateIdentityProviderRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Deletes an SSO Identity Provider (IdP).
	DeleteIdentityProvider(ctx context.Context, in *DeleteIdentityProviderRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Lists all IP filters. At the moment, this API is only available to root users.
	ListIpFilters(ctx context.Context, in *ListIpFiltersRequest, opts ...grpc.CallOption) (Iam_ListIpFiltersClient, error)
	// Creates an IP filter item for IP blacklisting or whitelisting. At the moment, this API is only available to root users.
	CreateIpFilter(ctx context.Context, in *CreateIpFilterRequest, opts ...grpc.CallOption) (*IpFilter, error)
	// Deletes an IP filter item. At the moment, this API is only available to root users.
	DeleteIpFilter(ctx context.Context, in *DeleteIpFilterRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// BETA: Creates a partner token for custom integrations. Available only to Ripple and Cover users.
	CreatePartnerToken(ctx context.Context, in *CreatePartnerTokenRequest, opts ...grpc.CallOption) (*PartnerToken, error)
	// BETA: Refreshes an expired partner token. Only partners are expected to call this API.
	RefreshPartnerToken(ctx context.Context, in *RefreshPartnerTokenRequest, opts ...grpc.CallOption) (*PartnerToken, error)
	// WORK-IN-PROGRESS: Verify User Input For Reset Password
	VerifyUserForResetPassword(ctx context.Context, in *VerifyUserForResetPasswordRequest, opts ...grpc.CallOption) (*VerifyUserForResetPasswordResponse, error)
	// WORK-IN-PROGRESS: Validate reset password link and proceed to update password
	ValidateResetPasswordLinkAndChangePassword(ctx context.Context, in *ValidateResetPasswordLinkAndChangePasswordRequest, opts ...grpc.CallOption) (*ValidateResetPasswordLinkAndChangePasswordResponse, error)
	// WORK-IN-PROGRESS: List MFA users info for login user's organization based on status.
	GetMFAUsers(ctx context.Context, in *MFAUsersInfoRequest, opts ...grpc.CallOption) (*MFAUsersInfoResponse, error)
}

