google-api-client 0.44.2 → 0.46.2

data/generated/google/apis/cloudidentity_v1/representations.rb

@@ -196,6 +196,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ModifyMembershipRolesRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ModifyMembershipRolesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Operation
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -505,6 +517,23 @@ module Google
         end
       end
       
+      class ModifyMembershipRolesRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :add_roles, as: 'addRoles', class: Google::Apis::CloudidentityV1::MembershipRole, decorator: Google::Apis::CloudidentityV1::MembershipRole::Representation
+      
+          collection :remove_roles, as: 'removeRoles'
+        end
+      end
+      
+      class ModifyMembershipRolesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :membership, as: 'membership', class: Google::Apis::CloudidentityV1::Membership, decorator: Google::Apis::CloudidentityV1::Membership::Representation
+      
+        end
+      end
+      
       class Operation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudidentity_v1/service.rb

@@ -808,6 +808,8 @@ module Google
         
         # Creates a Group.
         # @param [Google::Apis::CloudidentityV1::Group] group_object
+        # @param [String] initial_group_config
+        #   Optional. The initial configuration option for the `Group`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -825,22 +827,23 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_group(group_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+        def create_group(group_object = nil, initial_group_config: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:post, 'v1/groups', options)
           command.request_representation = Google::Apis::CloudidentityV1::Group::Representation
           command.request_object = group_object
           command.response_representation = Google::Apis::CloudidentityV1::Operation::Representation
           command.response_class = Google::Apis::CloudidentityV1::Operation
+          command.query['initialGroupConfig'] = initial_group_config unless initial_group_config.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes a Group.
+        # Deletes a `Group`.
         # @param [String] name
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Group in the format: `groups/`group_id``, where `group_id` is the
-        #   unique ID assigned to the Group.
+        #   Required. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Group` to retrieve. Must be of the form `groups/`
+        #   group_id``.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -868,11 +871,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Retrieves a Group.
+        # Retrieves a `Group`.
         # @param [String] name
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Group in the format: `groups/`group_id``, where `group_id` is the
-        #   unique ID assigned to the Group.
+        #   Required. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Group` to retrieve. Must be of the form `groups/`
+        #   group_id``.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -900,16 +903,22 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists groups within a customer or a domain.
+        # Lists the `Group`s under a customer or namespace.
         # @param [Fixnum] page_size
-        #   The default page size is 200 (max 1000) for the BASIC view, and 50 (max 500)
-        #   for the FULL view.
+        #   The maximum number of results to return. Note that the number of results
+        #   returned may be less than this value even if there are more available results.
+        #   To fetch all results, clients must continue calling this method repeatedly
+        #   until the response no longer contains a `next_page_token`. If unspecified,
+        #   defaults to 200 for `View.BASIC` and to 50 for `View.FULL`. Must not be
+        #   greater than 1000 for `View.BASIC` or 500 for `View.FULL`.
         # @param [String] page_token
-        #   The next_page_token value returned from a previous list request, if any.
+        #   The `next_page_token` value returned from a previous list request, if any.
         # @param [String] parent
-        #   Required. Customer ID to list all groups from.
+        #   Required. The parent resource under which to list all `Group`s. Must be of the
+        #   form `identitysources/`identity_source_id`` for external- identity-mapped
+        #   groups or `customers/`customer_id`` for Google Groups.
         # @param [String] view
-        #   Group resource view to be returned. Defaults to [View.BASIC]().
+        #   The level of detail to be returned. If unspecified, defaults to `View.BASIC`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -940,16 +949,19 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Looks up [resource name](https://cloud.google.com/apis/design/resource_names)
-        # of a Group by its EntityKey.
+        # Looks up the [resource name](https://cloud.google.com/apis/design/
+        # resource_names) of a `Group` by its `EntityKey`.
         # @param [String] group_key_id
-        #   The ID of the entity within the given namespace. The ID must be unique within
-        #   its namespace.
+        #   The ID of the entity. For Google-managed entities, the `id` should be the
+        #   email address of an existing group or user. For external-identity-mapped
