v1

type AuthenticationProviders struct {
	// Control access to the organization for users using then username/password authentication provider.
	EnableUsernamePassword bool `` /* 130-byte string literal not displayed */
	// Control access to the organization for users using then Google authentication provider.
	EnableGoogle bool `protobuf:"varint,2,opt,name=enable_google,json=enableGoogle,proto3" json:"enable_google,omitempty"`
	// Control access to the organization for users using then Github authentication provider.
	EnableGithub bool `protobuf:"varint,3,opt,name=enable_github,json=enableGithub,proto3" json:"enable_github,omitempty"`
	// Control access to the organization for users using then Microsoft authentication provider.
	EnableMicrosoft bool `protobuf:"varint,4,opt,name=enable_microsoft,json=enableMicrosoft,proto3" json:"enable_microsoft,omitempty"`
	// Control access to the organization for users using then SSO authentication provider.
	EnableSso            bool     `protobuf:"varint,5,opt,name=enable_sso,json=enableSso,proto3" json:"enable_sso,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type DataProcessingAddendum struct {
	// Identifier of this version of the DPA
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Content of DPA in markdown format
	Content string `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"`
	// Creation date of this version of the DPA.
	CreatedAt            *types.Timestamp `protobuf:"bytes,3,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
	XXX_unrecognized     []byte           `json:"-"`
	XXX_sizecache        int32            `json:"-"`
}

type DomainRestrictions struct {
	// If this list is non-empty, only users that have an email address in one
	// of the given domains will be granted access to the resources in the Organization.
	AllowedDomains       []string `protobuf:"bytes,1,rep,name=allowed_domains,json=allowedDomains,proto3" json:"allowed_domains,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type Event struct {
	// System identifier of the event.
	// This is a read-only value.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// URL of this resource
	// This is a read-only value and cannot be initialized.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// Identifier of the organization that owns this event.
	// This is a read-only value.
	OrganizationId string `protobuf:"bytes,3,opt,name=organization_id,json=organizationId,proto3" json:"organization_id,omitempty"`
	// Identifier of the subject of this event.
	// This is a read-only value.
	// If the subject of this event is an organization,
	// this value is a duplicate of organization_id.
	SubjectId string `protobuf:"bytes,4,opt,name=subject_id,json=subjectId,proto3" json:"subject_id,omitempty"`
	// Type of the event.
	Type string `protobuf:"bytes,5,opt,name=type,proto3" json:"type,omitempty"`
	// Payload of the event.
	// The fields used in the payload are specific
	// to the type of event.
	Payload map[string]string `` /* 155-byte string literal not displayed */
	// The creation timestamp of the event
	CreatedAt *types.Timestamp `protobuf:"bytes,7,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// URL of the subject of this event.
	// This is a read-only value.
	SubjectUrl string `protobuf:"bytes,8,opt,name=subject_url,json=subjectUrl,proto3" json:"subject_url,omitempty"`
	// If set, this event is not persisted.
	// This is a read-only value.
	Volatile bool `protobuf:"varint,9,opt,name=volatile,proto3" json:"volatile,omitempty"`
	// Identifier of the user that has created this event.
	// This is a read-only value that can be empty.
	CreatedById string `protobuf:"bytes,10,opt,name=created_by_id,json=createdById,proto3" json:"created_by_id,omitempty"`
	// Optional human readable reason for the event.
	// This is a read-only value that can be empty.
	Reason string `protobuf:"bytes,11,opt,name=reason,proto3" json:"reason,omitempty"`
	// If set, this event reflects only a status update of an entity.
	// This is a read-only value.
	StatusOnly bool `protobuf:"varint,12,opt,name=status_only,json=statusOnly,proto3" json:"status_only,omitempty"`
	// The application/tool which created this event.
	// This information is collected by inspecting headers:
	// First the x-arango-graph-user-agent will be tried, if this isn't set, the first service name from oasis-trace will be used, otherwise an empty string.
	// This is a read-only value that can be empty.
	CreatedWith          string   `protobuf:"bytes,13,opt,name=created_with,json=createdWith,proto3" json:"created_with,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type EventCallback func(context.Context, *Event) error

