v0

type Account struct {

	// The unique identifier for the user. Key. Not nullable. Non reassignable. Read-only.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// `true` if the account is enabled; otherwise, `false`. This property is required when a user is created. Supports $filter.
	AccountEnabled bool `protobuf:"varint,2,opt,name=account_enabled,json=accountEnabled,proto3" json:"account_enabled,omitempty"`
	// A resource account is also known as a /disabled user object/ in Azure AD, and can be used to represent resources in general.
	// In Exchange it might be used to represent conference rooms, for example, and allow them to have a phone number.
	// You could give printers or machines with a sync client resource accounts as well.
	// A resource account can be homed in Microsoft 365 or on premises using Skype for Business Server 2019.
	// `true` if the user is a resource account; otherwise, `false`. Null value should be considered false.
	IsResourceAccount bool `protobuf:"varint,3,opt,name=is_resource_account,json=isResourceAccount,proto3" json:"is_resource_account,omitempty"`
	// Indicates whether the account was created as
	// - a regular school or work account ("" / emptystring),
	// - a local account, fully managed by oCIS (LocalAccount), includes synced accounts or
	// - an external account (Invitation),
	// - self-service sign-up using email verification (EmailVerified). Read-only.
	CreationType string `protobuf:"bytes,4,opt,name=creation_type,json=creationType,proto3" json:"creation_type,omitempty"`
	// Represents the identities that can be used to sign in to this account.
	// An identity can be provided by oCIS (also known as a local account), by organizations, or by social identity providers such as Facebook, Google, and Microsoft, and is tied to an account.
	// May contain multiple items with the same signInType value. Supports $filter.
	Identities []*Identities `protobuf:"bytes,5,rep,name=identities,proto3" json:"identities,omitempty"`
	// The name displayed in the address book for the account.
	// This is usually the combination of the user's first name, middle initial and last name.
	// This property is required when a user is created and it cannot be cleared during updates.
	// Supports $filter and $orderby.
	// posixaccount MUST cn
	DisplayName string `protobuf:"bytes,6,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// The username
	// posixaccount MUST uid
	PreferredName string `protobuf:"bytes,7,opt,name=preferred_name,json=preferredName,proto3" json:"preferred_name,omitempty"`
	// used for exposing the user using ldap
	// posixaccount MUST uidnumber
	UidNumber int64 `protobuf:"varint,8,opt,name=uid_number,json=uidNumber,proto3" json:"uid_number,omitempty"`
	// used for exposing the user using ldap
	// posixaccount MUST gidnumber
	GidNumber int64 `protobuf:"varint,9,opt,name=gid_number,json=gidNumber,proto3" json:"gid_number,omitempty"`
	// The SMTP address for the user, for example, "jeff@contoso.onmicrosoft.com". Read-Only. Supports $filter.
	// inetorgperson MAY mail
	Mail string `protobuf:"bytes,10,opt,name=mail,proto3" json:"mail,omitempty"`
	// A description, useful for resource accounts
	// posixaccount MAY description
	Description string `protobuf:"bytes,11,opt,name=description,proto3" json:"description,omitempty"`
	// Specifies the password profile for the user.
	// The profile contains the user’s password. This property is required when a user is created.
	// The password in the profile must satisfy minimum requirements as specified by the passwordPolicies property.
	// By default, a strong password is required.
	// posixaccount MAY authPassword
	PasswordProfile *PasswordProfile `protobuf:"bytes,12,opt,name=password_profile,json=passwordProfile,proto3" json:"password_profile,omitempty"`
	// The groups, directory roles and administrative units that the user is a member of. Read-only. Nullable.
	// should we only respond with repeated strings of ids? no clients should a proper filter mask!
	MemberOf []*Group `protobuf:"bytes,13,rep,name=memberOf,proto3" json:"memberOf,omitempty"`
	// The created date of the account object.
	CreatedDateTime *timestamppb.Timestamp `protobuf:"bytes,16,opt,name=created_date_time,json=createdDateTime,proto3" json:"created_date_time,omitempty"`
	// The date and time the user was deleted. Returned only on $select.
	DeletedDateTime *timestamppb.Timestamp `protobuf:"bytes,17,opt,name=deleted_date_time,json=deletedDateTime,proto3" json:"deleted_date_time,omitempty"`
	// `true` if this object is synced from an on-premises directory;
	// `false` if this object was originally synced from an on-premises directory but is no longer synced;
	// null if this object has never been synced from an on-premises directory (default). Read-only
	OnPremisesSyncEnabled bool `` /* 130-byte string literal not displayed */
	// This property is used to associate an on-premises LDAP user to the oCIS account object.
	// This property must be specified when creating a new user account in the Graph if you are using a federated domain for the user’s userPrincipalName (UPN) property.
	// Important: The $ and _ characters cannot be used when specifying this property. Supports $filter.
	OnPremisesImmutableId string `` /* 129-byte string literal not displayed */
	// Contains the on-premises security identifier (SID) for the user that was synchronized from on-premises to the cloud. Read-only.
	OnPremisesSecurityIdentifier string `` /* 150-byte string literal not displayed */
	// Contains the on-premises LDAP `distinguished name` or `DN`.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDistinguishedName string `` /* 147-byte string literal not displayed */
	// Contains the on-premises `samAccountName` synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesSamAccountName string `` /* 140-byte string literal not displayed */
	// Contains the on-premises `domainFQDN`, also called `dnsDomainName` synchronized from the on-premises directory
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDomainName string `` /* 126-byte string literal not displayed */
	// Contains the on-premises userPrincipalName synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesUserPrincipalName string `` /* 149-byte string literal not displayed */
	// Indicates the last time at which the object was synced with the on-premises directory; Read-only.
	OnPremisesLastSyncDateTime *timestamppb.Timestamp `` /* 148-byte string literal not displayed */
	// Errors when using synchronization during provisioning.
	OnPremisesProvisioningErrors []*OnPremisesProvisioningError `` /* 150-byte string literal not displayed */
	// For an external user invited to the tenant using the invitation API, this property represents the invited user's invitation status.
	// For invited users, the state can be `PendingAcceptance` or `Accepted`, or "" / emptystring for all other users.
	// Returned only on $select. Supports $filter with the supported values. For example: $filter=externalUserState eq 'PendingAcceptance'.
	ExternalUserState string `protobuf:"bytes,40,opt,name=external_user_state,json=externalUserState,proto3" json:"external_user_state,omitempty"`
	// Shows the timestamp for the latest change to the externalUserState property. Returned only on $select.
	ExternalUserStateChangeDateTime *timestamppb.Timestamp `` /* 163-byte string literal not displayed */
	// Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications will get
	// an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph).
	// If this happens, the application will need to acquire a new refresh token by making a request to the authorize endpoint.
	// Returned only on $select. Read-only. Use invalidateAllRefreshTokens to reset.
	RefreshTokensValidFromDateTime *timestamppb.Timestamp `` /* 160-byte string literal not displayed */
	// Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications will get
	// an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph).
	// If this happens, the application will need to acquire a new refresh token by making a request to the authorize endpoint.
	// Read-only. Use revokeSignInSessions to reset.
	SignInSessionsValidFromDateTime *timestamppb.Timestamp `` /* 165-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Group struct {

