ibm_cloud_iam 1.0.2 → 2.0.0

data/docs/AccessGroupCount.md

@@ -0,0 +1,20 @@
+# IbmCloudIam::AccessGroupCount
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **group_id** | **String** | Access group identifier | [optional] |
+| **count** | **Integer** | Number of claim rules for the access group | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccessGroupCount.new(
+  group_id: null,
+  count: null
+)
+```
+

data/docs/AccountBasedMfaEnrollment.md

@@ -0,0 +1,24 @@
+# IbmCloudIam::AccountBasedMfaEnrollment
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **security_questions** | [**MfaEnrollmentTypeStatus**](MfaEnrollmentTypeStatus.md) |  |  |
+| **totp** | [**MfaEnrollmentTypeStatus**](MfaEnrollmentTypeStatus.md) |  |  |
+| **verisign** | [**MfaEnrollmentTypeStatus**](MfaEnrollmentTypeStatus.md) |  |  |
+| **complies** | **Boolean** | The enrollment complies to the effective requirement. |  |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccountBasedMfaEnrollment.new(
+  security_questions: null,
+  totp: null,
+  verisign: null,
+  complies: null
+)
+```
+

data/docs/AccountIdpSettings.md

@@ -0,0 +1,32 @@
+# IbmCloudIam::AccountIdpSettings
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **idp_id** | **String** |  | [optional] |
+| **owner_account** | **String** |  | [optional] |
+| **owner_account_name** | **String** |  | [optional] |
+| **idp_name** | **String** |  | [optional] |
+| **idp_type** | **String** |  | [optional] |
+| **cloud_user_strategy** | **String** |  | [optional] |
+| **active** | **Boolean** |  | [optional] |
+| **ui_default** | **Boolean** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccountIdpSettings.new(
+  idp_id: null,
+  owner_account: null,
+  owner_account_name: null,
+  idp_name: null,
+  idp_type: null,
+  cloud_user_strategy: null,
+  active: null,
+  ui_default: null
+)
+```
+

