datadog_api_client 2.26.1 → 2.27.1

data/.generator/schemas/v2/openapi.yaml

@@ -451,6 +451,48 @@ components:
       required: true
       schema:
         type: string
+    MicrosoftTeamsChannelNamePathParameter:
+      description: Your channel name.
+      in: path
+      name: channel_name
+      required: true
+      schema:
+        type: string
+    MicrosoftTeamsHandleIDPathParameter:
+      description: Your handle id.
+      in: path
+      name: handle_id
+      required: true
+      schema:
+        type: string
+    MicrosoftTeamsHandleNamePathParameter:
+      description: Your handle name.
+      in: path
+      name: handle_name
+      required: true
+      schema:
+        type: string
+    MicrosoftTeamsTeamNamePathParameter:
+      description: Your team name.
+      in: path
+      name: team_name
+      required: true
+      schema:
+        type: string
+    MicrosoftTeamsTenantIDQueryParameter:
+      description: Your tenant id.
+      in: query
+      name: tenant_id
+      required: false
+      schema:
+        type: string
+    MicrosoftTeamsTenantNamePathParameter:
+      description: Your tenant name.
+      in: path
+      name: tenant_name
+      required: true
+      schema:
+        type: string
     OpsgenieServiceIDPathParameter:
       description: The UUID of the service.
       in: path
@@ -691,6 +733,12 @@ components:
           schema:
             $ref: '#/components/schemas/APIErrorResponse'
       description: Not Found
+    PreconditionFailedResponse:
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/APIErrorResponse'
+      description: Failed Precondition
     SpansBadRequestResponse:
       content:
         application/json:
@@ -6501,6 +6549,12 @@ components:
           example: 1693491974000000000
           format: int64
           type: integer
+        team:
+          description: Name of the team owning the deployed service. If not provided,
+            this is automatically populated with the team associated with the service
+            in the Service Catalog.
+          example: backend
+          type: string
         version:
           description: Version to correlate with [APM Deployment Tracking](https://docs.datadoghq.com/tracing/services/deployment_tracking/).
           example: v1.12.07
@@ -9142,7 +9196,7 @@ components:
         data:
           description: The JSON:API data schema.
           items:
-            $ref: '#/components/schemas/FastlyServiceResponse'
+            $ref: '#/components/schemas/FastlyServiceData'
           type: array
       type: object
     Finding:
@@ -10384,6 +10438,13 @@ components:
         notification_handles:
           description: Notification handles that will be notified of the incident
             at creation.
+          example:
+          - display_name: Jane Doe
+            handle: '@user@email.com'
+          - display_name: Slack Channel
+            handle: '@slack-channel'
+          - display_name: Incident Workflow
+            handle: '@workflow-from-incident'
           items:
             $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
@@ -10670,7 +10731,8 @@ components:
           example: Jane Doe
           type: string
         handle:
-          description: The email address used for the notification.
+          description: The handle used for the notification. This includes an email
+            address, Slack channel, or workflow.
           example: '@test.user@test.com'
           type: string
       type: object
@@ -10783,6 +10845,13 @@ components:
         notification_handles:
           description: Notification handles that will be notified of the incident
             during update.
+          example:
+          - display_name: Jane Doe
+            handle: '@user@email.com'
+          - display_name: Slack Channel
+            handle: '@slack-channel'
+          - display_name: Incident Workflow
+            handle: '@workflow-from-incident'
           items:
             $ref: '#/components/schemas/IncidentNotificationHandle'
           nullable: true
@@ -11750,6 +11819,13 @@ components:
         notification_handles:
           description: Notification handles that will be notified of the incident
             during update.
+          example:
+          - display_name: Jane Doe
+            handle: '@user@email.com'
+          - display_name: Slack Channel
+            handle: '@slack-channel'
+          - display_name: Incident Workflow
+            handle: '@workflow-from-incident'
           items:
             $ref: '#/components/schemas/IncidentNotificationHandle'
           type: array
@@ -13911,8 +13987,8 @@ components:
         - time: sum, space: sum
 
