google-api-client 0.43.0 → 0.45.1

data/generated/google/apis/cloudidentity_v1beta1.rb

@@ -25,7 +25,10 @@ module Google
     # @see https://cloud.google.com/identity/
     module CloudidentityV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200711'
+      REVISION = '20200919'
+
+      # See your device details
+      AUTH_CLOUD_IDENTITY_DEVICES_LOOKUP = 'https://www.googleapis.com/auth/cloud-identity.devices.lookup'
 
       # See, change, create, and delete any of the Cloud Identity Groups that you can access, including the members of each group
       AUTH_CLOUD_IDENTITY_GROUPS = 'https://www.googleapis.com/auth/cloud-identity.groups'

data/generated/google/apis/cloudidentity_v1beta1/classes.rb

@@ -32,9 +32,9 @@ module Google
         attr_accessor :enabled_unknown_sources
         alias_method :enabled_unknown_sources?, :enabled_unknown_sources
       
-        # Whether this account is on an owner/primary profile.
-        # For phones, only true for owner profiles. Android 4+ devices
-        # can have secondary or restricted user profiles.
+        # Whether this account is on an owner/primary profile. For phones, only true for
+        # owner profiles. Android 4+ devices can have secondary or restricted user
+        # profiles.
         # Corresponds to the JSON property `ownerProfileAccount`
         # @return [Boolean]
         attr_accessor :owner_profile_account
@@ -45,9 +45,9 @@ module Google
         # @return [String]
         attr_accessor :ownership_privilege
       
-        # Whether device supports Android work profiles. If false, this service
-        # will not block access to corp data even if an administrator turns on the
-        # "Enforce Work Profile" policy.
+        # Whether device supports Android work profiles. If false, this service will not
+        # block access to corp data even if an administrator turns on the "Enforce Work
+        # Profile" policy.
         # Corresponds to the JSON property `supportsWorkProfile`
         # @return [Boolean]
         attr_accessor :supports_work_profile
@@ -66,11 +66,35 @@ module Google
         end
       end
       
+      # Request message for approving the device to access user data.
+      class ApproveDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for approving the device to access user data.
       class ApproveDeviceUserResponse
         include Google::Apis::Core::Hashable
       
-        # A DeviceUser is a resource representing a user's use of a Device
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
         # Corresponds to the JSON property `deviceUser`
         # @return [Google::Apis::CloudidentityV1beta1::DeviceUser]
         attr_accessor :device_user
@@ -85,11 +109,35 @@ module Google
         end
       end
       
+      # Request message for blocking account on device.
+      class BlockDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for blocking the device from accessing user data.
       class BlockDeviceUserResponse
         include Google::Apis::Core::Hashable
       
-        # A DeviceUser is a resource representing a user's use of a Device
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
         # Corresponds to the JSON property `deviceUser`
         # @return [Google::Apis::CloudidentityV1beta1::DeviceUser]
         attr_accessor :device_user
@@ -104,12 +152,36 @@ module Google
         end
       end
       
+      # Request message for cancelling an unfinished device wipe.
+      class CancelWipeDeviceRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for cancelling an unfinished device wipe.
       class CancelWipeDeviceResponse
         include Google::Apis::Core::Hashable
       
-        # Represents a Device known to Google Cloud, independent of the device
-        # ownership, type, and whether it is assigned or in use by a user.
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
         # Corresponds to the JSON property `device`
         # @return [Google::Apis::CloudidentityV1beta1::Device]
         attr_accessor :device
@@ -124,11 +196,35 @@ module Google
         end
       end
       
+      # Request message for cancelling an unfinished user account wipe.
+      class CancelWipeDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for cancelling an unfinished user account wipe.
       class CancelWipeDeviceUserResponse
         include Google::Apis::Core::Hashable
       
-        # A DeviceUser is a resource representing a user's use of a Device
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
         # Corresponds to the JSON property `deviceUser`
         # @return [Google::Apis::CloudidentityV1beta1::DeviceUser]
         attr_accessor :device_user
@@ -143,6 +239,30 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.CheckTransitiveMembership.
+      class CheckTransitiveMembershipResponse
+        include Google::Apis::Core::Hashable
+      
+        # Response does not include the possible roles of a member since the behavior of
+        # this rpc is not all-or-nothing unlike the other rpcs. So, it may not be
+        # possible to list all the roles definitively, due to possible lack of
+        # authorization in some of the paths.
+        # Corresponds to the JSON property `hasMembership`
+        # @return [Boolean]
+        attr_accessor :has_membership
+        alias_method :has_membership?, :has_membership
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @has_membership = args[:has_membership] if args.key?(:has_membership)
+        end
+      end
+      
+      # Represents the state associated with an API client calling the Devices API.
       # Resource representing ClientState and supports updates from API users
       class ClientState
         include Google::Apis::Core::Hashable
@@ -168,9 +288,8 @@ module Google
         # @return [String]
         attr_accessor :custom_id
       
-        # The token that needs to be passed back for
-        # concurrency control in updates. Token needs to be passed back
-        # in UpdateRequest
+        # The token that needs to be passed back for concurrency control in updates.
+        # Token needs to be passed back in UpdateRequest
         # Corresponds to the JSON property `etag`
         # @return [String]
         attr_accessor :etag
@@ -180,9 +299,9 @@ module Google
         # @return [String]
         attr_accessor :health_score
       
-        # The map of key-value attributes stored by callers specific to a
-        # device. The total serialized length of this map may not exceed 10KB. No
-        # limit is placed on the number of attributes in a map.
+        # The map of key-value attributes stored by callers specific to a device. The
+        # total serialized length of this map may not exceed 10KB. No limit is placed on
+        # the number of attributes in a map.
         # Corresponds to the JSON property `keyValuePairs`
         # @return [Hash<String,Google::Apis::CloudidentityV1beta1::CustomAttributeValue>]
         attr_accessor :key_value_pairs
@@ -198,10 +317,736 @@ module Google
         attr_accessor :managed
       
         # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the ClientState in format:
-        # `devices/`device_id`/deviceUsers/`device_user_id`/clientState/`partner_id``,
-        # where partner_id corresponds to the partner storing the data.
+        # resource_names) of the ClientState in format: `devices/`device_id`/deviceUsers/
+        # `device_user_id`/clientState/`partner_id``, where partner_id corresponds to
+        # the partner storing the data.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The owner of the ClientState
+        # Corresponds to the JSON property `ownerType`
+        # @return [String]
+        attr_accessor :owner_type
+      
+        # A descriptive cause of the health score.
+        # Corresponds to the JSON property `scoreReason`
+        # @return [String]
+        attr_accessor :score_reason
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @asset_tags = args[:asset_tags] if args.key?(:asset_tags)
+          @compliance_state = args[:compliance_state] if args.key?(:compliance_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @custom_id = args[:custom_id] if args.key?(:custom_id)
+          @etag = args[:etag] if args.key?(:etag)
+          @health_score = args[:health_score] if args.key?(:health_score)
+          @key_value_pairs = args[:key_value_pairs] if args.key?(:key_value_pairs)
+          @last_update_time = args[:last_update_time] if args.key?(:last_update_time)
+          @managed = args[:managed] if args.key?(:managed)
+          @name = args[:name] if args.key?(:name)
+          @owner_type = args[:owner_type] if args.key?(:owner_type)
+          @score_reason = args[:score_reason] if args.key?(:score_reason)
+        end
+      end
+      
+      # Request message for creating a Company Owned device.
+      class CreateDeviceRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
+        # Corresponds to the JSON property `device`
+        # @return [Google::Apis::CloudidentityV1beta1::Device]
+        attr_accessor :device
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+          @device = args[:device] if args.key?(:device)
+        end
+      end
+      
+      # Additional custom attribute values may be one of these types
+      class CustomAttributeValue
+        include Google::Apis::Core::Hashable
+      
+        # Represents a boolean value.
+        # Corresponds to the JSON property `boolValue`
+        # @return [Boolean]
+        attr_accessor :bool_value
+        alias_method :bool_value?, :bool_value
+      
+        # Represents a double value.
+        # Corresponds to the JSON property `numberValue`
+        # @return [Float]
+        attr_accessor :number_value
+      
+        # Represents a string value.
+        # Corresponds to the JSON property `stringValue`
+        # @return [String]
+        attr_accessor :string_value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bool_value = args[:bool_value] if args.key?(:bool_value)
+          @number_value = args[:number_value] if args.key?(:number_value)
+          @string_value = args[:string_value] if args.key?(:string_value)
+        end
+      end
+      
+      # A Device within the Cloud Identity Devices API. Represents a Device known to
+      # Google Cloud, independent of the device ownership, type, and whether it is
+      # assigned or in use by a user.
+      class Device
+        include Google::Apis::Core::Hashable
+      
+        # Resource representing the Android specific attributes of a Device.
+        # Corresponds to the JSON property `androidSpecificAttributes`
+        # @return [Google::Apis::CloudidentityV1beta1::AndroidAttributes]
+        attr_accessor :android_specific_attributes
+      
+        # Asset tag of the device.
+        # Corresponds to the JSON property `assetTag`
+        # @return [String]
+        attr_accessor :asset_tag
+      
+        # Output only. Baseband version of the device.
+        # Corresponds to the JSON property `basebandVersion`
+        # @return [String]
+        attr_accessor :baseband_version
+      
+        # Output only. Device bootloader version. Example: 0.6.7.
+        # Corresponds to the JSON property `bootloaderVersion`
+        # @return [String]
+        attr_accessor :bootloader_version
+      
+        # Output only. Device brand. Example: Samsung.
+        # Corresponds to the JSON property `brand`
+        # @return [String]
+        attr_accessor :brand
+      
+        # Output only. Build number of the device.
+        # Corresponds to the JSON property `buildNumber`
+        # @return [String]
+        attr_accessor :build_number
+      
+        # Output only. Represents whether the Device is compromised.
+        # Corresponds to the JSON property `compromisedState`
+        # @return [String]
+        attr_accessor :compromised_state
+      
+        # Output only. When the Company-Owned device was imported. This field is empty
+        # for BYOD devices.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. Type of device.
+        # Corresponds to the JSON property `deviceType`
+        # @return [String]
+        attr_accessor :device_type
+      
+        # Output only. Whether developer options is enabled on device.
+        # Corresponds to the JSON property `enabledDeveloperOptions`
+        # @return [Boolean]
+        attr_accessor :enabled_developer_options
+        alias_method :enabled_developer_options?, :enabled_developer_options
+      
+        # Output only. Whether USB debugging is enabled on device.
+        # Corresponds to the JSON property `enabledUsbDebugging`
+        # @return [Boolean]
+        attr_accessor :enabled_usb_debugging
+        alias_method :enabled_usb_debugging?, :enabled_usb_debugging
+      
+        # Output only. Device encryption state.
+        # Corresponds to the JSON property `encryptionState`
+        # @return [String]
+        attr_accessor :encryption_state
+      
+        # Output only. IMEI number of device if GSM device; empty otherwise.
+        # Corresponds to the JSON property `imei`
+        # @return [String]
+        attr_accessor :imei
+      
+        # Output only. Kernel version of the device.
+        # Corresponds to the JSON property `kernelVersion`
+        # @return [String]
+        attr_accessor :kernel_version
+      
+        # Most recent time when device synced with this service.
+        # Corresponds to the JSON property `lastSyncTime`
+        # @return [String]
+        attr_accessor :last_sync_time
+      
+        # Output only. Management state of the device
+        # Corresponds to the JSON property `managementState`
+        # @return [String]
+        attr_accessor :management_state
+      
+        # Output only. Device manufacturer. Example: Motorola.
+        # Corresponds to the JSON property `manufacturer`
+        # @return [String]
+        attr_accessor :manufacturer
+      
+        # Output only. MEID number of device if CDMA device; empty otherwise.
+        # Corresponds to the JSON property `meid`
+        # @return [String]
+        attr_accessor :meid
+      
+        # Output only. Model name of device. Example: Pixel 3.
+        # Corresponds to the JSON property `model`
+        # @return [String]
+        attr_accessor :model
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the Device in format: `devices/`device_id``, where
+        # device_id is the unique id assigned to the Device.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. Mobile or network operator of device, if available.
+        # Corresponds to the JSON property `networkOperator`
+        # @return [String]
+        attr_accessor :network_operator
+      
+        # Output only. OS version of the device. Example: Android 8.1.0.
+        # Corresponds to the JSON property `osVersion`
+        # @return [String]
+        attr_accessor :os_version
+      
+        # Output only. Domain name for Google accounts on device. Type for other
+        # accounts on device. On Android, will only be populated if |ownership_privilege|
+        # is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in
+        # to the device policy app if that account's domain has only one account.
+        # Examples: "com.example", "xyz.com".
+        # Corresponds to the JSON property `otherAccounts`
+        # @return [Array<String>]
+        attr_accessor :other_accounts
+      
+        # Output only. Whether the device is owned by the company or an individual
+        # Corresponds to the JSON property `ownerType`
+        # @return [String]
+        attr_accessor :owner_type
+      
+        # Output only. OS release version. Example: 6.0.
+        # Corresponds to the JSON property `releaseVersion`
+        # @return [String]
+        attr_accessor :release_version
+      
+        # Output only. OS security patch update time on device.
+        # Corresponds to the JSON property `securityPatchTime`
+        # @return [String]
+        attr_accessor :security_patch_time
+      
+        # Serial Number of device. Example: HT82V1A01076.
+        # Corresponds to the JSON property `serialNumber`
+        # @return [String]
+        attr_accessor :serial_number
+      
+        # WiFi MAC addresses of device.
+        # Corresponds to the JSON property `wifiMacAddresses`
+        # @return [Array<String>]
+        attr_accessor :wifi_mac_addresses
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @android_specific_attributes = args[:android_specific_attributes] if args.key?(:android_specific_attributes)
+          @asset_tag = args[:asset_tag] if args.key?(:asset_tag)
+          @baseband_version = args[:baseband_version] if args.key?(:baseband_version)
+          @bootloader_version = args[:bootloader_version] if args.key?(:bootloader_version)
+          @brand = args[:brand] if args.key?(:brand)
+          @build_number = args[:build_number] if args.key?(:build_number)
+          @compromised_state = args[:compromised_state] if args.key?(:compromised_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @device_type = args[:device_type] if args.key?(:device_type)
+          @enabled_developer_options = args[:enabled_developer_options] if args.key?(:enabled_developer_options)
+          @enabled_usb_debugging = args[:enabled_usb_debugging] if args.key?(:enabled_usb_debugging)
+          @encryption_state = args[:encryption_state] if args.key?(:encryption_state)
+          @imei = args[:imei] if args.key?(:imei)
+          @kernel_version = args[:kernel_version] if args.key?(:kernel_version)
+          @last_sync_time = args[:last_sync_time] if args.key?(:last_sync_time)
+          @management_state = args[:management_state] if args.key?(:management_state)
+          @manufacturer = args[:manufacturer] if args.key?(:manufacturer)
+          @meid = args[:meid] if args.key?(:meid)
+          @model = args[:model] if args.key?(:model)
+          @name = args[:name] if args.key?(:name)
+          @network_operator = args[:network_operator] if args.key?(:network_operator)
+          @os_version = args[:os_version] if args.key?(:os_version)
+          @other_accounts = args[:other_accounts] if args.key?(:other_accounts)
+          @owner_type = args[:owner_type] if args.key?(:owner_type)
+          @release_version = args[:release_version] if args.key?(:release_version)
+          @security_patch_time = args[:security_patch_time] if args.key?(:security_patch_time)
+          @serial_number = args[:serial_number] if args.key?(:serial_number)
+          @wifi_mac_addresses = args[:wifi_mac_addresses] if args.key?(:wifi_mac_addresses)
+        end
+      end
+      
+      # Represents a user's use of a Device in the Cloud Identity Devices API. A
+      # DeviceUser is a resource representing a user's use of a Device
+      class DeviceUser
+        include Google::Apis::Core::Hashable
+      
+        # Compromised State of the DeviceUser object
+        # Corresponds to the JSON property `compromisedState`
+        # @return [String]
+        attr_accessor :compromised_state
+      
+        # When the user first signed in to the device
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # Output only. Most recent time when user registered with this service.
+        # Corresponds to the JSON property `firstSyncTime`
+        # @return [String]
+        attr_accessor :first_sync_time
+      
+        # Output only. Default locale used on device, in IETF BCP-47 format.
+        # Corresponds to the JSON property `languageCode`
+        # @return [String]
+        attr_accessor :language_code
+      
+        # Output only. Last time when user synced with policies.
+        # Corresponds to the JSON property `lastSyncTime`
+        # @return [String]
+        attr_accessor :last_sync_time
+      
+        # Output only. Management state of the user on the device.
+        # Corresponds to the JSON property `managementState`
+        # @return [String]
+        attr_accessor :management_state
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the DeviceUser in format: `devices/`device_id`/deviceUsers/`
+        # user_id``, where user_id is the ID of the user associated with the user
+        # session.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Password state of the DeviceUser object
+        # Corresponds to the JSON property `passwordState`
+        # @return [String]
+        attr_accessor :password_state
+      
+        # Output only. User agent on the device for this specific user
+        # Corresponds to the JSON property `userAgent`
+        # @return [String]
+        attr_accessor :user_agent
+      