type EventList struct {
	Items                []*Event `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type IsMemberOfOrganizationRequest struct {
	// Identifier of the user
	UserId string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	// Identifier of the organization
	OrganizationId       string   `protobuf:"bytes,2,opt,name=organization_id,json=organizationId,proto3" json:"organization_id,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type IsMemberOfOrganizationResponse struct {
	// Set if the requested user is a member of the requested organization.
	Member bool `protobuf:"varint,1,opt,name=member,proto3" json:"member,omitempty"`
	// Set if the requested user is an owner of the requested organization.
	Owner                bool     `protobuf:"varint,2,opt,name=owner,proto3" json:"owner,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type ListEventOptions struct {
	// Standard list options
	Options *v1.ListOptions `protobuf:"bytes,1,opt,name=options,proto3" json:"options,omitempty"`
	// If set, filter on the subject_id of event
	SubjectIds []string `protobuf:"bytes,2,rep,name=subject_ids,json=subjectIds,proto3" json:"subject_ids,omitempty"`
	// If set, filter on the type of event
	Types []string `protobuf:"bytes,3,rep,name=types,proto3" json:"types,omitempty"`
	// If set, filter of events created after this timestamp
	CreatedAfter *types.Timestamp `protobuf:"bytes,4,opt,name=created_after,json=createdAfter,proto3" json:"created_after,omitempty"`
	// If set, filter of events created before this timestamp
	CreatedBefore *types.Timestamp `protobuf:"bytes,5,opt,name=created_before,json=createdBefore,proto3" json:"created_before,omitempty"`
	// Sort descending (new to old) on created_at field (default is ascending).
	SortDescending       bool     `protobuf:"varint,6,opt,name=sort_descending,json=sortDescending,proto3" json:"sort_descending,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type ListQuotasRequest struct {
	// Common list options
	Options *v1.ListOptions `protobuf:"bytes,1,opt,name=options,proto3" json:"options,omitempty"`
	// If set, limit the returned list of quota's to these kinds.
	Kinds                []string `protobuf:"bytes,2,rep,name=kinds,proto3" json:"kinds,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type Member struct {
	// Identifier of the user
	UserId string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	// Set if this user is owner of the organization
	Owner bool `protobuf:"varint,2,opt,name=owner,proto3" json:"owner,omitempty"`
	// The user.
	User                 *v11.User `protobuf:"bytes,3,opt,name=user,proto3" json:"user,omitempty"`
	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
	XXX_unrecognized     []byte    `json:"-"`
	XXX_sizecache        int32     `json:"-"`
}

type MemberList struct {
	Items                []*Member `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
	XXX_unrecognized     []byte    `json:"-"`
	XXX_sizecache        int32     `json:"-"`
}