+        #   entities, the `id` must be a string conforming to the Identity Source's
+        #   requirements. Must be unique within a `namespace`.
         # @param [String] group_key_namespace
-        #   Namespaces provide isolation for IDs, so an ID only needs to be unique within
-        #   its namespace. Namespaces are currently only created as part of IdentitySource
-        #   creation from Admin Console. A namespace `"identitysources/`identity_source_id`
-        #   "` is created corresponding to every Identity Source `identity_source_id`.
+        #   The namespace in which the entity exists. If not specified, the `EntityKey`
+        #   represents a Google-managed entity such as a Google user or a Google Group. If
+        #   specified, the `EntityKey` represents an external-identity-mapped group. The
+        #   namespace must correspond to an identity source created in Admin Console and
+        #   must be in the form of `identitysources/`identity_source_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -978,15 +990,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Updates a Group.
+        # Updates a `Group`.
         # @param [String] name
-        #   Output only. [Resource name](https://cloud.google.com/apis/design/
-        #   resource_names) of the Group in the format: `groups/`group_id``, where
-        #   group_id is the unique ID assigned to the Group. Must be left blank while
-        #   creating a Group.
+        #   Output only. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Group`. Shall be of the form `groups/`group_id``.
         # @param [Google::Apis::CloudidentityV1::Group] group_object
         # @param [String] update_mask
-        #   Required. Editable fields: `display_name`, `description`
+        #   Required. The fully-qualified names of fields to update. May only contain the
+        #   following fields: `display_name`, `description`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1017,18 +1028,24 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Searches for Groups.
+        # Searches for `Group`s matching a specified query.
         # @param [Fixnum] page_size
-        #   The default page size is 200 (max 1000) for the BASIC view, and 50 (max 500)
-        #   for the FULL view.
+        #   The maximum number of results to return. Note that the number of results
+        #   returned may be less than this value even if there are more available results.
+        #   To fetch all results, clients must continue calling this method repeatedly
+        #   until the response no longer contains a `next_page_token`. If unspecified,
+        #   defaults to 200 for `GroupView.BASIC` and 50 for `GroupView.FULL`. Must not be
+        #   greater than 1000 for `GroupView.BASIC` or 500 for `GroupView.FULL`.
         # @param [String] page_token
-        #   The next_page_token value returned from a previous search request, if any.
+        #   The `next_page_token` value returned from a previous search request, if any.
         # @param [String] query
-        #   Required. `Required`. Query string for performing search on groups. Users can
-        #   search on parent and label attributes of groups. EXACT match ('==') is
-        #   supported on parent, and CONTAINS match ('in') is supported on labels.
+        #   Required. The search query. Must be specified in [Common Expression Language](
+        #   https://opensource.google/projects/cel). May only contain equality operators
+        #   on the parent and inclusion operators on labels (e.g., `parent == 'customers/`
+        #   customer_id`' && 'cloudidentity.googleapis.com/groups.discussion_forum' in
+        #   labels`).
         # @param [String] view
-        #   Group resource view to be returned. Defaults to [View.BASIC]().
+        #   The level of detail to be returned. If unspecified, defaults to `View.BASIC`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1059,11 +1076,10 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a Membership.
+        # Creates a `Membership`.
         # @param [String] parent
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Group to create Membership within. Format: `groups/`group_id``, where `
-        #   group_id` is the unique ID assigned to the Group.
+        #   Required. The parent `Group` resource under which to create the `Membership`.
+        #   Must be of the form `groups/`group_id``.
         # @param [Google::Apis::CloudidentityV1::Membership] membership_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -1094,12 +1110,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes a Membership.
+        # Deletes a `Membership`.
         # @param [String] name
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Membership to be deleted. Format: `groups/`group_id`/memberships/`
-        #   member_id``, where `group_id` is the unique ID assigned to the Group to which
-        #   Membership belongs to, and member_id is the unique ID assigned to the member.
+        #   Required. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Membership` to delete. Must be of the form `groups/`
+        #   group_id`/memberships/`membership_id``
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1127,12 +1142,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Retrieves a Membership.
+        # Retrieves a `Membership`.
         # @param [String] name
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Membership to be retrieved. Format: `groups/`group_id`/memberships/`
