google-api-client 0.43.0 → 0.45.1

data/generated/google/apis/cloudfunctions_v1/representations.rb

@@ -231,6 +231,7 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :available_memory_mb, as: 'availableMemoryMb'
+          hash :build_environment_variables, as: 'buildEnvironmentVariables'
           property :build_id, as: 'buildId'
           property :description, as: 'description'
           property :entry_point, as: 'entryPoint'

data/generated/google/apis/cloudfunctions_v1/service.rb

@@ -47,9 +47,8 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Gets the latest state of a long-running operation.  Clients can use this
-        # method to poll the operation result at intervals as recommended by the API
-        # service.
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
         # @param [String] name
         #   The name of the operation resource.
         # @param [String] fields
@@ -79,30 +78,28 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists operations that match the specified filter in the request. If the
-        # server doesn't support this method, it returns `UNIMPLEMENTED`.
-        # NOTE: the `name` binding allows API services to override the binding
-        # to use different resource name schemes, such as `users/*/operations`. To
-        # override the binding, API services can add a binding such as
-        # `"/v1/`name=users/*`/operations"` to their service configuration.
-        # For backwards compatibility, the default name includes the operations
-        # collection id, however overriding users must ensure the name binding
-        # is the parent resource, without the operations collection id.
+        # Lists operations that match the specified filter in the request. If the server
+        # doesn't support this method, it returns `UNIMPLEMENTED`. NOTE: the `name`
+        # binding allows API services to override the binding to use different resource
+        # name schemes, such as `users/*/operations`. To override the binding, API
+        # services can add a binding such as `"/v1/`name=users/*`/operations"` to their
+        # service configuration. For backwards compatibility, the default name includes
+        # the operations collection id, however overriding users must ensure the name
+        # binding is the parent resource, without the operations collection id.
         # @param [String] filter
-        #   Required. A filter for matching the requested operations.<br><br> The
-        #   supported formats of <b>filter</b> are:<br> To query for a specific function: <
-        #   code>project:*,location:*,function:*</code><br> To query for all of the latest
-        #   operations for a project: <code>project:*,latest:true</code>
+        #   Required. A filter for matching the requested operations. The supported
+        #   formats of *filter* are: To query for a specific function: project:*,location:*
+        #   ,function:* To query for all of the latest operations for a project: project:*,
+        #   latest:true
         # @param [String] name
         #   Must not be set.
         # @param [Fixnum] page_size
-        #   The maximum number of records that should be returned.<br> Requested page size
-        #   cannot exceed 100. If not set, the default page size is 100.<br><br>
-        #   Pagination is only supported when querying for a specific function.
+        #   The maximum number of records that should be returned. Requested page size
+        #   cannot exceed 100. If not set, the default page size is 100. Pagination is
+        #   only supported when querying for a specific function.
         # @param [String] page_token
         #   Token identifying which result to start with, which is returned by a previous
-        #   list call.<br><br> Pagination is only supported when querying for a specific
-        #   function.
+        #   list call. Pagination is only supported when querying for a specific function.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -173,9 +170,9 @@ module Google
         end
         
         # Synchronously invokes a deployed Cloud Function. To be used for testing
-        # purposes as very limited traffic is allowed. For more information on
-        # the actual limits, refer to
-        # [Rate Limits](https://cloud.google.com/functions/quotas#rate_limits).
+        # purposes as very limited traffic is allowed. For more information on the
+        # actual limits, refer to [Rate Limits](https://cloud.google.com/functions/
+        # quotas#rate_limits).
         # @param [String] name
         #   Required. The name of the function to be called.
         # @param [Google::Apis::CloudfunctionsV1::CallFunctionRequest] call_function_request_object
@@ -209,12 +206,11 @@ module Google
         end
         
         # Creates a new function. If a function with the given name already exists in
-        # the specified project, the long running operation will return
-        # `ALREADY_EXISTS` error.
+        # the specified project, the long running operation will return `ALREADY_EXISTS`
+        # error.
         # @param [String] location
         #   Required. The project and location in which the function should be created,
-        #   specified
-        #   in the format `projects/*/locations/*`
+        #   specified in the format `projects/*/locations/*`
         # @param [Google::Apis::CloudfunctionsV1::CloudFunction] cloud_function_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -246,8 +242,8 @@ module Google
         end
         