data/docs/AccountLimitsApi.md

@@ -0,0 +1,173 @@
+# IbmCloudIam::AccountLimitsApi
+
+All URIs are relative to *https://iam.cloud.ibm.com*
+
+| Method | HTTP request | Description |
+| ------ | ------------ | ----------- |
+| [**bulk_list_account_entity_consumption**](AccountLimitsApi.md#bulk_list_account_entity_consumption) | **POST** /v1/accounts/{account_id}/limits/identity | Get account entity limits via POST request |
+| [**get_account_limits**](AccountLimitsApi.md#get_account_limits) | **GET** /v1/accounts/{account_id}/limits/identity | Get account entity limits |
+
+
+## bulk_list_account_entity_consumption
+
+> <IdentityLimitsUsageResponse> bulk_list_account_entity_consumption(account_id, authorization, opts)
+
+Get account entity limits via POST request
+
+Returns the details of an account's entity limits using a body for larger list of parameters for consumption details. 
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::AccountLimitsApi.new
+account_id = 'account_id_example' # String | Unique ID of the account.
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Please make sure that the provided token has the required authority for the request.
+opts = {
+  identity_limits_usage_request: IbmCloudIam::IdentityLimitsUsageRequest.new # IdentityLimitsUsageRequest | 
+}
+
+begin
+  # Get account entity limits via POST request
+  result = api_instance.bulk_list_account_entity_consumption(account_id, authorization, opts)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountLimitsApi->bulk_list_account_entity_consumption: #{e}"
+end
+```
+
+#### Using the bulk_list_account_entity_consumption_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<IdentityLimitsUsageResponse>, Integer, Hash)> bulk_list_account_entity_consumption_with_http_info(account_id, authorization, opts)
+
+```ruby
+begin
+  # Get account entity limits via POST request
+  data, status_code, headers = api_instance.bulk_list_account_entity_consumption_with_http_info(account_id, authorization, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <IdentityLimitsUsageResponse>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountLimitsApi->bulk_list_account_entity_consumption_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | Unique ID of the account. |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Please make sure that the provided token has the required authority for the request. |  |
+| **identity_limits_usage_request** | [**IdentityLimitsUsageRequest**](IdentityLimitsUsageRequest.md) |  | [optional] |
+
+### Return type
+
+[**IdentityLimitsUsageResponse**](IdentityLimitsUsageResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+
+
+## get_account_limits
+
+> <IdentityLimitsUsageResponse> get_account_limits(account_id, authorization, opts)
+
+Get account entity limits
+
+Returns the details of an account's entity limits with query parameters for consumption details.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::AccountLimitsApi.new
+account_id = 'account_id_example' # String | Unique ID of the account.
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Please make sure that the provided token has the required authority for the request.
+opts = {
+  serviceid_groups: true, # Boolean | Boolean to include serviceid group consumption.
+  serviceids_per_group: 'serviceids_per_group_example', # String | Comma seperated list of ServiceID groups to include for consumption.
+  profiles: 'profiles_example', # String | Boolean to include trusted profiles consumption.
+  apikeys_per_identity: 'apikeys_per_identity_example', # String | Comma seperated list of IAM IDs to include for API key consumption.
+  templates: 'templates_example', # String | Boolean to include template consumption.
+  template_versions_per_template: 'template_versions_per_template_example', # String | Comma seperated list of template IDs to include for template version consumption.
+  idps: 'idps_example', # String | Boolean to include identity provider consumption.
+  claim_rules_per_group: 'claim_rules_per_group_example', # String | Comma seperated list of access groups to include for claim rules consumption.
+  claim_rules_per_profile: 'claim_rules_per_profile_example', # String | Comma seperated list of profiles to include for claim rules consumption.
+  cr_links: 'cr_links_example', # String | Boolean to include compute resource links consumption.
+  cr_links_per_profile: 'cr_links_per_profile_example', # String | Comma seperated list of profile IDs to include for cr links consumption.
+  cr_rules: 'cr_rules_example', # String | Boolean to include compute resource rules consumption.
+  cr_rules_per_profile: 'cr_rules_per_profile_example' # String | Comma seperated list of profile IDs to include for cr rules consumption.
+}
+
+begin
+  # Get account entity limits
+  result = api_instance.get_account_limits(account_id, authorization, opts)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountLimitsApi->get_account_limits: #{e}"
+end
+```
+
+#### Using the get_account_limits_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<IdentityLimitsUsageResponse>, Integer, Hash)> get_account_limits_with_http_info(account_id, authorization, opts)
+
+```ruby
+begin
+  # Get account entity limits
+  data, status_code, headers = api_instance.get_account_limits_with_http_info(account_id, authorization, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <IdentityLimitsUsageResponse>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountLimitsApi->get_account_limits_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | Unique ID of the account. |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Please make sure that the provided token has the required authority for the request. |  |
+| **serviceid_groups** | **Boolean** | Boolean to include serviceid group consumption. | [optional] |
+| **serviceids_per_group** | **String** | Comma seperated list of ServiceID groups to include for consumption. | [optional] |
+| **profiles** | **String** | Boolean to include trusted profiles consumption. | [optional] |
+| **apikeys_per_identity** | **String** | Comma seperated list of IAM IDs to include for API key consumption. | [optional] |
+| **templates** | **String** | Boolean to include template consumption. | [optional] |
+| **template_versions_per_template** | **String** | Comma seperated list of template IDs to include for template version consumption. | [optional] |
+| **idps** | **String** | Boolean to include identity provider consumption. | [optional] |
+| **claim_rules_per_group** | **String** | Comma seperated list of access groups to include for claim rules consumption. | [optional] |
+| **claim_rules_per_profile** | **String** | Comma seperated list of profiles to include for claim rules consumption. | [optional] |
+| **cr_links** | **String** | Boolean to include compute resource links consumption. | [optional] |
+| **cr_links_per_profile** | **String** | Comma seperated list of profile IDs to include for cr links consumption. | [optional] |
+| **cr_rules** | **String** | Boolean to include compute resource rules consumption. | [optional] |
+| **cr_rules_per_profile** | **String** | Comma seperated list of profile IDs to include for cr rules consumption. | [optional] |
+
+### Return type
+
+[**IdentityLimitsUsageResponse**](IdentityLimitsUsageResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+