-        #   member_id``, where `group_id` is the unique id assigned to the Group to which
-        #   Membership belongs to, and `member_id` is the unique ID assigned to the member.
+        #   Required. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Membership` to retrieve. Must be of the form `groups/`
+        #   group_id`/memberships/`membership_id``.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1160,18 +1174,21 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists Memberships within a Group.
+        # Lists the `Membership`s within a `Group`.
         # @param [String] parent
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Group to list Memberships within. Format: `groups/`group_id``, where `
-        #   group_id` is the unique ID assigned to the Group.
+        #   Required. The parent `Group` resource under which to lookup the `Membership`
+        #   name. Must be of the form `groups/`group_id``.
         # @param [Fixnum] page_size
-        #   The default page size is 200 (max 1000) for the BASIC view, and 50 (max 500)
-        #   for the FULL view.
+        #   The maximum number of results to return. Note that the number of results
+        #   returned may be less than this value even if there are more available results.
+        #   To fetch all results, clients must continue calling this method repeatedly
+        #   until the response no longer contains a `next_page_token`. If unspecified,
+        #   defaults to 200 for `GroupView.BASIC` and to 50 for `GroupView.FULL`. Must not
+        #   be greater than 1000 for `GroupView.BASIC` or 500 for `GroupView.FULL`.
         # @param [String] page_token
-        #   The next_page_token value returned from a previous list request, if any.
+        #   The `next_page_token` value returned from a previous search request, if any.
         # @param [String] view
-        #   Membership resource view to be returned. Defaults to View.BASIC.
+        #   The level of detail to be returned. If unspecified, defaults to `View.BASIC`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1202,20 +1219,22 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Looks up [resource name](https://cloud.google.com/apis/design/resource_names)
-        # of a Membership within a Group by member's EntityKey.
+        # Looks up the [resource name](https://cloud.google.com/apis/design/
+        # resource_names) of a `Membership` by its `EntityKey`.
         # @param [String] parent
-        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
-        #   of the Group to lookup Membership within. Format: `groups/`group_id``, where `
-        #   group_id` is the unique ID assigned to the Group.
+        #   Required. The parent `Group` resource under which to lookup the `Membership`
+        #   name. Must be of the form `groups/`group_id``.
         # @param [String] member_key_id
-        #   The ID of the entity within the given namespace. The ID must be unique within
-        #   its namespace.
+        #   The ID of the entity. For Google-managed entities, the `id` should be the
+        #   email address of an existing group or user. For external-identity-mapped
+        #   entities, the `id` must be a string conforming to the Identity Source's
+        #   requirements. Must be unique within a `namespace`.
         # @param [String] member_key_namespace
-        #   Namespaces provide isolation for IDs, so an ID only needs to be unique within
-        #   its namespace. Namespaces are currently only created as part of IdentitySource
-        #   creation from Admin Console. A namespace `"identitysources/`identity_source_id`
-        #   "` is created corresponding to every Identity Source `identity_source_id`.
+        #   The namespace in which the entity exists. If not specified, the `EntityKey`
+        #   represents a Google-managed entity such as a Google user or a Google Group. If
+        #   specified, the `EntityKey` represents an external-identity-mapped group. The
+        #   namespace must correspond to an identity source created in Admin Console and
+        #   must be in the form of `identitysources/`identity_source_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1244,6 +1263,41 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Modifies the `MembershipRole`s of a `Membership`.
+        # @param [String] name
+        #   Required. The [resource name](https://cloud.google.com/apis/design/
+        #   resource_names) of the `Membership` whose roles are to be modified. Must be of
+        #   the form `groups/`group_id`/memberships/`membership_id``.
+        # @param [Google::Apis::CloudidentityV1::ModifyMembershipRolesRequest] modify_membership_roles_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1::ModifyMembershipRolesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1::ModifyMembershipRolesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def modify_membership_roles(name, modify_membership_roles_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+name}:modifyMembershipRoles', options)
+          command.request_representation = Google::Apis::CloudidentityV1::ModifyMembershipRolesRequest::Representation
+          command.request_object = modify_membership_roles_request_object
+          command.response_representation = Google::Apis::CloudidentityV1::ModifyMembershipRolesResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1::ModifyMembershipRolesResponse
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected
 

