accessv1alpha1

type AWSAccount struct {
	AccountId string `protobuf:"bytes,1,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	Role      string `protobuf:"bytes,2,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type AccessRequest struct {

	// The ID of the Access Request.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Batch ID of the Access Request. Access Requests created in the same
	// API call have the same Batch ID.
	BatchId string `protobuf:"bytes,2,opt,name=batch_id,json=batchId,proto3" json:"batch_id,omitempty"`
	// The grants under consideration for access.
	Grants []*Grant `protobuf:"bytes,3,rep,name=grants,proto3" json:"grants,omitempty"`
	// An access request is reviewable if one or more Grants in the request
	// requires a manual review.
	Reviewable bool `protobuf:"varint,4,opt,name=reviewable,proto3" json:"reviewable,omitempty"`
	// True if the Access Request already existed and wasn't created by the API call.
	Existing bool `protobuf:"varint,5,opt,name=existing,proto3" json:"existing,omitempty"`
	// The timestamp that the request was created at.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// The justification supplied when the request was created
	Justification *Justification `protobuf:"bytes,9,opt,name=justification,proto3" json:"justification,omitempty"`
	// The user or service account that requested the access.
	//
	// If a service account requested access, the 'name' and 'email' may be empty.
	Principal    *User  `protobuf:"bytes,10,opt,name=principal,proto3" json:"principal,omitempty"`
	WorkflowId   string `protobuf:"bytes,11,opt,name=workflow_id,json=workflowId,proto3" json:"workflow_id,omitempty"`
	WorkflowName string `protobuf:"bytes,12,opt,name=workflow_name,json=workflowName,proto3" json:"workflow_name,omitempty"`
	// contains filtered or unexported fields
}

type ActivateAccessRequestRequest struct {

	// The ID of the Access Request.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// If provided, will only activate the grants with the specified IDs
	ActivateGrants []string `protobuf:"bytes,2,rep,name=activate_grants,json=activateGrants,proto3" json:"activate_grants,omitempty"`
	// contains filtered or unexported fields
}

type ActivateAccessRequestResponse struct {
	Diagnostics []*Diagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type ApproveAccessRequestRequest struct {

	// The ID of the Access Request.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// If provided, will only approve the grants with the specified IDs
	ApproveGrants []string `protobuf:"bytes,2,rep,name=approve_grants,json=approveGrants,proto3" json:"approve_grants,omitempty"`
	// contains filtered or unexported fields
}

type ApproveAccessRequestResponse struct {
	Diagnostics []*Diagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type AuditLog struct {

	// an ID of the audit log event
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// the action which occurred
	Action string `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
	// the actor which performed the action.
	Actor *User `protobuf:"bytes,3,opt,name=actor,proto3" json:"actor,omitempty"`
	// the timestamp the action occurred at.
	OccurredAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=occurred_at,json=occurredAt,proto3" json:"occurred_at,omitempty"`
	// all related resources affected by the action.
	Targets []*v1alpha1.EID `protobuf:"bytes,5,rep,name=targets,proto3" json:"targets,omitempty"`
	// a human-friendly message describing the action.
	Message string `protobuf:"bytes,6,opt,name=message,proto3" json:"message,omitempty"`
	// additional context (omitted in user-facing audit logs,
	// as it contains sensitive information like IP addresses)
	Context *structpb.Struct `protobuf:"bytes,7,opt,name=context,proto3" json:"context,omitempty"`
	// the caller identity details, including information
	// such as the particular authentication token ID used
	// to perform the action.
	CallerIdentityChain []*IdentityLink `protobuf:"bytes,8,rep,name=caller_identity_chain,json=callerIdentityChain,proto3" json:"caller_identity_chain,omitempty"`
	// contains filtered or unexported fields
}

type AuditLogPreview struct {
	Logs []*AuditLog `protobuf:"bytes,1,rep,name=logs,proto3" json:"logs,omitempty"`
	// An approximate count of activity events
	LogCount uint32 `protobuf:"varint,12,opt,name=log_count,json=logCount,proto3" json:"log_count,omitempty"`
	// contains filtered or unexported fields
}

