ibm_cloud_iam 1.0.1 → 2.0.0

data/docs/ActivitiesApi.md

@@ -0,0 +1,149 @@
+# IbmCloudIam::ActivitiesApi
+
+All URIs are relative to *https://iam.cloud.ibm.com*
+
+| Method | HTTP request | Description |
+| ------ | ------------ | ----------- |
+| [**create_report**](ActivitiesApi.md#create_report) | **POST** /v1/activity/accounts/{account_id}/report | Trigger activity report for the account |
+| [**get_report**](ActivitiesApi.md#get_report) | **GET** /v1/activity/accounts/{account_id}/report/{reference} | Get activity report for the account |
+
+
+## create_report
+
+> <ReportReference> create_report(account_id, authorization, opts)
+
+Trigger activity report for the account
+
+Trigger activity report for the account by specifying the account ID. It can take a few minutes to generate the report for retrieval.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::ActivitiesApi.new
+account_id = 'account_id_example' # String | ID of the account
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Make sure that the provided token has the required authority for the request.
+opts = {
+  type: 'type_example', # String | Optional report type. The supported value is 'inactive'. List all identities that have not authenticated within the time indicated by duration.
+  duration: 'duration_example' # String | Optional duration of the report. The supported unit of duration is hours.
+}
+
+begin
+  # Trigger activity report for the account
+  result = api_instance.create_report(account_id, authorization, opts)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling ActivitiesApi->create_report: #{e}"
+end
+```
+
+#### Using the create_report_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<ReportReference>, Integer, Hash)> create_report_with_http_info(account_id, authorization, opts)
+
+```ruby
+begin
+  # Trigger activity report for the account
+  data, status_code, headers = api_instance.create_report_with_http_info(account_id, authorization, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ReportReference>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling ActivitiesApi->create_report_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | ID of the account |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Make sure that the provided token has the required authority for the request. |  |
+| **type** | **String** | Optional report type. The supported value is &#39;inactive&#39;. List all identities that have not authenticated within the time indicated by duration. | [optional][default to &#39;inactive&#39;] |
+| **duration** | **String** | Optional duration of the report. The supported unit of duration is hours. | [optional][default to &#39;720&#39;] |
+
+### Return type
+
+[**ReportReference**](ReportReference.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
+## get_report
+
+> <Report> get_report(account_id, reference, authorization)
+
+Get activity report for the account
+
+Get activity report for the account by specifying the account ID and the reference that is generated by triggering the report. Reports older than a day are deleted when generating a new report.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::ActivitiesApi.new
+account_id = 'account_id_example' # String | ID of the account
+reference = 'reference_example' # String | Reference for the report to be generated, You can use 'latest' to get the latest report for the given account.
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Make sure that the provided token has the required authority for the request.
+
+begin
+  # Get activity report for the account
+  result = api_instance.get_report(account_id, reference, authorization)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling ActivitiesApi->get_report: #{e}"
+end
+```
+
+#### Using the get_report_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<Report>, Integer, Hash)> get_report_with_http_info(account_id, reference, authorization)
+
+```ruby
+begin
+  # Get activity report for the account
+  data, status_code, headers = api_instance.get_report_with_http_info(account_id, reference, authorization)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <Report>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling ActivitiesApi->get_report_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | ID of the account |  |
+| **reference** | **String** | Reference for the report to be generated, You can use &#39;latest&#39; to get the latest report for the given account. |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Make sure that the provided token has the required authority for the request. |  |
+
+### Return type
+
+[**Report**](Report.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+

data/docs/Activity.md

@@ -0,0 +1,20 @@
+# IbmCloudIam::Activity
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **last_authn** | **String** | Time when the entity was last authenticated. | [optional] |
+| **authn_count** | **Integer** | Authentication count, number of times the entity was authenticated. |  |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::Activity.new(
+  last_authn: null,
+  authn_count: null
+)
+```
+