         # Deletes a function with the given name from the specified project. If the
-        # given function is used by some trigger, the trigger will be updated to
-        # remove this function.
+        # given function is used by some trigger, the trigger will be updated to remove
+        # this function.
         # @param [String] name
         #   Required. The name of the function which should be deleted.
         # @param [String] fields
@@ -277,14 +273,13 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns a signed URL for downloading deployed function source code.
-        # The URL is only valid for a limited period and should be used within
-        # minutes after generation.
-        # For more information about the signed URL usage see:
-        # https://cloud.google.com/storage/docs/access-control/signed-urls
+        # Returns a signed URL for downloading deployed function source code. The URL is
+        # only valid for a limited period and should be used within minutes after
+        # generation. For more information about the signed URL usage see: https://cloud.
+        # google.com/storage/docs/access-control/signed-urls
         # @param [String] name
-        #   The name of function for which source code Google Cloud Storage signed
-        #   URL should be generated.
+        #   The name of function for which source code Google Cloud Storage signed URL
+        #   should be generated.
         # @param [Google::Apis::CloudfunctionsV1::GenerateDownloadUrlRequest] generate_download_url_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -315,28 +310,24 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns a signed URL for uploading a function source code.
-        # For more information about the signed URL usage see:
-        # https://cloud.google.com/storage/docs/access-control/signed-urls.
-        # Once the function source code upload is complete, the used signed
-        # URL should be provided in CreateFunction or UpdateFunction request
-        # as a reference to the function source code.
-        # When uploading source code to the generated signed URL, please follow
-        # these restrictions:
-        # * Source file type should be a zip file.
-        # * Source file size should not exceed 100MB limit.
-        # * No credentials should be attached - the signed URLs provide access to the
-        # target bucket using internal service identity; if credentials were
-        # attached, the identity from the credentials would be used, but that
-        # identity does not have permissions to upload files to the URL.
-        # When making a HTTP PUT request, these two headers need to be specified:
-        # * `content-type: application/zip`
-        # * `x-goog-content-length-range: 0,104857600`
-        # And this header SHOULD NOT be specified:
-        # * `Authorization: Bearer YOUR_TOKEN`
+        # Returns a signed URL for uploading a function source code. For more
+        # information about the signed URL usage see: https://cloud.google.com/storage/
+        # docs/access-control/signed-urls. Once the function source code upload is
+        # complete, the used signed URL should be provided in CreateFunction or
+        # UpdateFunction request as a reference to the function source code. When
+        # uploading source code to the generated signed URL, please follow these
+        # restrictions: * Source file type should be a zip file. * Source file size
+        # should not exceed 100MB limit. * No credentials should be attached - the
+        # signed URLs provide access to the target bucket using internal service
+        # identity; if credentials were attached, the identity from the credentials
+        # would be used, but that identity does not have permissions to upload files to
+        # the URL. When making a HTTP PUT request, these two headers need to be
+        # specified: * `content-type: application/zip` * `x-goog-content-length-range: 0,
+        # 104857600` And this header SHOULD NOT be specified: * `Authorization: Bearer
+        # YOUR_TOKEN`
         # @param [String] parent
-        #   The project and location in which the Google Cloud Storage signed URL
-        #   should be generated, specified in the format `projects/*/locations/*`.
+        #   The project and location in which the Google Cloud Storage signed URL should
+        #   be generated, specified in the format `projects/*/locations/*`.
         # @param [Google::Apis::CloudfunctionsV1::GenerateUploadUrlRequest] generate_upload_url_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -397,22 +388,19 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets the IAM access control policy for a function.
-        # Returns an empty policy if the function exists and does not have a policy
-        # set.
+        # Gets the IAM access control policy for a function. Returns an empty policy if
+        # the function exists and does not have a policy set.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Fixnum] options_requested_policy_version
-        #   Optional. The policy format version to be returned.
-        #   Valid values are 0, 1, and 3. Requests specifying an invalid value will be
-        #   rejected.
-        #   Requests for policies with any conditional bindings must specify version 3.
-        #   Policies without any conditional bindings may specify any valid value or
-        #   leave the field unset.
-        #   To learn which resources support conditions in their IAM policies, see the
-        #   [IAM
-        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+        #   Optional. The policy format version to be returned. Valid values are 0, 1, and
+        #   3. Requests specifying an invalid value will be rejected. Requests for
+        #   policies with any conditional bindings must specify version 3. Policies
+        #   without any conditional bindings may specify any valid value or leave the
+        #   field unset. To learn which resources support conditions in their IAM policies,
+        #   see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
+        #   resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -443,19 +431,18 @@ module Google
         
         # Returns a list of functions that belong to the requested project.
         # @param [String] parent
-        #   The project and location from which the function should be listed,
-        #   specified in the format `projects/*/locations/*`
-        #   If you want to list functions in all locations, use "-" in place of a
-        #   location. When listing functions in all locations, if one or more
-        #   location(s) are unreachable, the response will contain functions from all
-        #   reachable locations along with the names of any unreachable locations.
+        #   The project and location from which the function should be listed, specified
+        #   in the format `projects/*/locations/*` If you want to list functions in all
+        #   locations, use "-" in place of a location. When listing functions in all
+        #   locations, if one or more location(s) are unreachable, the response will
+        #   contain functions from all reachable locations along with the names of any
+        #   unreachable locations.
         # @param [Fixnum] page_size
         #   Maximum number of functions to return per call.
         # @param [String] page_token
-        #   The value returned by the last
-        #   `ListFunctionsResponse`; indicates that
-        #   this is a continuation of a prior `ListFunctions` call, and that the
-        #   system should return the next page of data.
+        #   The value returned by the last `ListFunctionsResponse`; indicates that this is
+        #   a continuation of a prior `ListFunctions` call, and that the system should
+        #   return the next page of data.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -487,8 +474,8 @@ module Google
         
         # Updates existing function.
         # @param [String] name
-        #   A user-defined name of the function. Function names must be unique
-        #   globally and match pattern `projects/*/locations/*/functions/*`
+        #   A user-defined name of the function. Function names must be unique globally
+        #   and match pattern `projects/*/locations/*/functions/*`
         # @param [Google::Apis::CloudfunctionsV1::CloudFunction] cloud_function_object
         # @param [String] update_mask
         #   Required list of fields to be updated in this request.
@@ -522,11 +509,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Sets the IAM access control policy on the specified function.
-        # Replaces any existing policy.
+        # Sets the IAM access control policy on the specified function. Replaces any
+        # existing policy.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy is being specified.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy is being specified. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::CloudfunctionsV1::SetIamPolicyRequest] set_iam_policy_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -557,13 +544,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Tests the specified permissions against the IAM access control policy
-        # for a function.
-        # If the function does not exist, this will return an empty set of
+        # Tests the specified permissions against the IAM access control policy for a
+        # function. If the function does not exist, this will return an empty set of
         # permissions, not a NOT_FOUND error.
         # @param [String] resource
-        #   REQUIRED: The resource for which the policy detail is being requested.
-        #   See the operation documentation for the appropriate value for this field.
+        #   REQUIRED: The resource for which the policy detail is being requested. See the
+        #   operation documentation for the appropriate value for this field.
         # @param [Google::Apis::CloudfunctionsV1::TestIamPermissionsRequest] test_iam_permissions_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/cloudidentity_v1.rb

