proto

type Account struct {

	// The unique identifier for the user. Key. Not nullable. Non reassignable. Read-only.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// *true* if the account is enabled; otherwise, *false*. This property is required when a user is created. Supports $filter.
	AccountEnabled bool `protobuf:"varint,2,opt,name=account_enabled,json=accountEnabled,proto3" json:"account_enabled,omitempty"`
	// A resource account is also known as a /disabled user object/ in Azure AD, and can be used to represent resources in general.
	// In Exchange it might be used to represent conference rooms, for example, and allow them to have a phone number.
	// You could give printers or machines with a sync client resource accounts as well.
	// A resource account can be homed in Microsoft 365 or on premises using Skype for Business Server 2019.
	// *true* if the user is a resource account; otherwise, *false*. Null value should be considered false.
	IsResourceAccount bool `protobuf:"varint,3,opt,name=is_resource_account,json=isResourceAccount,proto3" json:"is_resource_account,omitempty"`
	// Indicates whether the account was created as
	// - a regular school or work account ("" / emptystring),
	// - a local account, fully managed by ocis (LocalAccount), includes synced accounts or
	// - an external account (Invitation),
	// - self-service sign-up using email verification (EmailVerified). Read-only.
	CreationType string `protobuf:"bytes,4,opt,name=creation_type,json=creationType,proto3" json:"creation_type,omitempty"`
	// Represents the identities that can be used to sign in to this account.
	// An identity can be provided by OCIS (also known as a local account), by organizations, or by social identity providers such as Facebook, Google, and Microsoft, and is tied to an account.
	// May contain multiple items with the same signInType value. Supports $filter.
	Identities []*Identities `protobuf:"bytes,5,rep,name=identities,proto3" json:"identities,omitempty"`
	// The name displayed in the address book for the account.
	// This is usually the combination of the user's first name, middle initial and last name.
	// This property is required when a user is created and it cannot be cleared during updates.
	// Supports $filter and $orderby.
	// posixaccount MUST cn
	DisplayName string `protobuf:"bytes,6,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// The username
	// posixaccount MUST uid
	PreferredName string `protobuf:"bytes,7,opt,name=preferred_name,json=preferredName,proto3" json:"preferred_name,omitempty"`
	// TODO rename to on_premise_? or move to extension? see https://docs.microsoft.com/en-us/graph/extensibility-open-users
	// used for exposing the user using ldap
	// posixaccount MUST uidnumber
	UidNumber int64 `protobuf:"varint,8,opt,name=uid_number,json=uidNumber,proto3" json:"uid_number,omitempty"`
	// used for exposing the user using ldap
	// posixaccount MUST gidnumber
	GidNumber int64 `protobuf:"varint,9,opt,name=gid_number,json=gidNumber,proto3" json:"gid_number,omitempty"`
	// The SMTP address for the user, for example, "jeff@contoso.onmicrosoft.com". Read-Only. Supports $filter.
	// inetorgperson MAY mail
	Mail string `protobuf:"bytes,10,opt,name=mail,proto3" json:"mail,omitempty"`
	// A description, useful for resource accounts
	// posixaccount MAY description
	Description string `protobuf:"bytes,11,opt,name=description,proto3" json:"description,omitempty"`
	// Specifies the password profile for the user.
	// The profile contains the user’s password. This property is required when a user is created.
	// The password in the profile must satisfy minimum requirements as specified by the passwordPolicies property.
	// By default, a strong password is required.
	// posixaccount MAY authPassword
	PasswordProfile *PasswordProfile `protobuf:"bytes,12,opt,name=password_profile,json=passwordProfile,proto3" json:"password_profile,omitempty"`
	// The groups, directory roles and administrative units that the user is a member of. Read-only. Nullable.
	// should we only respond with repeated strings of ids? no clients should a proper filter mask!
	MemberOf []*Group `protobuf:"bytes,13,rep,name=memberOf,proto3" json:"memberOf,omitempty"`
	// The created date of the account object.
	CreatedDateTime *timestamp.Timestamp `protobuf:"bytes,16,opt,name=created_date_time,json=createdDateTime,proto3" json:"created_date_time,omitempty"`
	// The date and time the user was deleted. Returned only on $select.
	DeletedDateTime *timestamp.Timestamp `protobuf:"bytes,17,opt,name=deleted_date_time,json=deletedDateTime,proto3" json:"deleted_date_time,omitempty"`
	// *true* if this object is synced from an on-premises directory;
	// *false* if this object was originally synced from an on-premises directory but is no longer synced;
	// null if this object has never been synced from an on-premises directory (default). Read-only
	OnPremisesSyncEnabled bool `` /* 130-byte string literal not displayed */
	// This property is used to associate an on-premises LDAP user to the ocis account object.
	// This property must be specified when creating a new user account in the Graph if you are using a federated domain for the user’s userPrincipalName (UPN) property.
	// Important: The $ and _ characters cannot be used when specifying this property. Supports $filter.
	OnPremisesImmutableId string `` /* 129-byte string literal not displayed */
	// Contains the on-premises security identifier (SID) for the user that was synchronized from on-premises to the cloud. Read-only.
	OnPremisesSecurityIdentifier string `` /* 150-byte string literal not displayed */
	// Contains the on-premises LDAP `distinguished name` or `DN`.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDistinguishedName string `` /* 147-byte string literal not displayed */
	// Contains the on-premises `samAccountName` synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesSamAccountName string `` /* 140-byte string literal not displayed */
	// Contains the on-premises `domainFQDN`, also called `dnsDomainName` synchronized from the on-premises directory
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDomainName string `` /* 126-byte string literal not displayed */
	// Contains the on-premises userPrincipalName synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesUserPrincipalName string `` /* 149-byte string literal not displayed */
	// Indicates the last time at which the object was synced with the on-premises directory; Read-only.
	OnPremisesLastSyncDateTime *timestamp.Timestamp `` /* 148-byte string literal not displayed */
	// Errors when using synchronization during provisioning.
	OnPremisesProvisioningErrors []*OnPremisesProvisioningError `` /* 150-byte string literal not displayed */
	// For an external user invited to the tenant using the invitation API, this property represents the invited user's invitation status.
	// For invited users, the state can be `PendingAcceptance` or `Accepted`, or "" / emptystring for all other users.
	// Returned only on $select. Supports $filter with the supported values. For example: $filter=externalUserState eq 'PendingAcceptance'.
	ExternalUserState string `protobuf:"bytes,40,opt,name=external_user_state,json=externalUserState,proto3" json:"external_user_state,omitempty"`
	// Shows the timestamp for the latest change to the externalUserState property. Returned only on $select.
	ExternalUserStateChangeDateTime *timestamp.Timestamp `` /* 163-byte string literal not displayed */
	// Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications will get
	// an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph).
	// If this happens, the application will need to acquire a new refresh token by making a request to the authorize endpoint.
	// Returned only on $select. Read-only. Use invalidateAllRefreshTokens to reset.
	RefreshTokensValidFromDateTime *timestamp.Timestamp `` /* 160-byte string literal not displayed */
	// Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications will get
	// an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph).
	// If this happens, the application will need to acquire a new refresh token by making a request to the authorize endpoint.
	// Read-only. Use revokeSignInSessions to reset.
	SignInSessionsValidFromDateTime *timestamp.Timestamp `` /* 165-byte string literal not displayed */
	// contains filtered or unexported fields
}