type IamServer interface {
	// Gets user information about the caller. This call includes all of the user metadata.
	// See [https://alphauslabs.github.io/blueapi/] for the list of supported attributes.
	WhoAmI(context.Context, *WhoAmIRequest) (*api.User, error)
	// Lists all subusers.
	ListUsers(*ListUsersRequest, Iam_ListUsersServer) error
	// Gets subuser information. This call includes all of the subuser metadata. See
	// [https://alphauslabs.github.io/blueapi/] for the list of supported attributes.
	// If the `{name}` parameter is `me` or `-`, returns the caller information, which
	// is equivalent to `WhoAmI()` or `GET:/iam/v*/whoami`.
	GetUser(context.Context, *GetUserRequest) (*api.User, error)
	// Creates a subuser.
	CreateUser(context.Context, *CreateUserRequest) (*api.User, error)
	// Deletes a subuser.
	DeleteUser(context.Context, *DeleteUserRequest) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Creates a new root user for a billing group or access group.
	CreateGroupRootUser(context.Context, *CreateGroupRootUserRequest) (*api.GroupRootUser, error)
	// WORK-IN-PROGRESS: Retrieves all the existing group root users asscoiated with the organization.
	ListGroupRootUsers(*ListGroupRootUsersRequest, Iam_ListGroupRootUsersServer) error
	// WORK-IN-PROGRESS: Retrieves a group root user.
	GetGroupRootUser(context.Context, *GetGroupRootRequest) (*api.GroupRootUser, error)
	// WORK-IN-PROGRESS: Deletes an existing group root user.
	DeleteGroupRootUser(context.Context, *DeleteGroupRootUserRequest) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Retrieves the features available to a user on an Alphaus product.
	//
	// For a list of valid feature flags, see our documentation at https://labs.alphaus.cloud/docs/blueapi/apis/iam/.
	GetFeatureFlags(context.Context, *GetFeatureFlagsRequest) (*api.FeatureFlags, error)
	// WORK-IN-PROGRESS: Updates the features available to a user on an Alphaus product.
	//
	// For a list of valid feature flags, see our documentation at https://labs.alphaus.cloud/docs/blueapi/apis/iam/.
	UpdateFeatureFlags(context.Context, *UpdateFeatureFlagsRequest) (*api.FeatureFlags, error)
	// Lists all API clients belonging to the caller.
	ListApiClients(*ListApiClientsRequest, Iam_ListApiClientsServer) error
	// Creates an API client for the caller.
	CreateApiClient(context.Context, *CreateApiClientRequest) (*api.ApiClient, error)
	// Deletes an API client belonging to the caller.
	DeleteApiClient(context.Context, *DeleteApiClientRequest) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Lists all permissions based on the input's scope. For reference, supported permissions can be found on [https://github.com/mobingi/rbac-permissions].
	ListPermissions(context.Context, *ListPermissionsRequest) (*ListPermissionsResponse, error)
	// WORK-IN-PROGRESS: Lists all available roles.
	ListRoles(context.Context, *ListRolesRequest) (*ListRolesResponse, error)
	// WORK-IN-PROGRESS: Creates a role. If your `permissions` list contains an `Admin` entry, all other entries will be discarded except `Admin`. Roles are root user-level. That means all roles created by the root user, or any subuser that has permissions to create roles, are available to all subusers.
	CreateRole(context.Context, *CreateRoleRequest) (*api.Role, error)
	// WORK-IN-PROGRESS: Updates a role. If role name is different, rename mapped role name.
	UpdateRole(context.Context, *UpdateRoleRequest) (*api.Role, error)
	// WORK-IN-PROGRESS: Deletes a role. Deleting a role will also remove all mappings.
	DeleteRole(context.Context, *DeleteRoleRequest) (*emptypb.Empty, error)
	// WORK-IN-PROGRESS: Lists roles attached to the caller or the input.
	ListUserRoleMappings(context.Context, *ListUserRoleMappingsRequest) (*ListUserRoleMappingsResponse, error)
	// WORK-IN-PROGRESS: Maps roles to a subuser. You can only map (or attach) up to 5 roles to a user per namespace. There is no limit for filtering rules per user.
	CreateUserRoleMapping(context.Context, *CreateUserRoleMappingRequest) (*CreateUserRoleMappingResponse, error)
	// WORK-IN-PROGRESS: Updates user-to-role mappings. You can only map (or attach) up to 5 roles to a user per namespace. There is no limit for filtering rules per user.
	UpdateUserRoleMapping(context.Context, *UpdateUserRoleMappingRequest) (*UpdateUserRoleMappingResponse, error)
	// Lists all SSO Identity Providers (IdP).
	ListIdentityProviders(context.Context, *ListIdentityProvidersRequest) (*ListIdentityProvidersResponse, error)
	// Registers an SSO Identity Provider (IdP).
	CreateIdentityProvider(context.Context, *CreateIdentityProviderRequest) (*emptypb.Empty, error)
	// Deletes an SSO Identity Provider (IdP).
	DeleteIdentityProvider(context.Context, *DeleteIdentityProviderRequest) (*emptypb.Empty, error)
	// Lists all IP filters. At the moment, this API is only available to root users.
	ListIpFilters(*ListIpFiltersRequest, Iam_ListIpFiltersServer) error
	// Creates an IP filter item for IP blacklisting or whitelisting. At the moment, this API is only available to root users.
	CreateIpFilter(context.Context, *CreateIpFilterRequest) (*IpFilter, error)
	// Deletes an IP filter item. At the moment, this API is only available to root users.
	DeleteIpFilter(context.Context, *DeleteIpFilterRequest) (*emptypb.Empty, error)
	// BETA: Creates a partner token for custom integrations. Available only to Ripple and Cover users.
	CreatePartnerToken(context.Context, *CreatePartnerTokenRequest) (*PartnerToken, error)
	// BETA: Refreshes an expired partner token. Only partners are expected to call this API.
	RefreshPartnerToken(context.Context, *RefreshPartnerTokenRequest) (*PartnerToken, error)
	// WORK-IN-PROGRESS: Verify User Input For Reset Password
	VerifyUserForResetPassword(context.Context, *VerifyUserForResetPasswordRequest) (*VerifyUserForResetPasswordResponse, error)
	// WORK-IN-PROGRESS: Validate reset password link and proceed to update password
	ValidateResetPasswordLinkAndChangePassword(context.Context, *ValidateResetPasswordLinkAndChangePasswordRequest) (*ValidateResetPasswordLinkAndChangePasswordResponse, error)
	// WORK-IN-PROGRESS: List MFA users info for login user's organization based on status.
	GetMFAUsers(context.Context, *MFAUsersInfoRequest) (*MFAUsersInfoResponse, error)
	// contains filtered or unexported methods
}