type Organization struct {
	// System identifier of the organization.
	// This is a read-only value.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// URL of this resource
	// This is a read-only value and cannot be initialized.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// Name of the organization
	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// Description of the organization
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// Set when this organization is deleted.
	// This is a read-only value.
	IsDeleted bool `protobuf:"varint,5,opt,name=is_deleted,json=isDeleted,proto3" json:"is_deleted,omitempty"`
	// The creation timestamp of the organization
	CreatedAt *types.Timestamp `protobuf:"bytes,6,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// The deletion timestamp of the organization
	DeletedAt *types.Timestamp `protobuf:"bytes,7,opt,name=deleted_at,json=deletedAt,proto3" json:"deleted_at,omitempty"`
	// Tier used for this organization.
	// This is a read-only value and cannot be initialized.
	Tier *Tier `protobuf:"bytes,8,opt,name=tier,proto3" json:"tier,omitempty"`
	// Total number of deployments created in this organization throughout
	// its entire lifetime per tier-id.
	// map: tier-id -> count
	// This is a read-only value.
	TotalDeployments map[string]int32 `` /* 198-byte string literal not displayed */
	// If set, all projects in this organization are allowed to use deployments using the flexible model.
	// This is a read-only value.
	IsFlexibleDeploymentsEnabled bool `` /* 151-byte string literal not displayed */
	// If set, this organization is allowed to use custom images for ArangoDB deployments.
	// This is a read-only value.
	IsAllowedToUseCustomImages bool `` /* 149-byte string literal not displayed */
	// If set, this organization is allowed to use IAMProviders on their deployments.
	// This is a read-only value.
	IsAllowedToUseIamproviders bool `` /* 147-byte string literal not displayed */
	// If set, this organization cannot be deleted.
	// To delete, first update the with locked set to false.
	Locked bool `protobuf:"varint,13,opt,name=locked,proto3" json:"locked,omitempty"`
	// If set, this organization cannot create deployments without prepaid deployments.
	// This is a read-only value.
	RequiresPrepaidDeployments bool `` /* 143-byte string literal not displayed */
	// If set, configures which authentication providers can/cannot be used for this organization.
	// If not set, all providers are enabled by default.
	AuthenticationProviders *AuthenticationProviders `` /* 131-byte string literal not displayed */
	// If set, configure restrictions on the email domains used by user accounts to access this organization.
	// If not set, there is no restriction of domains for user accounts.
	EmailDomainRestrictions *DomainRestrictions `` /* 133-byte string literal not displayed */
	// If set, this organization is allowed to manage IAM identities (like users) via SCIM
	// This is a read-only value.
	IsAllowedToUseScim   bool     `protobuf:"varint,17,opt,name=is_allowed_to_use_scim,json=isAllowedToUseScim,proto3" json:"is_allowed_to_use_scim,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type OrganizationCallback func(context.Context, *Organization) error

type OrganizationInvite struct {
	// System identifier of the invite.
	// This is a read-only value.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// URL of this resource
	// This is a read-only value and cannot be initialized.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// Identifier of the organization that the human is invited to join.
	// This is a read-only value.
	OrganizationId string `protobuf:"bytes,3,opt,name=organization_id,json=organizationId,proto3" json:"organization_id,omitempty"`
	// Email address of the human who is invited.
	Email string `protobuf:"bytes,4,opt,name=email,proto3" json:"email,omitempty"`
	// If set, the invitee accepted the invite.
	// This is a read-only value.
	Accepted bool `protobuf:"varint,5,opt,name=accepted,proto3" json:"accepted,omitempty"`
	// If set, the invitee rejected the invite.
	// This is a read-only value.
	Rejected bool `protobuf:"varint,6,opt,name=rejected,proto3" json:"rejected,omitempty"`
	// The creation timestamp of the invite
	// This is a read-only value.
	CreatedAt *types.Timestamp `protobuf:"bytes,7,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// The acceptance timestamp of the invite
	// This is a read-only value.
	AcceptedAt *types.Timestamp `protobuf:"bytes,8,opt,name=accepted_at,json=acceptedAt,proto3" json:"accepted_at,omitempty"`
	// The rejection timestamp of the invite
	// This is a read-only value.
	RejectedAt *types.Timestamp `protobuf:"bytes,9,opt,name=rejected_at,json=rejectedAt,proto3" json:"rejected_at,omitempty"`
	// Identifier of the user that accepted or rejected this invite.
	// This is a read-only value.
	UserId string `protobuf:"bytes,10,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	// Identifier of the user that created this invite.
	CreatedById string `protobuf:"bytes,11,opt,name=created_by_id,json=createdById,proto3" json:"created_by_id,omitempty"`
	// Identifier of the organization that the human is invited to join.
	// This is a read-only value.
	OrganizationName string `protobuf:"bytes,12,opt,name=organization_name,json=organizationName,proto3" json:"organization_name,omitempty"`
	// Name of the user that created this invite.
	// This is a read-only value.
	CreatedByName        string   `protobuf:"bytes,13,opt,name=created_by_name,json=createdByName,proto3" json:"created_by_name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type OrganizationInviteCallback func(context.Context, *OrganizationInvite) error

type OrganizationInviteList struct {
	Items                []*OrganizationInvite `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
	XXX_unrecognized     []byte                `json:"-"`
	XXX_sizecache        int32                 `json:"-"`
}

type OrganizationList struct {
	// Actual organizations
	Items []*Organization `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// Budget for organizations (owned by the caller)
	Budget               *v1.Budget `protobuf:"bytes,2,opt,name=budget,proto3" json:"budget,omitempty"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

