@alicloud/cloudsso20210515 1.4.1 → 1.5.0

package/dist/client.d.ts

@@ -906,6 +906,46 @@ export declare class DeprovisionAccessConfigurationResponse extends $tea.Model {
         [key: string]: any;
     });
 }
+export declare class DisableDelegateAccountRequest extends $tea.Model {
+    accountId?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class DisableDelegateAccountResponseBody extends $tea.Model {
+    requestId?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class DisableDelegateAccountResponse extends $tea.Model {
+    headers?: {
+        [key: string]: string;
+    };
+    statusCode?: number;
+    body?: DisableDelegateAccountResponseBody;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class DisableServiceResponseBody extends $tea.Model {
     requestId?: string;
     static names(): {
@@ -934,6 +974,46 @@ export declare class DisableServiceResponse extends $tea.Model {
         [key: string]: any;
     });
 }
+export declare class EnableDelegateAccountRequest extends $tea.Model {
+    accountId?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class EnableDelegateAccountResponseBody extends $tea.Model {
+    requestId?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class EnableDelegateAccountResponse extends $tea.Model {
+    headers?: {
+        [key: string]: string;
+    };
+    statusCode?: number;
+    body?: EnableDelegateAccountResponseBody;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class EnableServiceResponseBody extends $tea.Model {
     requestId?: string;
     static names(): {
@@ -4641,1136 +4721,1668 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, endpoint: string): string;
     /**
-      * You can add up to two SAML signing certificates.
-      * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
-      *
-      * @param request AddExternalSAMLIdPCertificateRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return AddExternalSAMLIdPCertificateResponse
+     * @summary Adds a Security Assertion Markup Language (SAML) signing certificate.
+     *
+     * @description You can add up to two SAML signing certificates.
+     * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
+     *
+     * @param request AddExternalSAMLIdPCertificateRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return AddExternalSAMLIdPCertificateResponse
      */
     addExternalSAMLIdPCertificateWithOptions(request: AddExternalSAMLIdPCertificateRequest, runtime: $Util.RuntimeOptions): Promise<AddExternalSAMLIdPCertificateResponse>;
     /**
-      * You can add up to two SAML signing certificates.
-      * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
-      *
-      * @param request AddExternalSAMLIdPCertificateRequest
-      * @return AddExternalSAMLIdPCertificateResponse
+     * @summary Adds a Security Assertion Markup Language (SAML) signing certificate.
+     *
+     * @description You can add up to two SAML signing certificates.
+     * This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
+     *
+     * @param request AddExternalSAMLIdPCertificateRequest
+     * @return AddExternalSAMLIdPCertificateResponse
      */
     addExternalSAMLIdPCertificate(request: AddExternalSAMLIdPCertificateRequest): Promise<AddExternalSAMLIdPCertificateResponse>;
     /**
-      * This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request AddPermissionPolicyToAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return AddPermissionPolicyToAccessConfigurationResponse
+     * @summary Adds a policy to an access configuration.
+     *
+     * @description This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request AddPermissionPolicyToAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return AddPermissionPolicyToAccessConfigurationResponse
      */
     addPermissionPolicyToAccessConfigurationWithOptions(request: AddPermissionPolicyToAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<AddPermissionPolicyToAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request AddPermissionPolicyToAccessConfigurationRequest
-      * @return AddPermissionPolicyToAccessConfigurationResponse
+     * @summary Adds a policy to an access configuration.
+     *
+     * @description This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request AddPermissionPolicyToAccessConfigurationRequest
+     * @return AddPermissionPolicyToAccessConfigurationResponse
      */
     addPermissionPolicyToAccessConfiguration(request: AddPermissionPolicyToAccessConfigurationRequest): Promise<AddPermissionPolicyToAccessConfigurationResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
-      * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
-      *
-      * @param request AddUserToGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return AddUserToGroupResponse
+     * @summary Adds a user to a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
+     * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
+     *
+     * @param request AddUserToGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return AddUserToGroupResponse
      */
     addUserToGroupWithOptions(request: AddUserToGroupRequest, runtime: $Util.RuntimeOptions): Promise<AddUserToGroupResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
-      * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
-      *
-      * @param request AddUserToGroupRequest
-      * @return AddUserToGroupResponse
+     * @summary Adds a user to a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
+     * This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
+     *
+     * @param request AddUserToGroupRequest
+     * @return AddUserToGroupResponse
      */
     addUserToGroup(request: AddUserToGroupRequest): Promise<AddUserToGroupResponse>;
     /**
-      * If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
-      * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-      *
-      * @param request ClearExternalSAMLIdentityProviderRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ClearExternalSAMLIdentityProviderResponse
+     * @summary Clears the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
+     * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
+     *
+     * @param request ClearExternalSAMLIdentityProviderRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ClearExternalSAMLIdentityProviderResponse
      */
     clearExternalSAMLIdentityProviderWithOptions(request: ClearExternalSAMLIdentityProviderRequest, runtime: $Util.RuntimeOptions): Promise<ClearExternalSAMLIdentityProviderResponse>;
     /**
-      * If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
-      * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-      *
-      * @param request ClearExternalSAMLIdentityProviderRequest
-      * @return ClearExternalSAMLIdentityProviderResponse
+     * @summary Clears the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
+     * This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
+     *
+     * @param request ClearExternalSAMLIdentityProviderRequest
+     * @return ClearExternalSAMLIdentityProviderResponse
      */
     clearExternalSAMLIdentityProvider(request: ClearExternalSAMLIdentityProviderRequest): Promise<ClearExternalSAMLIdentityProviderResponse>;
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
-      * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
-      *
-      * @param request CreateAccessAssignmentRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateAccessAssignmentResponse
+     * @summary Assigns access permissions on an account in your resource directory to a user or a group by using an access configuration.