data/docs/AccountLoginSettings.md

@@ -0,0 +1,18 @@
+# IbmCloudIam::AccountLoginSettings
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **_alias** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccountLoginSettings.new(
+  _alias: null
+)
+```
+

data/docs/AccountSettingsApi.md

@@ -0,0 +1,224 @@
+# IbmCloudIam::AccountSettingsApi
+
+All URIs are relative to *https://iam.cloud.ibm.com*
+
+| Method | HTTP request | Description |
+| ------ | ------------ | ----------- |
+| [**get_account_settings**](AccountSettingsApi.md#get_account_settings) | **GET** /v1/accounts/{account_id}/settings/identity | Get account configurations |
+| [**get_effective_account_settings**](AccountSettingsApi.md#get_effective_account_settings) | **GET** /v1/accounts/{account_id}/effective_settings/identity | Get effective account settings configuration |
+| [**update_account_settings**](AccountSettingsApi.md#update_account_settings) | **PUT** /v1/accounts/{account_id}/settings/identity | Update account configurations |
+
+
+## get_account_settings
+
+> <AccountSettingsResponse> get_account_settings(account_id, authorization, opts)
+
+Get account configurations
+
+Returns the details of an account's configuration.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::AccountSettingsApi.new
+account_id = 'account_id_example' # String | Unique ID of the account.
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Make sure that the provided token has the required authority for the request.
+opts = {
+  include_history: true, # Boolean | Defines if the entity history is included in the response.
+  resolve_user_mfa: true # Boolean | Enrich MFA exemptions with user PI.
+}
+
+begin
+  # Get account configurations
+  result = api_instance.get_account_settings(account_id, authorization, opts)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->get_account_settings: #{e}"
+end
+```
+
+#### Using the get_account_settings_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<AccountSettingsResponse>, Integer, Hash)> get_account_settings_with_http_info(account_id, authorization, opts)
+
+```ruby
+begin
+  # Get account configurations
+  data, status_code, headers = api_instance.get_account_settings_with_http_info(account_id, authorization, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <AccountSettingsResponse>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->get_account_settings_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | Unique ID of the account. |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Make sure that the provided token has the required authority for the request. |  |
+| **include_history** | **Boolean** | Defines if the entity history is included in the response. | [optional][default to false] |
+| **resolve_user_mfa** | **Boolean** | Enrich MFA exemptions with user PI. | [optional][default to false] |
+
+### Return type
+
+[**AccountSettingsResponse**](AccountSettingsResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
+## get_effective_account_settings
+
+> <EffectiveAccountSettingsResponse> get_effective_account_settings(account_id, authorization, opts)
+
+Get effective account settings configuration
+
+Returns effective account settings for given account ID
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::AccountSettingsApi.new
+account_id = 'account_id_example' # String | Unique ID of the account.
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Make sure that the provided token has the required authority for the request.
+opts = {
+  include_history: true, # Boolean | Defines if the entity history is included in the response.
+  resolve_user_mfa: true # Boolean | Enrich MFA exemptions with user information.
+}
+
+begin
+  # Get effective account settings configuration
+  result = api_instance.get_effective_account_settings(account_id, authorization, opts)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->get_effective_account_settings: #{e}"
+end
+```
+
+#### Using the get_effective_account_settings_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<EffectiveAccountSettingsResponse>, Integer, Hash)> get_effective_account_settings_with_http_info(account_id, authorization, opts)
+
+```ruby
+begin
+  # Get effective account settings configuration
+  data, status_code, headers = api_instance.get_effective_account_settings_with_http_info(account_id, authorization, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <EffectiveAccountSettingsResponse>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->get_effective_account_settings_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** | Unique ID of the account. |  |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Make sure that the provided token has the required authority for the request. |  |
+| **include_history** | **Boolean** | Defines if the entity history is included in the response. | [optional][default to false] |
+| **resolve_user_mfa** | **Boolean** | Enrich MFA exemptions with user information. | [optional][default to false] |
+
+### Return type
+
+[**EffectiveAccountSettingsResponse**](EffectiveAccountSettingsResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
+## update_account_settings
+
+> <AccountSettingsResponse> update_account_settings(authorization, if_match, account_id, account_settings_request)
+
+Update account configurations
+
+Allows a user to configure settings on their account with regards to MFA, MFA excemption list, session lifetimes, access control for creating new identities, and enforcing IP restrictions on token creation.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ibm_cloud_iam'
+
+api_instance = IbmCloudIam::AccountSettingsApi.new
+authorization = 'authorization_example' # String | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: 'No authorization header found'. Make sure that the provided token has the required authority for the request.
+if_match = 'if_match_example' # String | Version of the account settings to be updated. Specify the version that you retrieved as entity_tag (ETag header) when reading the account. This value helps identifying parallel usage of this API. Pass * to indicate to update any version available. This might result in stale updates.
+account_id = 'account_id_example' # String | The id of the account to update the settings for.
+account_settings_request = IbmCloudIam::AccountSettingsRequest.new # AccountSettingsRequest | Request to update an account's settings.
+
+begin
+  # Update account configurations
+  result = api_instance.update_account_settings(authorization, if_match, account_id, account_settings_request)
+  p result
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->update_account_settings: #{e}"
+end
+```
+
+#### Using the update_account_settings_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<AccountSettingsResponse>, Integer, Hash)> update_account_settings_with_http_info(authorization, if_match, account_id, account_settings_request)
+
+```ruby
+begin
+  # Update account configurations
+  data, status_code, headers = api_instance.update_account_settings_with_http_info(authorization, if_match, account_id, account_settings_request)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <AccountSettingsResponse>
+rescue IbmCloudIam::ApiError => e
+  puts "Error when calling AccountSettingsApi->update_account_settings_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **authorization** | **String** | Authorization Token used for the request. The supported token type is a Cloud IAM Access Token. If the token is omitted the request will fail with BXNIM0308E: &#39;No authorization header found&#39;. Make sure that the provided token has the required authority for the request. |  |
+| **if_match** | **String** | Version of the account settings to be updated. Specify the version that you retrieved as entity_tag (ETag header) when reading the account. This value helps identifying parallel usage of this API. Pass * to indicate to update any version available. This might result in stale updates. |  |
+| **account_id** | **String** | The id of the account to update the settings for. |  |
+| **account_settings_request** | [**AccountSettingsRequest**](AccountSettingsRequest.md) | Request to update an account&#39;s settings. |  |
+
+### Return type
+
+[**AccountSettingsResponse**](AccountSettingsResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+