+        # Email address of the user registered on the device.
+        # Corresponds to the JSON property `userEmail`
+        # @return [String]
+        attr_accessor :user_email
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @compromised_state = args[:compromised_state] if args.key?(:compromised_state)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @first_sync_time = args[:first_sync_time] if args.key?(:first_sync_time)
+          @language_code = args[:language_code] if args.key?(:language_code)
+          @last_sync_time = args[:last_sync_time] if args.key?(:last_sync_time)
+          @management_state = args[:management_state] if args.key?(:management_state)
+          @name = args[:name] if args.key?(:name)
+          @password_state = args[:password_state] if args.key?(:password_state)
+          @user_agent = args[:user_agent] if args.key?(:user_agent)
+          @user_email = args[:user_email] if args.key?(:user_email)
+        end
+      end
+      
+      # Dynamic group metadata like queries and status.
+      class DynamicGroupMetadata
+        include Google::Apis::Core::Hashable
+      
+        # Memberships will be the union of all queries. Only one entry with USER
+        # resource is currently supported.
+        # Corresponds to the JSON property `queries`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::DynamicGroupQuery>]
+        attr_accessor :queries
+      
+        # The current status of a dynamic group along with timestamp.
+        # Corresponds to the JSON property `status`
+        # @return [Google::Apis::CloudidentityV1beta1::DynamicGroupStatus]
+        attr_accessor :status
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @queries = args[:queries] if args.key?(:queries)
+          @status = args[:status] if args.key?(:status)
+        end
+      end
+      
+      # Defines a query on a resource.
+      class DynamicGroupQuery
+        include Google::Apis::Core::Hashable
+      
+        # Query that determines the memberships of the dynamic group. Examples: All
+        # users with at least one `organizations.department` of engineering. `user.
+        # organizations.exists(org, org.department=='engineering')` All users with at
+        # least one location that has `area` of `foo` and `building_id` of `bar`. `user.
+        # locations.exists(loc, loc.area=='foo' && loc.building_id=='bar')`
+        # Corresponds to the JSON property `query`
+        # @return [String]
+        attr_accessor :query
+      
+        # 
+        # Corresponds to the JSON property `resourceType`
+        # @return [String]
+        attr_accessor :resource_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @query = args[:query] if args.key?(:query)
+          @resource_type = args[:resource_type] if args.key?(:resource_type)
+        end
+      end
+      
+      # The current status of a dynamic group along with timestamp.
+      class DynamicGroupStatus
+        include Google::Apis::Core::Hashable
+      
+        # Status of the dynamic group.
+        # Corresponds to the JSON property `status`
+        # @return [String]
+        attr_accessor :status
+      
+        # The latest time at which the dynamic group is guaranteed to be in the given
+        # status. If status is `UP_TO_DATE`, the latest time at which the dynamic group
+        # was confirmed to be up-to-date. If status is `UPDATING_MEMBERSHIPS`, the time
+        # at which dynamic group was created.
+        # Corresponds to the JSON property `statusTime`
+        # @return [String]
+        attr_accessor :status_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @status = args[:status] if args.key?(:status)
+          @status_time = args[:status_time] if args.key?(:status_time)
+        end
+      end
+      
+      # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+      # can represent either a group with an optional `namespace` or a user without a `
+      # namespace`. The combination of `id` and `namespace` must be unique; however,
+      # the same `id` can be used with different `namespace`s.
+      class EntityKey
+        include Google::Apis::Core::Hashable
+      
+        # The ID of the entity. For Google-managed entities, the `id` must be the email
+        # address of an existing group or user. For external-identity-mapped entities,
+        # the `id` must be a string conforming to the Identity Source's requirements.
+        # Must be unique within a `namespace`.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # The namespace in which the entity exists. If not specified, the `EntityKey`
+        # represents a Google-managed entity such as a Google user or a Google Group. If
+        # specified, the `EntityKey` represents an external-identity-mapped group. The
+        # namespace must correspond to an identity source created in Admin Console and
+        # must be in the form of `identitysources/`identity_source_id`.
+        # Corresponds to the JSON property `namespace`
+        # @return [String]
+        attr_accessor :namespace
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @namespace = args[:namespace] if args.key?(:namespace)
+        end
+      end
+      
+      # The `MembershipRole` expiry details.
+      class ExpiryDetail
+        include Google::Apis::Core::Hashable
+      
+        # The time at which the `MembershipRole` will expire.
+        # Corresponds to the JSON property `expireTime`
+        # @return [String]
+        attr_accessor :expire_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @expire_time = args[:expire_time] if args.key?(:expire_time)
+        end
+      end
+      
+      # The response message for MembershipsService.GetMembershipGraph.
+      class GetMembershipGraphResponse
+        include Google::Apis::Core::Hashable
+      
+        # The membership graph's path information represented as an adjacency list.
+        # Corresponds to the JSON property `adjacencyList`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::MembershipAdjacencyList>]
+        attr_accessor :adjacency_list
+      
+        # The resources representing each group in the adjacency list. Each group in
+        # this list can be correlated to a 'group' of the MembershipAdjacencyList using
+        # the 'name' of the Group resource.
+        # Corresponds to the JSON property `groups`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::Group>]
+        attr_accessor :groups
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @adjacency_list = args[:adjacency_list] if args.key?(:adjacency_list)
+          @groups = args[:groups] if args.key?(:groups)
+        end
+      end
+      
+      # Resource representing the Android specific attributes of a Device.
+      class GoogleAppsCloudidentityDevicesV1AndroidAttributes
+        include Google::Apis::Core::Hashable
+      
+        # Whether applications from unknown sources can be installed on device.
+        # Corresponds to the JSON property `enabledUnknownSources`
+        # @return [Boolean]
+        attr_accessor :enabled_unknown_sources
+        alias_method :enabled_unknown_sources?, :enabled_unknown_sources
+      
+        # Whether this account is on an owner/primary profile. For phones, only true for
+        # owner profiles. Android 4+ devices can have secondary or restricted user
+        # profiles.
+        # Corresponds to the JSON property `ownerProfileAccount`
+        # @return [Boolean]
+        attr_accessor :owner_profile_account
+        alias_method :owner_profile_account?, :owner_profile_account
+      
+        # Ownership privileges on device.
+        # Corresponds to the JSON property `ownershipPrivilege`
+        # @return [String]
+        attr_accessor :ownership_privilege
+      
+        # Whether device supports Android work profiles. If false, this service will not
+        # block access to corp data even if an administrator turns on the "Enforce Work
+        # Profile" policy.
+        # Corresponds to the JSON property `supportsWorkProfile`
+        # @return [Boolean]
+        attr_accessor :supports_work_profile
+        alias_method :supports_work_profile?, :supports_work_profile
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enabled_unknown_sources = args[:enabled_unknown_sources] if args.key?(:enabled_unknown_sources)
+          @owner_profile_account = args[:owner_profile_account] if args.key?(:owner_profile_account)
+          @ownership_privilege = args[:ownership_privilege] if args.key?(:ownership_privilege)
+          @supports_work_profile = args[:supports_work_profile] if args.key?(:supports_work_profile)
+        end
+      end
+      
+      # Response message for approving the device to access user data.
+      class GoogleAppsCloudidentityDevicesV1ApproveDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Response message for blocking the device from accessing user data.
+      class GoogleAppsCloudidentityDevicesV1BlockDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Response message for cancelling an unfinished device wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceResponse
+        include Google::Apis::Core::Hashable
+      
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
+        # Corresponds to the JSON property `device`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1Device]
+        attr_accessor :device
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device = args[:device] if args.key?(:device)
+        end
+      end
+      
+      # Response message for cancelling an unfinished user account wipe.
+      class GoogleAppsCloudidentityDevicesV1CancelWipeDeviceUserResponse
+        include Google::Apis::Core::Hashable
+      
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @device_user = args[:device_user] if args.key?(:device_user)
+        end
+      end
+      
+      # Represents the state associated with an API client calling the Devices API.
+      # Resource representing ClientState and supports updates from API users
+      class GoogleAppsCloudidentityDevicesV1ClientState
+        include Google::Apis::Core::Hashable
+      
+        # The caller can specify asset tags for this resource
+        # Corresponds to the JSON property `assetTags`
+        # @return [Array<String>]
+        attr_accessor :asset_tags
+      
+        # The compliance state of the resource as specified by the API client.
+        # Corresponds to the JSON property `complianceState`
+        # @return [String]
+        attr_accessor :compliance_state
+      
+        # Output only. The time the client state data was created.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # This field may be used to store a unique identifier for the API resource
+        # within which these CustomAttributes are a field.
+        # Corresponds to the JSON property `customId`
+        # @return [String]
+        attr_accessor :custom_id
+      
+        # The token that needs to be passed back for concurrency control in updates.
+        # Token needs to be passed back in UpdateRequest
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # The Health score of the resource. The Health score is the callers
+        # specification of the condition of the device from a usability point of view.
+        # For example, a third-party device management provider may specify a health
+        # score based on its compliance with organizational policies.
+        # Corresponds to the JSON property `healthScore`
+        # @return [String]
+        attr_accessor :health_score
+      
+        # The map of key-value attributes stored by callers specific to a device. The
+        # total serialized length of this map may not exceed 10KB. No limit is placed on
+        # the number of attributes in a map.
+        # Corresponds to the JSON property `keyValuePairs`
+        # @return [Hash<String,Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1CustomAttributeValue>]
+        attr_accessor :key_value_pairs
+      
+        # Output only. The time the client state data was last updated.
+        # Corresponds to the JSON property `lastUpdateTime`
+        # @return [String]
+        attr_accessor :last_update_time
+      
+        # The management state of the resource as specified by the API client.
+        # Corresponds to the JSON property `managed`
+        # @return [String]
+        attr_accessor :managed
+      
+        # Output only. [Resource name](https://cloud.google.com/apis/design/
+        # resource_names) of the ClientState in format: `devices/`device_id`/deviceUsers/
+        # `device_user_id`/clientState/`partner_id``, where partner_id corresponds to
+        # the partner storing the data. For partners belonging to the "BeyondCorp
+        # Alliance", this is the partner ID specified to you by Google. For all other
+        # callers, this is a string of the form: ``customer_id`-suffix`, where `
+        # customer_id` is your customer ID. The *suffix* is any string the caller
+        # specifies. This string will be displayed verbatim in the administration
+        # console. This suffix is used in setting up Custom Access Levels in Context-
+        # Aware Access. Your organization's customer ID can be obtained from the URL: `
+        # GET https://www.googleapis.com/admin/directory/v1/customers/my_customer` The `
+        # id` field in the response contains the customer ID starting with the letter 'C'
+        # . The customer ID to be used in this API is the string after the letter 'C' (
+        # not including 'C')
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -238,7 +1083,7 @@ module Google
       end
       