@@ -25,7 +25,10 @@ module Google
     # @see https://cloud.google.com/identity/
     module CloudidentityV1
       VERSION = 'V1'
-      REVISION = '20200622'
+      REVISION = '20200919'
+
+      # See your device details
+      AUTH_CLOUD_IDENTITY_DEVICES_LOOKUP = 'https://www.googleapis.com/auth/cloud-identity.devices.lookup'
 
       # See, change, create, and delete any of the Cloud Identity Groups that you can access, including the members of each group
       AUTH_CLOUD_IDENTITY_GROUPS = 'https://www.googleapis.com/auth/cloud-identity.groups'

data/generated/google/apis/cloudidentity_v1/classes.rb

@@ -28,17 +28,16 @@ module Google
       class EntityKey
         include Google::Apis::Core::Hashable
       
-        # The ID of the entity within the given namespace. The ID must be unique
-        # within its namespace.
+        # The ID of the entity within the given namespace. The ID must be unique within
+        # its namespace.
         # Corresponds to the JSON property `id`
         # @return [String]
         attr_accessor :id
       
-        # Namespaces provide isolation for IDs, so an ID only needs to be unique
-        # within its namespace.
-        # Namespaces are currently only created as part of IdentitySource creation
-        # from Admin Console. A namespace `"identitysources/`identity_source_id`"` is
-        # created corresponding to every Identity Source `identity_source_id`.
+        # Namespaces provide isolation for IDs, so an ID only needs to be unique within
+        # its namespace. Namespaces are currently only created as part of IdentitySource
+        # creation from Admin Console. A namespace `"identitysources/`identity_source_id`
+        # "` is created corresponding to every Identity Source `identity_source_id`.
         # Corresponds to the JSON property `namespace`
         # @return [String]
         attr_accessor :namespace
@@ -54,12 +53,833 @@ module Google
         end
       end
       