type OrganizationMemberCallback func(context.Context, *Member) error

type OrganizationMembersRequest struct {
	// Identifier of the organization to add/remove a user from
	OrganizationId string `protobuf:"bytes,1,opt,name=organization_id,json=organizationId,proto3" json:"organization_id,omitempty"`
	// Users to add/remove.
	// For every user, an owner flag is provided as well.
	// If you add an existing user, the owner flag or the add request
	// will overwrite the value of the existing owner flag.
	Members              *MemberList `protobuf:"bytes,2,opt,name=members,proto3" json:"members,omitempty"`
	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
	XXX_unrecognized     []byte      `json:"-"`
	XXX_sizecache        int32       `json:"-"`
}

type Project struct {
	// System identifier of the project.
	// This is a read-only value.
	// It can be set when creating the project.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// URL of this resource
	// This is a read-only value and cannot be initialized.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// Name of the project
	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// Description of the project
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// Identifier of the organization that owns this project.
	// This is a read-only value.
	OrganizationId string `protobuf:"bytes,5,opt,name=organization_id,json=organizationId,proto3" json:"organization_id,omitempty"`
	// Set when this project is deleted
	IsDeleted bool `protobuf:"varint,6,opt,name=is_deleted,json=isDeleted,proto3" json:"is_deleted,omitempty"`
	// The creation timestamp of the project
	CreatedAt *types.Timestamp `protobuf:"bytes,7,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// The deletion timestamp of the project
	DeletedAt *types.Timestamp `protobuf:"bytes,8,opt,name=deleted_at,json=deletedAt,proto3" json:"deleted_at,omitempty"`
	// If set, this project is allowed to use deployments using the flexible model.
	IsFlexibleDeploymentsEnabled bool `` /* 150-byte string literal not displayed */
	// If set, this project cannot be deleted.
	// To delete, first update the with locked set to false.
	Locked               bool     `protobuf:"varint,10,opt,name=locked,proto3" json:"locked,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type ProjectCallback func(context.Context, *Project) error

type ProjectList struct {
	// Resulting projects
	Items []*Project `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// Budget for projects
	Budget               *v1.Budget `protobuf:"bytes,2,opt,name=budget,proto3" json:"budget,omitempty"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

type Quota struct {
	// Kind of quota
	Kind string `protobuf:"bytes,1,opt,name=kind,proto3" json:"kind,omitempty"`
	// Human readable description of the quota
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Current limit of the quota.
	// A value of 0 means unlimited.
	Limit                int64    `protobuf:"varint,3,opt,name=limit,proto3" json:"limit,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type QuotaCallback func(context.Context, *Quota) error

type QuotaDescription struct {
	// Kind of the quota
	Kind string `protobuf:"bytes,1,opt,name=kind,proto3" json:"kind,omitempty"`
	// Human readable description
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// If set, this kind of quota is valid at organization level
	ForOrganizations bool `protobuf:"varint,3,opt,name=for_organizations,json=forOrganizations,proto3" json:"for_organizations,omitempty"`
	// If set, this kind of quota is valid at project level
	ForProjects          bool     `protobuf:"varint,4,opt,name=for_projects,json=forProjects,proto3" json:"for_projects,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type QuotaDescriptionCallback func(context.Context, *QuotaDescription) error

type QuotaDescriptionList struct {
	Items                []*QuotaDescription `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	XXX_NoUnkeyedLiteral struct{}            `json:"-"`
	XXX_unrecognized     []byte              `json:"-"`
	XXX_sizecache        int32               `json:"-"`
}

type QuotaList struct {
	Items                []*Quota `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