type AccountsService interface {
	// Lists accounts
	ListAccounts(ctx context.Context, in *ListAccountsRequest, opts ...client.CallOption) (*ListAccountsResponse, error)
	// Gets an account
	GetAccount(ctx context.Context, in *GetAccountRequest, opts ...client.CallOption) (*Account, error)
	// Creates an account
	CreateAccount(ctx context.Context, in *CreateAccountRequest, opts ...client.CallOption) (*Account, error)
	// Updates an account
	UpdateAccount(ctx context.Context, in *UpdateAccountRequest, opts ...client.CallOption) (*Account, error)
	// Deletes an account
	DeleteAccount(ctx context.Context, in *DeleteAccountRequest, opts ...client.CallOption) (*empty.Empty, error)
}

type AccountsServiceHandler interface {
	// Lists accounts
	ListAccounts(context.Context, *ListAccountsRequest, *ListAccountsResponse) error
	// Gets an account
	GetAccount(context.Context, *GetAccountRequest, *Account) error
	// Creates an account
	CreateAccount(context.Context, *CreateAccountRequest, *Account) error
	// Updates an account
	UpdateAccount(context.Context, *UpdateAccountRequest, *Account) error
	// Deletes an account
	DeleteAccount(context.Context, *DeleteAccountRequest, *empty.Empty) error
}

type AddMemberRequest struct {

	// The id of the group to add a member to
	GroupId string `protobuf:"bytes,1,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	// The account id to add
	AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

type BleveAccount struct {
	Account
	BleveType string `json:"bleve_type"`
}

type BleveGroup struct {
	Group
	BleveType string `json:"bleve_type"`
}

type CreateAccountRequest struct {

	// The account resource to create
	Account *Account `protobuf:"bytes,1,opt,name=account,proto3" json:"account,omitempty"`
	// contains filtered or unexported fields
}

type CreateGroupRequest struct {

	// The account resource to create
	Group *Group `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// contains filtered or unexported fields
}

type DeleteAccountRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteGroupRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetAccountRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetGroupRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type Group struct {