data/generated/google/apis/cloudidentity_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/identity/
     module CloudidentityV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200908'
+      REVISION = '20200927'
 
       # See your device details
       AUTH_CLOUD_IDENTITY_DEVICES_LOOKUP = 'https://www.googleapis.com/auth/cloud-identity.devices.lookup'

data/generated/google/apis/cloudidentity_v1beta1/classes.rb

@@ -239,6 +239,29 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.CheckTransitiveMembership.
+      class CheckTransitiveMembershipResponse
+        include Google::Apis::Core::Hashable
+      
+        # Response does not include the possible roles of a member since the behavior of
+        # this rpc is not all-or-nothing unlike the other rpcs. So, it may not be
+        # possible to list all the roles definitively, due to possible lack of
+        # authorization in some of the paths.
+        # Corresponds to the JSON property `hasMembership`
+        # @return [Boolean]
+        attr_accessor :has_membership
+        alias_method :has_membership?, :has_membership
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @has_membership = args[:has_membership] if args.key?(:has_membership)
+        end
+      end
+      
       # Represents the state associated with an API client calling the Devices API.
       # Resource representing ClientState and supports updates from API users
       class ClientState
@@ -1494,6 +1517,58 @@ module Google
         end
       end
       
+      # Message representing a transitive group of a user or a group.
+      class GroupRelation
+        include Google::Apis::Core::Hashable
+      
+        # Display name for this group.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Resource name for this group.
+        # Corresponds to the JSON property `group`
+        # @return [String]
+        attr_accessor :group
+      
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
+        # Corresponds to the JSON property `groupKey`
+        # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
+        attr_accessor :group_key
+      
+        # Labels for Group resource.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # The relation between the member and the transitive group.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # Membership roles of the member for the group.
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @group = args[:group] if args.key?(:group)
+          @group_key = args[:group_key] if args.key?(:group_key)
+          @labels = args[:labels] if args.key?(:labels)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # Response message that is returned in LRO result of ListClientStates Operation.
       class ListClientStatesResponse
         include Google::Apis::Core::Hashable
@@ -1698,6 +1773,44 @@ module Google
         end
       end
       
+      # Message representing a transitive membership of a group.
+      class MemberRelation
+        include Google::Apis::Core::Hashable
+      
+        # Resource name for this member if member is a GROUP, otherwise it is empty.
+        # Corresponds to the JSON property `member`
+        # @return [String]
+        attr_accessor :member
+      
+        # Entity key has an id and a namespace. In case of discussion forums, the id
+        # will be an email address without a namespace.
+        # Corresponds to the JSON property `preferredMemberKey`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::EntityKey>]
+        attr_accessor :preferred_member_key
+      
+        # The relation between the group and the transitive member.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # The membership role details (i.e name of role and expiry time).
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member = args[:member] if args.key?(:member)
+          @preferred_member_key = args[:preferred_member_key] if args.key?(:preferred_member_key)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # A membership within the Cloud Identity Groups API. A `Membership` defines a
       # relationship between a `Group` and an entity belonging to that `Group`,
       # referred to as a "member".
@@ -1770,6 +1883,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Each edge contains information about the member that belongs to this group.
+        # Note: Fields returned here will help identify the specific Membership resource
+        # (e.g name, preferred_member_key and role), but may not be a comprehensive list
+        # of all fields.
         # Corresponds to the JSON property `edges`
         # @return [Array<Google::Apis::CloudidentityV1beta1::Membership>]
         attr_accessor :edges
@@ -1964,6 +2080,58 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.SearchTransitiveGroups.
+      class SearchTransitiveGroupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive groups satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::GroupRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The response message for MembershipsService.SearchTransitiveMemberships.
+      class SearchTransitiveMembershipsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive members satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::MemberRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
@@ -2003,6 +2171,26 @@ module Google
         end
       end
       
+      # Message representing the role of a TransitiveMembership.
+      class TransitiveMembershipRole
+        include Google::Apis::Core::Hashable
+      
+        # TransitiveMembershipRole in string format. Currently supported
+        # TransitiveMembershipRoles: `"MEMBER"`, `"OWNER"`, and `"MANAGER"`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
       # The details of an update to a `MembershipRole`.
       class UpdateMembershipRolesParams
         include Google::Apis::Core::Hashable