type Availability struct {

	// ID is just used internally and isn't really shown to users except for debugging purposes.
	// users refer to entitlements by the target and role, rather than the internal ID.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The particular resource which this entitlement gives access to
	Target *NamedEID `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	// The particular role this entitlement gives access to
	Role *NamedEID `protobuf:"bytes,3,opt,name=role,proto3" json:"role,omitempty"`
	// the JIT workflow associated with the entitlement.
	WorkflowId string `protobuf:"bytes,4,opt,name=workflow_id,json=workflowId,proto3" json:"workflow_id,omitempty"`
	// The permitted access duration.
	Duration  *durationpb.Duration `protobuf:"bytes,5,opt,name=duration,proto3" json:"duration,omitempty"`
	Priority  uint32               `protobuf:"varint,6,opt,name=priority,proto3" json:"priority,omitempty"`
	Reviewers *v1alpha1.EID        `protobuf:"bytes,7,opt,name=reviewers,proto3" json:"reviewers,omitempty"`
	// the ID of the selector which was used to match the targets
	TargetSelector *v1alpha1.EID `protobuf:"bytes,8,opt,name=target_selector,json=targetSelector,proto3" json:"target_selector,omitempty"`
	// The default duration of the access.
	DefaultDuration *durationpb.Duration `protobuf:"bytes,9,opt,name=default_duration,json=defaultDuration,proto3" json:"default_duration,omitempty"`
	// contains filtered or unexported fields
}

type BatchEnsureRequest struct {

	// The entitlements to request access to.
	Entitlements []*EntitlementInput `protobuf:"bytes,1,rep,name=entitlements,proto3" json:"entitlements,omitempty"`
	// Optional justification as to why access is required.
	Justification *Justification `protobuf:"bytes,2,opt,name=justification,proto3" json:"justification,omitempty"`
	// If true, will return a preview of changes rather than actually provisioning access.
	DryRun bool `protobuf:"varint,3,opt,name=dry_run,json=dryRun,proto3" json:"dry_run,omitempty"`
	// contains filtered or unexported fields
}

type BatchEnsureResponse struct {

	// An ID which can be used to debug the evaluation of the access policies
	// associated with the request.
	TraceId string        `protobuf:"bytes,1,opt,name=trace_id,json=traceId,proto3" json:"trace_id,omitempty"`
	Grants  []*GrantState `protobuf:"bytes,2,rep,name=grants,proto3" json:"grants,omitempty"`
	// User-facing diagnostic warnings, for messages such as the user not having permissions
	// to request some of the entitlements they asked for.
	//
	// Rather than failing the entire operation the Access Handler returns warnings.
	Diagnostics []*Diagnostic `protobuf:"bytes,6,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type BatchPutAuditLogRequest struct {
	GrantId   string                 `protobuf:"bytes,1,opt,name=grant_id,json=grantId,proto3" json:"grant_id,omitempty"`
	AuditLogs []*IntegrationAuditLog `protobuf:"bytes,2,rep,name=audit_logs,json=auditLogs,proto3" json:"audit_logs,omitempty"`
	// contains filtered or unexported fields
}

type BatchPutAuditLogResponse struct {
	// contains filtered or unexported fields
}

type CloseAccessRequestRequest struct {

	// The ID of the Access Request.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// If provided, will only close the grants with the specified IDs
	CloseGrants []string `protobuf:"bytes,2,rep,name=close_grants,json=closeGrants,proto3" json:"close_grants,omitempty"`
	// contains filtered or unexported fields
}

type CloseAccessRequestResponse struct {
	Diagnostics []*Diagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type DebugEntitlementAccessRequest struct {
	Principal *Specifier `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	Target    *Specifier `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	Role      *Specifier `protobuf:"bytes,3,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type DebugEntitlementAccessResponse struct {

	// Whether or not the principal can request access to this entitlement
	CanRequest bool `protobuf:"varint,1,opt,name=can_request,json=canRequest,proto3" json:"can_request,omitempty"`
	// Whether or not it is auto approved
	AutoApproved bool `protobuf:"varint,2,opt,name=auto_approved,json=autoApproved,proto3" json:"auto_approved,omitempty"`
	// The Cedar Policys which contributed to the authorizations decisions
	Reason *EntitlementAccessReason `protobuf:"bytes,3,opt,name=reason,proto3" json:"reason,omitempty"`
	// Cedar PolicySets which contributed to the authorization decisions.
	PolicySets []*v1alpha11.PolicySet `protobuf:"bytes,4,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	// Entities which contributed to the authorization decisions.
	Entities []*v1alpha1.Entity `protobuf:"bytes,5,rep,name=entities,proto3" json:"entities,omitempty"`
	// contains filtered or unexported fields
}