type ResourceID struct {
	Kind string
	ID   string
}

type ResourceManagerServiceClient interface {
	// Get the current API version of this service.
	// Required permissions:
	// - None
	GetAPIVersion(ctx context.Context, in *v1.Empty, opts ...grpc.CallOption) (*v1.Version, error)
	// Fetch all organizations that the authenticated user is a member of.
	// Required permissions:
	// - None
	ListOrganizations(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*OrganizationList, error)
	// Fetch an organization by its id.
	// The authenticated user must be a member of the organization.
	// Required permissions:
	// - None
	GetOrganization(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*Organization, error)
	// Create a new organization
	// Required permissions:
	// - None
	CreateOrganization(ctx context.Context, in *Organization, opts ...grpc.CallOption) (*Organization, error)
	// Update an organization
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	UpdateOrganization(ctx context.Context, in *Organization, opts ...grpc.CallOption) (*Organization, error)
	// Delete an organization
	// Note that organization are never really removed.
	// Instead their is_deleted field is set to true.
	// Required permissions:
	// - resourcemanager.organization.delete on the organization
	DeleteOrganization(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*v1.Empty, error)
	// Get a list of members of the organization identified by the given context ID.
	// Required permissions:
	// - resourcemanager.organization.get on the organization
	ListOrganizationMembers(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*MemberList, error)
	// Add one or more members to an organization.
	// If there are members (in the request arguments) that are already member of the
	// organization an AlreadyExists error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	AddOrganizationMembers(ctx context.Context, in *OrganizationMembersRequest, opts ...grpc.CallOption) (*v1.Empty, error)
	// Update the ownership flag of one or more members of an organization.
	// If there are members (in the request arguments) that are not yet member of
	// the organization, an InvalidArgument error is returned.
	// If the request would result in the last owner no longer being an owner,
	// an InvalidArgument error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	UpdateOrganizationMembers(ctx context.Context, in *OrganizationMembersRequest, opts ...grpc.CallOption) (*v1.Empty, error)
	// Remove one or more members from an organization.
	// If the request would result in the last owner being removed as member
	// of the organization, an InvalidArgument error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	DeleteOrganizationMembers(ctx context.Context, in *OrganizationMembersRequest, opts ...grpc.CallOption) (*v1.Empty, error)
	// Is the user identified by the given user ID a member
	// of the organization identified by the given organization ID.
	// Required permissions:
	// - resourcemanager.organization.get on the organization, unless the requested user is identical to the authenticated user.
	// Note that if the identified user or organization does not exist, no is returned.
	IsMemberOfOrganization(ctx context.Context, in *IsMemberOfOrganizationRequest, opts ...grpc.CallOption) (*IsMemberOfOrganizationResponse, error)
	// Get a list of quota values for the organization identified by the given context ID.
	// If a quota is not specified on organization level, a (potentially tier specific) default
	// value is returned.
	// Required permissions:
	// - resourcemanager.organization.get on the organization
	ListOrganizationQuotas(ctx context.Context, in *ListQuotasRequest, opts ...grpc.CallOption) (*QuotaList, error)
	// Fetch all projects in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.project.list on the organization identified by the given context ID
	ListProjects(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*ProjectList, error)
	// Fetch a project by its id.
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.get on the project identified by the given ID
	GetProject(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*Project, error)
	// Create a new project
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.create on the organization that owns the project
	CreateProject(ctx context.Context, in *Project, opts ...grpc.CallOption) (*Project, error)
	// Update a project
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.update on the project
	UpdateProject(ctx context.Context, in *Project, opts ...grpc.CallOption) (*Project, error)
	// Delete a project
	// Note that project are initially only marked for deleted.
	// Once all their resources are removed the project itself is deleted
	// and cannot be restored.
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.delete on the project
	DeleteProject(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*v1.Empty, error)
	// Get a list of quota values for the project identified by the given context ID.
	// If a quota is not specified on project level, a value from organization level
	// is returned.
	// Required permissions:
	// - resourcemanager.project.get on the project
	ListProjectQuotas(ctx context.Context, in *ListQuotasRequest, opts ...grpc.CallOption) (*QuotaList, error)
	// Fetch all events in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.event.list on the organization identified by the given context ID
	// Note that this method uses a POST method because the list options contains a repeated field.
	ListEvents(ctx context.Context, in *ListEventOptions, opts ...grpc.CallOption) (*EventList, error)
	// Fetch all organization invites in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.organization-invite.list on the invite.
	ListOrganizationInvites(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*OrganizationInviteList, error)
	// Fetch all organization invites for the email address of the authenticated user.
	// Required permissions:
	// - None
	ListMyOrganizationInvites(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*OrganizationInviteList, error)
	// Fetch an organization invite by its id.
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.get on the invite.
	GetOrganizationInvite(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*OrganizationInvite, error)
	// Create a new organization invite.
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.create on the organization that the invite is for.
	CreateOrganizationInvite(ctx context.Context, in *OrganizationInvite, opts ...grpc.CallOption) (*OrganizationInvite, error)
	// Delete an organization invite
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.delete on the invite
	DeleteOrganizationInvite(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*v1.Empty, error)
	// Accept an organization invite
	// The authenticated user's email address must match the email address specified in
	// the invite.
	// Required permissions:
	// - None
	AcceptOrganizationInvite(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*v1.Empty, error)
	// Reject an organization invite
	// The authenticated user's email address must match the email address specified in
	// the invite.
	// Required permissions:
	// - None
	RejectOrganizationInvite(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*v1.Empty, error)
	// Fetch descriptions for all quota kinds know by the platform.
	// Required permissions:
	// - None
	ListQuotaDescriptions(ctx context.Context, in *v1.ListOptions, opts ...grpc.CallOption) (*QuotaDescriptionList, error)
	// Fetch a specific version of the Terms & Conditions.
	// Required permissions:
	// - None
	GetTermsAndConditions(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*TermsAndConditions, error)
	// Fetch the current version of the Terms & Conditions for the organization
	// identified by the given (optional) ID.
	// Required permissions:
	// - None If ID is empty.
	// - resourcemanager.organization.get If ID is not empty.
	GetCurrentTermsAndConditions(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*TermsAndConditions, error)
	// Fetch a specific version of the Data Processing Addendum.
	// Required permissions:
	// - None
	GetDataProcessingAddendum(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*DataProcessingAddendum, error)
	// Fetch the current version of the Data Processing Addendum for the organization
	// identified by the given (optional) ID.
	// Required permissions:
	// - None If ID is empty.
	// - resourcemanager.organization.get If ID is not empty.
	GetCurrentDataProcessingAddendum(ctx context.Context, in *v1.IDOptions, opts ...grpc.CallOption) (*DataProcessingAddendum, error)
}