type Iam_ListApiClientsClient interface {
	Recv() (*api.ApiClient, error)
	grpc.ClientStream
}

type Iam_ListApiClientsServer interface {
	Send(*api.ApiClient) error
	grpc.ServerStream
}

type Iam_ListGroupRootUsersClient interface {
	Recv() (*api.GroupRootUser, error)
	grpc.ClientStream
}

type Iam_ListGroupRootUsersServer interface {
	Send(*api.GroupRootUser) error
	grpc.ServerStream
}

type Iam_ListIpFiltersClient interface {
	Recv() (*IpFilter, error)
	grpc.ClientStream
}

type Iam_ListIpFiltersServer interface {
	Send(*IpFilter) error
	grpc.ServerStream
}

type Iam_ListUsersClient interface {
	Recv() (*api.User, error)
	grpc.ClientStream
}

type Iam_ListUsersServer interface {
	Send(*api.User) error
	grpc.ServerStream
}

type IpFilter struct {

	// IP filter item id. Note that this name is transcient and is not fixed. However, you can use any of its permutations to endpoints that accept it, such as the `DELETE:/iam/v?/ipfilters/{id}` endpoint, without issues.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Can be `global`, `rootuser`, or `subuser`.
	Scope string `protobuf:"bytes,2,opt,name=scope,proto3" json:"scope,omitempty"`
	// The target of the filter. If global scope, this is usually empty. Rootuser name for rootuser scope, and subuser name for subuser scope. For subuser targets, format is `rootuser/subuser`.
	Target string `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// The type of IP filter. It could be `whitelist` or `blacklist`.
	Type string `protobuf:"bytes,4,opt,name=type,proto3" json:"type,omitempty"`
	// The IP filter value. Should be in CIDR format.
	Value string `protobuf:"bytes,5,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type ListApiClientsRequest struct {
	// contains filtered or unexported fields
}

type ListGroupRootUsersRequest struct {
	// contains filtered or unexported fields
}

type ListIdentityProvidersRequest struct {
	// contains filtered or unexported fields
}

type ListIdentityProvidersResponse struct {
	Data []*ListIdentityProvidersResponse_IdentityProvider `protobuf:"bytes,1,rep,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type ListIdentityProvidersResponse_IdentityProvider struct {
	Id   string                                                  `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name string                                                  `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Type string                                                  `protobuf:"bytes,3,opt,name=type,proto3" json:"type,omitempty"`
	Saml *ListIdentityProvidersResponse_IdentityProviderSamlInfo `protobuf:"bytes,4,opt,name=saml,proto3" json:"saml,omitempty"`
	// contains filtered or unexported fields
}

type ListIdentityProvidersResponse_IdentityProviderSamlInfo struct {
	Metadata string `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type ListIpFiltersRequest struct {
	// contains filtered or unexported fields
}

type ListPermissionsRequest struct {

	// Optional. The subuser to query. If empty (default), query all available permissions. If set to a valid subuser, query that subuser's permissions, if allowed. You can also set this field to `me` to query your own permissions.
	SubUser string `protobuf:"bytes,1,opt,name=subUser,proto3" json:"subUser,omitempty"`
	// contains filtered or unexported fields
}

type ListPermissionsResponse struct {
	Permissions []*api.Permission `protobuf:"bytes,1,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

type ListRolesRequest struct {

	// Optional. If not set, all roles will be returned.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

type ListRolesResponse struct {
	Roles []*api.Role `protobuf:"bytes,1,rep,name=roles,proto3" json:"roles,omitempty"`
	// contains filtered or unexported fields
}

type ListUserRoleMappingsRequest struct {

	// Optional. The subuser to query. Defaults to caller if not set.
	SubUser string `protobuf:"bytes,1,opt,name=subUser,proto3" json:"subUser,omitempty"`
	// contains filtered or unexported fields
}