data/docs/AddAccountIdpSettingRequest.md

@@ -0,0 +1,22 @@
+# IbmCloudIam::AddAccountIdpSettingRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **cloud_user_strategy** | **String** | Strategy how Cloud User representives for the IdP users are handled |  |
+| **active** | **Boolean** | Specifies if the IdP is enabled for usage in the given account context |  |
+| **ui_default** | **Boolean** | Specifies if the IdP is used as default in the given account context |  |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AddAccountIdpSettingRequest.new(
+  cloud_user_strategy: null,
+  active: null,
+  ui_default: null
+)
+```
+

data/docs/ApiKey.md

@@ -2,42 +2,53 @@
 
 ## Properties
 
-Name | Type | Description | Notes
------------- | ------------- | ------------- | -------------
-**context** | [**ResponseContext**](ResponseContext.md) |  | [optional] 
-**id** | **String** | Unique identifier of this API Key. | 
-**entity_tag** | **String** | Version of the API Key details object. You need to specify this value when updating the API key to avoid stale updates. | [optional] 
-**crn** | **String** | Cloud Resource Name of the item. Example Cloud Resource Name: 'crn:v1:bluemix:public:iam-identity:us-south:a/myaccount::apikey:1234-9012-5678' | 
-**locked** | **Boolean** | The API key cannot be changed if set to true. | 
-**created_at** | **DateTime** | If set contains a date time string of the creation date in ISO format | [optional] 
-**created_by** | **String** | IAM ID of the user or service which created the API key. | 
-**modified_at** | **DateTime** | If set contains a date time string of the last modification date in ISO format | [optional] 
-**name** | **String** | Name of the API key. The name is not checked for uniqueness. Therefore multiple names with the same value can exist. Access is done via the UUID of the API key. | 
-**description** | **String** | The optional description of the API key. The 'description' property is only available if a description was provided during a create of an API key. | [optional] 
-**iam_id** | **String** | The iam_id that this API key authenticates. | 
-**account_id** | **String** | ID of the account that this API key authenticates for. | 
-**apikey** | **String** | The API key value. This property only contains the API key value for the following cases: create an API key, update a service ID API key that stores the API key value as retrievable, or get a service ID API key that stores the API key value as retrievable. All other operations don't return the API key value, for example all user API key related operations, except for create, don't contain the API key value. | 
-**history** | [**Array<EnityHistoryRecord>**](EnityHistoryRecord.md) | History of the API key | [optional] 
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **context** | [**ResponseContext**](ResponseContext.md) |  | [optional] |
+| **id** | **String** | Unique identifier of this API Key. |  |
+| **entity_tag** | **String** | Version of the API Key details object. You need to specify this value when updating the API key to avoid stale updates. | [optional] |
+| **crn** | **String** | Cloud Resource Name of the item. Example Cloud Resource Name: 'crn:v1:bluemix:public:iam-identity:us-south:a/myaccount::apikey:1234-9012-5678' |  |
+| **locked** | **Boolean** | The API key cannot be changed if set to true. |  |
+| **disabled** | **Boolean** | Defines if API key is disabled, API key cannot be used if 'disabled' is set to true. | [optional] |
+| **created_at** | **Time** | If set contains a date time string of the creation date in ISO format. | [optional] |
+| **created_by** | **String** | IAM ID of the user or service which created the API key. |  |
+| **modified_at** | **Time** | If set contains a date time string of the last modification date in ISO format. | [optional] |
+| **name** | **String** | Name of the API key. The name is not checked for uniqueness. Therefore multiple names with the same value can exist. Access is done via the UUID of the API key. |  |
+| **support_sessions** | **Boolean** | Defines whether you can manage CLI login sessions for the API key. When `true`, sessions are created and can be reviewed or revoked. When `false`, no sessions are tracked. To block access, delete or rotate the API key. Available only for user API keys. | [optional] |
+| **action_when_leaked** | **String** | Defines the action to take when API key is leaked, valid values are 'none', 'disable' and 'delete'. | [optional] |
+| **expires_at** | **String** | Date and time when the API key becomes invalid, ISO 8601 datetime in the format 'yyyy-MM-ddTHH:mm+0000'. **WARNING** An API key will be permanently and irrevocably deleted when both the expires_at and modified_at timestamps are more than ninety (90) days in the past, regardless of the key’s locked status or any other state. | [optional] |
+| **description** | **String** | The optional description of the API key. The 'description' property is only available if a description was provided during a create of an API key. | [optional] |
+| **iam_id** | **String** | The iam_id that this API key authenticates. |  |
+| **account_id** | **String** | ID of the account that this API key authenticates for. |  |
+| **apikey** | **String** | The API key value. This property only contains the API key value for the following cases: create an API key, update a service ID API key that stores the API key value as retrievable, or get a service ID API key that stores the API key value as retrievable. All other operations don't return the API key value, for example all user API key related operations, except for create, don't contain the API key value. |  |
+| **history** | [**Array<EnityHistoryRecord>**](EnityHistoryRecord.md) | History of the API key. | [optional] |
+| **activity** | [**Activity**](Activity.md) |  | [optional] |
 