 
-        Can only be applied to metrics that have a `metric_type` of `count`, `rate`,
-        or `gauge`.'
+        Can only be applied to non_distribution metrics that have a `metric_type`
+        of `count`, `rate`, or `gauge`.'
       example:
       - space: sum
         time: sum
@@ -14520,6 +14596,17 @@ components:
       required:
       - data
       type: object
+    MetricTagConfigurationMetricTypeCategory:
+      default: distribution
+      description: The metric's type category.
+      enum:
+      - non_distribution
+      - distribution
+      example: distribution
+      type: string
+      x-enum-varnames:
+      - NON_DISTRIBUTION
+      - DISTRIBUTION
     MetricTagConfigurationMetricTypes:
       default: gauge
       description: The metric's type.
@@ -14722,6 +14809,276 @@ components:
       - data_source
       - query
       type: object
+    MicrosoftTeamsApiHandleAttributes:
+      description: Handle attributes.
+      properties:
+        channel_id:
+          description: Channel id.
+          example: fake-channel-id
+          maxLength: 255
+          type: string
+        name:
+          description: Handle name.
+          example: fake-handle-name
+          maxLength: 255
+          type: string
+        team_id:
+          description: Team id.
+          example: 00000000-0000-0000-0000-000000000000
+          maxLength: 255
+          type: string
+        tenant_id:
+          description: Tenant id.
+          example: 00000000-0000-0000-0000-000000000001
+          maxLength: 255
+          type: string
+      type: object
+    MicrosoftTeamsApiHandleInfoResponse:
+      description: Response of a handle.
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponseData'
+      type: object
+    MicrosoftTeamsApiHandleInfoResponseAttributes:
+      description: Handle attributes.
+      properties:
+        channel_id:
+          description: Channel id.
+          example: fake-channel-id
+          maxLength: 255
+          type: string
+        channel_name:
+          description: Channel name.
+          example: fake-channel-name
+          maxLength: 255
+          type: string
+        name:
+          description: Handle name.
+          example: fake-handle-name
+          maxLength: 255
+          type: string
+        team_id:
+          description: Team id.
+          example: 00000000-0000-0000-0000-000000000000
+          maxLength: 255
+          type: string
+        team_name:
+          description: Team name.
+          example: fake-team-name
+          maxLength: 255
+          type: string
+        tenant_id:
+          description: Tenant id.
+          example: 00000000-0000-0000-0000-000000000001
+          maxLength: 255
+          type: string
+        tenant_name:
+          description: Tenant name.
+          example: fake-tenant-name
+          maxLength: 255
+          type: string
+      type: object
+    MicrosoftTeamsApiHandleInfoResponseData:
+      description: Handle data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponseAttributes'
+        id:
+          description: The ID of the handle.
+          example: 596da4af-0563-4097-90ff-07230c3f9db3
+          maxLength: 100
+          minLength: 1
+          type: string
+        type:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoType'
+      type: object
+    MicrosoftTeamsApiHandleInfoType:
+      default: ms-teams-handle-info
+      description: Handle resource type.
+      enum:
+      - ms-teams-handle-info
+      example: ms-teams-handle-info
+      type: string
+      x-enum-varnames:
+      - MS_TEAMS_HANDLE_INFO
+    MicrosoftTeamsApiHandleRequestAttributes:
+      description: Handle attributes.
+      properties:
+        channel_id:
+          description: Channel id.
+          example: fake-channel-id
+          maxLength: 255
+          type: string
+        name:
+          description: Handle name.
+          example: fake-handle-name
+          maxLength: 255
+          type: string
+        team_id:
+          description: Team id.
+          example: 00000000-0000-0000-0000-000000000000
+          maxLength: 255
+          type: string
+        tenant_id:
+          description: Tenant id.
+          example: 00000000-0000-0000-0000-000000000001
+          maxLength: 255
+          type: string
+      required:
+      - name
+      - channel_id
+      - team_id
+      - tenant_id
+      type: object
+    MicrosoftTeamsApiHandleRequestData:
+      description: Handle data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleRequestAttributes'
+        type:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleType'
+      required:
+      - type
+      - attributes
+      type: object
+    MicrosoftTeamsApiHandleResponseData:
+      description: Handle data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleAttributes'
+        id:
+          description: The ID of the handle.
+          example: 596da4af-0563-4097-90ff-07230c3f9db3
+          maxLength: 100
+          minLength: 1
+          type: string
+        type:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleType'
+      type: object
+    MicrosoftTeamsApiHandleType:
+      default: handle
+      description: Specifies the handle resource type.
+      enum:
+      - handle
+      example: handle
+      type: string
+      x-enum-varnames:
+      - HANDLE
+    MicrosoftTeamsApiHandlesResponse:
+      description: Response with a list of handles.
+      properties:
+        data:
+          description: An array of handles.
+          example:
+          - attributes:
+              channelId: 19:b41k24b14bn1nwffkernfkwrnfneubgkr@thread.tacv2
+              channelName: General
+              name: general-handle
+              teamId: 00000000-0000-0000-0000-000000000000
+              teamName: Example Team
+              tenantId: 00000000-0000-0000-0000-000000000001
+              tenantName: Company, Inc.
+            id: 596da4af-0563-4097-90ff-07230c3f9db3
+            type: ms-teams-handle-info
+          - attributes:
+              channelId: 19:b41k24b14bn1nwffkernfkwrnfneubgk1@thread.tacv2
+              channelName: General2
+              name: general-handle-2
+              teamId: 00000000-0000-0000-0000-000000000002
+              teamName: Example Team 2
+              tenantId: 00000000-0000-0000-0000-000000000003
+              tenantName: Company, Inc.
+            id: 596da4af-0563-4097-90ff-07230c3f9db4
+            type: ms-teams-handle-info
+          items:
+            $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponseData'
+          type: array
+      required:
+      - data
+      type: object
+    MicrosoftTeamsChannelInfoResponseAttributes:
+      description: Channel attributes.
+      properties:
+        is_primary:
+          description: Indicates if this is the primary channel.
+          example: true
+          maxLength: 255
+          type: boolean
+        team_id:
+          description: Team id.
+          example: 00000000-0000-0000-0000-000000000000
+          maxLength: 255
+          type: string
+        tenant_id:
+          description: Tenant id.
+          example: 00000000-0000-0000-0000-000000000001
+          maxLength: 255
+          type: string
+      type: object
+    MicrosoftTeamsChannelInfoResponseData:
+      description: Channel data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/MicrosoftTeamsChannelInfoResponseAttributes'
+        id:
+          description: The ID of the channel.
+          example: 19:b41k24b14bn1nwffkernfkwrnfneubgkr@thread.tacv2
+          maxLength: 255
+          minLength: 1
+          type: string
+        type:
+          $ref: '#/components/schemas/MicrosoftTeamsChannelInfoType'
+      type: object
+    MicrosoftTeamsChannelInfoType:
+      default: ms-teams-channel-info
+      description: Channel info resource type.
+      enum:
+      - ms-teams-channel-info
+      example: ms-teams-channel-info
+      type: string
+      x-enum-varnames:
+      - MS_TEAMS_CHANNEL_INFO
+    MicrosoftTeamsCreateApiHandleRequest:
+      description: Create handle request.
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleRequestData'
+      required:
+      - data
+      type: object
+    MicrosoftTeamsCreateApiHandleResponse:
+      description: Response of a handle.
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleResponseData'
+      required:
+      - data
+      type: object
+    MicrosoftTeamsGetChannelByNameResponse:
+      description: Response with channel, team, and tenant ID information.
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsChannelInfoResponseData'
+      type: object
+    MicrosoftTeamsUpdateApiHandleRequest:
+      description: Update handle request.
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsUpdateApiHandleRequestData'
+      required:
+      - data
+      type: object
+    MicrosoftTeamsUpdateApiHandleRequestData:
+      description: Handle data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleAttributes'
+        type:
+          $ref: '#/components/schemas/MicrosoftTeamsApiHandleType'
+      required:
+      - type
+      - attributes
+      type: object
     MonitorConfigPolicyAttributeCreateRequest:
       description: Policy and policy type for a monitor configuration policy.
       properties:
@@ -16217,6 +16574,18 @@ components:
     PowerpackTemplateVariable:
       description: Powerpack template variables.
       properties:
+        available_values:
+          description: The list of values that the template variable drop-down is
+            limited to.
+          example:
+          - my-host
+          - host1
+          - host2
+          items:
+            description: Template variable value.
+            type: string
+          nullable: true
+          type: array
         defaults:
           description: One or many template variable default values within the saved
             view, which are unioned together using `OR` if more than one is specified.
@@ -16229,6 +16598,12 @@ components:
           description: The name of the variable.
           example: datacenter
           type: string
+        prefix:
+          description: The tag prefix associated with the variable. Only tags with
+            this prefix appear in the variable drop-down.
+          example: host
+          nullable: true
+          type: string
       required:
       - name
       type: object
@@ -19032,6 +19407,25 @@ components:
         meta:
           $ref: '#/components/schemas/ResponseMetaAttributes'
       type: object
+    SecurityMonitoringReferenceTable:
+      description: Reference table for the rule.
+      properties:
+        checkPresence:
+          description: Whether to include or exclude the matched values.
+          type: boolean
+        columnName:
+          description: The name of the column in the reference table.
+          type: string
+        logFieldPath:
+          description: The field in the log to match against the reference table.
+          type: string
+        ruleQueryName:
+          description: The name of the rule query to apply the reference table to.
+          type: string
+        tableName:
+          description: The name of the reference table.
+          type: string
+      type: object
     SecurityMonitoringRuleCase:
       description: Case when signal is generated.
       properties:
@@ -19537,6 +19931,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringRuleQuery'
           type: array
+        referenceTables:
+          description: Reference tables for the rule.
+          items:
+            $ref: '#/components/schemas/SecurityMonitoringReferenceTable'
+          type: array
         tags:
           description: Tags for generated signals.
           items:
@@ -20241,6 +20640,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringStandardRuleQuery'
           type: array
+        referenceTables:
+          description: Reference tables for the rule.
+          items:
+            $ref: '#/components/schemas/SecurityMonitoringReferenceTable'
+          type: array
         tags:
           description: Tags for generated signals.
           example:
@@ -20308,6 +20712,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringStandardRuleQuery'
           type: array
+        referenceTables:
+          description: Reference tables for the rule.
+          items:
+            $ref: '#/components/schemas/SecurityMonitoringReferenceTable'
+          type: array
         tags:
           description: Tags for generated signals.
           example:
@@ -20448,6 +20857,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringStandardRuleQuery'
           type: array
+        referenceTables:
+          description: Reference tables for the rule.
+          items:
+            $ref: '#/components/schemas/SecurityMonitoringReferenceTable'
+          type: array
         tags:
           description: Tags for generated signals.
           items:
@@ -20512,6 +20926,11 @@ components:
           items:
             $ref: '#/components/schemas/SecurityMonitoringStandardRuleQuery'
           type: array
+        referenceTables:
+          description: Reference tables for the rule.
+          items:
+            $ref: '#/components/schemas/SecurityMonitoringReferenceTable'
+          type: array
         tags:
           description: Tags for generated signals.
           example:
@@ -23947,12 +24366,6 @@ components:
           format: int64
           nullable: true
           type: integer
-        color:
-          description: An identifier for the color representing the team
-          format: int32
-          maximum: 13
-          minimum: 0
-          type: integer
         description:
           description: Free-form markdown description/content for the team's homepage
           type: string
@@ -25270,6 +25683,10 @@ paths:
       summary: Get all API keys
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - api_keys_read
     post:
       description: Create an API key.
       operationId: CreateAPIKey
@@ -25304,6 +25721,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - api_keys_write
   /api/v2/api_keys/{api_key_id}:
     delete:
       description: Delete an API key.
@@ -25330,6 +25751,10 @@ paths:
       summary: Delete an API key
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - api_keys_delete
     get:
       description: Get an API key.
       operationId: GetAPIKey
@@ -25360,6 +25785,10 @@ paths:
       summary: Get API key
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - api_keys_read
     patch:
       description: Update an API key.
       operationId: UpdateAPIKey
@@ -25402,6 +25831,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - api_keys_write
   /api/v2/apicatalog/api:
     get:
       description: List APIs and their IDs.
@@ -25690,6 +26123,10 @@ paths:
       summary: Get all span-based metrics
       tags:
       - Spans Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_read
     post:
       description: 'Create a metric based on your ingested spans in your organization.
 
@@ -25722,6 +26159,10 @@ paths:
       tags:
       - Spans Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_generate_metrics
   /api/v2/apm/config/metrics/{metric_id}:
     delete:
       description: Delete a specific span-based metric from your organization.
@@ -25740,6 +26181,10 @@ paths:
       summary: Delete a span-based metric
       tags:
       - Spans Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_generate_metrics
     get:
       description: Get a specific span-based metric from your organization.
       operationId: GetSpansMetric
@@ -25761,6 +26206,10 @@ paths:
       summary: Get a span-based metric
       tags:
       - Spans Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_read
     patch:
       description: 'Update a specific span-based metric from your organization.
 
@@ -25795,6 +26244,10 @@ paths:
       tags:
       - Spans Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_generate_metrics
   /api/v2/apm/config/retention-filters:
     get:
       description: Get the list of APM retention filters.
@@ -25813,6 +26266,11 @@ paths:
       summary: List all APM retention filters
       tags:
       - APM Retention Filters
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_read
+        - apm_pipelines_read
     post:
       description: 'Create a retention filter to index spans in your organization.
 
@@ -25848,6 +26306,11 @@ paths:
       tags:
       - APM Retention Filters
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_write
+        - apm_pipelines_write
   /api/v2/apm/config/retention-filters-execution-order:
     put:
       description: Re-order the execution order of retention filters.
@@ -25872,6 +26335,11 @@ paths:
       tags:
       - APM Retention Filters
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_write
+        - apm_pipelines_write
   /api/v2/apm/config/retention-filters/{filter_id}:
     delete:
       description: 'Delete a specific retention filter from your organization.
@@ -25894,6 +26362,11 @@ paths:
       summary: Delete a retention filter
       tags:
       - APM Retention Filters
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_write
+        - apm_pipelines_write
     get:
       description: Get an APM retention filter.
       operationId: GetApmRetentionFilter
@@ -25915,6 +26388,11 @@ paths:
       summary: Get a given APM retention filter
       tags:
       - APM Retention Filters
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_read
+        - apm_pipelines_read
     put:
       description: 'Update a retention filter from your organization.
 