+      # Resource representing the Android specific attributes of a Device.
+      class GoogleAppsCloudidentityDevicesV1AndroidAttributes
+        include Google::Apis::Core::Hashable
+      
+        # Whether applications from unknown sources can be installed on device.
+        # Corresponds to the JSON property `enabledUnknownSources`
+        # @return [Boolean]
+        attr_accessor :enabled_unknown_sources
+        alias_method :enabled_unknown_sources?, :enabled_unknown_sources
+      
+        # Whether this account is on an owner/primary profile. For phones, only true for
+        # owner profiles. Android 4+ devices can have secondary or restricted user
+        # profiles.
+        # Corresponds to the JSON property `ownerProfileAccount`
+        # @return [Boolean]
+        attr_accessor :owner_profile_account
+        alias_method :owner_profile_account?, :owner_profile_account
+      
+        # Ownership privileges on device.
+        # Corresponds to the JSON property `ownershipPrivilege`
+        # @return [String]
+        attr_accessor :ownership_privilege
+      
+        # Whether device supports Android work profiles. If false, this service will not
+        # block access to corp data even if an administrator turns on the "Enforce Work
+        # Profile" policy.
+        # Corresponds to the JSON property `supportsWorkProfile`
+        # @return [Boolean]
+        attr_accessor :supports_work_profile
+        alias_method :supports_work_profile?, :supports_work_profile
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enabled_unknown_sources = args[:enabled_unknown_sources] if args.key?(:enabled_unknown_sources)
+          @owner_profile_account = args[:owner_profile_account] if args.key?(:owner_profile_account)
+          @ownership_privilege = args[:ownership_privilege] if args.key?(:ownership_privilege)
+          @supports_work_profile = args[:supports_work_profile] if args.key?(:supports_work_profile)
+        end
+      end
+      
+      # Request message for approving the device to access user data.
+      class GoogleAppsCloudidentityDevicesV1ApproveDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for approving the device to access user data.
+      class GoogleAppsCloudidentityDevicesV1ApproveDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Request message for blocking account on device.
+      class GoogleAppsCloudidentityDevicesV1BlockDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for blocking the device from accessing user data.
+      class GoogleAppsCloudidentityDevicesV1BlockDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Request message for cancelling an unfinished device wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for cancelling an unfinished device wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceResponse
+        include Google::Apis::Core::Hashable
+      
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
+        # Corresponds to the JSON property `device`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1Device]
+        attr_accessor :device
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device = args[:device] if args.key?(:device)
+        end
+      end
+      
+      # Request message for cancelling an unfinished user account wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for cancelling an unfinished user account wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Represents the state associated with an API client calling the Devices API.
+      # Resource representing ClientState and supports updates from API users
+      class GoogleAppsCloudidentityDevicesV1ClientState
+        include Google::Apis::Core::Hashable
+      
+        # The caller can specify asset tags for this resource
+        # Corresponds to the JSON property `assetTags`
+        # @return [Array<String>]
+        attr_accessor :asset_tags
+      
+        # The compliance state of the resource as specified by the API client.
+        # Corresponds to the JSON property `complianceState`
+        # @return [String]
+        attr_accessor :compliance_state
+      
+        # Output only. The time the client state data was created.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # This field may be used to store a unique identifier for the API resource
+        # within which these CustomAttributes are a field.
+        # Corresponds to the JSON property `customId`
+        # @return [String]
+        attr_accessor :custom_id
+      
+        # The token that needs to be passed back for concurrency control in updates.
+        # Token needs to be passed back in UpdateRequest
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # The Health score of the resource. The Health score is the callers
+        # specification of the condition of the device from a usability point of view.
+        # For example, a third-party device management provider may specify a health
+        # score based on its compliance with organizational policies.
+        # Corresponds to the JSON property `healthScore`
+        # @return [String]
+        attr_accessor :health_score
+      
+        # The map of key-value attributes stored by callers specific to a device. The
+        # total serialized length of this map may not exceed 10KB. No limit is placed on
+        # the number of attributes in a map.
+        # Corresponds to the JSON property `keyValuePairs`
+        # @return [Hash<String,Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1CustomAttributeValue>]
+        attr_accessor :key_value_pairs
+      
+        # Output only. The time the client state data was last updated.
+        # Corresponds to the JSON property `lastUpdateTime`
+        # @return [String]
+        attr_accessor :last_update_time
+      
+        # The management state of the resource as specified by the API client.
+        # Corresponds to the JSON property `managed`
+        # @return [String]
+        attr_accessor :managed
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the ClientState in format: `devices/`device_id`/deviceUsers/
+        # `device_user_id`/clientState/`partner_id``, where partner_id corresponds to
+        # the partner storing the data. For partners belonging to the "BeyondCorp
+        # Alliance", this is the partner ID specified to you by Google. For all other
+        # callers, this is a string of the form: ``customer_id`-suffix`, where `
+        # customer_id` is your customer ID. The *suffix* is any string the caller
+        # specifies. This string will be displayed verbatim in the administration
+        # console. This suffix is used in setting up Custom Access Levels in Context-
+        # Aware Access. Your organization's customer ID can be obtained from the URL: `
+        # GET https://www.googleapis.com/admin/directory/v1/customers/my_customer` The `
+        # id` field in the response contains the customer ID starting with the letter 'C'
+        # . The customer ID to be used in this API is the string after the letter 'C' (
+        # not including 'C')
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The owner of the ClientState
+        # Corresponds to the JSON property `ownerType`
+        # @return [String]
+        attr_accessor :owner_type
+      
+        # A descriptive cause of the health score.
+        # Corresponds to the JSON property `scoreReason`
+        # @return [String]
+        attr_accessor :score_reason
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @asset_tags = args[:asset_tags] if args.key?(:asset_tags)
+          @compliance_state = args[:compliance_state] if args.key?(:compliance_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @custom_id = args[:custom_id] if args.key?(:custom_id)
+          @etag = args[:etag] if args.key?(:etag)
+          @health_score = args[:health_score] if args.key?(:health_score)
+          @key_value_pairs = args[:key_value_pairs] if args.key?(:key_value_pairs)
+          @last_update_time = args[:last_update_time] if args.key?(:last_update_time)
+          @managed = args[:managed] if args.key?(:managed)
+          @name = args[:name] if args.key?(:name)
+          @owner_type = args[:owner_type] if args.key?(:owner_type)
+          @score_reason = args[:score_reason] if args.key?(:score_reason)
+        end