-## Code Sample
+## Example
 
 ```ruby
-require 'IbmCloudIam'
+require 'ibm_cloud_iam'
 
-instance = IbmCloudIam::ApiKey.new(context: null,
-                                 id: null,
-                                 entity_tag: null,
-                                 crn: null,
-                                 locked: null,
-                                 created_at: null,
-                                 created_by: null,
-                                 modified_at: null,
-                                 name: null,
-                                 description: null,
-                                 iam_id: null,
-                                 account_id: null,
-                                 apikey: null,
-                                 history: null)
+instance = IbmCloudIam::ApiKey.new(
+  context: null,
+  id: null,
+  entity_tag: null,
+  crn: null,
+  locked: null,
+  disabled: null,
+  created_at: null,
+  created_by: null,
+  modified_at: null,
+  name: null,
+  support_sessions: null,
+  action_when_leaked: null,
+  expires_at: null,
+  description: null,
+  iam_id: null,
+  account_id: null,
+  apikey: null,
+  history: null,
+  activity: null
+)
 ```
 
-

data/docs/ApiKeyInsideCreateServiceIdRequest.md

@@ -2,22 +2,27 @@
 
 ## Properties
 
-Name | Type | Description | Notes
------------- | ------------- | ------------- | -------------
-**name** | **String** | Name of the API key. The name is not checked for uniqueness. Therefore multiple names with the same value can exist. Access is done via the UUID of the API key. | 
-**description** | **String** | The optional description of the API key. The 'description' property is only available if a description was provided during a create of an API key. | [optional] 
-**apikey** | **String** | You can optionally passthrough the API key value for this API key. If passed, NO validation of that apiKey value is done, i.e. the value can be non-URL safe. If omitted, the API key management will create an URL safe opaque API key value. The value of the API key is checked for uniqueness. Please ensure enough variations when passing in this value. | [optional] 
-**store_value** | **Boolean** | Send true or false to set whether the API key value is retrievable in the future by using the Get details of an API key request. If you create an API key for a user, you must specify `false` or omit the value. We don't allow storing of API keys for users. | [optional] 
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **name** | **String** | Name of the API key. The name is not checked for uniqueness. Therefore multiple names with the same value can exist. Access is done via the UUID of the API key. |  |
+| **description** | **String** | The optional description of the API key. The 'description' property is only available if a description was provided during a create of an API key. | [optional] |
+| **apikey** | **String** | You can optionally passthrough the API key value for this API key. If passed, a minimum length validation of 32 characters for that apiKey value is done, i.e. the value can contain any characters and can even be non-URL safe, but the minimum length requirement must be met. If omitted, the API key management will create an URL safe opaque API key value. The value of the API key is checked for uniqueness. Ensure enough variations when passing in this value. | [optional] |
+| **store_value** | **Boolean** | Send true or false to set whether the API key value is retrievable in the future by using the Get details of an API key request. If you create an API key for a user, you must specify `false` or omit the value. We don't allow storing of API keys for users. | [optional] |
+| **action_when_leaked** | **String** | Defines the action to take when API key is leaked, valid values are 'none', 'disable' and 'delete'. | [optional] |
+| **expires_at** | **String** | Date and time when the API key becomes invalid, ISO 8601 datetime in the format 'yyyy-MM-ddTHH:mm+0000'. **WARNING** An API key will be permanently and irrevocably deleted when both the expires_at and modified_at timestamps are more than ninety (90) days in the past, regardless of the key’s locked status or any other state. | [optional] |
 