@@ -25950,6 +26428,11 @@ paths:
       tags:
       - APM Retention Filters
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_retention_filter_write
+        - apm_pipelines_write
   /api/v2/application_keys:
     get:
       description: List all application keys available for your org
@@ -25992,6 +26475,10 @@ paths:
       summary: Get all application keys
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - org_app_keys_read
   /api/v2/application_keys/{app_key_id}:
     delete:
       description: Delete an application key
@@ -26019,6 +26506,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - org_app_keys_write
     get:
       description: Get an application key for your org.
       operationId: GetApplicationKey
@@ -26055,6 +26546,10 @@ paths:
       summary: Get an application key
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - org_app_keys_read
     patch:
       description: Edit an application key
       operationId: UpdateApplicationKey
@@ -26097,6 +26592,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - org_app_keys_write
   /api/v2/audit/events:
     get:
       description: 'List endpoint returns events that match a Audit Logs search query.
@@ -26178,6 +26677,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - audit_logs_read
   /api/v2/audit/events/search:
     post:
       description: 'List endpoint returns Audit Logs events that match an Audit search
@@ -26219,6 +26722,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - audit_logs_read
   /api/v2/authn_mappings:
     get:
       description: List all AuthN Mappings in the org.
@@ -26261,6 +26768,9 @@ paths:
       summary: List all AuthN Mappings
       tags:
       - AuthN Mappings
+      x-permission:
+        operator: OPEN
+        permissions: []
     post:
       description: Create an AuthN Mapping.
       operationId: CreateAuthNMapping
@@ -26301,6 +26811,10 @@ paths:
       tags:
       - AuthN Mappings
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/authn_mappings/{authn_mapping_id}:
     delete:
       description: Delete an AuthN Mapping specified by AuthN Mapping UUID.
@@ -26324,14 +26838,13 @@ paths:
           description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
-      - AuthZ:
-        - user_access_manage
       summary: Delete an AuthN Mapping
       tags:
       - AuthN Mappings
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
     get:
       description: Get an AuthN Mapping specified by the AuthN Mapping UUID.
       operationId: GetAuthNMapping
@@ -26358,13 +26871,12 @@ paths:
           description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
-      - AuthZ: []
       summary: Get an AuthN Mapping by UUID
       tags:
       - AuthN Mappings
+      x-permission:
+        operator: OPEN
+        permissions: []
     patch:
       description: Edit an AuthN Mapping.
       operationId: UpdateAuthNMapping
@@ -26415,15 +26927,14 @@ paths:
           description: Unprocessable Entity
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
-      - AuthZ:
-        - user_access_manage
       summary: Edit an AuthN Mapping
       tags:
       - AuthN Mappings
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/cases:
     get:
       description: Search cases.
@@ -27103,6 +27614,10 @@ paths:
       tags:
       - CI Visibility Pipelines
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/ci/pipelines/events:
     get:
       description: 'List endpoint returns CI Visibility pipeline events that match
@@ -27187,6 +27702,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/ci/pipelines/events/search:
     post:
       description: 'List endpoint returns CI Visibility pipeline events that match
@@ -27230,6 +27749,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/ci/tests/analytics/aggregate:
     post:
       description: The API endpoint to aggregate CI Visibility test events into buckets
@@ -27263,6 +27786,10 @@ paths:
       tags:
       - CI Visibility Tests
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/ci/tests/events:
     get:
       description: 'List endpoint returns CI Visibility test events that match a [search
@@ -27347,6 +27874,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/ci/tests/events/search:
     post:
       description: 'List endpoint returns CI Visibility test events that match a [search
@@ -27390,6 +27921,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - ci_visibility_read
   /api/v2/container_images:
     get:
       description: Get all Container Images for your organization.
@@ -27467,6 +28002,9 @@ paths:
         cursorPath: meta.pagination.next_cursor
         limitParam: page[size]
         resultsPath: data
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/containers:
     get:
       description: Get all containers for your organization.
@@ -27544,6 +28082,9 @@ paths:
         cursorPath: meta.pagination.next_cursor
         limitParam: page[size]
         resultsPath: data
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/cost/aws_cur_config:
     get:
       description: List the AWS CUR configs.
@@ -27571,6 +28112,10 @@ paths:
       summary: List Cloud Cost Management AWS CUR configs
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_read
     post:
       description: Create a Cloud Cost Management account for an AWS CUR config.
       operationId: CreateCostAWSCURConfig
@@ -27609,6 +28154,10 @@ paths:
       summary: Create Cloud Cost Management AWS CUR config
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
   /api/v2/cost/aws_cur_config/{cloud_account_id}:
     delete:
       description: Archive a Cloud Cost Management Account.
@@ -27640,6 +28189,10 @@ paths:
       summary: Delete Cloud Cost Management AWS CUR config
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
     patch:
       description: Update the status of an AWS CUR config (active/archived).
       operationId: UpdateCostAWSCURConfig
@@ -27674,6 +28227,10 @@ paths:
       summary: Update Cloud Cost Management AWS CUR config
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
   /api/v2/cost/aws_related_accounts:
     get:
       deprecated: true
@@ -27717,6 +28274,10 @@ paths:
       summary: List related AWS accounts
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_read
   /api/v2/cost/azure_uc_config:
     get:
       description: List the Azure configs.
@@ -27744,6 +28305,10 @@ paths:
       summary: List Cloud Cost Management Azure configs
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_read
     post:
       description: Create a Cloud Cost Management account for an Azure config.
       operationId: CreateCostAzureUCConfigs
@@ -27782,6 +28347,10 @@ paths:
       summary: Create Cloud Cost Management Azure configs
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
   /api/v2/cost/azure_uc_config/{cloud_account_id}:
     delete:
       description: Archive a Cloud Cost Management Account.
@@ -27813,6 +28382,10 @@ paths:
       summary: Delete Cloud Cost Management Azure config
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
     patch:
       description: Update the status of an  Azure config (active/archived).
       operationId: UpdateCostAzureUCConfigs
@@ -27853,6 +28426,10 @@ paths:
       summary: Update Cloud Cost Management Azure config
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_write
   /api/v2/cost/custom_costs:
     get:
       description: List the Custom Costs files.
@@ -27992,6 +28569,10 @@ paths:
       summary: Cloud Cost Enabled
       tags:
       - Cloud Cost Management
+      x-permission:
+        operator: OR
+        permissions:
+        - cloud_cost_management_read
   /api/v2/cost_by_tag/active_billing_dimensions:
     get:
       description: Get active billing dimensions for cost attribution. Cost data for
@@ -28030,6 +28611,10 @@ paths:
       summary: Get active billing dimensions for cost attribution
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -28153,6 +28738,10 @@ paths:
       summary: Get Monthly Cost Attribution
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -28198,6 +28787,10 @@ paths:
       summary: Get all application keys owned by current user
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - user_app_keys
     post:
       description: Create an application key for current user
       operationId: CreateCurrentUserApplicationKey
@@ -28232,6 +28825,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_app_keys
   /api/v2/current_user/application_keys/{app_key_id}:
     delete:
       description: Delete an application key owned by current user
@@ -28258,6 +28855,10 @@ paths:
       summary: Delete an application key owned by current user
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - user_app_keys
     get:
       description: Get an application key owned by current user
       operationId: GetCurrentUserApplicationKey
@@ -28287,6 +28888,10 @@ paths:
       summary: Get one application key owned by current user
       tags:
       - Key Management
+      x-permission:
+        operator: OR
+        permissions:
+        - user_app_keys
     patch:
       description: Edit an application key owned by current user
       operationId: UpdateCurrentUserApplicationKey
@@ -28329,6 +28934,10 @@ paths:
       tags:
       - Key Management
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_app_keys
   /api/v2/dashboard/lists/manual/{dashboard_list_id}/dashboards:
     delete:
       description: Delete dashboards from an existing dashboard list.
@@ -28419,6 +29028,10 @@ paths:
       summary: Get items of a Dashboard List
       tags:
       - Dashboard Lists
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_read
     post:
       description: Add dashboards to an existing dashboard list.
       operationId: CreateDashboardListItems
@@ -28677,6 +29290,10 @@ paths:
         limitParam: page[limit]
         pageOffsetParam: page[offset]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
     post:
       description: Schedule a downtime.
       operationId: CreateDowntime
@@ -28717,6 +29334,10 @@ paths:
       tags:
       - Downtimes
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
   /api/v2/downtime/{downtime_id}:
     delete:
       description: Cancel a downtime.
@@ -28754,6 +29375,10 @@ paths:
       summary: Cancel a downtime
       tags:
       - Downtimes
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
     get:
       description: Get downtime detail by `downtime_id`.
       operationId: GetDowntime
@@ -28810,6 +29435,10 @@ paths:
       summary: Get a downtime
       tags:
       - Downtimes
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
     patch:
       description: Update a downtime by `downtime_id`.
       operationId: UpdateDowntime
@@ -28864,6 +29493,10 @@ paths:
       tags:
       - Downtimes
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
   /api/v2/events:
     get:
       description: 'List endpoint returns events that match an events search query.
@@ -28942,6 +29575,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - events_read
   /api/v2/events/search:
     post:
       description: 'List endpoint returns events that match an events search query.
@@ -28979,6 +29616,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - events_read
   /api/v2/incidents:
     get:
       description: Get all incidents for the user's organization.
@@ -29016,6 +29657,10 @@ paths:
         limitParam: page[size]
         pageOffsetParam: page[offset]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29055,6 +29700,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29097,6 +29746,10 @@ paths:
         limitParam: page[size]
         pageOffsetParam: page[offset]
         resultsPath: data.attributes.incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29127,6 +29780,10 @@ paths:
       summary: Delete an existing incident
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29161,6 +29818,10 @@ paths:
       summary: Get the details of an incident
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29204,6 +29865,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29232,14 +29897,13 @@ paths:
           $ref: '#/components/responses/NotFoundResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
-      - AuthZ:
-        - incident_read
       summary: Get a list of attachments
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29278,6 +29942,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29312,6 +29980,10 @@ paths:
       summary: Get a list of an incident's integration metadata
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29353,6 +30025,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29495,6 +30171,10 @@ paths:
       summary: Get a list of an incident's todos
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29536,6 +30216,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29567,6 +30251,10 @@ paths:
       summary: Delete an incident todo
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29601,6 +30289,10 @@ paths:
       summary: Get incident todo details
       tags:
       - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29643,6 +30335,10 @@ paths:
       tags:
       - Incidents
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
@@ -29667,6 +30363,10 @@ paths:
       summary: List all GCP STS-enabled service accounts
       tags:
       - GCP Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configuration_read
     post:
       description: Create a new entry within Datadog for your STS enabled service
         account.
@@ -29698,6 +30398,10 @@ paths:
       tags:
       - GCP Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configurations_manage
   /api/v2/integration/gcp/accounts/{account_id}:
     delete:
       description: Delete an STS enabled GCP account from within Datadog.
@@ -29716,6 +30420,10 @@ paths:
       summary: Delete an STS enabled GCP Account
       tags:
       - GCP Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configurations_manage
     patch:
       description: Update an STS enabled service account.
       operationId: UpdateGCPSTSAccount
@@ -29746,6 +30454,10 @@ paths:
       tags:
       - GCP Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configuration_edit
   /api/v2/integration/gcp/sts_delegate:
     get:
       description: List your Datadog-GCP STS delegate account configured in your Datadog
@@ -29766,6 +30478,10 @@ paths:
       tags:
       - GCP Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configuration_read
     post:
       description: Create a Datadog GCP principal.
       operationId: MakeGCPSTSDelegate
@@ -29794,6 +30510,204 @@ paths:
       tags:
       - GCP Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - gcp_configuration_edit
+  /api/v2/integration/ms-teams/configuration/channel/{tenant_name}/{team_name}/{channel_name}:
+    get:
+      description: Get the tenant, team, and channel ID of a channel in the Datadog
+        Microsoft Teams integration.
+      operationId: GetChannelByName
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsTenantNamePathParameter'
+      - $ref: '#/components/parameters/MicrosoftTeamsTeamNamePathParameter'
+      - $ref: '#/components/parameters/MicrosoftTeamsChannelNamePathParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsGetChannelByNameResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get channel information by name
+      tags:
+      - Microsoft Teams Integration
+  /api/v2/integration/ms-teams/configuration/tenant-based-handles:
+    get:
+      description: Get a list of all handles from the Datadog Microsoft Teams integration.
+      operationId: ListApiHandles
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsTenantIDQueryParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsApiHandlesResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get all handles
+      tags:
+      - Microsoft Teams Integration
+    post:
+      description: Create a handle in the Datadog Microsoft Teams integration.
+      operationId: CreateApiHandle
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MicrosoftTeamsCreateApiHandleRequest'
+        description: Handle payload.
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsCreateApiHandleResponse'
+          description: CREATED
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Create handle
+      tags:
+      - Microsoft Teams Integration
+      x-codegen-request-body-name: body
+  /api/v2/integration/ms-teams/configuration/tenant-based-handles/name/{handle_name}:
+    get:
+      description: Get the tenant, team, and channel information of a handle by name
+        from the Datadog Microsoft Teams integration.
+      operationId: GetApiHandleByName
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsHandleNamePathParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get handle information by name
+      tags:
+      - Microsoft Teams Integration
+  /api/v2/integration/ms-teams/configuration/tenant-based-handles/{handle_id}:
+    delete:
+      description: Delete a handle from the Datadog Microsoft Teams integration.
+      operationId: DeleteApiHandle
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsHandleIDPathParameter'
+      responses:
+        '204':
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Delete handle
+      tags:
+      - Microsoft Teams Integration
+    get:
+      description: Get the tenant, team, and channel information of a handle from
+        the Datadog Microsoft Teams integration.
+      operationId: GetApiHandle
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsHandleIDPathParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get handle information
+      tags:
+      - Microsoft Teams Integration
+    patch:
+      description: Update a handle from the Datadog Microsoft Teams integration.
+      operationId: UpdateApiHandle
+      parameters:
+      - $ref: '#/components/parameters/MicrosoftTeamsHandleIDPathParameter'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MicrosoftTeamsUpdateApiHandleRequest'
+        description: Opsgenie service payload.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MicrosoftTeamsApiHandleInfoResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '412':
+          $ref: '#/components/responses/PreconditionFailedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Update handle
+      tags:
+      - Microsoft Teams Integration
+      x-codegen-request-body-name: body
   /api/v2/integration/opsgenie/services:
     get:
       description: Get a list of all services from the Datadog Opsgenie integration.
@@ -29812,6 +30726,10 @@ paths:
       summary: Get all service objects
       tags:
       - Opsgenie Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a new service object in the Opsgenie integration.
       operationId: CreateOpsgenieService
@@ -29841,6 +30759,10 @@ paths:
       tags:
       - Opsgenie Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integration/opsgenie/services/{integration_service_id}:
     delete:
       description: Delete a single service object in the Datadog Opsgenie integration.
@@ -29861,6 +30783,10 @@ paths:
       summary: Delete a single service object
       tags:
       - Opsgenie Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get a single service from the Datadog Opsgenie integration.
       operationId: GetOpsgenieService
@@ -29886,6 +30812,10 @@ paths:
       summary: Get a single service object
       tags:
       - Opsgenie Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update a single service object in the Datadog Opsgenie integration.
       operationId: UpdateOpsgenieService
@@ -29919,6 +30849,10 @@ paths:
       tags:
       - Opsgenie Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/cloudflare/accounts:
     get:
       description: List Cloudflare accounts.
@@ -29941,6 +30875,10 @@ paths:
       summary: List Cloudflare accounts
       tags:
       - Cloudflare Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a Cloudflare account.
       operationId: CreateCloudflareAccount
@@ -29969,6 +30907,10 @@ paths:
       tags:
       - Cloudflare Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/cloudflare/accounts/{account_id}:
     delete:
       description: Delete a Cloudflare account.
@@ -29994,6 +30936,10 @@ paths:
       summary: Delete Cloudflare account
       tags:
       - Cloudflare Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get a Cloudflare account.
       operationId: GetCloudflareAccount
@@ -30022,6 +30968,10 @@ paths:
       summary: Get Cloudflare account
       tags:
       - Cloudflare Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update a Cloudflare account.
       operationId: UpdateCloudflareAccount
@@ -30057,6 +31007,10 @@ paths:
       tags:
       - Cloudflare Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/confluent-cloud/accounts:
     get:
       description: List Confluent accounts.
@@ -30079,6 +31033,10 @@ paths:
       summary: List Confluent accounts
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a Confluent account.
       operationId: CreateConfluentAccount
@@ -30108,6 +31066,10 @@ paths:
       tags:
       - Confluent Cloud
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/confluent-cloud/accounts/{account_id}:
     delete:
       description: Delete a Confluent account with the provided account ID.
@@ -30128,6 +31090,10 @@ paths:
       summary: Delete Confluent account
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get the Confluent account with the provided account ID.
       operationId: GetConfluentAccount
@@ -30151,6 +31117,10 @@ paths:
       summary: Get Confluent account
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update the Confluent account with the provided account ID.
       operationId: UpdateConfluentAccount
@@ -30182,6 +31152,10 @@ paths:
       tags:
       - Confluent Cloud
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/confluent-cloud/accounts/{account_id}/resources:
     get:
       description: Get a Confluent resource for the account associated with the provided
@@ -30207,6 +31181,10 @@ paths:
       summary: List Confluent Account resources
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a Confluent resource for the account associated with the
         provided ID.
@@ -30239,6 +31217,10 @@ paths:
       tags:
       - Confluent Cloud
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/confluent-cloud/accounts/{account_id}/resources/{resource_id}:
     delete:
       description: Delete a Confluent resource with the provided resource id for the
@@ -30261,6 +31243,10 @@ paths:
       summary: Delete resource from Confluent account
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get a Confluent resource with the provided resource id for the
         account associated with the provided account ID.
@@ -30286,6 +31272,10 @@ paths:
       summary: Get resource from Confluent account
       tags:
       - Confluent Cloud
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update a Confluent resource with the provided resource id for the
         account associated with the provided account ID.
@@ -30319,6 +31309,10 @@ paths:
       tags:
       - Confluent Cloud
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/fastly/accounts:
     get:
       description: List Fastly accounts.
@@ -30341,6 +31335,10 @@ paths:
       summary: List Fastly accounts
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a Fastly account.
       operationId: CreateFastlyAccount
@@ -30369,6 +31367,10 @@ paths:
       tags:
       - Fastly Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/fastly/accounts/{account_id}:
     delete:
       description: Delete a Fastly account.
@@ -30389,6 +31391,10 @@ paths:
       summary: Delete Fastly account
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get a Fastly account.
       operationId: GetFastlyAccount
@@ -30412,6 +31418,10 @@ paths:
       summary: Get Fastly account
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update a Fastly account.
       operationId: UpdateFastlyAccount
@@ -30442,6 +31452,10 @@ paths:
       tags:
       - Fastly Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/fastly/accounts/{account_id}/services:
     get:
       description: List Fastly services for an account.
@@ -30466,6 +31480,10 @@ paths:
       summary: List Fastly services
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create a Fastly service for an account.
       operationId: CreateFastlyService
@@ -30496,6 +31514,10 @@ paths:
       tags:
       - Fastly Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/fastly/accounts/{account_id}/services/{service_id}:
     delete:
       description: Delete a Fastly service for an account.
@@ -30517,6 +31539,10 @@ paths:
       summary: Delete Fastly service
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get a Fastly service for an account.
       operationId: GetFastlyService
@@ -30541,6 +31567,10 @@ paths:
       summary: Get Fastly service
       tags:
       - Fastly Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update a Fastly service for an account.
       operationId: UpdateFastlyService
@@ -30572,6 +31602,10 @@ paths:
       tags:
       - Fastly Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/okta/accounts:
     get:
       description: List Okta accounts.
@@ -30594,6 +31628,10 @@ paths:
       summary: List Okta accounts
       tags:
       - Okta Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     post:
       description: Create an Okta account.
       operationId: CreateOktaAccount
@@ -30622,6 +31660,10 @@ paths:
       tags:
       - Okta Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/integrations/okta/accounts/{account_id}:
     delete:
       description: Delete an Okta account.
@@ -30647,6 +31689,10 @@ paths:
       summary: Delete Okta account
       tags:
       - Okta Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
     get:
       description: Get an Okta account.
       operationId: GetOktaAccount
@@ -30675,6 +31721,10 @@ paths:
       summary: Get Okta account
       tags:
       - Okta Integration
+      x-permission:
+        operator: OR
+        permissions:
+        - integrations_read
     patch:
       description: Update an Okta account.
       operationId: UpdateOktaAccount
@@ -30710,6 +31760,10 @@ paths:
       tags:
       - Okta Integration
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - manage_integrations
   /api/v2/ip_allowlist:
     get:
       description: Returns the IP allowlist and its enabled or disabled state.
@@ -30735,6 +31789,10 @@ paths:
       summary: Get IP Allowlist
       tags:
       - IP Allowlist
+      x-permission:
+        operator: OR
+        permissions:
+        - org_management
     patch:
       description: Edit the entries in the IP allowlist, and enable or disable it.
       operationId: UpdateIPAllowlist
@@ -30768,6 +31826,10 @@ paths:
       tags:
       - IP Allowlist
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - org_management
   /api/v2/logs:
     post:
       description: 'Send your logs to your Datadog platform over HTTP. Limits per
@@ -31023,6 +32085,10 @@ paths:
       tags:
       - Logs
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_data
   /api/v2/logs/config/archive-order:
     get:
       description: 'Get the current order of your archives.
@@ -31047,6 +32113,9 @@ paths:
       summary: Get archive order
       tags:
       - Logs Archives
+      x-permission:
+        operator: OPEN
+        permissions: []
     put:
       description: 'Update the order of your archives. Since logs are processed sequentially,
         reordering an archive may change
@@ -31097,6 +32166,10 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
   /api/v2/logs/config/archives:
     get:
       description: Get the list of configured logs archives with their definitions.
@@ -31119,6 +32192,10 @@ paths:
       summary: Get all archives
       tags:
       - Logs Archives
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_archives
     post:
       description: Create an archive in your organization.
       operationId: CreateLogsArchive
@@ -31154,6 +32231,10 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
   /api/v2/logs/config/archives/{archive_id}:
     delete:
       description: Delete a given archive from your organization.
@@ -31186,6 +32267,10 @@ paths:
       summary: Delete an archive
       tags:
       - Logs Archives
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
     get:
       description: Get a specific archive from your organization.
       operationId: GetLogsArchive
@@ -31221,6 +32306,10 @@ paths:
       summary: Get an archive
       tags:
       - Logs Archives
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_archives
     put:
       description: 'Update a given archive configuration.
 