type ResourceManagerServiceServer interface {
	// Get the current API version of this service.
	// Required permissions:
	// - None
	GetAPIVersion(context.Context, *v1.Empty) (*v1.Version, error)
	// Fetch all organizations that the authenticated user is a member of.
	// Required permissions:
	// - None
	ListOrganizations(context.Context, *v1.ListOptions) (*OrganizationList, error)
	// Fetch an organization by its id.
	// The authenticated user must be a member of the organization.
	// Required permissions:
	// - None
	GetOrganization(context.Context, *v1.IDOptions) (*Organization, error)
	// Create a new organization
	// Required permissions:
	// - None
	CreateOrganization(context.Context, *Organization) (*Organization, error)
	// Update an organization
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	UpdateOrganization(context.Context, *Organization) (*Organization, error)
	// Delete an organization
	// Note that organization are never really removed.
	// Instead their is_deleted field is set to true.
	// Required permissions:
	// - resourcemanager.organization.delete on the organization
	DeleteOrganization(context.Context, *v1.IDOptions) (*v1.Empty, error)
	// Get a list of members of the organization identified by the given context ID.
	// Required permissions:
	// - resourcemanager.organization.get on the organization
	ListOrganizationMembers(context.Context, *v1.ListOptions) (*MemberList, error)
	// Add one or more members to an organization.
	// If there are members (in the request arguments) that are already member of the
	// organization an AlreadyExists error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	AddOrganizationMembers(context.Context, *OrganizationMembersRequest) (*v1.Empty, error)
	// Update the ownership flag of one or more members of an organization.
	// If there are members (in the request arguments) that are not yet member of
	// the organization, an InvalidArgument error is returned.
	// If the request would result in the last owner no longer being an owner,
	// an InvalidArgument error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	UpdateOrganizationMembers(context.Context, *OrganizationMembersRequest) (*v1.Empty, error)
	// Remove one or more members from an organization.
	// If the request would result in the last owner being removed as member
	// of the organization, an InvalidArgument error is returned.
	// Required permissions:
	// - resourcemanager.organization.update on the organization
	DeleteOrganizationMembers(context.Context, *OrganizationMembersRequest) (*v1.Empty, error)
	// Is the user identified by the given user ID a member
	// of the organization identified by the given organization ID.
	// Required permissions:
	// - resourcemanager.organization.get on the organization, unless the requested user is identical to the authenticated user.
	// Note that if the identified user or organization does not exist, no is returned.
	IsMemberOfOrganization(context.Context, *IsMemberOfOrganizationRequest) (*IsMemberOfOrganizationResponse, error)
	// Get a list of quota values for the organization identified by the given context ID.
	// If a quota is not specified on organization level, a (potentially tier specific) default
	// value is returned.
	// Required permissions:
	// - resourcemanager.organization.get on the organization
	ListOrganizationQuotas(context.Context, *ListQuotasRequest) (*QuotaList, error)
	// Fetch all projects in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.project.list on the organization identified by the given context ID
	ListProjects(context.Context, *v1.ListOptions) (*ProjectList, error)
	// Fetch a project by its id.
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.get on the project identified by the given ID
	GetProject(context.Context, *v1.IDOptions) (*Project, error)
	// Create a new project
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.create on the organization that owns the project
	CreateProject(context.Context, *Project) (*Project, error)
	// Update a project
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.update on the project