	// The unique identifier for the group.
	// Returned by default. Inherited from directoryObject. Key. Not nullable. Read-only.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The display name for the group. This property is required when a group is created and cannot be cleared during updates.
	// Returned by default. Supports $filter and $orderby.
	// groupofnames MUST cn
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"` // groupofnames MUST/MAY member
	// Users, contacts, and groups that are members of this group. HTTP Methods: GET (supported for all groups), POST (supported for security groups and mail-enabled security groups), DELETE (supported only for security groups) Read-only. Nullable.
	Members []*Account `protobuf:"bytes,3,rep,name=members,proto3" json:"members,omitempty"`
	// groupofnames MAY businessCategory
	// groupofnames MAY o
	// groupofnames MAY ou
	// groupofnames MAY owner, SINGLE-VALUE but there might be multiple owners
	Owners []*Account `protobuf:"bytes,4,rep,name=owners,proto3" json:"owners,omitempty"`
	// An optional description for the group. Returned by default.
	// groupofnames MAY description
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// used for exposing the user using ldap
	// posixgroup MUST gidnumber
	GidNumber int64 `protobuf:"varint,6,opt,name=gid_number,json=gidNumber,proto3" json:"gid_number,omitempty"`
	// Timestamp of when the group was created. The value cannot be modified and is automatically populated when the group is created
	// Returned by default. Read-only.
	CreatedDateTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=created_date_time,json=createdDateTime,proto3" json:"created_date_time,omitempty"`
	// For some Azure Active Directory objects (user, group, application), if the object is deleted, it is first logically deleted, and this property is updated with the date and time when the object was deleted. Otherwise this property is null. If the object is restored, this property is updated to null.
	// Returned by default. Read-only.
	DeletedDateTime *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=deleted_date_time,json=deletedDateTime,proto3" json:"deleted_date_time,omitempty"`
	// Timestamp of when the group is set to expire. The value cannot be modified and is automatically populated when the group is created.
	// Returned by default. Read-only.
	ExpirationDateTime *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=expiration_date_time,json=expirationDateTime,proto3" json:"expiration_date_time,omitempty"`
	// True if the group is not displayed in certain parts of the Outlook user interface:
	// in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups; false otherwise. Default value is false.
	// Returned only on $select.
	HideFromAddressLists bool `` /* 127-byte string literal not displayed */
	// 	Specifies the visibility of an Office 365 group. Possible values are: Private, Public, or Hiddenmembership; blank values are treated as public. See group visibility options to learn more.
	// Visibility can be set only when a group is created; it is not editable.
	// Returned by default.
	Visibility string `protobuf:"bytes,11,opt,name=visibility,proto3" json:"visibility,omitempty"`
	// `true` if this group is synced from an on-premises directory;
	// `false` if this group was originally synced from an on-premises directory but is no longer synced;
	// null if this object has never been synced from an on-premises directory (default).
	// Returned by default. Read-only. Supports $filter.
	OnPremisesSyncEnabled bool `` /* 130-byte string literal not displayed */
	// This property is used to associate an on-premises LDAP user to the oCIS account object.
	// This property must be specified when creating a new user account in the Graph if you are using a federated domain for the user’s userPrincipalName (UPN) property.
	// Important: The $ and _ characters cannot be used when specifying this property. Supports $filter.
	OnPremisesImmutableId string `` /* 129-byte string literal not displayed */
	// Contains the on-premises security identifier (SID) for the group that was synchronized from on-premises to the cloud. Returned by default. Read-only.
	OnPremisesSecurityIdentifier string `` /* 150-byte string literal not displayed */
	// Contains the on-premises LDAP `distinguished name` or `DN`.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Read-only.
	OnPremisesDistinguishedName string `` /* 147-byte string literal not displayed */
	// Contains the on-premises `samAccountName` synchronized from the on-premises directory.
	// The property is only populated for customers who are synchronizing their on-premises directory to ocis-accounts. Returned by default. Read-only.
	OnPremisesSamAccountName string `` /* 140-byte string literal not displayed */
	// Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory via Azure AD Connect.
	// Returned by default. Read-only.
	OnPremisesDomainName string `` /* 126-byte string literal not displayed */
	// 	Contains the on-premises netBios name synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory via Azure AD Connect.
	// Returned by default. Read-only.
	OnPremisesNetBiosName string `` /* 131-byte string literal not displayed */
	// Indicates the last time at which the group was synced with the on-premises directory.
	// Returned by default. Read-only. Supports $filter.
	OnPremisesLastSyncDateTime string `` /* 148-byte string literal not displayed */
	// Errors when using synchronization during provisioning.
	OnPremisesProvisioningErrors []*OnPremisesProvisioningError `` /* 150-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Identities struct {