	// The unique identifier for the group.
	// Returned by default. Inherited from directoryObject. Key. Not nullable. Read-only.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The display name for the group. This property is required when a group is created and cannot be cleared during updates.
	// Returned by default. Supports $filter and $orderby.
	// groupofnames MUST cn
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"` // groupofnames MUST/MAY member
	// Users, contacts, and groups that are members of this group. HTTP Methods: GET (supported for all groups), POST (supported for security groups and mail-enabled security groups), DELETE (supported only for security groups) Read-only. Nullable.
	// TODO accounts (users) only for now, we can add groups with the dedicated message using oneof construct later
	Members []*Account `protobuf:"bytes,3,rep,name=members,proto3" json:"members,omitempty"`
	// groupofnames MAY businessCategory
	// groupofnames MAY o
	// groupofnames MAY ou
	// groupofnames MAY owner, SINGLE-VALUE but there might be multiple owners
	Owners []*Account `protobuf:"bytes,4,rep,name=owners,proto3" json:"owners,omitempty"`
	// An optional description for the group. Returned by default.
	// groupofnames MAY description
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// used for exposing the user using ldap
	// posixgroup MUST gidnumber
	GidNumber int64 `protobuf:"varint,6,opt,name=gid_number,json=gidNumber,proto3" json:"gid_number,omitempty"`
	// Timestamp of when the group was created. The value cannot be modified and is automatically populated when the group is created
	// Returned by default. Read-only.
	CreatedDateTime *timestamp.Timestamp `protobuf:"bytes,7,opt,name=created_date_time,json=createdDateTime,proto3" json:"created_date_time,omitempty"`
	// For some Azure Active Directory objects (user, group, application), if the object is deleted, it is first logically deleted, and this property is updated with the date and time when the object was deleted. Otherwise this property is null. If the object is restored, this property is updated to null.
	// Returned by default. Read-only.
	DeletedDateTime *timestamp.Timestamp `protobuf:"bytes,8,opt,name=deleted_date_time,json=deletedDateTime,proto3" json:"deleted_date_time,omitempty"`
	// Timestamp of when the group is set to expire. The value cannot be modified and is automatically populated when the group is created.
	// Returned by default. Read-only.
	ExpirationDateTime *timestamp.Timestamp `protobuf:"bytes,9,opt,name=expiration_date_time,json=expirationDateTime,proto3" json:"expiration_date_time,omitempty"`
	// True if the group is not displayed in certain parts of the Outlook user interface:
	// in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups; false otherwise. Default value is false.
	// Returned only on $select.
	HideFromAddressLists bool `` /* 127-byte string literal not displayed */
	// 	Specifies the visibility of an Office 365 group. Possible values are: Private, Public, or Hiddenmembership; blank values are treated as public. See group visibility options to learn more.
	// Visibility can be set only when a group is created; it is not editable.
	// Returned by default.
	Visibility string `protobuf:"bytes,11,opt,name=visibility,proto3" json:"visibility,omitempty"`
	// *true* if this group is synced from an on-premises directory;
	// *false* if this group was originally synced from an on-premises directory but is no longer synced;
	// null if this object has never been synced from an on-premises directory (default).
	// Returned by default. Read-only. Supports $filter.
	OnPremisesSyncEnabled bool `` /* 130-byte string literal not displayed */
	// This property is used to associate an on-premises LDAP user to the ocis account object.
	// This property must be specified when creating a new user account in the Graph if you are using a federated domain for the user’s userPrincipalName (UPN) property.
	// Important: The $ and _ characters cannot be used when specifying this property. Supports $filter.
	OnPremisesImmutableId string `` /* 129-byte string literal not displayed */
	// Contains the on-premises security identifier (SID) for the group that was synchronized from on-premises to the cloud. Returned by default. Read-only.
	OnPremisesSecurityIdentifier string `` /* 150-byte string literal not displayed */
	// Contains the on-premises LDAP `distinguished name` or `DN`.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDistinguishedName string `` /* 147-byte string literal not displayed */
	// Contains the on-premises `samAccountName` synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Returned by default. Read-only.
	OnPremisesSamAccountName string `` /* 140-byte string literal not displayed */
	// Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory via Azure AD Connect.
	// Returned by default. Read-only.
	OnPremisesDomainName string `` /* 126-byte string literal not displayed */
	// 	Contains the on-premises netBios name synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory via Azure AD Connect.
	// Returned by default. Read-only.
	OnPremisesNetBiosName string `` /* 131-byte string literal not displayed */
	// Indicates the last time at which the group was synced with the on-premises directory.
	// Returned by default. Read-only. Supports $filter.
	OnPremisesLastSyncDateTime string `` /* 148-byte string literal not displayed */
	// Errors when using synchronization during provisioning.
	OnPremisesProvisioningErrors []*OnPremisesProvisioningError `` /* 150-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GroupsService interface {
	// Lists groups
	ListGroups(ctx context.Context, in *ListGroupsRequest, opts ...client.CallOption) (*ListGroupsResponse, error)
	// Gets an groups
	GetGroup(ctx context.Context, in *GetGroupRequest, opts ...client.CallOption) (*Group, error)
	// Creates a group
	CreateGroup(ctx context.Context, in *CreateGroupRequest, opts ...client.CallOption) (*Group, error)
	// Updates a group
	UpdateGroup(ctx context.Context, in *UpdateGroupRequest, opts ...client.CallOption) (*Group, error)
	// Deletes a group
	DeleteGroup(ctx context.Context, in *DeleteGroupRequest, opts ...client.CallOption) (*empty.Empty, error)
	// group:addmember https://docs.microsoft.com/en-us/graph/api/group-post-members?view=graph-rest-1.0&tabs=http
	AddMember(ctx context.Context, in *AddMemberRequest, opts ...client.CallOption) (*Group, error)
	// group:removemember https://docs.microsoft.com/en-us/graph/api/group-delete-members?view=graph-rest-1.0
	RemoveMember(ctx context.Context, in *RemoveMemberRequest, opts ...client.CallOption) (*Group, error)
	// group:listmembers https://docs.microsoft.com/en-us/graph/api/group-list-members?view=graph-rest-1.0
	ListMembers(ctx context.Context, in *ListMembersRequest, opts ...client.CallOption) (*ListMembersResponse, error)
}