	UpdateProject(context.Context, *Project) (*Project, error)
	// Delete a project
	// Note that project are initially only marked for deleted.
	// Once all their resources are removed the project itself is deleted
	// and cannot be restored.
	// The authenticated user must be a member of the organization that owns the project.
	// Required permissions:
	// - resourcemanager.project.delete on the project
	DeleteProject(context.Context, *v1.IDOptions) (*v1.Empty, error)
	// Get a list of quota values for the project identified by the given context ID.
	// If a quota is not specified on project level, a value from organization level
	// is returned.
	// Required permissions:
	// - resourcemanager.project.get on the project
	ListProjectQuotas(context.Context, *ListQuotasRequest) (*QuotaList, error)
	// Fetch all events in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.event.list on the organization identified by the given context ID
	// Note that this method uses a POST method because the list options contains a repeated field.
	ListEvents(context.Context, *ListEventOptions) (*EventList, error)
	// Fetch all organization invites in the organization identified by the given context ID.
	// The authenticated user must be a member of the organization identifier by the given context ID.
	// Required permissions:
	// - resourcemanager.organization-invite.list on the invite.
	ListOrganizationInvites(context.Context, *v1.ListOptions) (*OrganizationInviteList, error)
	// Fetch all organization invites for the email address of the authenticated user.
	// Required permissions:
	// - None
	ListMyOrganizationInvites(context.Context, *v1.ListOptions) (*OrganizationInviteList, error)
	// Fetch an organization invite by its id.
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.get on the invite.
	GetOrganizationInvite(context.Context, *v1.IDOptions) (*OrganizationInvite, error)
	// Create a new organization invite.
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.create on the organization that the invite is for.
	CreateOrganizationInvite(context.Context, *OrganizationInvite) (*OrganizationInvite, error)
	// Delete an organization invite
	// The authenticated user must be a member of the organization that the invite is for.
	// Required permissions:
	// - resourcemanager.organization-invite.delete on the invite
	DeleteOrganizationInvite(context.Context, *v1.IDOptions) (*v1.Empty, error)
	// Accept an organization invite
	// The authenticated user's email address must match the email address specified in
	// the invite.
	// Required permissions:
	// - None
	AcceptOrganizationInvite(context.Context, *v1.IDOptions) (*v1.Empty, error)
	// Reject an organization invite
	// The authenticated user's email address must match the email address specified in
	// the invite.
	// Required permissions:
	// - None
	RejectOrganizationInvite(context.Context, *v1.IDOptions) (*v1.Empty, error)
	// Fetch descriptions for all quota kinds know by the platform.
	// Required permissions:
	// - None
	ListQuotaDescriptions(context.Context, *v1.ListOptions) (*QuotaDescriptionList, error)
	// Fetch a specific version of the Terms & Conditions.
	// Required permissions:
	// - None
	GetTermsAndConditions(context.Context, *v1.IDOptions) (*TermsAndConditions, error)
	// Fetch the current version of the Terms & Conditions for the organization
	// identified by the given (optional) ID.
	// Required permissions:
	// - None If ID is empty.
	// - resourcemanager.organization.get If ID is not empty.
	GetCurrentTermsAndConditions(context.Context, *v1.IDOptions) (*TermsAndConditions, error)
	// Fetch a specific version of the Data Processing Addendum.
	// Required permissions:
	// - None
	GetDataProcessingAddendum(context.Context, *v1.IDOptions) (*DataProcessingAddendum, error)
	// Fetch the current version of the Data Processing Addendum for the organization
	// identified by the given (optional) ID.
	// Required permissions:
	// - None If ID is empty.
	// - resourcemanager.organization.get If ID is not empty.
	GetCurrentDataProcessingAddendum(context.Context, *v1.IDOptions) (*DataProcessingAddendum, error)
}