+      end
+      
+      # Additional custom attribute values may be one of these types
+      class GoogleAppsCloudidentityDevicesV1CustomAttributeValue
+        include Google::Apis::Core::Hashable
+      
+        # Represents a boolean value.
+        # Corresponds to the JSON property `boolValue`
+        # @return [Boolean]
+        attr_accessor :bool_value
+        alias_method :bool_value?, :bool_value
+      
+        # Represents a double value.
+        # Corresponds to the JSON property `numberValue`
+        # @return [Float]
+        attr_accessor :number_value
+      
+        # Represents a string value.
+        # Corresponds to the JSON property `stringValue`
+        # @return [String]
+        attr_accessor :string_value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bool_value = args[:bool_value] if args.key?(:bool_value)
+          @number_value = args[:number_value] if args.key?(:number_value)
+          @string_value = args[:string_value] if args.key?(:string_value)
+        end
+      end
+      
+      # A Device within the Cloud Identity Devices API. Represents a Device known to
+      # Google Cloud, independent of the device ownership, type, and whether it is
+      # assigned or in use by a user.
+      class GoogleAppsCloudidentityDevicesV1Device
+        include Google::Apis::Core::Hashable
+      
+        # Resource representing the Android specific attributes of a Device.
+        # Corresponds to the JSON property `androidSpecificAttributes`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1AndroidAttributes]
+        attr_accessor :android_specific_attributes
+      
+        # Asset tag of the device.
+        # Corresponds to the JSON property `assetTag`
+        # @return [String]
+        attr_accessor :asset_tag
+      
+        # Output only. Baseband version of the device.
+        # Corresponds to the JSON property `basebandVersion`
+        # @return [String]
+        attr_accessor :baseband_version
+      
+        # Output only. Device bootloader version. Example: 0.6.7.
+        # Corresponds to the JSON property `bootloaderVersion`
+        # @return [String]
+        attr_accessor :bootloader_version
+      
+        # Output only. Device brand. Example: Samsung.
+        # Corresponds to the JSON property `brand`
+        # @return [String]
+        attr_accessor :brand
+      
+        # Output only. Build number of the device.
+        # Corresponds to the JSON property `buildNumber`
+        # @return [String]
+        attr_accessor :build_number
+      
+        # Output only. Represents whether the Device is compromised.
+        # Corresponds to the JSON property `compromisedState`
+        # @return [String]
+        attr_accessor :compromised_state
+      
+        # Output only. When the Company-Owned device was imported. This field is empty
+        # for BYOD devices.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. Type of device.
+        # Corresponds to the JSON property `deviceType`
+        # @return [String]
+        attr_accessor :device_type
+      
+        # Output only. Whether developer options is enabled on device.
+        # Corresponds to the JSON property `enabledDeveloperOptions`
+        # @return [Boolean]
+        attr_accessor :enabled_developer_options
+        alias_method :enabled_developer_options?, :enabled_developer_options
+      
+        # Output only. Whether USB debugging is enabled on device.
+        # Corresponds to the JSON property `enabledUsbDebugging`
+        # @return [Boolean]
+        attr_accessor :enabled_usb_debugging
+        alias_method :enabled_usb_debugging?, :enabled_usb_debugging
+      
+        # Output only. Device encryption state.
+        # Corresponds to the JSON property `encryptionState`
+        # @return [String]
+        attr_accessor :encryption_state
+      
+        # Output only. IMEI number of device if GSM device; empty otherwise.
+        # Corresponds to the JSON property `imei`
+        # @return [String]
+        attr_accessor :imei
+      
+        # Output only. Kernel version of the device.
+        # Corresponds to the JSON property `kernelVersion`
+        # @return [String]
+        attr_accessor :kernel_version
+      
+        # Most recent time when device synced with this service.
+        # Corresponds to the JSON property `lastSyncTime`
+        # @return [String]
+        attr_accessor :last_sync_time
+      
+        # Output only. Management state of the device
+        # Corresponds to the JSON property `managementState`
+        # @return [String]
+        attr_accessor :management_state
+      
+        # Output only. Device manufacturer. Example: Motorola.
+        # Corresponds to the JSON property `manufacturer`
+        # @return [String]
+        attr_accessor :manufacturer
+      
+        # Output only. MEID number of device if CDMA device; empty otherwise.
+        # Corresponds to the JSON property `meid`
+        # @return [String]
+        attr_accessor :meid
+      
+        # Output only. Model name of device. Example: Pixel 3.
+        # Corresponds to the JSON property `model`
+        # @return [String]
+        attr_accessor :model
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the Device in format: `devices/`device_id``, where
+        # device_id is the unique id assigned to the Device.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. Mobile or network operator of device, if available.
+        # Corresponds to the JSON property `networkOperator`
+        # @return [String]
+        attr_accessor :network_operator
+      
+        # Output only. OS version of the device. Example: Android 8.1.0.
+        # Corresponds to the JSON property `osVersion`
+        # @return [String]
+        attr_accessor :os_version
+      
+        # Output only. Domain name for Google accounts on device. Type for other
+        # accounts on device. On Android, will only be populated if |ownership_privilege|
+        # is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in
+        # to the device policy app if that account's domain has only one account.
+        # Examples: "com.example", "xyz.com".
+        # Corresponds to the JSON property `otherAccounts`
+        # @return [Array<String>]
+        attr_accessor :other_accounts
+      
+        # Output only. Whether the device is owned by the company or an individual
+        # Corresponds to the JSON property `ownerType`
+        # @return [String]
+        attr_accessor :owner_type
+      
+        # Output only. OS release version. Example: 6.0.
+        # Corresponds to the JSON property `releaseVersion`
+        # @return [String]
+        attr_accessor :release_version
+      
+        # Output only. OS security patch update time on device.
+        # Corresponds to the JSON property `securityPatchTime`
+        # @return [String]
+        attr_accessor :security_patch_time
+      
+        # Serial Number of device. Example: HT82V1A01076.
+        # Corresponds to the JSON property `serialNumber`
+        # @return [String]
+        attr_accessor :serial_number
+      
+        # WiFi MAC addresses of device.
+        # Corresponds to the JSON property `wifiMacAddresses`
+        # @return [Array<String>]
+        attr_accessor :wifi_mac_addresses
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @android_specific_attributes = args[:android_specific_attributes] if args.key?(:android_specific_attributes)
+          @asset_tag = args[:asset_tag] if args.key?(:asset_tag)
+          @baseband_version = args[:baseband_version] if args.key?(:baseband_version)
+          @bootloader_version = args[:bootloader_version] if args.key?(:bootloader_version)
+          @brand = args[:brand] if args.key?(:brand)
+          @build_number = args[:build_number] if args.key?(:build_number)
+          @compromised_state = args[:compromised_state] if args.key?(:compromised_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @device_type = args[:device_type] if args.key?(:device_type)
+          @enabled_developer_options = args[:enabled_developer_options] if args.key?(:enabled_developer_options)
+          @enabled_usb_debugging = args[:enabled_usb_debugging] if args.key?(:enabled_usb_debugging)
+          @encryption_state = args[:encryption_state] if args.key?(:encryption_state)