       # Additional custom attribute values may be one of these types
-      class CustomAttributeValue
+      class GoogleAppsCloudidentityDevicesV1CustomAttributeValue
         include Google::Apis::Core::Hashable
       
         # Represents a boolean value.
@@ -269,14 +1114,15 @@ module Google
         end
       end
       
-      # Represents a Device known to Google Cloud, independent of the device
-      # ownership, type, and whether it is assigned or in use by a user.
-      class Device
+      # A Device within the Cloud Identity Devices API. Represents a Device known to
+      # Google Cloud, independent of the device ownership, type, and whether it is
+      # assigned or in use by a user.
+      class GoogleAppsCloudidentityDevicesV1Device
         include Google::Apis::Core::Hashable
       
         # Resource representing the Android specific attributes of a Device.
         # Corresponds to the JSON property `androidSpecificAttributes`
-        # @return [Google::Apis::CloudidentityV1beta1::AndroidAttributes]
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1AndroidAttributes]
         attr_accessor :android_specific_attributes
       
         # Asset tag of the device.
@@ -310,8 +1156,7 @@ module Google
         attr_accessor :compromised_state
       
         # Output only. When the Company-Owned device was imported. This field is empty
-        # for BYOD
-        # devices.
+        # for BYOD devices.
         # Corresponds to the JSON property `createTime`
         # @return [String]
         attr_accessor :create_time
@@ -374,9 +1219,8 @@ module Google
         attr_accessor :model
       
         # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names)
-        # of the Device in format: `devices/`device_id``, where device_id is
-        # the unique id assigned to the Device.
+        # resource_names) of the Device in format: `devices/`device_id``, where
+        # device_id is the unique id assigned to the Device.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -392,9 +1236,8 @@ module Google
         attr_accessor :os_version
       
         # Output only. Domain name for Google accounts on device. Type for other
-        # accounts on
-        # device. On Android, will only be populated if |ownership_privilege| is
-        # |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in
+        # accounts on device. On Android, will only be populated if |ownership_privilege|
+        # is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in
         # to the device policy app if that account's domain has only one account.
         # Examples: "com.example", "xyz.com".
         # Corresponds to the JSON property `otherAccounts`
@@ -463,8 +1306,9 @@ module Google
         end
       end
       
-      # A DeviceUser is a resource representing a user's use of a Device
-      class DeviceUser
+      # Represents a user's use of a Device in the Cloud Identity Devices API. A
+      # DeviceUser is a resource representing a user's use of a Device
+      class GoogleAppsCloudidentityDevicesV1DeviceUser
         include Google::Apis::Core::Hashable
       
         # Compromised State of the DeviceUser object
@@ -498,9 +1342,9 @@ module Google
         attr_accessor :management_state
       
         # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the DeviceUser in format: `devices/`device_id`/deviceUsers/`user_id``,
-        # where user_id is the ID of the user associated with the user session.
+        # resource_names) of the DeviceUser in format: `devices/`device_id`/deviceUsers/`
+        # user_id``, where user_id is the ID of the user associated with the user
+        # session.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -539,105 +1383,16 @@ module Google
         end
       end
       
-      # An EndpointApp represents an app that is installed on a device
-      class EndpointApp
-        include Google::Apis::Core::Hashable
-      
-        # Output only. Name of the app displayed to the user
-        # Corresponds to the JSON property `displayName`
-        # @return [String]
-        attr_accessor :display_name
-      
-        # Output only. [Resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the EndpointApp in format:
-        # `devices/`device`/deviceUsers/`device_user`/endpointApps/`endpoint_app``,
-        # where client_app_id is the ID of the app associated with the Device.
-        # Corresponds to the JSON property `name`
-        # @return [String]
-        attr_accessor :name
-      
-        # Output only. Full package name of the installed app
-        # Corresponds to the JSON property `packageName`
-        # @return [String]
-        attr_accessor :package_name
-      
-        # Output only. Names of all permissions granted to the installed app
-        # Corresponds to the JSON property `permissions`
-        # @return [Array<String>]
-        attr_accessor :permissions
-      
-        # Output only. Version code of the installed app
-        # Corresponds to the JSON property `versionCode`
-        # @return [Fixnum]
-        attr_accessor :version_code
-      
-        # Output only. Version name of the installed app
-        # Corresponds to the JSON property `versionName`
-        # @return [String]
-        attr_accessor :version_name
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @display_name = args[:display_name] if args.key?(:display_name)
-          @name = args[:name] if args.key?(:name)
-          @package_name = args[:package_name] if args.key?(:package_name)
-          @permissions = args[:permissions] if args.key?(:permissions)
-          @version_code = args[:version_code] if args.key?(:version_code)
-          @version_name = args[:version_name] if args.key?(:version_name)
-        end
-      end
-      
-      # A unique identifier for an entity in the Cloud Identity Groups API.
-      # An entity can represent either a group with an optional `namespace` or a user
-      # without a `namespace`. The combination of `id` and `namespace` must be
-      # unique; however, the same `id` can be used with different `namespace`s.
-      class EntityKey
-        include Google::Apis::Core::Hashable
-      
-        # The ID of the entity.
-        # For Google-managed entities, the `id` must be the email address of an
-        # existing group or user.
-        # For external-identity-mapped entities, the `id` must be a string conforming
-        # to the Identity Source's requirements.
-        # Must be unique within a `namespace`.
-        # Corresponds to the JSON property `id`
-        # @return [String]
-        attr_accessor :id
-      
-        # The namespace in which the entity exists.
-        # If not specified, the `EntityKey` represents a Google-managed entity such
-        # as a Google user or a Google Group.
-        # If specified, the `EntityKey` represents an external-identity-mapped group.
-        # The namespace must correspond to an identity source created in Admin
-        # Console and must be in the form of `identitysources/`identity_source_id`.
-        # Corresponds to the JSON property `namespace`
-        # @return [String]
-        attr_accessor :namespace
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @id = args[:id] if args.key?(:id)
-          @namespace = args[:namespace] if args.key?(:namespace)
-        end
-      end
-      
-      # The `MembershipRole` expiry details.
-      class ExpiryDetail
+      # Response message for wiping all data on the device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceResponse
         include Google::Apis::Core::Hashable
       
-        # The time at which the `MembershipRole` will expire.
-        # Corresponds to the JSON property `expireTime`
-        # @return [String]
-        attr_accessor :expire_time
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
+        # Corresponds to the JSON property `device`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1Device]
+        attr_accessor :device
       
         def initialize(**args)
            update!(**args)
@@ -645,25 +1400,19 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @expire_time = args[:expire_time] if args.key?(:expire_time)
+          @device = args[:device] if args.key?(:device)
         end
       end
       
-      # The response message for MembershipsService.GetMembershipGraph.
-      class GetMembershipGraphResponse
+      # Response message for wiping the user's account from the device.
+      class GoogleAppsCloudidentityDevicesV1WipeDeviceUserResponse
         include Google::Apis::Core::Hashable
       
-        # The membership graph's path information represented as an adjacency list.
-        # Corresponds to the JSON property `adjacencyList`
-        # @return [Array<Google::Apis::CloudidentityV1beta1::MembershipAdjacencyList>]
-        attr_accessor :adjacency_list
-      
-        # The resources representing each group in the adjacency list. Each
-        # group in this list can be correlated to a 'group' of the
-        # MembershipAdjacencyList using the 'name' of the Group resource.
-        # Corresponds to the JSON property `groups`
-        # @return [Array<Google::Apis::CloudidentityV1beta1::Group>]
-        attr_accessor :groups
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
+        # Corresponds to the JSON property `deviceUser`
+        # @return [Google::Apis::CloudidentityV1beta1::GoogleAppsCloudidentityDevicesV1DeviceUser]
+        attr_accessor :device_user
       
         def initialize(**args)
            update!(**args)
@@ -671,14 +1420,13 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @adjacency_list = args[:adjacency_list] if args.key?(:adjacency_list)
-          @groups = args[:groups] if args.key?(:groups)
+          @device_user = args[:device_user] if args.key?(:device_user)
         end
       end
       
-      # A group within the Cloud Identity Groups API.
-      # A `Group` is a collection of entities, where each entity is either a user,
-      # another group or a service account.
+      # A group within the Cloud Identity Groups API. A `Group` is a collection of
+      # entities, where each entity is either a user, another group, or a service
+      # account.
       class Group
         include Google::Apis::Core::Hashable
       
@@ -692,8 +1440,8 @@ module Google
         # @return [String]
         attr_accessor :create_time
       
-        # An extended description to help users determine the purpose of a `Group`.
-        # Must not be longer than 4,096 characters.
+        # An extended description to help users determine the purpose of a `Group`. Must
+        # not be longer than 4,096 characters.
         # Corresponds to the JSON property `description`
         # @return [String]
         attr_accessor :description
@@ -703,36 +1451,44 @@ module Google
         # @return [String]
         attr_accessor :display_name
       