type GroupsServiceHandler interface {
	// Lists groups
	ListGroups(context.Context, *ListGroupsRequest, *ListGroupsResponse) error
	// Gets an groups
	GetGroup(context.Context, *GetGroupRequest, *Group) error
	// Creates a group
	CreateGroup(context.Context, *CreateGroupRequest, *Group) error
	// Updates a group
	UpdateGroup(context.Context, *UpdateGroupRequest, *Group) error
	// Deletes a group
	DeleteGroup(context.Context, *DeleteGroupRequest, *empty.Empty) error
	// group:addmember https://docs.microsoft.com/en-us/graph/api/group-post-members?view=graph-rest-1.0&tabs=http
	AddMember(context.Context, *AddMemberRequest, *Group) error
	// group:removemember https://docs.microsoft.com/en-us/graph/api/group-delete-members?view=graph-rest-1.0
	RemoveMember(context.Context, *RemoveMemberRequest, *Group) error
	// group:listmembers https://docs.microsoft.com/en-us/graph/api/group-list-members?view=graph-rest-1.0
	ListMembers(context.Context, *ListMembersRequest, *ListMembersResponse) error
}

type Identities struct {

	// Specifies the user sign-in types in your directory, such as `emailAddress`, `userName` or `federated`.
	// Here, federated represents a unique identifier for a user from an issuer, that can be in any format chosen by the issuer.
	// Additional validation is enforced on *issuer_assigned_id* when the sign-in type is set to `emailAddress` or `userName`.
	// This property can also be set to any custom string.
	SignInType string `protobuf:"bytes,1,opt,name=sign_in_type,json=signInType,proto3" json:"sign_in_type,omitempty"`
	// Specifies the issuer of the identity, for example facebook.com.
	// For local accounts (where signInType is not federated), this property is
	// the local B2C tenant default domain name, for example contoso.onmicrosoft.com.
	// For external users from other Azure AD organization, this will be the domain of
	// the federated organization, for example contoso.com.
	// Supports $filter. 512 character limit.
	Issuer string `protobuf:"bytes,2,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// Specifies the unique identifier assigned to the user by the issuer. The combination of *issuer* and *issuerAssignedId* must be unique within the organization. Represents the sign-in name for the user, when signInType is set to emailAddress or userName (also known as local accounts).
	// When *signInType* is set to:
	// * `emailAddress`, (or starts with `emailAddress` like `emailAddress1`) *issuerAssignedId* must be a valid email address
	// * `userName`, issuer_assigned_id must be a valid local part of an email address
	// Supports $filter. 512 character limit.
	IssuerAssignedId string `protobuf:"bytes,3,opt,name=issuer_assigned_id,json=issuerAssignedId,proto3" json:"issuer_assigned_id,omitempty"`
	// contains filtered or unexported fields
}