type Diagnostic struct {
	Level DiagnosticLevel `protobuf:"varint,1,opt,name=level,proto3,enum=commonfate.access.v1alpha1.DiagnosticLevel" json:"level,omitempty"`
	// The resource the diagnostic message relates to.
	// Can be empty if the message doesn't relate to a particular resource.
	Resource *v1alpha1.EID `protobuf:"bytes,2,opt,name=resource,proto3" json:"resource,omitempty"`
	// The message.
	Message string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type DiagnosticLevel int32

type Entitlement struct {

	// The particular resource which this entitlement gives access to
	Target *NamedEID `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// The particular role this entitlement gives access to
	Role *NamedEID `protobuf:"bytes,2,opt,name=role,proto3" json:"role,omitempty"`
	// Whether or not it is auto approved
	AutoApproved bool `protobuf:"varint,3,opt,name=auto_approved,json=autoApproved,proto3" json:"auto_approved,omitempty"`
	// target_path is the hierarchical path to the particular entitlement target.
	// It is used in the Common Fate web console to display entitlements in a hierarchy view.
	// For example, an AWS account entitlement will have a path of
	// `Root OU -> Parent OU -> Child OU.`
	//
	// target_path is in sorted order, from the root path node to the immediate parent of the target.
	//
	// The target_path does not include the target itself.
	TargetPath []*NamedEID `protobuf:"bytes,4,rep,name=target_path,json=targetPath,proto3" json:"target_path,omitempty"`
	// The Cedar Policys which contributed to the authorizations decisions
	Reason *EntitlementAccessReason `protobuf:"bytes,5,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type EntitlementAccessReason struct {

	// Cedar Policy IDs which contributed to the can_request authorization decision.
	CanRequestReason []string `protobuf:"bytes,1,rep,name=can_request_reason,json=canRequestReason,proto3" json:"can_request_reason,omitempty"`
	// Cedar Policy IDs which contributed to the auto_approval authorization decision.
	AutoApprovalReason []string `protobuf:"bytes,2,rep,name=auto_approval_reason,json=autoApprovalReason,proto3" json:"auto_approval_reason,omitempty"`
	// contains filtered or unexported fields
}

type EntitlementInput struct {

	// The principal to grant access to.
	// If empty, the current caller will be used as the principal.
	Principal *Specifier `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	// The resource to grant the principal access to.
	Target *Specifier `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	// The role to grant the principal access to the resource with.
	Role     *Specifier           `protobuf:"bytes,3,opt,name=role,proto3" json:"role,omitempty"`
	Duration *durationpb.Duration `protobuf:"bytes,4,opt,name=duration,proto3,oneof" json:"duration,omitempty"`
	// contains filtered or unexported fields
}

type GCPProject struct {
	Project string `protobuf:"bytes,1,opt,name=project,proto3" json:"project,omitempty"`
	Role    string `protobuf:"bytes,2,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type GetAccessRequestRequest struct {

	// The ID of the Access Request.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetAccessRequestResponse struct {
	AccessRequest *AccessRequest `protobuf:"bytes,1,opt,name=access_request,json=accessRequest,proto3" json:"access_request,omitempty"`
	// contains filtered or unexported fields
}

type GetCallerIdentityRequest struct {
	// contains filtered or unexported fields
}

type GetCallerIdentityResponse struct {

	// The chain of the identities for the user.
	// The final item in the chain is the current identity the user is acting as,
	// and is the 'principal' for authorization policy evaluations.
	//
	// For users authenticating with OIDC, the chain will usually look like:
	// 1. OIDC::Subject::"https://oidc-issuer.example.com/93fcac4b-ab67-405c-926b-184f8ba697a4"
	// 2. CF::User::"usr_2Z0WQkw9Ogpsn2Us6RuIBiDRYzJ"
	Chain []*IdentityLink `protobuf:"bytes,1,rep,name=chain,proto3" json:"chain,omitempty"`
	// The principal that the user is currently acting as.
	Principal *User `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	// contains filtered or unexported fields
}