-        # A unique identifier for an entity in the Cloud Identity Groups API.
-        # An entity can represent either a group with an optional `namespace` or a user
-        # without a `namespace`. The combination of `id` and `namespace` must be
-        # unique; however, the same `id` can be used with different `namespace`s.
+        # Dynamic group metadata like queries and status.
+        # Corresponds to the JSON property `dynamicGroupMetadata`
+        # @return [Google::Apis::CloudidentityV1beta1::DynamicGroupMetadata]
+        attr_accessor :dynamic_group_metadata
+      
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
         # Corresponds to the JSON property `groupKey`
         # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
         attr_accessor :group_key
       
-        # Required. The labels that apply to the `Group`.
-        # Must not contain more than one entry. Must contain the entry
-        # `'cloudidentity.googleapis.com/groups.discussion_forum': ''` if the `Group`
-        # is a Google Group or `'system/groups/external': ''` if the `Group` is an
-        # external-identity-mapped group.
+        # Required. One or more label entries that apply to the Group. Currently
+        # supported labels contain a key with an empty value. Google Groups are the
+        # default type of group and have a label with a key of `cloudidentity.googleapis.
+        # com/groups.discussion_forum` and an empty value. Existing Google Groups can
+        # have an additional label with a key of `cloudidentity.googleapis.com/groups.
+        # security` and an empty value added to them. **This is an immutable change and
+        # the security label cannot be removed once added.** Dynamic groups have a label
+        # with a key of `cloudidentity.googleapis.com/groups.dynamic`. Identity-mapped
+        # groups for Cloud Search have a label with a key of `system/groups/external`
+        # and an empty value. Examples: `"cloudidentity.googleapis.com/groups.
+        # discussion_forum": ""` or `"system/groups/external": ""`.
         # Corresponds to the JSON property `labels`
         # @return [Hash<String,String>]
         attr_accessor :labels
       
         # Output only. The [resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the `Group`.
-        # Shall be of the form `groups/`group_id``.
+        # resource_names) of the `Group`. Shall be of the form `groups/`group_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
         # Required. Immutable. The resource name of the entity under which this `Group`
-        # resides in the
-        # Cloud Identity resource hierarchy.
-        # Must be of the form `identitysources/`identity_source_id`` for external-
-        # identity-mapped groups or `customers/`customer_id`` for Google Groups.
+        # resides in the Cloud Identity resource hierarchy. Must be of the form `
+        # identitysources/`identity_source_id`` for external- identity-mapped groups or `
+        # customers/`customer_id`` for Google Groups.
         # Corresponds to the JSON property `parent`
         # @return [String]
         attr_accessor :parent
@@ -752,6 +1508,7 @@ module Google
           @create_time = args[:create_time] if args.key?(:create_time)
           @description = args[:description] if args.key?(:description)
           @display_name = args[:display_name] if args.key?(:display_name)
+          @dynamic_group_metadata = args[:dynamic_group_metadata] if args.key?(:dynamic_group_metadata)
           @group_key = args[:group_key] if args.key?(:group_key)
           @labels = args[:labels] if args.key?(:labels)
           @name = args[:name] if args.key?(:name)
@@ -760,8 +1517,59 @@ module Google
         end
       end
       
-      # Response message that is returned in LRO result of ListClientStates
-      # Operation.
+      # Message representing a transitive group of a user or a group.
+      class GroupRelation
+        include Google::Apis::Core::Hashable
+      
+        # Display name for this group.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Resource name for this group.
+        # Corresponds to the JSON property `group`
+        # @return [String]
+        attr_accessor :group
+      
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
+        # Corresponds to the JSON property `groupKey`
+        # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
+        attr_accessor :group_key
+      
+        # Labels for Group resource.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # The relation between the member and the transitive group.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # Membership roles of the member for the group.
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @group = args[:group] if args.key?(:group)
+          @group_key = args[:group_key] if args.key?(:group_key)
+          @labels = args[:labels] if args.key?(:labels)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
+      # Response message that is returned in LRO result of ListClientStates Operation.
       class ListClientStatesResponse
         include Google::Apis::Core::Hashable
       
@@ -770,8 +1578,7 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::ClientState>]
         attr_accessor :client_states
       
-        # Token to retrieve the next page of results. Empty if there are no more
-        # results.
+        # Token to retrieve the next page of results. Empty if there are no more results.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -787,7 +1594,7 @@ module Google
         end
       end
       
-      # Response message that is returned in LRO result of ListDeviceUsers Operation.
+      # Response message that is returned from the ListDeviceUsers method.
       class ListDeviceUsersResponse
         include Google::Apis::Core::Hashable
       
@@ -796,8 +1603,7 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::DeviceUser>]
         attr_accessor :device_users
       
-        # Token to retrieve the next page of results. Empty if there are no more
-        # results.
+        # Token to retrieve the next page of results. Empty if there are no more results.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -813,7 +1619,7 @@ module Google
         end
       end
       
-      # Response message that is returned in LRO result of ListDevices Operation.
+      # Response message that is returned from the ListDevices method.
       class ListDevicesResponse
         include Google::Apis::Core::Hashable
       
@@ -822,8 +1628,7 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::Device>]
         attr_accessor :devices
       
-        # Token to retrieve the next page of results. Empty if there are no more
-        # results.
+        # Token to retrieve the next page of results. Empty if there are no more results.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -839,32 +1644,6 @@ module Google
         end
       end
       
-      # Response message for listing all apps on the device.
-      class ListEndpointAppsResponse
-        include Google::Apis::Core::Hashable
-      
-        # The list of matching EndpointApps found as a result of the request.
-        # Corresponds to the JSON property `endpointApps`
-        # @return [Array<Google::Apis::CloudidentityV1beta1::EndpointApp>]
-        attr_accessor :endpoint_apps
-      
-        # Token to retrieve the next page of results. Empty if there are no more
-        # results.
-        # Corresponds to the JSON property `nextPageToken`
-        # @return [String]
-        attr_accessor :next_page_token
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @endpoint_apps = args[:endpoint_apps] if args.key?(:endpoint_apps)
-          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
-        end
-      end
-      
       # The response message for GroupsService.ListGroups.
       class ListGroupsResponse
         include Google::Apis::Core::Hashable
@@ -874,8 +1653,8 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::Group>]
         attr_accessor :groups
       
-        # A continuation token to retrieve the next page of results, or empty if
-        # there are no more results available.
+        # A continuation token to retrieve the next page of results, or empty if there
+        # are no more results available.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -900,8 +1679,8 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::Membership>]
         attr_accessor :memberships
       
-        # A continuation token to retrieve the next page of results, or empty if
-        # there are no more results available.
+        # A continuation token to retrieve the next page of results, or empty if there
+        # are no more results available.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -922,8 +1701,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Output only. The [resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the looked-up `Group`.
+        # resource_names) of the looked-up `Group`.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -943,8 +1721,8 @@ module Google
         include Google::Apis::Core::Hashable
       
         # The [resource name](https://cloud.google.com/apis/design/resource_names) of
-        # the looked-up `Membership`.
-        # Must be of the form `groups/`group_id`/memberships/`membership_id``.
+        # the looked-up `Membership`. Must be of the form `groups/`group_id`/memberships/
+        # `membership_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -964,23 +1742,21 @@ module Google
       class LookupSelfDeviceUsersResponse
         include Google::Apis::Core::Hashable
       