@@ -31269,6 +32358,10 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
   /api/v2/logs/config/archives/{archive_id}/readers:
     delete:
       description: Removes a role from an archive. ([Roles API](https://docs.datadoghq.com/api/v2/roles/))
@@ -31308,6 +32401,10 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
     get:
       description: Returns all read roles a given archive is restricted to.
       operationId: ListArchiveReadRoles
@@ -31344,6 +32441,9 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OPEN
+        permissions: []
     post:
       description: Adds a read role to an archive. ([Roles API](https://docs.datadoghq.com/api/v2/roles/))
       operationId: AddReadRoleToArchive
@@ -31382,6 +32482,10 @@ paths:
       tags:
       - Logs Archives
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_archives
   /api/v2/logs/config/custom-destinations:
     get:
       description: Get the list of configured custom destinations in your organization
@@ -31405,6 +32509,10 @@ paths:
       summary: Get all custom destinations
       tags:
       - Logs Custom Destinations
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_data
     post:
       description: Create a custom destination in your organization.
       operationId: CreateLogsCustomDestination
@@ -31434,6 +32542,10 @@ paths:
       tags:
       - Logs Custom Destinations
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_forwarding_rules
   /api/v2/logs/config/custom-destinations/{custom_destination_id}:
     delete:
       description: Delete a specific custom destination in your organization.
@@ -31454,6 +32566,10 @@ paths:
       summary: Delete a custom destination
       tags:
       - Logs Custom Destinations
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_forwarding_rules
     get:
       description: Get a specific custom destination in your organization.
       operationId: GetLogsCustomDestination
@@ -31477,6 +32593,10 @@ paths:
       summary: Get a custom destination
       tags:
       - Logs Custom Destinations
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_data
     patch:
       description: Update the given fields of a specific custom destination in your
         organization.
@@ -31511,6 +32631,10 @@ paths:
       tags:
       - Logs Custom Destinations
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_write_forwarding_rules
   /api/v2/logs/config/metrics:
     get:
       description: Get the list of configured log-based metrics with their definitions.
@@ -31529,6 +32653,9 @@ paths:
       summary: Get all log-based metrics
       tags:
       - Logs Metrics
+      x-permission:
+        operator: OPEN
+        permissions: []
     post:
       description: 'Create a metric based on your ingested logs in your organization.
 