type ListAccountsRequest struct {

	// Optional. The maximum number of accounts to return in the response
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A pagination token returned from a previous call to `Get`
	// that indicates from where search should continue
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. Used to specify a subset of fields that should be
	// returned by a get operation or modified by an update operation.
	FieldMask *field_mask.FieldMask `protobuf:"bytes,3,opt,name=field_mask,json=fieldMask,proto3" json:"field_mask,omitempty"`
	// Optional. Search criteria used to select the accounts to return.
	// If no search criteria is specified then all accounts will be
	// returned
	//
	// TODO update query language
	// Query expressions can be used to restrict results based upon
	// the account properties where the operators `=`, `NOT`, `AND` and `OR`
	// can be used along with the suffix wildcard symbol `*`.
	//
	// The string properties in a query expression should use escaped quotes
	// for values that include whitespace to prevent unexpected behavior.
	//
	// Some example queries are:
	//
	// * Query `display_name=Th*` returns accounts whose display_name
	// starts with "Th"
	// * Query `email=foo@example.com` returns accounts with
	// `email` set to `foo@example.com`
	// * Query `display_name=\\"Test String\\"` returns accounts with
	// display names that include both "Test" and "String"
	Query string `protobuf:"bytes,4,opt,name=query,proto3" json:"query,omitempty"`
	// contains filtered or unexported fields
}

type ListAccountsResponse struct {

	// The field name should match the noun "accounts" in the method name.  There
	// will be a maximum number of items returned based on the page_size field
	// in the request
	Accounts []*Account `protobuf:"bytes,1,rep,name=accounts,proto3" json:"accounts,omitempty"`
	// Token to retrieve the next page of results, or empty if there are no
	// more results in the list
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupsRequest struct {

	// Optional. The maximum number of groups to return in the response
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A pagination token returned from a previous call to `Get`
	// that indicates from where search should continue
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. Used to specify a subset of fields that should be
	// returned by a get operation or modified by an update operation.
	FieldMask *field_mask.FieldMask `protobuf:"bytes,3,opt,name=field_mask,json=fieldMask,proto3" json:"field_mask,omitempty"`
	// Optional. Search criteria used to select the groups to return.
	// If no search criteria is specified then all groups will be
	// returned
	//
	// TODO update query language
	// Query expressions can be used to restrict results based upon
	// the account properties where the operators `=`, `NOT`, `AND` and `OR`
	// can be used along with the suffix wildcard symbol `*`.
	//
	// The string properties in a query expression should use escaped quotes
	// for values that include whitespace to prevent unexpected behavior.
	//
	// Some example queries are:
	//
	// * Query `display_name=Th*` returns accounts whose display_name
	// starts with "Th"
	// * Query `display_name=\\"Test String\\"` returns groups with
	// display names that include both "Test" and "String"
	Query string `protobuf:"bytes,4,opt,name=query,proto3" json:"query,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupsResponse struct {

	// The field name should match the noun "group" in the method name.  There
	// will be a maximum number of items returned based on the page_size field
	// in the request
	Groups []*Group `protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
	// Token to retrieve the next page of results, or empty if there are no
	// more results in the list
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListMembersRequest struct {
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A pagination token returned from a previous call to `Get`
	// that indicates from where search should continue
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. Used to specify a subset of fields that should be
	// returned by a get operation or modified by an update operation.
	FieldMask *field_mask.FieldMask `protobuf:"bytes,3,opt,name=field_mask,json=fieldMask,proto3" json:"field_mask,omitempty"`
	// Optional. Search criteria used to select the groups to return.
	// If no search criteria is specified then all groups will be
	// returned
	//
	// TODO update query language
	// Query expressions can be used to restrict results based upon
	// the account properties where the operators `=`, `NOT`, `AND` and `OR`
	// can be used along with the suffix wildcard symbol `*`.
	//
	// The string properties in a query expression should use escaped quotes
	// for values that include whitespace to prevent unexpected behavior.
	//
	// Some example queries are:
	//
	// * Query `display_name=Th*` returns accounts whose display_name
	// starts with "Th"
	// * Query `display_name=\\"Test String\\"` returns groups with
	// display names that include both "Test" and "String"
	Query string `protobuf:"bytes,4,opt,name=query,proto3" json:"query,omitempty"`
	// The id of the group to list members from
	Id string `protobuf:"bytes,5,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type ListMembersResponse struct {