-## Code Sample
+## Example
 
 ```ruby
-require 'IbmCloudIam'
+require 'ibm_cloud_iam'
 
-instance = IbmCloudIam::ApiKeyInsideCreateServiceIdRequest.new(name: null,
-                                 description: null,
-                                 apikey: null,
-                                 store_value: null)
+instance = IbmCloudIam::ApiKeyInsideCreateServiceIdRequest.new(
+  name: null,
+  description: null,
+  apikey: null,
+  store_value: null,
+  action_when_leaked: null,
+  expires_at: null
+)
 ```
 
-

data/docs/ApiKeyList.md

@@ -2,28 +2,29 @@
 
 ## Properties
 
-Name | Type | Description | Notes
------------- | ------------- | ------------- | -------------
-**context** | [**ResponseContext**](ResponseContext.md) |  | [optional] 
-**offset** | **Integer** | The offset of the current page. | [optional] 
-**limit** | **Integer** | Optional size of a single page. Default is 20 items per page. Valid range is 1 to 100 | [optional] 
-**first** | **String** | Link to the first page. | [optional] 
-**previous** | **String** | Link to the previous available page. If 'previous' property is not part of the response no previous page is available. | [optional] 
-**_next** | **String** | Link to the next available page. If 'next' property is not part of the response no next page is available. | [optional] 
-**apikeys** | [**Array<ApiKey>**](ApiKey.md) | List of API keys based on the query paramters and the page size. The apikeys array is always part of the response but might be empty depending on the query parameters values provided. | 
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **context** | [**ResponseContext**](ResponseContext.md) |  | [optional] |
+| **offset** | **Integer** | The offset of the current page. | [optional] |
+| **limit** | **Integer** | Optional size of a single page. Default is 20 items per page. Valid range is 1 to 100 | [optional] |
+| **first** | **String** | Link to the first page. | [optional] |
+| **previous** | **String** | Link to the previous available page. If 'previous' property is not part of the response no previous page is available. | [optional] |
+| **_next** | **String** | Link to the next available page. If 'next' property is not part of the response no next page is available. | [optional] |
+| **apikeys** | [**Array<ApiKey>**](ApiKey.md) | List of API keys based on the query paramters and the page size. The apikeys array is always part of the response but might be empty depending on the query parameters values provided. |  |
 
-## Code Sample
+## Example
 
 ```ruby
-require 'IbmCloudIam'
+require 'ibm_cloud_iam'
 
-instance = IbmCloudIam::ApiKeyList.new(context: null,
-                                 offset: null,
-                                 limit: null,
-                                 first: null,
-                                 previous: null,
-                                 _next: null,
-                                 apikeys: null)
+instance = IbmCloudIam::ApiKeyList.new(
+  context: null,
+  offset: null,
+  limit: null,
+  first: null,
+  previous: null,
+  _next: null,
+  apikeys: null
+)
 ```
 
-

data/docs/ApikeyActivity.md

@@ -0,0 +1,28 @@
+# IbmCloudIam::ApikeyActivity
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** | Unique id of the apikey. |  |
+| **name** | **String** | Name provided during creation of the apikey. | [optional] |
+| **type** | **String** | Type of the apikey. Supported values are `serviceid` and `user`. |  |
+| **serviceid** | [**ApikeyActivityServiceid**](ApikeyActivityServiceid.md) |  | [optional] |
+| **user** | [**ApikeyActivityUser**](ApikeyActivityUser.md) |  | [optional] |
+| **last_authn** | **String** | Time when the apikey was last authenticated. | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::ApikeyActivity.new(
+  id: null,
+  name: null,
+  type: null,
+  serviceid: null,
+  user: null,
+  last_authn: null
+)
+```
+

data/docs/ApikeyActivityServiceid.md

@@ -0,0 +1,20 @@
+# IbmCloudIam::ApikeyActivityServiceid
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** | Unique identifier of this Service Id. | [optional] |
+| **name** | **String** | Name provided during creation of the serviceid. | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::ApikeyActivityServiceid.new(
+  id: null,
+  name: null
+)
+```
+