type ResourceURL []ResourceID

type TermsAndConditions struct {
	// Identifier of this version of the terms & conditions
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Content of terms & conditions in markdown format
	Content string `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"`
	// Creation date of this version of the terms & conditions.
	CreatedAt            *types.Timestamp `protobuf:"bytes,3,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
	XXX_unrecognized     []byte           `json:"-"`
	XXX_sizecache        int32            `json:"-"`
}

type Tier struct {
	// Identifier of the tier.
	// This is a read-only value and cannot be initialized.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Human readable name of the tier.
	// This is a read-only value and cannot be initialized.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// If set the tier has support plans.
	// This is a read-only value and cannot be initialized.
	HasSupportPlans bool `protobuf:"varint,3,opt,name=has_support_plans,json=hasSupportPlans,proto3" json:"has_support_plans,omitempty"`
	// If set the tier has backup uploads.
	// This is a read-only value and cannot be initialized.
	HasBackupUploads bool `protobuf:"varint,4,opt,name=has_backup_uploads,json=hasBackupUploads,proto3" json:"has_backup_uploads,omitempty"`
	// If set, the tier requires that new deployments accept the
	// current terms & conditions.
	// This is a read-only value and cannot be initialized.
	RequiresTermsAndConditions bool `` /* 144-byte string literal not displayed */
	// If set, this tier allows the user of support severity high.
	HasSupportSeverityHigh bool `` /* 132-byte string literal not displayed */
	// If set, this tier allows the user of support severity critical.
	HasSupportSeverityCritical bool `` /* 144-byte string literal not displayed */
	// If set, this tier has the auditlog feature.
	// This is a read-only value and cannot be initialized.
	HasAuditlogFeature bool `protobuf:"varint,8,opt,name=has_auditlog_feature,json=hasAuditlogFeature,proto3" json:"has_auditlog_feature,omitempty"`
	// If set, this tier supports the auditlog destination 'cloud'.
	// This fields is only relevant if has_auditlog_feature is set.
	// This is a read-only value and cannot be initialized.
	HasAuditlogDestinationCloud bool `` /* 147-byte string literal not displayed */
	// If set, this tier supports the auditlog destination 'https-post'.
	// This fields is only relevant if has_auditlog_feature is set.
	// This is a read-only value and cannot be initialized.
	HasAuditlogDestinationHttpsPost bool `` /* 162-byte string literal not displayed */
	// If set, this tier supports private endpoints.
	// This is a read-only value and cannot be initialized.
	HasPrivateEndpoints bool `protobuf:"varint,11,opt,name=has_private_endpoints,json=hasPrivateEndpoints,proto3" json:"has_private_endpoints,omitempty"`
	// If set the tier has multi region backup uploads.
	// This is a read-only value and cannot be initialized.
	HasMultiRegionBackupUploads bool     `` /* 150-byte string literal not displayed */
	XXX_NoUnkeyedLiteral        struct{} `json:"-"`
	XXX_unrecognized            []byte   `json:"-"`
	XXX_sizecache               int32    `json:"-"`
}