type ListUserRoleMappingsResponse struct {
	UserRoleMappings []*api.UserRoleMapping `protobuf:"bytes,1,rep,name=userRoleMappings,proto3" json:"userRoleMappings,omitempty"`
	// contains filtered or unexported fields
}

type ListUsersRequest struct {
	// contains filtered or unexported fields
}

type MFAUser struct {
	Id        string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name      string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Type      string `protobuf:"bytes,3,opt,name=type,proto3" json:"type,omitempty"`
	Status    string `protobuf:"bytes,4,opt,name=status,proto3" json:"status,omitempty"`
	CreatedAt string `protobuf:"bytes,5,opt,name=createdAt,proto3" json:"createdAt,omitempty"`
	// contains filtered or unexported fields
}

type MFAUsersInfoRequest struct {

	// Optional. If non empty: list users by status. Otherwise will list all MFA users.
	Status string `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type MFAUsersInfoResponse struct {
	Users []*MFAUser `protobuf:"bytes,1,rep,name=users,proto3" json:"users,omitempty"`
	// contains filtered or unexported fields
}

type MapRole struct {
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	Role      string `protobuf:"bytes,2,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type PartnerToken struct {
	Token string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

type RefreshPartnerTokenRequest struct {

	// Required. Partner id or audience for the token.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Required. The previous (old) token to be refreshed.
	Token string `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedIamServer struct {
}

type UnsafeIamServer interface {
	// contains filtered or unexported methods
}

type UpdateFeatureFlagsRequest struct {
	Id           string            `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	FeatureFlags *api.FeatureFlags `protobuf:"bytes,2,opt,name=featureFlags,proto3" json:"featureFlags,omitempty"`
	// contains filtered or unexported fields
}

type UpdateRoleRequest struct {

	// Required. The new namespace.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Required. The role name to update.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. If set, update the current name to this.
	NewName string `protobuf:"bytes,3,opt,name=newName,proto3" json:"newName,omitempty"`
	// Required. The list of permissions to attach to this role.
	Permissions []string `protobuf:"bytes,4,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

type UpdateUserRoleMappingRequest struct {

	// Optional. The subuser to map the roles. Defaults to caller if not set.
	SubUser string `protobuf:"bytes,1,opt,name=subUser,proto3" json:"subUser,omitempty"`
	// Required. The roles to map to the user. Limited to 5 items. Setting `role` to empty will remove the mapping.
	Roles []*MapRole `protobuf:"bytes,2,rep,name=roles,proto3" json:"roles,omitempty"`
	// contains filtered or unexported fields
}

type UpdateUserRoleMappingResponse struct {
	Success []string `protobuf:"bytes,1,rep,name=success,proto3" json:"success,omitempty"`
	Failed  []string `protobuf:"bytes,2,rep,name=failed,proto3" json:"failed,omitempty"`
	Filters []string `protobuf:"bytes,3,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

type ValidateResetPasswordLinkAndChangePasswordRequest struct {
	OriginalEncodedCode  string `protobuf:"bytes,1,opt,name=originalEncodedCode,proto3" json:"originalEncodedCode,omitempty"`
	UserInputEncodedCode string `protobuf:"bytes,2,opt,name=userInputEncodedCode,proto3" json:"userInputEncodedCode,omitempty"`
	// contains filtered or unexported fields
}

type ValidateResetPasswordLinkAndChangePasswordResponse struct {
	IsPasswordUpdated        bool   `protobuf:"varint,1,opt,name=isPasswordUpdated,proto3" json:"isPasswordUpdated,omitempty"`
	IsResetPasswordLinkValid bool   `protobuf:"varint,2,opt,name=isResetPasswordLinkValid,proto3" json:"isResetPasswordLinkValid,omitempty"`
	ErrorMessage             string `protobuf:"bytes,3,opt,name=errorMessage,proto3" json:"errorMessage,omitempty"`
	// contains filtered or unexported fields
}

type VerifyUserForResetPasswordRequest struct {
	User string `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

type VerifyUserForResetPasswordResponse struct {
	DoesUserExists bool `protobuf:"varint,1,opt,name=doesUserExists,proto3" json:"doesUserExists,omitempty"`
	// contains filtered or unexported fields
}

type WhoAmIRequest struct {
	// contains filtered or unexported fields
}