	// Specifies the user sign-in types in your directory, such as `emailAddress`, `userName` or `federated`.
	// Here, federated represents a unique identifier for a user from an issuer, that can be in any format chosen by the issuer.
	// Additional validation is enforced on *issuer_assigned_id* when the sign-in type is set to `emailAddress` or `userName`.
	// This property can also be set to any custom string.
	SignInType string `protobuf:"bytes,1,opt,name=sign_in_type,json=signInType,proto3" json:"sign_in_type,omitempty"`
	// Specifies the issuer of the identity, for example facebook.com.
	// For local accounts (where signInType is not federated), this property is
	// the local B2C tenant default domain name, for example contoso.onmicrosoft.com.
	// For external users from other Azure AD organization, this will be the domain of
	// the federated organization, for example contoso.com.
	// Supports $filter. 512 character limit.
	Issuer string `protobuf:"bytes,2,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// Specifies the unique identifier assigned to the user by the issuer. The combination of *issuer* and *issuerAssignedId* must be unique within the organization. Represents the sign-in name for the user, when signInType is set to emailAddress or userName (also known as local accounts).
	// When *signInType* is set to:
	// * `emailAddress`, (or starts with `emailAddress` like `emailAddress1`) `issuerAssignedId` must be a valid email address
	// * `userName`, issuer_assigned_id must be a valid local part of an email address
	// Supports $filter. 512 character limit.
	IssuerAssignedId string `protobuf:"bytes,3,opt,name=issuer_assigned_id,json=issuerAssignedId,proto3" json:"issuer_assigned_id,omitempty"`
	// contains filtered or unexported fields
}