+          @imei = args[:imei] if args.key?(:imei)
+          @kernel_version = args[:kernel_version] if args.key?(:kernel_version)
+          @last_sync_time = args[:last_sync_time] if args.key?(:last_sync_time)
+          @management_state = args[:management_state] if args.key?(:management_state)
+          @manufacturer = args[:manufacturer] if args.key?(:manufacturer)
+          @meid = args[:meid] if args.key?(:meid)
+          @model = args[:model] if args.key?(:model)
+          @name = args[:name] if args.key?(:name)
+          @network_operator = args[:network_operator] if args.key?(:network_operator)
+          @os_version = args[:os_version] if args.key?(:os_version)
+          @other_accounts = args[:other_accounts] if args.key?(:other_accounts)
+          @owner_type = args[:owner_type] if args.key?(:owner_type)
+          @release_version = args[:release_version] if args.key?(:release_version)
+          @security_patch_time = args[:security_patch_time] if args.key?(:security_patch_time)
+          @serial_number = args[:serial_number] if args.key?(:serial_number)
+          @wifi_mac_addresses = args[:wifi_mac_addresses] if args.key?(:wifi_mac_addresses)
+        end
+      end
+      
+      # Represents a user's use of a Device in the Cloud Identity Devices API. A
+      # DeviceUser is a resource representing a user's use of a Device
+      class GoogleAppsCloudidentityDevicesV1DeviceUser
+        include Google::Apis::Core::Hashable
+      
+        # Compromised State of the DeviceUser object
+        # Corresponds to the JSON property `compromisedState`
+        # @return [String]
+        attr_accessor :compromised_state
+      
+        # When the user first signed in to the device
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. Most recent time when user registered with this service.
+        # Corresponds to the JSON property `firstSyncTime`
+        # @return [String]
+        attr_accessor :first_sync_time
+      
+        # Output only. Default locale used on device, in IETF BCP-47 format.
+        # Corresponds to the JSON property `languageCode`
+        # @return [String]
+        attr_accessor :language_code
+      
+        # Output only. Last time when user synced with policies.
+        # Corresponds to the JSON property `lastSyncTime`
+        # @return [String]
+        attr_accessor :last_sync_time
+      
+        # Output only. Management state of the user on the device.
+        # Corresponds to the JSON property `managementState`
+        # @return [String]
+        attr_accessor :management_state
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the DeviceUser in format: `devices/`device_id`/deviceUsers/`
+        # user_id``, where user_id is the ID of the user associated with the user
+        # session.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Password state of the DeviceUser object
+        # Corresponds to the JSON property `passwordState`
+        # @return [String]
+        attr_accessor :password_state
+      
+        # Output only. User agent on the device for this specific user
+        # Corresponds to the JSON property `userAgent`
+        # @return [String]
+        attr_accessor :user_agent
+      
+        # Email address of the user registered on the device.
+        # Corresponds to the JSON property `userEmail`
+        # @return [String]
+        attr_accessor :user_email
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @compromised_state = args[:compromised_state] if args.key?(:compromised_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @first_sync_time = args[:first_sync_time] if args.key?(:first_sync_time)
+          @language_code = args[:language_code] if args.key?(:language_code)
+          @last_sync_time = args[:last_sync_time] if args.key?(:last_sync_time)
+          @management_state = args[:management_state] if args.key?(:management_state)
+          @name = args[:name] if args.key?(:name)
+          @password_state = args[:password_state] if args.key?(:password_state)
+          @user_agent = args[:user_agent] if args.key?(:user_agent)
+          @user_email = args[:user_email] if args.key?(:user_email)
+        end
+      end
+      
+      # Response message that is returned in ListClientStates.
+      class GoogleAppsCloudidentityDevicesV1ListClientStatesResponse
+        include Google::Apis::Core::Hashable
+      
+        # Client states meeting the list restrictions.
+        # Corresponds to the JSON property `clientStates`
+        # @return [Array<Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1ClientState>]
+        attr_accessor :client_states
+      
+        # Token to retrieve the next page of results. Empty if there are no more results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @client_states = args[:client_states] if args.key?(:client_states)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # Response message that is returned from the ListDeviceUsers method.
+      class GoogleAppsCloudidentityDevicesV1ListDeviceUsersResponse
+        include Google::Apis::Core::Hashable
+      
+        # Devices meeting the list restrictions.
+        # Corresponds to the JSON property `deviceUsers`
+        # @return [Array<Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1DeviceUser>]
+        attr_accessor :device_users
+      
+        # Token to retrieve the next page of results. Empty if there are no more results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_users = args[:device_users] if args.key?(:device_users)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # Response message that is returned from the ListDevices method.
+      class GoogleAppsCloudidentityDevicesV1ListDevicesResponse
+        include Google::Apis::Core::Hashable
+      
+        # Devices meeting the list restrictions.
+        # Corresponds to the JSON property `devices`
+        # @return [Array<Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1Device>]
+        attr_accessor :devices
+      
+        # Token to retrieve the next page of results. Empty if there are no more results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @devices = args[:devices] if args.key?(:devices)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # Response containing resource names of the DeviceUsers associated with the
+      # caller's credentials.
+      class GoogleAppsCloudidentityDevicesV1LookupSelfDeviceUsersResponse
+        include Google::Apis::Core::Hashable
+      
+        # The obfuscated customer Id that may be passed back to other Devices API
+        # methods such as List, Get, etc.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        # [Resource names](https://cloud.google.com/apis/design/resource_names) of the
+        # DeviceUsers in the format: `devices/`device_id`/deviceUsers/`user_resource_id``
+        # , where device_id is the unique ID assigned to a Device and user_resource_id
+        # is the unique user ID
+        # Corresponds to the JSON property `names`
+        # @return [Array<String>]
+        attr_accessor :names
+      
+        # Token to retrieve the next page of results. Empty if there are no more results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+          @names = args[:names] if args.key?(:names)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # Request message for wiping all data on the device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for wiping all data on the device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceResponse
+        include Google::Apis::Core::Hashable
+      
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
+        # Corresponds to the JSON property `device`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1Device]
+        attr_accessor :device
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device = args[:device] if args.key?(:device)
+        end
+      end
+      
+      # Request message for starting an account wipe on device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
+      # Response message for wiping the user's account from the device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
       # Resource representing a Group.
       class Group
         include Google::Apis::Core::Hashable
       