@@ -31561,6 +32688,10 @@ paths:
       tags:
       - Logs Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_generate_metrics
   /api/v2/logs/config/metrics/{metric_id}:
     delete:
       description: Delete a specific log-based metric from your organization.
@@ -31579,6 +32710,10 @@ paths:
       summary: Delete a log-based metric
       tags:
       - Logs Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_generate_metrics
     get:
       description: Get a specific log-based metric from your organization.
       operationId: GetLogsMetric
@@ -31600,6 +32735,9 @@ paths:
       summary: Get a log-based metric
       tags:
       - Logs Metrics
+      x-permission:
+        operator: OPEN
+        permissions: []
     patch:
       description: 'Update a specific log-based metric from your organization.
 
@@ -31634,6 +32772,10 @@ paths:
       tags:
       - Logs Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_generate_metrics
   /api/v2/logs/events:
     get:
       description: 'List endpoint returns logs that match a log search query.
@@ -31746,6 +32888,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_data
   /api/v2/logs/events/search:
     post:
       description: 'List endpoint returns logs that match a log search query.
@@ -31795,6 +32941,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - logs_read_data
   /api/v2/metrics:
     get:
       description: "Returns all metrics that can be configured in the Metrics Summary
@@ -31822,7 +32972,7 @@ paths:
         name: filter[metric_type]
         required: false
         schema:
-          $ref: '#/components/schemas/MetricTagConfigurationMetricTypes'
+          $ref: '#/components/schemas/MetricTagConfigurationMetricTypeCategory'
       - description: 'Filter distributions with additional percentile
 