type Grant struct {

	// The ID of the Grant.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// A user-friendly name describing the access, such as "AdministratorAccess to tax-api-prod"
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// The resource being requested.
	Target *NamedEID `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// The role being requested, such as "View" or "Admin".
	Role *NamedEID `protobuf:"bytes,4,opt,name=role,proto3" json:"role,omitempty"`
	// The user or service account that requested the access.
	//
	// If a service account requested access, the 'name' and 'email' may be empty.
	Principal *User `protobuf:"bytes,5,opt,name=principal,proto3" json:"principal,omitempty"`
	// The status of the Grant.
	Status GrantStatus `protobuf:"varint,6,opt,name=status,proto3,enum=commonfate.access.v1alpha1.GrantStatus" json:"status,omitempty"`
	// For active grants, the time that the access is due to expire.
	ExpiresAt *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=expires_at,json=expiresAt,proto3" json:"expires_at,omitempty"`
	// For active grants, the time that the user may attempt to extend the grant.
	// If empty, extension is not permitted.
	TryExtendAfter *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=try_extend_after,json=tryExtendAfter,proto3" json:"try_extend_after,omitempty"`
	// The ID of the Access Request associated with the Grant.
	AccessRequestId string `protobuf:"bytes,10,opt,name=access_request_id,json=accessRequestId,proto3" json:"access_request_id,omitempty"`
	// Approved is true if there are any approving reviews on the Grant.
	Approved bool `protobuf:"varint,11,opt,name=approved,proto3" json:"approved,omitempty"`
	// The time that the grant was closed.
	ClosedAt *timestamppb.Timestamp `protobuf:"bytes,12,opt,name=closed_at,json=closedAt,proto3" json:"closed_at,omitempty"`
	// For grants which were activated, the time that the access was activated.
	ActivatedAt *timestamppb.Timestamp `protobuf:"bytes,13,opt,name=activated_at,json=activatedAt,proto3" json:"activated_at,omitempty"`
	// For grants which were activated, the time that the access was deprovisioned.
	DeprovisionedAt *timestamppb.Timestamp `protobuf:"bytes,14,opt,name=deprovisioned_at,json=deprovisionedAt,proto3" json:"deprovisioned_at,omitempty"`
	// The provisioning status of the Grant. This status tracks whether the entitlements have been successfully provisioned in the integration that Common Fate is provisioning access to, such as AWS or GCP.
	ProvisioningStatus ProvisioningStatus   `` /* 168-byte string literal not displayed */
	Duration           *durationpb.Duration `protobuf:"bytes,16,opt,name=duration,proto3" json:"duration,omitempty"`
	// contains filtered or unexported fields
}

type GrantChange int32

type GrantState struct {
	Grant *Grant `protobuf:"bytes,1,opt,name=grant,proto3" json:"grant,omitempty"`
	// The change to the grant.
	// Will be unspecified if the grant has not been changed.
	Change GrantChange `protobuf:"varint,2,opt,name=change,proto3,enum=commonfate.access.v1alpha1.GrantChange" json:"change,omitempty"`
	// contains filtered or unexported fields
}

type GrantStatus int32

type IdentityLink struct {
	Id    *v1alpha1.EID `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Label string        `protobuf:"bytes,2,opt,name=label,proto3" json:"label,omitempty"`
	// contains filtered or unexported fields
}

type IntegrationAuditLog struct {

	// the action which occurred
	Action string `protobuf:"bytes,1,opt,name=action,proto3" json:"action,omitempty"`
	// the timestamp the action occurred at.
	OccurredAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=occurred_at,json=occurredAt,proto3" json:"occurred_at,omitempty"`
	// a human-friendly message describing the action.
	Message string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// structured data details the audit log event
	Details *structpb.Struct `protobuf:"bytes,4,opt,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

type Justification struct {
	Reason *string `protobuf:"bytes,1,opt,name=reason,proto3,oneof" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type NamedEID struct {
	Eid  *v1alpha1.EID `protobuf:"bytes,1,opt,name=eid,proto3" json:"eid,omitempty"`
	Name string        `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type PreviewEntitlementAccessRequest struct {
	Target *Specifier `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	Role   *Specifier `protobuf:"bytes,2,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type PreviewEntitlementAccessResponse struct {