-        # The obfuscated customer Id that may be passed back to other
-        # Devices API methods such as List, Get, etc.
+        # The obfuscated customer Id that may be passed back to other Devices API
+        # methods such as List, Get, etc.
         # Corresponds to the JSON property `customer`
         # @return [String]
         attr_accessor :customer
       
-        # [Resource names](https://cloud.google.com/apis/design/resource_names) of
-        # the DeviceUsers in the format:
-        # `devices/`device_id`/deviceUsers/`user_resource_id``, where
-        # device_id is the unique ID assigned to a Device and
-        # user_resource_id is the unique user ID
+        # [Resource names](https://cloud.google.com/apis/design/resource_names) of the
+        # DeviceUsers in the format: `devices/`device_id`/deviceUsers/`user_resource_id``
+        # , where device_id is the unique ID assigned to a Device and user_resource_id
+        # is the unique user ID
         # Corresponds to the JSON property `names`
         # @return [Array<String>]
         attr_accessor :names
       
-        # Token to retrieve the next page of results. Empty if there are no more
-        # results.
+        # Token to retrieve the next page of results. Empty if there are no more results.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -997,9 +1773,47 @@ module Google
         end
       end
       
-      # A membership within the Cloud Identity Groups API.
-      # A `Membership` defines a relationship between a `Group` and an entity
-      # belonging to that `Group`, referred to as a "member".
+      # Message representing a transitive membership of a group.
+      class MemberRelation
+        include Google::Apis::Core::Hashable
+      
+        # Resource name for this member if member is a GROUP, otherwise it is empty.
+        # Corresponds to the JSON property `member`
+        # @return [String]
+        attr_accessor :member
+      
+        # Entity key has an id and a namespace. In case of discussion forums, the id
+        # will be an email address without a namespace.
+        # Corresponds to the JSON property `preferredMemberKey`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::EntityKey>]
+        attr_accessor :preferred_member_key
+      
+        # The relation between the group and the transitive member.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # The membership role details (i.e name of role and expiry time).
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member = args[:member] if args.key?(:member)
+          @preferred_member_key = args[:preferred_member_key] if args.key?(:preferred_member_key)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
+      # A membership within the Cloud Identity Groups API. A `Membership` defines a
+      # relationship between a `Group` and an entity belonging to that `Group`,
+      # referred to as a "member".
       class Membership
         include Google::Apis::Core::Hashable
       
@@ -1008,33 +1822,32 @@ module Google
         # @return [String]
         attr_accessor :create_time
       
-        # A unique identifier for an entity in the Cloud Identity Groups API.
-        # An entity can represent either a group with an optional `namespace` or a user
-        # without a `namespace`. The combination of `id` and `namespace` must be
-        # unique; however, the same `id` can be used with different `namespace`s.
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
         # Corresponds to the JSON property `memberKey`
         # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
         attr_accessor :member_key
       
         # Output only. The [resource name](https://cloud.google.com/apis/design/
-        # resource_names) of
-        # the `Membership`.
-        # Shall be of the form `groups/`group_id`/memberships/`membership_id``.
+        # resource_names) of the `Membership`. Shall be of the form `groups/`group_id`/
+        # memberships/`membership_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
-        # A unique identifier for an entity in the Cloud Identity Groups API.
-        # An entity can represent either a group with an optional `namespace` or a user
-        # without a `namespace`. The combination of `id` and `namespace` must be
-        # unique; however, the same `id` can be used with different `namespace`s.
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
         # Corresponds to the JSON property `preferredMemberKey`
         # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
         attr_accessor :preferred_member_key
       
-        # The `MembershipRole`s that apply to the `Membership`.
-        # If unspecified, defaults to a single `MembershipRole` with `name` `MEMBER`.
-        # Must not contain duplicate `MembershipRole`s with the same `name`.
+        # The `MembershipRole`s that apply to the `Membership`. If unspecified, defaults
+        # to a single `MembershipRole` with `name` `MEMBER`. Must not contain duplicate `
+        # MembershipRole`s with the same `name`.
         # Corresponds to the JSON property `roles`
         # @return [Array<Google::Apis::CloudidentityV1beta1::MembershipRole>]
         attr_accessor :roles
@@ -1090,8 +1903,8 @@ module Google
         end
       end
       
-      # A membership role within the Cloud Identity Groups API.
-      # A `MembershipRole` defines the privileges granted to a `Membership`.
+      # A membership role within the Cloud Identity Groups API. A `MembershipRole`
+      # defines the privileges granted to a `Membership`.
       class MembershipRole
         include Google::Apis::Core::Hashable
       
@@ -1100,8 +1913,7 @@ module Google
         # @return [Google::Apis::CloudidentityV1beta1::ExpiryDetail]
         attr_accessor :expiry_detail
       
-        # The name of the `MembershipRole`.
-        # Must be one of `OWNER`, `MANAGER`, `MEMBER`.
+        # The name of the `MembershipRole`. Must be one of `OWNER`, `MANAGER`, `MEMBER`.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -1121,29 +1933,25 @@ module Google
       class ModifyMembershipRolesRequest
         include Google::Apis::Core::Hashable
       
-        # The `MembershipRole`s to be added.
-        # Adding or removing roles in the same request as updating roles is not
-        # supported.
-        # Must not be set if `update_roles_params` is set.
+        # The `MembershipRole`s to be added. Adding or removing roles in the same
+        # request as updating roles is not supported. Must not be set if `
+        # update_roles_params` is set.
         # Corresponds to the JSON property `addRoles`
         # @return [Array<Google::Apis::CloudidentityV1beta1::MembershipRole>]
         attr_accessor :add_roles
       
-        # The `name`s of the `MembershipRole`s to be removed.
-        # Adding or removing roles in the same request as updating roles is not
-        # supported.
-        # It is not possible to remove the `MEMBER` `MembershipRole`. If you wish to
-        # delete a `Membership`, call MembershipsService.DeleteMembership
-        # instead.
-        # Must not contain `MEMBER`. Must not be set if `update_roles_params` is set.
+        # The `name`s of the `MembershipRole`s to be removed. Adding or removing roles
+        # in the same request as updating roles is not supported. It is not possible to
+        # remove the `MEMBER` `MembershipRole`. If you wish to delete a `Membership`,
+        # call MembershipsService.DeleteMembership instead. Must not contain `MEMBER`.
+        # Must not be set if `update_roles_params` is set.
         # Corresponds to the JSON property `removeRoles`
         # @return [Array<String>]
         attr_accessor :remove_roles
       
-        # The `MembershipRole`s to be updated.
-        # Updating roles in the same request as adding or removing roles is not
-        # supported.
-        # Must not be set if either `add_roles` or `remove_roles` is set.
+        # The `MembershipRole`s to be updated. Updating roles in the same request as
+        # adding or removing roles is not supported. Must not be set if either `
+        # add_roles` or `remove_roles` is set.
         # Corresponds to the JSON property `updateRolesParams`
         # @return [Array<Google::Apis::CloudidentityV1beta1::UpdateMembershipRolesParams>]
         attr_accessor :update_roles_params
@@ -1164,9 +1972,9 @@ module Google
       class ModifyMembershipRolesResponse
         include Google::Apis::Core::Hashable
       