           aggregations enabled or disabled.'
@@ -31897,6 +33047,10 @@ paths:
       summary: Get a list of metrics
       tags:
       - Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - metrics_read
   /api/v2/metrics/config/bulk-tags:
     delete:
       description: 'Delete all custom lists of queryable tag keys for a set of existing
@@ -31951,6 +33105,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - metric_tags_write
     post:
       description: 'Create and define a list of queryable tag keys for a set of existing
         count, gauge, rate, and distribution metrics.
@@ -32014,6 +33172,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - metric_tags_write
   /api/v2/metrics/{metric_name}/active-configurations:
     get:
       description: List tags and aggregations that are actively queried on dashboards,
@@ -32066,6 +33228,10 @@ paths:
       summary: List active tags and aggregations
       tags:
       - Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - metrics_read
   /api/v2/metrics/{metric_name}/all-tags:
     get:
       description: View indexed tag key-value pairs for a given metric name.
@@ -32111,6 +33277,10 @@ paths:
       summary: List tags by metric name
       tags:
       - Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - metrics_read
   /api/v2/metrics/{metric_name}/assets:
     get:
       description: Returns dashboards, monitors, notebooks, and SLOs that a metric
@@ -32172,8 +33342,7 @@ paths:
         schema:
           type: string
       - description: The number of hours of look back (from now) to estimate cardinality
-          with. Estimates are based on historical data, and unspecified fields default
-          to the minimum 49 hours.
+          with. If unspecified, it defaults to 0 hours.
         example: 49
         in: query
         name: filter[hours_ago]
@@ -32202,7 +33371,7 @@ paths:
         schema:
           type: boolean
       - description: A window, in hours, from the look back to estimate cardinality
-          with.
+          with. The minimum and default is 1 hour.
         example: 6
         in: query
         name: filter[timespan_h]
@@ -32245,6 +33414,9 @@ paths:
       summary: Tag Configuration Cardinality Estimator
       tags:
       - Metrics
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/metrics/{metric_name}/tags:
     delete:
       description: 'Deletes a metric''s tag configuration. Can only be used with application
@@ -32277,6 +33449,10 @@ paths:
       summary: Delete a tag configuration
       tags:
       - Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - metric_tags_write
     get:
       description: Returns the tag configuration for the given metric name.
       operationId: ListTagConfigurationByName
@@ -32315,6 +33491,10 @@ paths:
       summary: List tag configuration by name
       tags:
       - Metrics
+      x-permission:
+        operator: OR
+        permissions:
+        - metrics_read
     patch:
       description: 'Update the tag configuration of a metric or percentile aggregations
         of a distribution metric or custom aggregations
@@ -32373,6 +33553,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - metric_tags_write
     post:
       description: 'Create and define a list of queryable tag keys for an existing
         count/gauge/rate/distribution metric.
@@ -32432,6 +33616,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - metric_tags_write
   /api/v2/metrics/{metric_name}/volumes:
     get:
       description: 'View distinct metrics volumes for the given metric name.
@@ -32476,6 +33664,9 @@ paths:
       summary: List distinct metric volumes by metric name
       tags:
       - Metrics
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/monitor/policy:
     get:
       description: Get all monitor configuration policies.
@@ -32503,6 +33694,10 @@ paths:
       summary: Get all monitor configuration policies
       tags:
       - Monitors
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_read
     post:
       description: Create a monitor configuration policy.
       operationId: CreateMonitorConfigPolicy
@@ -32538,6 +33733,10 @@ paths:
       tags:
       - Monitors
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - monitor_config_policy_write
   /api/v2/monitor/policy/{policy_id}:
     delete:
       description: Delete a monitor configuration policy.
@@ -32576,6 +33775,10 @@ paths:
       summary: Delete a monitor configuration policy
       tags:
       - Monitors
+      x-permission:
+        operator: OR
+        permissions:
+        - monitor_config_policy_write
     get:
       description: Get a monitor configuration policy by `policy_id`.
       operationId: GetMonitorConfigPolicy
@@ -32616,6 +33819,10 @@ paths:
       summary: Get a monitor configuration policy
       tags:
       - Monitors
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_read
     patch:
       description: Edit a monitor configuration policy.
       operationId: UpdateMonitorConfigPolicy
@@ -32665,6 +33872,10 @@ paths:
       tags:
       - Monitors
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - monitor_config_policy_write
   /api/v2/monitor/{monitor_id}/downtime_matches:
     get:
       description: Get all active downtimes for the specified monitor.
@@ -32715,6 +33926,10 @@ paths:
         limitParam: page[limit]
         pageOffsetParam: page[offset]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - monitors_downtime
   /api/v2/ndm/devices:
     get:
       description: Get the list of devices.
@@ -32900,12 +34115,12 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
       summary: List Org Configs
       tags:
       - Organizations
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/org_configs/{org_config_name}:
     get:
       description: Return the name, description, and value of a specific Org Config.
@@ -32929,12 +34144,12 @@ paths:
           $ref: '#/components/responses/NotFoundResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      security:
-      - apiKeyAuth: []
-        appKeyAuth: []
       summary: Get a specific Org Config value
       tags:
       - Organizations
+      x-permission:
+        operator: OPEN
+        permissions: []
     patch:
       description: Update the value of a specific Org Config.
       operationId: UpdateOrgConfig
@@ -32966,6 +34181,10 @@ paths:
       summary: Update a specific Org Config
       tags:
       - Organizations
+      x-permission:
+        operator: OR
+        permissions:
+        - org_management
   /api/v2/permissions:
     get:
       description: Returns a list of all permissions, including name, description,
@@ -33276,6 +34495,10 @@ paths:
         limitParam: page[limit]
         pageOffsetParam: page[offset]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_read
     post:
       description: Create a powerpack.
       operationId: CreatePowerpack
@@ -33310,6 +34533,10 @@ paths:
       tags:
       - Powerpack
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_write
   /api/v2/powerpacks/{powerpack_id}:
     delete:
       description: Delete a powerpack.
@@ -33340,6 +34567,10 @@ paths:
       summary: Delete a powerpack
       tags:
       - Powerpack
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_write
     get:
       description: Get a powerpack.
       operationId: GetPowerpack
@@ -33373,6 +34604,10 @@ paths:
       summary: Get a Powerpack
       tags:
       - Powerpack
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_read
     patch:
       description: Update a powerpack.
       operationId: UpdatePowerpack
@@ -33420,6 +34655,10 @@ paths:
       tags:
       - Powerpack
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - dashboards_write
   /api/v2/processes:
     get:
       description: Get all processes for your organization.
@@ -33515,6 +34754,9 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/query/scalar:
     post:
       description: 'Query scalar values (as seen on Query Value, Table, and Toplist
@@ -33554,6 +34796,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - timeseries_query
       x-unstable: '**Note**: This endpoint is GA for Metrics, Real User Monitoring
         (RUM), Cloud Cost Management, and Log Management data sources.
 
@@ -33596,6 +34842,10 @@ paths:
       tags:
       - Metrics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - timeseries_query
       x-unstable: '**Note**: This endpoint is GA for Metrics, Real User Monitoring
         (RUM), Cloud Cost Management, and Log Management data sources.
 
@@ -33768,9 +35018,13 @@ paths:
       security:
       - apiKeyAuth: []
         appKeyAuth: []
+      - AuthZ: []
       summary: Delete a restriction policy
       tags:
       - Restriction Policies
+      x-permission:
+        operator: OPEN
+        permissions: []
     get:
       description: Retrieves the restriction policy associated with a specified resource.
       operationId: GetRestrictionPolicy
@@ -33792,9 +35046,13 @@ paths:
       security:
       - apiKeyAuth: []
         appKeyAuth: []
+      - AuthZ: []
       summary: Get a restriction policy
       tags:
       - Restriction Policies
+      x-permission:
+        operator: OPEN
+        permissions: []
     post:
       description: 'Updates the restriction policy associated with a resource.
 
@@ -33871,10 +35129,14 @@ paths:
       security:
       - apiKeyAuth: []
         appKeyAuth: []
+      - AuthZ: []
       summary: Update a restriction policy
       tags:
       - Restriction Policies
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/roles:
     get:
       description: Returns all roles, including their names and their unique identifiers.
@@ -33929,6 +35191,10 @@ paths:
       summary: List roles
       tags:
       - Roles
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_read
     post:
       description: Create a new role for your organization.
       operationId: CreateRole
@@ -33968,6 +35234,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/roles/{role_id}:
     delete:
       description: Disables a role.
@@ -34089,6 +35359,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/roles/{role_id}/clone:
     post:
       description: Clone an existing role
@@ -34143,6 +35417,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/roles/{role_id}/permissions:
     delete:
       description: Removes a permission from a role.
@@ -34191,6 +35469,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
     get:
       description: Returns a list of all permissions for a single role.
       operationId: ListRolePermissions
@@ -34273,6 +35555,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/roles/{role_id}/users:
     delete:
       description: Removes a user from a role.
@@ -34321,6 +35607,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
     get:
       description: Gets all users of a role.
       operationId: ListRoleUsers
@@ -34422,6 +35712,10 @@ paths:
       tags:
       - Roles
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
   /api/v2/rum/analytics/aggregate:
     post:
       description: The API endpoint to aggregate RUM events into buckets of computed
@@ -34454,6 +35748,9 @@ paths:
       tags:
       - RUM
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/rum/applications:
     get:
       description: List all the RUM applications in your organization.
@@ -34472,6 +35769,10 @@ paths:
       summary: List all the RUM applications
       tags:
       - RUM
+      x-permission:
+        operator: OR
+        permissions:
+        - rum_apps_read
     post:
       description: Create a new RUM application in your organization.
       operationId: CreateRUMApplication
@@ -34496,6 +35797,10 @@ paths:
       tags:
       - RUM
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - rum_apps_write
   /api/v2/rum/applications/{id}:
     delete:
       description: Delete an existing RUM application in your organization.
@@ -34517,6 +35822,10 @@ paths:
       summary: Delete a RUM application
       tags:
       - RUM
+      x-permission:
+        operator: OR
+        permissions:
+        - rum_apps_write
     get:
       description: Get the RUM application with given ID in your organization.
       operationId: GetRUMApplication
@@ -34541,6 +35850,10 @@ paths:
       summary: Get a RUM application
       tags:
       - RUM
+      x-permission:
+        operator: OR
+        permissions:
+        - rum_apps_read
     patch:
       description: Update the RUM application with given ID in your organization.
       operationId: UpdateRUMApplication
@@ -34580,6 +35893,10 @@ paths:
       tags:
       - RUM
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - rum_apps_write
   /api/v2/rum/events:
     get:
       description: 'List endpoint returns events that match a RUM search query.
@@ -34665,6 +35982,9 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/rum/events/search:
     post:
       description: 'List endpoint returns RUM events that match a RUM search query.
@@ -34709,6 +36029,9 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/saml_configurations/idp_metadata:
     post:
       description: 'Endpoint for uploading IdP metadata for SAML setup.
@@ -34743,6 +36066,10 @@ paths:
       tags:
       - Organizations
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - org_management
   /api/v2/scorecard/outcomes:
     get:
       description: Fetches all rule outcomes.
@@ -35087,6 +36414,10 @@ paths:
       summary: Get the latest Cloud Workload Security policy
       tags:
       - CSM Threats
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_read
   /api/v2/security_monitoring/cloud_workload_security/agent_rules:
     get:
       description: Get the list of Agent rules.
@@ -35105,6 +36436,10 @@ paths:
       summary: Get all Cloud Workload Security Agent rules
       tags:
       - CSM Threats
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_read
     post:
       description: Create a new Agent rule with the given parameters.
       operationId: CreateCloudWorkloadSecurityAgentRule
@@ -35134,6 +36469,10 @@ paths:
       tags:
       - CSM Threats
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_write
   /api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}:
     delete:
       description: Delete a specific Agent rule.
@@ -35152,6 +36491,10 @@ paths:
       summary: Delete a Cloud Workload Security Agent rule
       tags:
       - CSM Threats
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_write
     get:
       description: Get the details of a specific Agent rule.
       operationId: GetCloudWorkloadSecurityAgentRule
@@ -35173,6 +36516,10 @@ paths:
       summary: Get a Cloud Workload Security Agent rule
       tags:
       - CSM Threats
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_read
     patch:
       description: 'Update a specific Agent rule.
 