type OnPremisesProvisioningError struct {

	// Category of the provisioning error. Note: Currently, there is only one possible value. Possible value: PropertyConflict - indicates a property value is not unique. Other objects contain the same value for the property.
	Category string `protobuf:"bytes,1,opt,name=category,proto3" json:"category,omitempty"`
	// The date and time at which the error occurred.
	OccurredDateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=occurred_date_time,json=occurredDateTime,proto3" json:"occurred_date_time,omitempty"`
	// Name of the directory property causing the error. Current possible values: UserPrincipalName or ProxyAddress
	PropertyCausingError string `protobuf:"bytes,3,opt,name=property_causing_error,json=propertyCausingError,proto3" json:"property_causing_error,omitempty"`
	// Value of the property causing the error.
	Value string `protobuf:"bytes,4,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type PasswordProfile struct {

	//	The password for the user. This property is required when a user is created.
	// It can be updated, but the user will be required to change the password on the next login.
	// The password must satisfy minimum requirements as specified by the user’s passwordPolicies property. By default, a strong password is required.
	Password string `protobuf:"bytes,1,opt,name=password,proto3" json:"password,omitempty"`
	// The time when this account last changed their password.
	LastPasswordChangeDateTime *timestamppb.Timestamp `` /* 145-byte string literal not displayed */
	// Specifies password policies for the user.
	//This value is an enumeration with one possible value being “DisableStrongPassword”, which allows weaker passwords than the default policy to be specified.
	// “DisablePasswordExpiration” can also be specified.
	PasswordPolicies []string `protobuf:"bytes,3,rep,name=password_policies,json=passwordPolicies,proto3" json:"password_policies,omitempty"`
	// `true` if the user must change her password on the next login; otherwise false.
	ForceChangePasswordNextSignIn bool `` /* 157-byte string literal not displayed */
	// If `true`, at next sign-in, the user must perform a multi-factor authentication (MFA) before being forced to change their password. The behavior is identical to forceChangePasswordNextSignIn except that the user is required to first perform a multi-factor authentication before password change. After a password change, this property will be automatically reset to false. If not set, default is false.
	ForceChangePasswordNextSignInWithMfa bool `` /* 182-byte string literal not displayed */
	// contains filtered or unexported fields
}