	// The principals which have access to request access and whether that access will be auto approved
	Access []*PrincipalAccess `protobuf:"bytes,1,rep,name=access,proto3" json:"access,omitempty"`
	// contains filtered or unexported fields
}

type PreviewUserAccessRequest struct {
	Principal  *Specifier `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	TargetType *string    `protobuf:"bytes,2,opt,name=target_type,json=targetType,proto3,oneof" json:"target_type,omitempty"`
	// contains filtered or unexported fields
}

type PreviewUserAccessResponse struct {
	Entitlements []*Entitlement `protobuf:"bytes,1,rep,name=entitlements,proto3" json:"entitlements,omitempty"`
	// contains filtered or unexported fields
}

type PrincipalAccess struct {
	Principal *User `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	// Whether or not it is auto approved
	AutoApproved bool `protobuf:"varint,2,opt,name=auto_approved,json=autoApproved,proto3" json:"auto_approved,omitempty"`
	// The Cedar Policys which contributed to the authorizations decisions
	Reason *EntitlementAccessReason `protobuf:"bytes,3,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type ProvisionRequest struct {

	// The ID of the Grant.
	Grant     *v1alpha1.EID    `protobuf:"bytes,1,opt,name=grant,proto3" json:"grant,omitempty"`
	Principal *v1alpha1.Entity `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	// DomainPrincipal is the principal to grant access to,
	// mapped to the identity domain of the system that we're provisioning in.
	//
	// For example, instead of sending a user's email address, we send the
	// ID of the user in AWS IAM Identity Center.
	//
	// This field may be empty if Common Fate fails to map the principal.
	// A well-designed provisioner should attempt to fall back on data from
	// the core principal entity instead to provision access.
	DomainPrincipal *v1alpha1.Entity `protobuf:"bytes,3,opt,name=domain_principal,json=domainPrincipal,proto3" json:"domain_principal,omitempty"`
	Target          *v1alpha1.Entity `protobuf:"bytes,4,opt,name=target,proto3" json:"target,omitempty"`
	Role            *v1alpha1.Entity `protobuf:"bytes,5,opt,name=role,proto3" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type ProvisionResponse struct {
	Entities       []*v1alpha1.Entity        `protobuf:"bytes,1,rep,name=entities,proto3" json:"entities,omitempty"`
	ChildRelations []*v1alpha1.ChildRelation `protobuf:"bytes,2,rep,name=child_relations,json=childRelations,proto3" json:"child_relations,omitempty"`
	// contains filtered or unexported fields
}

type ProvisioningStatus int32

type QueryAccessRequestsRequest struct {

	// The token for the next page.
	PageToken string          `protobuf:"bytes,1,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	Archived  bool            `protobuf:"varint,2,opt,name=archived,proto3" json:"archived,omitempty"`
	Order     *v1alpha1.Order `protobuf:"varint,3,opt,name=order,proto3,enum=commonfate.entity.v1alpha1.Order,oneof" json:"order,omitempty"`
	// contains filtered or unexported fields
}

type QueryAccessRequestsResponse struct {
	AccessRequests []*AccessRequest `protobuf:"bytes,1,rep,name=access_requests,json=accessRequests,proto3" json:"access_requests,omitempty"`
	NextPageToken  string           `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryApproversRequest struct {

	// Types that are assignable to Query:
	//
	//	*QueryApproversRequest_TargetRole
	//	*QueryApproversRequest_Grant
	Query isQueryApproversRequest_Query `protobuf_oneof:"query"`
	// contains filtered or unexported fields
}

type QueryApproversRequest_Grant struct {
	Grant *v1alpha1.EID `protobuf:"bytes,2,opt,name=grant,proto3,oneof"`
}

type QueryApproversRequest_TargetRole struct {
	TargetRole *TargetRole `protobuf:"bytes,1,opt,name=target_role,json=targetRole,proto3,oneof"`
}

type QueryApproversResponse struct {
	Approvers []*User `protobuf:"bytes,1,rep,name=approvers,proto3" json:"approvers,omitempty"`
	// contains filtered or unexported fields
}

type QueryAuditLogsRequest struct {

	// Query for audit logs relating to a particular target
	Target *v1alpha1.EID `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// The token for the next page.
	PageToken string `protobuf:"bytes,10,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryAuditLogsResponse struct {
	AuditLogs     []*AuditLog `protobuf:"bytes,1,rep,name=audit_logs,json=auditLogs,proto3" json:"audit_logs,omitempty"`
	NextPageToken string      `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryAvailabilitiesRequest struct {