@@ -35208,6 +36555,10 @@ paths:
       tags:
       - CSM Threats
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_cws_agent_rules_write
   /api/v2/security_monitoring/configuration/security_filters:
     get:
       description: Get the list of configured security filters with their definitions.
@@ -35231,6 +36582,10 @@ paths:
       summary: Get all security filters
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_filters_read
     post:
       description: 'Create a security filter.
 
@@ -35270,6 +36625,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_filters_write
   /api/v2/security_monitoring/configuration/security_filters/{security_filter_id}:
     delete:
       description: Delete a specific security filter.
@@ -35293,6 +36652,10 @@ paths:
       summary: Delete a security filter
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_filters_write
     get:
       description: 'Get the details of a specific security filter.
 
@@ -35324,6 +36687,10 @@ paths:
       summary: Get a security filter
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_filters_read
     patch:
       description: 'Update a specific security filter.
 
@@ -35364,6 +36731,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_filters_write
   /api/v2/security_monitoring/configuration/suppressions:
     get:
       description: Get the list of all suppression rules.
@@ -35533,6 +36904,10 @@ paths:
       summary: List rules
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_read
     post:
       description: Create a detection rule.
       operationId: CreateSecurityMonitoringRule
@@ -35564,6 +36939,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/rules/convert:
     post:
       description: 'Convert a rule that doesn''t (yet) exist from JSON to Terraform
@@ -35603,6 +36982,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/rules/test:
     post:
       description: Test a rule.
@@ -35639,6 +37022,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/rules/validation:
     post:
       description: Validate a detection rule.
@@ -35667,6 +37054,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/rules/{rule_id}:
     delete:
       description: Delete an existing rule. Default rules cannot be deleted.
@@ -35690,6 +37081,10 @@ paths:
       summary: Delete an existing rule
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
     get:
       description: Get a rule's details.
       operationId: GetSecurityMonitoringRule
@@ -35714,6 +37109,10 @@ paths:
       summary: Get a rule's details
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_read
     put:
       description: 'Update an existing rule. When updating `cases`, `queries` or `options`,
         the whole field
@@ -35760,6 +37159,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/rules/{rule_id}/convert:
     get:
       description: 'Convert an existing rule from JSON to Terraform for datadog provider
@@ -35791,6 +37194,10 @@ paths:
       summary: Convert an existing rule from JSON to Terraform
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_read
   /api/v2/security_monitoring/rules/{rule_id}/test:
     post:
       description: Test an existing rule.
@@ -35829,6 +37236,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_rules_write
   /api/v2/security_monitoring/signals:
     get:
       description: 'The list endpoint returns security signals that match a search
@@ -35912,6 +37323,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: page[limit]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
   /api/v2/security_monitoring/signals/search:
     post:
       description: 'Returns security signals that match a search query.
@@ -35953,6 +37368,10 @@ paths:
         cursorPath: meta.page.after
         limitParam: body.page.limit
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
   /api/v2/security_monitoring/signals/{signal_id}:
     get:
       description: Get a signal's details.
@@ -35978,6 +37397,10 @@ paths:
       summary: Get a signal's details
       tags:
       - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
   /api/v2/security_monitoring/signals/{signal_id}/assignee:
     patch:
       description: Modify the triage assignee of a security signal.
@@ -36022,6 +37445,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_write
   /api/v2/security_monitoring/signals/{signal_id}/incidents:
     patch:
       description: Change the related incidents for a security signal.
@@ -36066,6 +37493,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_write
   /api/v2/security_monitoring/signals/{signal_id}/state:
     patch:
       description: Change the triage state of a security signal.
@@ -36110,6 +37541,10 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_write
   /api/v2/sensitive-data-scanner/config:
     get:
       description: List all the Scanning groups in your organization.
@@ -36138,6 +37573,10 @@ paths:
       summary: List Scanning Groups
       tags:
       - Sensitive Data Scanner
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_read
     patch:
       description: Reorder the list of groups.
       operationId: ReorderScanningGroups
@@ -36172,6 +37611,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
   /api/v2/sensitive-data-scanner/config/groups:
     post:
       description: 'Create a scanning group.
@@ -36216,6 +37659,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
   /api/v2/sensitive-data-scanner/config/groups/{group_id}:
     delete:
       description: Delete a given group.
@@ -36255,6 +37702,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
     patch:
       description: 'Update a group, including the order of the rules.
 
@@ -36301,6 +37752,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
   /api/v2/sensitive-data-scanner/config/rules:
     post:
       description: 'Create a scanning rule in a sensitive data scanner group, ordered
@@ -36346,6 +37801,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
   /api/v2/sensitive-data-scanner/config/rules/{rule_id}:
     delete:
       description: Delete a given rule.
@@ -36385,6 +37844,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
     patch:
       description: 'Update a scanning rule.
 
@@ -36430,6 +37893,10 @@ paths:
       tags:
       - Sensitive Data Scanner
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_write
   /api/v2/sensitive-data-scanner/config/standard-patterns:
     get:
       description: Returns all standard patterns.
@@ -36458,6 +37925,10 @@ paths:
       summary: List standard patterns
       tags:
       - Sensitive Data Scanner
+      x-permission:
+        operator: OR
+        permissions:
+        - data_scanner_read
   /api/v2/series:
     post:
       description: "The metrics end-point allows you to post time-series data that
@@ -36564,6 +38035,10 @@ paths:
       tags:
       - Service Accounts
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
   /api/v2/service_accounts/{service_account_id}/application_keys:
     get:
       description: List all application keys available for this service account.
@@ -36606,6 +38081,10 @@ paths:
       summary: List application keys for this service account
       tags:
       - Service Accounts
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
     post:
       description: Create an application key for this service account.
       operationId: CreateServiceAccountApplicationKey
@@ -36642,6 +38121,10 @@ paths:
       tags:
       - Service Accounts
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
   /api/v2/service_accounts/{service_account_id}/application_keys/{app_key_id}:
     delete:
       description: Delete an application key owned by this service account.
@@ -36669,6 +38152,10 @@ paths:
       summary: Delete an application key for this service account
       tags:
       - Service Accounts
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
     get:
       description: Get an application key owned by this service account.
       operationId: GetServiceAccountApplicationKey
@@ -36699,6 +38186,10 @@ paths:
       summary: Get one application key for this service account
       tags:
       - Service Accounts
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
     patch:
       description: Edit an application key owned by this service account.
       operationId: UpdateServiceAccountApplicationKey
@@ -36742,6 +38233,10 @@ paths:
       tags:
       - Service Accounts
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - service_account_write
   /api/v2/services:
     get:
       deprecated: true
@@ -36779,6 +38274,10 @@ paths:
       summary: Get a list of all incident services
       tags:
       - Incident Services
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is deprecated.'
     post:
       deprecated: true
@@ -36817,6 +38316,10 @@ paths:
       tags:
       - Incident Services
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated.'
   /api/v2/services/definitions:
     get:
@@ -36850,6 +38353,10 @@ paths:
         limitParam: page[size]
         pageParam: page[number]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_service_catalog_read
     post:
       description: Create or update service definition in the Datadog Service Catalog.
       operationId: CreateOrUpdateServiceDefinitions
@@ -36884,6 +38391,10 @@ paths:
       tags:
       - Service Definition
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_service_catalog_write
   /api/v2/services/definitions/{service_name}:
     delete:
       description: Delete a single service definition in the Datadog Service Catalog.
@@ -36909,6 +38420,10 @@ paths:
       summary: Delete a single service definition
       tags:
       - Service Definition
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_service_catalog_write
     get:
       description: Get a single service definition from the Datadog Service Catalog.
       operationId: GetServiceDefinition
@@ -36940,6 +38455,10 @@ paths:
       summary: Get a single service definition
       tags:
       - Service Definition
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_service_catalog_read
   /api/v2/services/{service_id}:
     delete:
       deprecated: true
@@ -36968,6 +38487,10 @@ paths:
       summary: Delete an existing incident service
       tags:
       - Incident Services
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated.'
     get:
       deprecated: true
@@ -37004,6 +38527,10 @@ paths:
       summary: Get details of an incident service
       tags:
       - Incident Services
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is deprecated.'
     patch:
       deprecated: true
@@ -37045,6 +38572,10 @@ paths:
       tags:
       - Incident Services
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated.'
   /api/v2/slo/report:
     post:
@@ -37224,6 +38755,10 @@ paths:
       tags:
       - Spans
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - apm_read
   /api/v2/spans/events:
     get:
       description: 'List endpoint returns spans that match a span search query.
@@ -37379,6 +38914,10 @@ paths:
       summary: Get the on-demand concurrency cap
       tags:
       - Synthetics
+      x-permission:
+        operator: OR
+        permissions:
+        - billing_read
     post:
       description: Save new value for on-demand concurrency cap.
       operationId: SetOnDemandConcurrencyCap
@@ -37402,6 +38941,10 @@ paths:
       tags:
       - Synthetics
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - billing_edit
   /api/v2/team:
     get:
       description: 'Get all teams.
@@ -37472,6 +39015,10 @@ paths:
         limitParam: page[size]
         pageParam: page[number]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     post:
       description: 'Create a new team.
 