data/docs/AccountSettingsAssignedTemplatesSection.md

@@ -0,0 +1,46 @@
+# IbmCloudIam::AccountSettingsAssignedTemplatesSection
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **restrict_create_service_id** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_create_platform_apikey** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **allowed_ip_addresses** | **String** | Defines the IP addresses and subnets from which IAM tokens can be created for the account. | [optional] |
+| **mfa** | [**MfaOptions**](MfaOptions.md) |  | [optional] |
+| **session_expiration_in_seconds** | **String** | Defines the session expiration in seconds for the account. Valid values:   * Any whole number between between '900' and '86400'   * NOT_SET - To unset account setting and use service default | [optional][default to '86400'] |
+| **session_invalidation_in_seconds** | **String** | Defines the period of time in seconds in which a session will be invalidated due to inactivity. Valid values:   * Any whole number between '900' and '7200'   * NOT_SET - To unset account setting and use service default | [optional][default to '7200'] |
+| **max_sessions_per_identity** | **String** | Defines the max allowed sessions per identity required by the account. Valid values:   * Any whole number greater than 0   * NOT_SET - To unset account setting and use service default | [optional] |
+| **system_access_token_expiration_in_seconds** | **String** | Defines the access token expiration in seconds. Valid values:   * Any whole number between '900' and '3600'   * NOT_SET - To unset account setting and use service default | [optional][default to '3600'] |
+| **system_refresh_token_expiration_in_seconds** | **String** | Defines the refresh token expiration in seconds. Valid values:   * Any whole number between '900' and '259200'   * NOT_SET - To unset account setting and use service default | [optional][default to '259200'] |
+| **restrict_user_list_visibility** | [**UserVisbilityRetrictActionsForTemplate**](UserVisbilityRetrictActionsForTemplate.md) |  | [optional] |
+| **user_mfa** | [**Array<AccountSettingsUserMFAResponse>**](AccountSettingsUserMFAResponse.md) | List of users that are exempted from the MFA requirement of the account. | [optional] |
+| **restrict_user_domains** | [**TemplateAccountSettingsAllOfRestrictUserDomains**](TemplateAccountSettingsAllOfRestrictUserDomains.md) |  | [optional] |
+| **template_id** | **String** | Template Id |  |
+| **template_version** | **Integer** | Template version |  |
+| **template_name** | **String** | Template name |  |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccountSettingsAssignedTemplatesSection.new(
+  restrict_create_service_id: null,
+  restrict_create_platform_apikey: null,
+  allowed_ip_addresses: null,
+  mfa: null,
+  session_expiration_in_seconds: null,
+  session_invalidation_in_seconds: null,
+  max_sessions_per_identity: null,
+  system_access_token_expiration_in_seconds: null,
+  system_refresh_token_expiration_in_seconds: null,
+  restrict_user_list_visibility: null,
+  user_mfa: null,
+  restrict_user_domains: null,
+  template_id: null,
+  template_version: null,
+  template_name: null
+)
+```
+