-        # Output only. The time when the Group was created.
-        # Output only.
+        # Output only. The time when the Group was created. Output only.
         # Corresponds to the JSON property `createTime`
         # @return [String]
         attr_accessor :create_time
@@ -84,32 +904,29 @@ module Google
         # @return [Google::Apis::CloudidentityV1::EntityKey]
         attr_accessor :group_key
       
-        # Required. `Required`. Labels for Group resource.
-        # For creating Groups under a namespace, set label key to
-        # 'labels/system/groups/external' and label value as empty.
+        # Required. `Required`. Labels for Group resource. For creating Groups under a
+        # namespace, set label key to 'labels/system/groups/external' and label value as
+        # empty.
         # Corresponds to the JSON property `labels`
         # @return [Hash<String,String>]
         attr_accessor :labels
       
         # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names) of the
-        # Group in the format: `groups/`group_id``, where group_id is the unique ID
-        # assigned to the Group.
-        # Must be left blank while creating a Group.
+        # resource_names) of the Group in the format: `groups/`group_id``, where
+        # group_id is the unique ID assigned to the Group. Must be left blank while
+        # creating a Group.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
         # Required. Immutable. The entity under which this Group resides in Cloud
-        # Identity resource
-        # hierarchy. Must be set when creating a Group, read-only afterwards.
-        # Currently allowed types: `identitysources`.
+        # Identity resource hierarchy. Must be set when creating a Group, read-only
+        # afterwards. Currently allowed types: `identitysources`.
         # Corresponds to the JSON property `parent`
         # @return [String]
         attr_accessor :parent
       
-        # Output only. The time when the Group was last updated.
-        # Output only.
+        # Output only. The time when the Group was last updated. Output only.
         # Corresponds to the JSON property `updateTime`
         # @return [String]
         attr_accessor :update_time
@@ -135,14 +952,13 @@ module Google
       class ListGroupsResponse
         include Google::Apis::Core::Hashable
       
-        # Groups returned in response to list request.
-        # The results are not sorted.
+        # Groups returned in response to list request. The results are not sorted.
         # Corresponds to the JSON property `groups`
         # @return [Array<Google::Apis::CloudidentityV1::Group>]
         attr_accessor :groups
       
-        # Token to retrieve the next page of results, or empty if there are no
-        # more results available for listing.
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -167,8 +983,8 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1::Membership>]
         attr_accessor :memberships
       
-        # Token to retrieve the next page of results, or empty if there are no
-        # more results available for listing.
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -210,10 +1026,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # [Resource name](https://cloud.google.com/apis/design/resource_names) of the
-        # Membership being looked up.
-        # Format: `groups/`group_id`/memberships/`member_id``, where `group_id` is
-        # the unique ID assigned to the Group to which Membership belongs to, and
-        # `member_id` is the unique ID assigned to the member.
+        # Membership being looked up. Format: `groups/`group_id`/memberships/`member_id``
+        # , where `group_id` is the unique ID assigned to the Group to which Membership
+        # belongs to, and `member_id` is the unique ID assigned to the member.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -238,11 +1053,10 @@ module Google
         attr_accessor :create_time
       
         # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names) of the
-        # Membership in the format: `groups/`group_id`/memberships/`member_id``,
-        # where group_id is the unique ID assigned to the Group to which Membership
-        # belongs to, and member_id is the unique ID assigned to the member
-        # Must be left blank while creating a Membership.
+        # resource_names) of the Membership in the format: `groups/`group_id`/
+        # memberships/`member_id``, where group_id is the unique ID assigned to the
+        # Group to which Membership belongs to, and member_id is the unique ID assigned
+        # to the member Must be left blank while creating a Membership.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -254,12 +1068,17 @@ module Google
         # @return [Google::Apis::CloudidentityV1::EntityKey]
         attr_accessor :preferred_member_key
       
-        # Roles for a member within the Group.
-        # Currently supported MembershipRoles: `"MEMBER"`.
+        # Roles for a member within the Group. Currently supported MembershipRoles: `"
+        # MEMBER"`.
         # Corresponds to the JSON property `roles`
         # @return [Array<Google::Apis::CloudidentityV1::MembershipRole>]
         attr_accessor :roles
       
+        # Output only. The type of the membership.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
         # Output only. Last updated timestamp of the Membership. Output only.
         # Corresponds to the JSON property `updateTime`
         # @return [String]
@@ -275,6 +1094,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @preferred_member_key = args[:preferred_member_key] if args.key?(:preferred_member_key)
           @roles = args[:roles] if args.key?(:roles)
+          @type = args[:type] if args.key?(:type)
           @update_time = args[:update_time] if args.key?(:update_time)
         end
       end
@@ -283,8 +1103,8 @@ module Google
       class MembershipRole
         include Google::Apis::Core::Hashable
       
-        # MembershipRole in string format.
-        # Currently supported MembershipRoles: `"MEMBER"`.
+        # MembershipRole in string format. Currently supported MembershipRoles: `"MEMBER"
+        # `.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -299,52 +1119,100 @@ module Google
         end
       end
       