	// The field name should match the noun "members" in the method name.  There
	// will be a maximum number of items returned based on the page_size field
	// in the request
	Members []*Account `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// Token to retrieve the next page of results, or empty if there are no
	// more results in the list
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type MockAccountsService struct {
	ListFunc   func(ctx context.Context, in *ListAccountsRequest, opts ...client.CallOption) (*ListAccountsResponse, error)
	GetFunc    func(ctx context.Context, in *GetAccountRequest, opts ...client.CallOption) (*Account, error)
	CreateFunc func(ctx context.Context, in *CreateAccountRequest, opts ...client.CallOption) (*Account, error)
	UpdateFunc func(ctx context.Context, in *UpdateAccountRequest, opts ...client.CallOption) (*Account, error)
	DeleteFunc func(ctx context.Context, in *DeleteAccountRequest, opts ...client.CallOption) (*empty.Empty, error)
}

type OnPremisesProvisioningError struct {

	// Category of the provisioning error. Note: Currently, there is only one possible value. Possible value: PropertyConflict - indicates a property value is not unique. Other objects contain the same value for the property.
	Category string `protobuf:"bytes,1,opt,name=category,proto3" json:"category,omitempty"`
	// The date and time at which the error occurred.
	OccurredDateTime *timestamp.Timestamp `protobuf:"bytes,2,opt,name=occurred_date_time,json=occurredDateTime,proto3" json:"occurred_date_time,omitempty"`
	// Name of the directory property causing the error. Current possible values: UserPrincipalName or ProxyAddress
	PropertyCausingError string `protobuf:"bytes,3,opt,name=property_causing_error,json=propertyCausingError,proto3" json:"property_causing_error,omitempty"`
	// Value of the property causing the error.
	Value string `protobuf:"bytes,4,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type PasswordProfile struct {

	//	The password for the user. This property is required when a user is created.
	// It can be updated, but the user will be required to change the password on the next login.
	// The password must satisfy minimum requirements as specified by the user’s passwordPolicies property. By default, a strong password is required.
	Password string `protobuf:"bytes,1,opt,name=password,proto3" json:"password,omitempty"`
	// The time when this account last changed their password.
	LastPasswordChangeDateTime *timestamp.Timestamp `` /* 145-byte string literal not displayed */
	// Specifies password policies for the user.
	//This value is an enumeration with one possible value being “DisableStrongPassword”, which allows weaker passwords than the default policy to be specified.
	// “DisablePasswordExpiration” can also be specified.
	PasswordPolicies []string `protobuf:"bytes,3,rep,name=password_policies,json=passwordPolicies,proto3" json:"password_policies,omitempty"`
	// *true* if the user must change her password on the next login; otherwise false.
	ForceChangePasswordNextSignIn bool `` /* 157-byte string literal not displayed */
	// If *true*, at next sign-in, the user must perform a multi-factor authentication (MFA) before being forced to change their password. The behavior is identical to forceChangePasswordNextSignIn except that the user is required to first perform a multi-factor authentication before password change. After a password change, this property will be automatically reset to false. If not set, default is false.
	ForceChangePasswordNextSignInWithMfa bool `` /* 182-byte string literal not displayed */
	// contains filtered or unexported fields
}

type RemoveMemberRequest struct {

	// The id of the group to remove a member from
	GroupId string `protobuf:"bytes,1,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	// The account id to remove
	AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

type UpdateAccountRequest struct {

	// The account resource which replaces the resource on the server
	Account *Account `protobuf:"bytes,1,opt,name=account,proto3" json:"account,omitempty"`
	// The update mask applies to the resource. For the `FieldMask` definition,
	// see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
	UpdateMask *field_mask.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

type UpdateGroupRequest struct {

	// The group resource which replaces the resource on the server
	Group *Group `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// The update mask applies to the resource. For the `FieldMask` definition,
	// see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
	UpdateMask *field_mask.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}