	// The token for the next page.
	PageToken string `protobuf:"bytes,10,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryAvailabilitiesResponse struct {
	Availabilities []*Availability `protobuf:"bytes,1,rep,name=availabilities,proto3" json:"availabilities,omitempty"`
	NextPageToken  string          `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryDescendentsRequest struct {
	Parent     *v1alpha1.EID `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	EntityType string        `protobuf:"bytes,2,opt,name=entity_type,json=entityType,proto3" json:"entity_type,omitempty"`
	// The token for the next page.
	PageToken string `protobuf:"bytes,10,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryDescendentsResponse struct {
	Entities []*NamedEID `protobuf:"bytes,1,rep,name=entities,proto3" json:"entities,omitempty"`
	// The token for the next page.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryEntitlementsRequest struct {
	TargetType *string `protobuf:"bytes,1,opt,name=target_type,json=targetType,proto3,oneof" json:"target_type,omitempty"`
	// The token for the next page.
	PageToken string `protobuf:"bytes,10,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryEntitlementsResponse struct {
	Entitlements  []*Entitlement `protobuf:"bytes,1,rep,name=entitlements,proto3" json:"entitlements,omitempty"`
	NextPageToken string         `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryGrantChildrenRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The token for the next page.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryGrantChildrenResponse struct {
	Entities      []*v1alpha1.Entity `protobuf:"bytes,1,rep,name=entities,proto3" json:"entities,omitempty"`
	NextPageToken string             `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type QueryGrantsRequest struct {

	// The token for the next page.
	PageToken string        `protobuf:"bytes,1,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	Principal *v1alpha1.EID `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	Target    *v1alpha1.EID `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	Role      *v1alpha1.EID `protobuf:"bytes,4,opt,name=role,proto3" json:"role,omitempty"`
	// The status of the Grant.
	Status *GrantStatus `protobuf:"varint,5,opt,name=status,proto3,enum=commonfate.access.v1alpha1.GrantStatus,oneof" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type QueryGrantsResponse struct {
	Grants        []*Grant `protobuf:"bytes,1,rep,name=grants,proto3" json:"grants,omitempty"`
	NextPageToken string   `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type Resource struct {

	// Types that are assignable to Resource:
	//
	//	*Resource_AwsAccount
	//	*Resource_GcpProject
	Resource isResource_Resource `protobuf_oneof:"resource"`
	// contains filtered or unexported fields
}

type Resource_AwsAccount struct {
	AwsAccount *AWSAccount `protobuf:"bytes,1,opt,name=aws_account,json=awsAccount,proto3,oneof"`
}

type Resource_GcpProject struct {
	GcpProject *GCPProject `protobuf:"bytes,2,opt,name=gcp_project,json=gcpProject,proto3,oneof"`
}

type Specifier struct {

	// Types that are assignable to Specify:
	//
	//	*Specifier_Eid
	//	*Specifier_Lookup
	Specify isSpecifier_Specify `protobuf_oneof:"specify"`
	// contains filtered or unexported fields
}

type Specifier_Eid struct {
	// Specify a resource using a EID. If you're using Common Fate programatically
	// and you know the resource you want to specify, you should use this field.
	Eid *v1alpha1.EID `protobuf:"bytes,1,opt,name=eid,proto3,oneof"`
}

type Specifier_Lookup struct {
	// Specify a resource using a string lookup. This is used in our CLI
	// to allow end users to look up resources by name, ID and/or EID.
	//
	// The order of matching is:
	// 1. the 'lookup' field will be parsed as a EID - if it's valid it will be a EID lookup
	// 2. the 'lookup' field will be matched against all resource IDs
	// 3. the 'lookup' field will be matched against all resource names.
	//
	// If the lookup is a valid EID but it is not found, the API will return a Not Found error.
	// The API will return an Invalid Arguments error if the lookup is ambiguous and could match
	// multiple resources.
	Lookup string `protobuf:"bytes,2,opt,name=lookup,proto3,oneof"`
}