@@ -37510,6 +39057,11 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: AND
+        permissions:
+        - teams_read
+        - teams_manage
   /api/v2/team/{team_id}:
     delete:
       description: Remove a team using the team's `id`.
@@ -37543,6 +39095,11 @@ paths:
       summary: Remove a team
       tags:
       - Teams
+      x-permission:
+        operator: AND
+        permissions:
+        - teams_read
+        - teams_manage
     get:
       description: Get a single team using the team's `id`.
       operationId: GetTeam
@@ -37578,6 +39135,10 @@ paths:
       summary: Get a team
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     patch:
       description: 'Update a team using the team''s `id`.
 
@@ -37636,6 +39197,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/links:
     get:
       description: Get all links for a given team.
@@ -37672,6 +39237,10 @@ paths:
       summary: Get links for a team
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     post:
       description: Add a new link to a team.
       operationId: CreateTeamLink
@@ -37720,6 +39289,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/links/{link_id}:
     delete:
       description: Remove a link from a team.
@@ -37758,6 +39331,10 @@ paths:
       summary: Remove a team link
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     get:
       description: Get a single link for a team.
       operationId: GetTeamLink
@@ -37799,6 +39376,10 @@ paths:
       summary: Get a team link
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     patch:
       description: Update a team link.
       operationId: UpdateTeamLink
@@ -37847,6 +39428,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/memberships:
     get:
       description: Get a paginated list of members for a team
@@ -37901,6 +39486,10 @@ paths:
         limitParam: page[size]
         pageParam: page[number]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     post:
       description: Add a user to a team.
       operationId: CreateTeamMembership
@@ -37949,6 +39538,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/memberships/{user_id}:
     delete:
       description: Remove a user from a team.
@@ -37987,6 +39580,10 @@ paths:
       summary: Remove a user from a team
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
     patch:
       description: Update a user's membership attributes on a team.
       operationId: UpdateTeamMembership
@@ -38035,6 +39632,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/permission-settings:
     get:
       description: Get all permission settings for a given team.
@@ -38071,6 +39672,10 @@ paths:
       summary: Get permission settings for a team
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/team/{team_id}/permission-settings/{action}:
     put:
       description: Update a team permission setting for a given team.
@@ -38120,6 +39725,10 @@ paths:
       tags:
       - Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/teams:
     get:
       deprecated: true
@@ -38157,6 +39766,10 @@ paths:
       summary: Get a list of all incident teams
       tags:
       - Incident Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     post:
       deprecated: true
@@ -38195,6 +39808,10 @@ paths:
       tags:
       - Incident Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
   /api/v2/teams/{team_id}:
     delete:
@@ -38224,6 +39841,10 @@ paths:
       summary: Delete an existing incident team
       tags:
       - Incident Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     get:
       deprecated: true
@@ -38260,6 +39881,10 @@ paths:
       summary: Get details of an incident team
       tags:
       - Incident Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_read
       x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     patch:
       deprecated: true
@@ -38301,6 +39926,10 @@ paths:
       tags:
       - Incident Teams
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
   /api/v2/usage/application_security:
     get:
@@ -38362,6 +39991,10 @@ paths:
       summary: Get hourly usage for application security
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/cost_by_org:
     get:
       deprecated: true
@@ -38429,6 +40062,10 @@ paths:
       summary: Get cost across multi-org account
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/estimated_cost:
     get:
       description: 'Get estimated cost across multi-org and single root-org accounts.
@@ -38529,6 +40166,10 @@ paths:
       summary: Get estimated cost across your account
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/historical_cost:
     get:
       description: 'Get historical cost across multi-org and single root-org accounts.
@@ -38606,6 +40247,10 @@ paths:
       summary: Get historical cost across your account
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/hourly_usage:
     get:
       description: Get hourly usage by product family.
@@ -38631,6 +40276,7 @@ paths:
           families are `all`, `analyzed_logs`,
 
           `application_security`, `audit_trail`, `serverless`, `ci_app`, `cloud_cost_management`,
+          `cloud_siem`,
 
           `csm_container_enterprise`, `csm_host_enterprise`, `cspm`, `custom_events`,
           `cws`, `dbm`, `error_tracking`,
@@ -38638,14 +40284,16 @@ paths:
           `fargate`, `infra_hosts`, `incident_management`, `indexed_logs`, `indexed_spans`,
           `ingested_spans`, `iot`,
 
-          `lambda_traced_invocations`, `logs`, `network_flows`, `network_hosts`, `netflow_monitoring`,
+          `lambda_traced_invocations`, `logs`, `network_flows`, `network_hosts`, `network_monitoring`,
           `observability_pipelines`,
 
           `online_archive`, `profiling`, `rum`, `rum_browser_sessions`, `rum_mobile_sessions`,
           `sds`, `snmp`,
 
           `synthetics_api`, `synthetics_browser`, `synthetics_mobile`, `synthetics_parallel_testing`,
-          and `timeseries`.
+          `timeseries`, `vuln_management`,
+
+          and `workflow_executions`.
 
           The following product family has been **deprecated**: `audit_logs`.'
         in: query
@@ -38740,6 +40388,10 @@ paths:
       summary: Get hourly usage by product family
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/lambda_traced_invocations:
     get:
       deprecated: true
@@ -38800,6 +40452,10 @@ paths:
       summary: Get hourly usage for Lambda traced invocations
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/observability_pipelines:
     get:
       deprecated: true
@@ -38860,6 +40516,10 @@ paths:
       summary: Get hourly usage for observability pipelines
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/usage/projected_cost:
     get:
       description: 'Get projected cost across multi-org and single root-org accounts.
@@ -38921,6 +40581,10 @@ paths:
       summary: Get projected cost across your account
       tags:
       - Usage Metering
+      x-permission:
+        operator: OR
+        permissions:
+        - usage_read
   /api/v2/user_invitations:
     post:
       description: Sends emails to one or more users inviting them to join the organization.
@@ -38961,6 +40625,10 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_invite
   /api/v2/user_invitations/{user_invitation_uuid}:
     get:
       description: Returns a single user invitation by its UUID.
@@ -39003,6 +40671,10 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_invite
   /api/v2/users:
     get:
       description: 'Get the list of all users in the organization. This list includes
@@ -39084,6 +40756,10 @@ paths:
         limitParam: page[size]
         pageParam: page[number]
         resultsPath: data
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_read
     post:
       description: Create a user for your organization.
       operationId: CreateUser
@@ -39123,6 +40799,10 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_invite
   /api/v2/users/{user_id}:
     delete:
       description: 'Disable a user. Can only be used with an application key belonging
@@ -39157,6 +40837,11 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
+        - service_account_write
     get:
       description: "Get a user in the organization specified by the user\u2019s `user_id`."
       operationId: GetUser
@@ -39192,6 +40877,10 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_read
     patch:
       description: 'Edit a user. Can only be used with an application key belonging
 
@@ -39247,6 +40936,11 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_manage
+        - service_account_write
   /api/v2/users/{user_id}/orgs:
     get:
       description: 'Get a user organization. Returns the user information and all
@@ -39285,6 +40979,9 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OPEN
+        permissions: []
   /api/v2/users/{user_id}/permissions:
     get:
       description: "Get a user permission set. Returns a list of the user\u2019s permissions\ngranted
@@ -39322,6 +41019,10 @@ paths:
       tags:
       - Users
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - user_access_read
   /api/v2/users/{user_uuid}/memberships:
     get:
       description: Get a list of memberships for a user
@@ -39356,6 +41057,10 @@ paths:
       summary: Get user memberships
       tags:
       - Teams
+      x-permission:
+        operator: OR
+        permissions:
+        - teams_read
   /api/v2/workflows/{workflow_id}/instances:
     get:
       description: List all instances of a given workflow. This API requires an application
@@ -39386,6 +41091,10 @@ paths:
       summary: List workflow instances
       tags:
       - Workflow Automation
+      x-permission:
+        operator: OR
+        permissions:
+        - workflows_read
     post:
       description: Execute the given workflow. This API requires an application key
         scoped with the workflows_run permission.
@@ -39415,6 +41124,10 @@ paths:
       tags:
       - Workflow Automation
       x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - workflows_run
   /api/v2/workflows/{workflow_id}/instances/{instance_id}:
     get:
       description: Get a specific execution of a given workflow. This API requires
@@ -39446,6 +41159,10 @@ paths:
       summary: Get a workflow instance
       tags:
       - Workflow Automation
+      x-permission:
+        operator: OR
+        permissions:
+        - workflows_read
   /api/v2/workflows/{workflow_id}/instances/{instance_id}/cancel:
     put:
       description: Cancels a specific execution of a given workflow. This API requires
@@ -39472,6 +41189,10 @@ paths:
       summary: Cancel a workflow instance
       tags:
       - Workflow Automation
+      x-permission:
+        operator: OR
+        permissions:
+        - workflows_run
 security:
 - apiKeyAuth: []
   appKeyAuth: []
@@ -39681,6 +41402,15 @@ tags:
     Tags for Metrics` permission.\n\nSee the [Metrics page](https://docs.datadoghq.com/metrics/)
     for more information."
   name: Metrics
+- description: 'Configure your [Datadog Microsoft Teams integration](https://docs.datadoghq.com/integrations/microsoft_teams/)
+
+    directly through the Datadog API. Note: These endpoints do not support legacy
+    connector handles.'
+  externalDocs:
+    description: For more information about the Datadog Microsoft Teams integration,
+      see the integration page.
+    url: https://docs.datadoghq.com/integrations/microsoft_teams/
+  name: Microsoft Teams Integration
 - description: '[Monitors](https://docs.datadoghq.com/monitors) allow you to watch
     a metric or check that you care about and