data/docs/AccountSettingsEffectiveSection.md

@@ -0,0 +1,38 @@
+# IbmCloudIam::AccountSettingsEffectiveSection
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **restrict_create_service_id** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_create_platform_apikey** | [**RetrictActions**](RetrictActions.md) |  | [optional][default to 'NOT_SET'] |
+| **restrict_user_list_visibility** | [**UserVisbilityRetrictActions**](UserVisbilityRetrictActions.md) |  | [optional][default to 'NOT_RESTRICTED'] |
+| **allowed_ip_addresses** | **String** | Defines the IP addresses and subnets from which IAM tokens can be created for the account. | [optional] |
+| **mfa** | [**MfaOptions**](MfaOptions.md) |  | [optional] |
+| **user_mfa** | [**Array<AccountSettingsUserMFAResponse>**](AccountSettingsUserMFAResponse.md) | List of users that are exempted from the MFA requirement of the account. | [optional] |
+| **session_expiration_in_seconds** | **String** | Defines the session expiration in seconds for the account. Valid values:   * Any whole number between between '900' and '86400'   * NOT_SET - To unset account setting and use service default | [optional][default to '86400'] |
+| **session_invalidation_in_seconds** | **String** | Defines the period of time in seconds in which a session will be invalidated due to inactivity. Valid values:   * Any whole number between '900' and '7200'   * NOT_SET - To unset account setting and use service default | [optional][default to '7200'] |
+| **max_sessions_per_identity** | **String** | Defines the max allowed sessions per identity required by the account. Valid values:   * Any whole number greater than 0   * NOT_SET - To unset account setting and use service default | [optional] |
+| **system_access_token_expiration_in_seconds** | **String** | Defines the access token expiration in seconds. Valid values:   * Any whole number between '900' and '3600'   * NOT_SET - To unset account setting and use service default | [optional][default to '3600'] |
+| **system_refresh_token_expiration_in_seconds** | **String** | Defines the refresh token expiration in seconds. Valid values:   * Any whole number between '900' and '259200'   * NOT_SET - To unset account setting and use service default | [optional][default to '259200'] |
+
+## Example
+
+```ruby
+require 'ibm_cloud_iam'
+
+instance = IbmCloudIam::AccountSettingsEffectiveSection.new(
+  restrict_create_service_id: null,
+  restrict_create_platform_apikey: null,
+  restrict_user_list_visibility: null,
+  allowed_ip_addresses: null,
+  mfa: null,
+  user_mfa: null,
+  session_expiration_in_seconds: null,
+  session_invalidation_in_seconds: null,
+  max_sessions_per_identity: null,
+  system_access_token_expiration_in_seconds: null,
+  system_refresh_token_expiration_in_seconds: null
+)
+```
+