data/docs/ApikeyActivityUser.md

@@ -0,0 +1,24 @@
+# IbmCloudIam::ApikeyActivityUser
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **iam_id** | **String** | IAMid of the user | [optional] |
+| **name** | **String** | Name of the user | [optional] |
+| **username** | **String** | Username of the user | [optional] |
+| **email** | **String** | Email of the user | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::ApikeyActivityUser.new(
+  iam_id: null,
+  name: null,
+  username: null,
+  email: null
+)
+```
+

data/docs/AssignedTemplatesAccountSettings.md

@@ -0,0 +1,40 @@
+# IbmCloudIam::AssignedTemplatesAccountSettings
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **restrict_create_service_id** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_create_platform_apikey** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **allowed_ip_addresses** | **String** | Defines the IP addresses and subnets from which IAM tokens can be created for the account. | [optional] |
+| **mfa** | [**MfaOptions**](MfaOptions.md) |  | [optional] |
+| **session_expiration_in_seconds** | **String** | Defines the session expiration in seconds for the account. Valid values:   * Any whole number between between '900' and '86400'   * NOT_SET - To unset account setting and use service default | [optional][default to '86400'] |
+| **session_invalidation_in_seconds** | **String** | Defines the period of time in seconds in which a session will be invalidated due to inactivity. Valid values:   * Any whole number between '900' and '7200'   * NOT_SET - To unset account setting and use service default | [optional][default to '7200'] |
+| **max_sessions_per_identity** | **String** | Defines the max allowed sessions per identity required by the account. Valid values:   * Any whole number greater than 0   * NOT_SET - To unset account setting and use service default | [optional] |
+| **system_access_token_expiration_in_seconds** | **String** | Defines the access token expiration in seconds. Valid values:   * Any whole number between '900' and '3600'   * NOT_SET - To unset account setting and use service default | [optional][default to '3600'] |
+| **system_refresh_token_expiration_in_seconds** | **String** | Defines the refresh token expiration in seconds. Valid values:   * Any whole number between '900' and '259200'   * NOT_SET - To unset account setting and use service default | [optional][default to '259200'] |
+| **restrict_user_list_visibility** | [**UserVisbilityRetrictActionsForTemplate**](UserVisbilityRetrictActionsForTemplate.md) |  | [optional] |
+| **user_mfa** | [**Array<AccountSettingsUserMFAResponse>**](AccountSettingsUserMFAResponse.md) | List of users that are exempted from the MFA requirement of the account. | [optional] |
+| **restrict_user_domains** | [**TemplateAccountSettingsAllOfRestrictUserDomains**](TemplateAccountSettingsAllOfRestrictUserDomains.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AssignedTemplatesAccountSettings.new(
+  restrict_create_service_id: null,
+  restrict_create_platform_apikey: null,
+  allowed_ip_addresses: null,
+  mfa: null,
+  session_expiration_in_seconds: null,
+  session_invalidation_in_seconds: null,
+  max_sessions_per_identity: null,
+  system_access_token_expiration_in_seconds: null,
+  system_refresh_token_expiration_in_seconds: null,
+  restrict_user_list_visibility: null,
+  user_mfa: null,
+  restrict_user_domains: null
+)
+```
+