-        # A membership within the Cloud Identity Groups API.
-        # A `Membership` defines a relationship between a `Group` and an entity
-        # belonging to that `Group`, referred to as a "member".
+        # A membership within the Cloud Identity Groups API. A `Membership` defines a
+        # relationship between a `Group` and an entity belonging to that `Group`,
+        # referred to as a "member".
         # Corresponds to the JSON property `membership`
         # @return [Google::Apis::CloudidentityV1beta1::Membership]
         attr_accessor :membership
@@ -1186,47 +1994,45 @@ module Google
       class Operation
         include Google::Apis::Core::Hashable
       
-        # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
+        # If the value is `false`, it means the operation is still in progress. If `true`
+        # , the operation is completed, and either `error` or `response` is available.
         # Corresponds to the JSON property `done`
         # @return [Boolean]
         attr_accessor :done
         alias_method :done?, :done
       
-        # The `Status` type defines a logical error model that is suitable for
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by [
+        # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+        # data: error code, error message, and error details. You can find out more
+        # about this error model and how to work with it in the [API Design Guide](https:
+        # //cloud.google.com/apis/design/errors).
         # Corresponds to the JSON property `error`
         # @return [Google::Apis::CloudidentityV1beta1::Status]
         attr_accessor :error
       
-        # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
+        # Service-specific metadata associated with the operation. It typically contains
+        # progress information and common metadata such as create time. Some services
+        # might not provide such metadata. Any method that returns a long-running
+        # operation should document the metadata type, if any.
         # Corresponds to the JSON property `metadata`
         # @return [Hash<String,Object>]
         attr_accessor :metadata
       
         # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/`unique_id``.
+        # originally returns it. If you use the default HTTP mapping, the `name` should
+        # be a resource name ending with `operations/`unique_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
-        # The normal response of the operation in case of success.  If the original
-        # method returns no data on success, such as `Delete`, the response is
-        # `google.protobuf.Empty`.  If the original method is standard
-        # `Get`/`Create`/`Update`, the response should be the resource.  For other
-        # methods, the response should have the type `XxxResponse`, where `Xxx`
-        # is the original method name.  For example, if the original method name
-        # is `TakeSnapshot()`, the inferred response type is
-        # `TakeSnapshotResponse`.
+        # The normal response of the operation in case of success. If the original
+        # method returns no data on success, such as `Delete`, the response is `google.
+        # protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
+        # the response should be the resource. For other methods, the response should
+        # have the type `XxxResponse`, where `Xxx` is the original method name. For
+        # example, if the original method name is `TakeSnapshot()`, the inferred
+        # response type is `TakeSnapshotResponse`.
         # Corresponds to the JSON property `response`
         # @return [Hash<String,Object>]
         attr_accessor :response
@@ -1254,8 +2060,8 @@ module Google
         # @return [Array<Google::Apis::CloudidentityV1beta1::Group>]
         attr_accessor :groups
       
-        # A continuation token to retrieve the next page of results, or empty if
-        # there are no more results available.
+        # A continuation token to retrieve the next page of results, or empty if there
+        # are no more results available.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token
@@ -1271,12 +2077,64 @@ module Google
         end
       end
       
-      # The `Status` type defines a logical error model that is suitable for
-      # different programming environments, including REST APIs and RPC APIs. It is
-      # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-      # three pieces of data: error code, error message, and error details.
-      # You can find out more about this error model and how to work with it in the
-      # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      # The response message for MembershipsService.SearchTransitiveGroups.
+      class SearchTransitiveGroupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive groups satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::GroupRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The response message for MembershipsService.SearchTransitiveMemberships.
+      class SearchTransitiveMembershipsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive members satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::MemberRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by [
+      # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+      # data: error code, error message, and error details. You can find out more
+      # about this error model and how to work with it in the [API Design Guide](https:
+      # //cloud.google.com/apis/design/errors).
       class Status
         include Google::Apis::Core::Hashable
       
@@ -1285,15 +2143,15 @@ module Google
         # @return [Fixnum]
         attr_accessor :code
       
-        # A list of messages that carry the error details.  There is a common set of
+        # A list of messages that carry the error details. There is a common set of
         # message types for APIs to use.
         # Corresponds to the JSON property `details`
         # @return [Array<Hash<String,Object>>]
         attr_accessor :details
       
-        # A developer-facing error message, which should be in English. Any
-        # user-facing error message should be localized and sent in the
-        # google.rpc.Status.details field, or localized by the client.
+        # A developer-facing error message, which should be in English. Any user-facing
+        # error message should be localized and sent in the google.rpc.Status.details
+        # field, or localized by the client.
         # Corresponds to the JSON property `message`
         # @return [String]
         attr_accessor :message
@@ -1310,18 +2168,38 @@ module Google
         end
       end
       
+      # Message representing the role of a TransitiveMembership.
+      class TransitiveMembershipRole
+        include Google::Apis::Core::Hashable
+      
+        # TransitiveMembershipRole in string format. Currently supported
+        # TransitiveMembershipRoles: `"MEMBER"`, `"OWNER"`, and `"MANAGER"`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
       # The details of an update to a `MembershipRole`.
       class UpdateMembershipRolesParams
         include Google::Apis::Core::Hashable
       
-        # The fully-qualified names of fields to update.
-        # May only contain the field `expiry_detail`.
+        # The fully-qualified names of fields to update. May only contain the field `
+        # expiry_detail`.
         # Corresponds to the JSON property `fieldMask`
         # @return [String]
         attr_accessor :field_mask
       
-        # A membership role within the Cloud Identity Groups API.
-        # A `MembershipRole` defines the privileges granted to a `Membership`.
+        # A membership role within the Cloud Identity Groups API. A `MembershipRole`
+        # defines the privileges granted to a `Membership`.
         # Corresponds to the JSON property `membershipRole`
         # @return [Google::Apis::CloudidentityV1beta1::MembershipRole]
         attr_accessor :membership_role
@@ -1337,12 +2215,36 @@ module Google
         end
       end
       
+      # Request message for wiping all data on the device.
+      class WipeDeviceRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for wiping all data on the device.
       class WipeDeviceResponse
         include Google::Apis::Core::Hashable
       
-        # Represents a Device known to Google Cloud, independent of the device
-        # ownership, type, and whether it is assigned or in use by a user.
+        # A Device within the Cloud Identity Devices API. Represents a Device known to
+        # Google Cloud, independent of the device ownership, type, and whether it is
+        # assigned or in use by a user.
         # Corresponds to the JSON property `device`
         # @return [Google::Apis::CloudidentityV1beta1::Device]
         attr_accessor :device
@@ -1357,11 +2259,35 @@ module Google
         end
       end
       
+      # Request message for starting an account wipe on device.
+      class WipeDeviceUserRequest
+        include Google::Apis::Core::Hashable
+      
+        # Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        # of the customer. If you're using this API for your own organization, use `
+        # customers/my_customer` If you're using this API to manage another organization,
+        # use `customers/`customer_id``, where customer_id is the customer to whom the
+        # device belongs.
+        # Corresponds to the JSON property `customer`
+        # @return [String]
+        attr_accessor :customer
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @customer = args[:customer] if args.key?(:customer)
+        end
+      end
+      
       # Response message for wiping the user's account from the device.
       class WipeDeviceUserResponse
         include Google::Apis::Core::Hashable
       
-        # A DeviceUser is a resource representing a user's use of a Device
+        # Represents a user's use of a Device in the Cloud Identity Devices API. A
+        # DeviceUser is a resource representing a user's use of a Device
         # Corresponds to the JSON property `deviceUser`
         # @return [Google::Apis::CloudidentityV1beta1::DeviceUser]
         attr_accessor :device_user