+      # The request message for MembershipsService.ModifyMembershipRoles.
+      class ModifyMembershipRolesRequest
+        include Google::Apis::Core::Hashable
+      
+        # The `MembershipRole`s to be added. Adding or removing roles in the same
+        # request as updating roles is not supported. Must not be set if `
+        # update_roles_params` is set.
+        # Corresponds to the JSON property `addRoles`
+        # @return [Array<Google::Apis::CloudidentityV1::MembershipRole>]
+        attr_accessor :add_roles
+      
+        # The `name`s of the `MembershipRole`s to be removed. Adding or removing roles
+        # in the same request as updating roles is not supported. It is not possible to
+        # remove the `MEMBER` `MembershipRole`. If you wish to delete a `Membership`,
+        # call MembershipsService.DeleteMembership instead. Must not contain `MEMBER`.
+        # Must not be set if `update_roles_params` is set.
+        # Corresponds to the JSON property `removeRoles`
+        # @return [Array<String>]
+        attr_accessor :remove_roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @add_roles = args[:add_roles] if args.key?(:add_roles)
+          @remove_roles = args[:remove_roles] if args.key?(:remove_roles)
+        end
+      end
+      
+      # The response message for MembershipsService.ModifyMembershipRoles.
+      class ModifyMembershipRolesResponse
+        include Google::Apis::Core::Hashable
+      
+        # Resource representing a Membership within a Group
+        # Corresponds to the JSON property `membership`
+        # @return [Google::Apis::CloudidentityV1::Membership]
+        attr_accessor :membership
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @membership = args[:membership] if args.key?(:membership)
+        end
+      end
+      
       # This resource represents a long-running operation that is the result of a
       # network API call.
       class Operation
         include Google::Apis::Core::Hashable
       
-        # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
+        # If the value is `false`, it means the operation is still in progress. If `true`
+        # , the operation is completed, and either `error` or `response` is available.
         # Corresponds to the JSON property `done`
         # @return [Boolean]
         attr_accessor :done
         alias_method :done?, :done
       
-        # The `Status` type defines a logical error model that is suitable for
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by [
+        # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+        # data: error code, error message, and error details. You can find out more
+        # about this error model and how to work with it in the [API Design Guide](https:
+        # //cloud.google.com/apis/design/errors).
         # Corresponds to the JSON property `error`
         # @return [Google::Apis::CloudidentityV1::Status]
         attr_accessor :error
       
-        # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
+        # Service-specific metadata associated with the operation. It typically contains
+        # progress information and common metadata such as create time. Some services
+        # might not provide such metadata. Any method that returns a long-running
+        # operation should document the metadata type, if any.
         # Corresponds to the JSON property `metadata`
         # @return [Hash<String,Object>]
         attr_accessor :metadata
       
         # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/`unique_id``.
+        # originally returns it. If you use the default HTTP mapping, the `name` should
+        # be a resource name ending with `operations/`unique_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
-        # The normal response of the operation in case of success.  If the original
-        # method returns no data on success, such as `Delete`, the response is
-        # `google.protobuf.Empty`.  If the original method is standard
-        # `Get`/`Create`/`Update`, the response should be the resource.  For other
-        # methods, the response should have the type `XxxResponse`, where `Xxx`
-        # is the original method name.  For example, if the original method name
-        # is `TakeSnapshot()`, the inferred response type is
-        # `TakeSnapshotResponse`.
+        # The normal response of the operation in case of success. If the original
+        # method returns no data on success, such as `Delete`, the response is `google.
+        # protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
+        # the response should be the resource. For other methods, the response should
+        # have the type `XxxResponse`, where `Xxx` is the original method name. For
+        # example, if the original method name is `TakeSnapshot()`, the inferred
+        # response type is `TakeSnapshotResponse`.
         # Corresponds to the JSON property `response`
         # @return [Hash<String,Object>]
         attr_accessor :response
@@ -372,8 +1240,8 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1::Group>]
         attr_accessor :groups
       
-        # Token to retrieve the next page of results, or empty if there are no
-        # more results available for specified query.
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for specified query.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -389,12 +1257,12 @@ module Google
         end
       end
       
-      # The `Status` type defines a logical error model that is suitable for
-      # different programming environments, including REST APIs and RPC APIs. It is
-      # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-      # three pieces of data: error code, error message, and error details.
-      # You can find out more about this error model and how to work with it in the
-      # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by [
+      # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+      # data: error code, error message, and error details. You can find out more
+      # about this error model and how to work with it in the [API Design Guide](https:
+      # //cloud.google.com/apis/design/errors).
       class Status
         include Google::Apis::Core::Hashable
       
@@ -403,15 +1271,15 @@ module Google
         # @return [Fixnum]
         attr_accessor :code
       
-        # A list of messages that carry the error details.  There is a common set of
+        # A list of messages that carry the error details. There is a common set of
         # message types for APIs to use.
         # Corresponds to the JSON property `details`
         # @return [Array<Hash<String,Object>>]
         attr_accessor :details
       
-        # A developer-facing error message, which should be in English. Any
-        # user-facing error message should be localized and sent in the
-        # google.rpc.Status.details field, or localized by the client.
+        # A developer-facing error message, which should be in English. Any user-facing
+        # error message should be localized and sent in the google.rpc.Status.details
+        # field, or localized by the client.
         # Corresponds to the JSON property `message`
         # @return [String]
         attr_accessor :message