data/docs/CommonAccountSettingsRequest.md

@@ -0,0 +1,36 @@
+# IbmCloudIam::CommonAccountSettingsRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **restrict_create_service_id** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_create_platform_apikey** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **allowed_ip_addresses** | **String** | Defines the IP addresses and subnets from which IAM tokens can be created for the account. | [optional] |
+| **mfa** | [**MfaOptions**](MfaOptions.md) |  | [optional] |
+| **user_mfa** | [**Array<UserMfa>**](UserMfa.md) | List of users that are exempted from the MFA requirement of the account. | [optional] |
+| **session_expiration_in_seconds** | **String** | Defines the session expiration in seconds for the account. Valid values:   * Any whole number between between '900' and '86400'   * NOT_SET - To unset account setting and use service default | [optional][default to '86400'] |
+| **session_invalidation_in_seconds** | **String** | Defines the period of time in seconds in which a session will be invalidated due to inactivity. Valid values:   * Any whole number between '900' and '7200'   * NOT_SET - To unset account setting and use service default | [optional][default to '7200'] |
+| **max_sessions_per_identity** | **String** | Defines the max allowed sessions per identity required by the account. Valid values:   * Any whole number greater than 0   * NOT_SET - To unset account setting and use service default | [optional] |
+| **system_access_token_expiration_in_seconds** | **String** | Defines the access token expiration in seconds. Valid values:   * Any whole number between '900' and '3600'   * NOT_SET - To unset account setting and use service default | [optional][default to '3600'] |
+| **system_refresh_token_expiration_in_seconds** | **String** | Defines the refresh token expiration in seconds. Valid values:   * Any whole number between '900' and '259200'   * NOT_SET - To unset account setting and use service default | [optional][default to '259200'] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::CommonAccountSettingsRequest.new(
+  restrict_create_service_id: null,
+  restrict_create_platform_apikey: null,
+  allowed_ip_addresses: null,
+  mfa: null,
+  user_mfa: null,
+  session_expiration_in_seconds: null,
+  session_invalidation_in_seconds: null,
+  max_sessions_per_identity: null,
+  system_access_token_expiration_in_seconds: null,
+  system_refresh_token_expiration_in_seconds: null
+)
+```
+

data/docs/CommonAccountSettingsResponse.md

@@ -0,0 +1,34 @@
+# IbmCloudIam::CommonAccountSettingsResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **restrict_create_service_id** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_create_platform_apikey** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **allowed_ip_addresses** | **String** | Defines the IP addresses and subnets from which IAM tokens can be created for the account. | [optional] |
+| **mfa** | [**MfaOptions**](MfaOptions.md) |  | [optional] |
+| **session_expiration_in_seconds** | **String** | Defines the session expiration in seconds for the account. Valid values:   * Any whole number between between '900' and '86400'   * NOT_SET - To unset account setting and use service default | [optional][default to '86400'] |
+| **session_invalidation_in_seconds** | **String** | Defines the period of time in seconds in which a session will be invalidated due to inactivity. Valid values:   * Any whole number between '900' and '7200'   * NOT_SET - To unset account setting and use service default | [optional][default to '7200'] |
+| **max_sessions_per_identity** | **String** | Defines the max allowed sessions per identity required by the account. Valid values:   * Any whole number greater than 0   * NOT_SET - To unset account setting and use service default | [optional] |
+| **system_access_token_expiration_in_seconds** | **String** | Defines the access token expiration in seconds. Valid values:   * Any whole number between '900' and '3600'   * NOT_SET - To unset account setting and use service default | [optional][default to '3600'] |
+| **system_refresh_token_expiration_in_seconds** | **String** | Defines the refresh token expiration in seconds. Valid values:   * Any whole number between '900' and '259200'   * NOT_SET - To unset account setting and use service default | [optional][default to '259200'] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::CommonAccountSettingsResponse.new(
+  restrict_create_service_id: null,
+  restrict_create_platform_apikey: null,
+  allowed_ip_addresses: null,
+  mfa: null,
+  session_expiration_in_seconds: null,
+  session_invalidation_in_seconds: null,
+  max_sessions_per_identity: null,
+  system_access_token_expiration_in_seconds: null,
+  system_refresh_token_expiration_in_seconds: null
+)
+```
+

data/docs/ConsumersResponse.md

@@ -0,0 +1,20 @@
+# IbmCloudIam::ConsumersResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **idp_id** | **String** |  | [optional] |
+| **consumers** | [**Array<ConsumersResponseConsumersInner>**](ConsumersResponseConsumersInner.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::ConsumersResponse.new(
+  idp_id: null,
+  consumers: null
+)
+```
+

data/docs/ConsumersResponseConsumersInner.md

@@ -0,0 +1,20 @@
+# IbmCloudIam::ConsumersResponseConsumersInner
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** |  | [optional] |
+| **share_scope** | [**Array<ShareScope>**](ShareScope.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::ConsumersResponseConsumersInner.new(
+  account_id: null,
+  share_scope: null
+)
+```
+