+     *
+     * @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](https://help.aliyun.com/document_detail/266726.html).
+     * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
+     *
+     * @param request CreateAccessAssignmentRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateAccessAssignmentResponse
      */
     createAccessAssignmentWithOptions(request: CreateAccessAssignmentRequest, runtime: $Util.RuntimeOptions): Promise<CreateAccessAssignmentResponse>;
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](~~266726~~).
-      * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
-      *
-      * @param request CreateAccessAssignmentRequest
-      * @return CreateAccessAssignmentResponse
+     * @summary Assigns access permissions on an account in your resource directory to a user or a group by using an access configuration.
+     *
+     * @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](https://help.aliyun.com/document_detail/266726.html).
+     * This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
+     *
+     * @param request CreateAccessAssignmentRequest
+     * @return CreateAccessAssignmentResponse
      */
     createAccessAssignment(request: CreateAccessAssignmentRequest): Promise<CreateAccessAssignmentResponse>;
     /**
-      * For more information about access configurations, see [Overview of access configurations](~~266737~~).
-      * This topic provides an example on how to create an access configuration named `ECS-Admin`.
-      *
-      * @param request CreateAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateAccessConfigurationResponse
+     * @summary Creates an access configuration.
+     *
+     * @description For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
+     * This topic provides an example on how to create an access configuration named `ECS-Admin`.
+     *
+     * @param request CreateAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateAccessConfigurationResponse
      */
     createAccessConfigurationWithOptions(request: CreateAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<CreateAccessConfigurationResponse>;
     /**
-      * For more information about access configurations, see [Overview of access configurations](~~266737~~).
-      * This topic provides an example on how to create an access configuration named `ECS-Admin`.
-      *
-      * @param request CreateAccessConfigurationRequest
-      * @return CreateAccessConfigurationResponse
+     * @summary Creates an access configuration.
+     *
+     * @description For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
+     * This topic provides an example on how to create an access configuration named `ECS-Admin`.
+     *
+     * @param request CreateAccessConfigurationRequest
+     * @return CreateAccessConfigurationResponse
      */
     createAccessConfiguration(request: CreateAccessConfigurationRequest): Promise<CreateAccessConfigurationResponse>;
     /**
-      * A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
-      * To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
-      * This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
-      * ## Limits
-      * - You can create only one directory for a management account.
-      * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
-      *
-      * @param request CreateDirectoryRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateDirectoryResponse
+     * @summary Creates a directory.
+     *
+     * @description A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
+     * To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
+     * This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
+     * ## Limits
+     * - You can create only one directory for a management account.
+     * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
+     *
+     * @param request CreateDirectoryRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateDirectoryResponse
      */
     createDirectoryWithOptions(request: CreateDirectoryRequest, runtime: $Util.RuntimeOptions): Promise<CreateDirectoryResponse>;
     /**
-      * A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
-      * To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
-      * This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
-      * ## Limits
-      * - You can create only one directory for a management account.
-      * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
-      *
-      * @param request CreateDirectoryRequest
-      * @return CreateDirectoryResponse
+     * @summary Creates a directory.
+     *
+     * @description A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
+     * To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
+     * This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
+     * ## Limits
+     * - You can create only one directory for a management account.
+     * - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
+     *
+     * @param request CreateDirectoryRequest
+     * @return CreateDirectoryResponse
      */
     createDirectory(request: CreateDirectoryRequest): Promise<CreateDirectoryResponse>;
     /**
-      * This topic provides an example on how to create a group named `TestGroup`.
-      *
-      * @param request CreateGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateGroupResponse
+     * @summary Creates a group.
+     *
+     * @description This topic provides an example on how to create a group named `TestGroup`.
+     *
+     * @param request CreateGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateGroupResponse
      */
     createGroupWithOptions(request: CreateGroupRequest, runtime: $Util.RuntimeOptions): Promise<CreateGroupResponse>;
     /**
-      * This topic provides an example on how to create a group named `TestGroup`.
-      *
-      * @param request CreateGroupRequest
-      * @return CreateGroupResponse
+     * @summary Creates a group.
+     *
+     * @description This topic provides an example on how to create a group named `TestGroup`.
+     *
+     * @param request CreateGroupRequest
+     * @return CreateGroupResponse
      */
     createGroup(request: CreateGroupRequest): Promise<CreateGroupResponse>;
     /**
-      * SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
-      * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
-      *
-      * @param request CreateSCIMServerCredentialRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateSCIMServerCredentialResponse
+     * @summary Creates a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
+     * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
+     *
+     * @param request CreateSCIMServerCredentialRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateSCIMServerCredentialResponse
      */
     createSCIMServerCredentialWithOptions(request: CreateSCIMServerCredentialRequest, runtime: $Util.RuntimeOptions): Promise<CreateSCIMServerCredentialResponse>;
     /**
-      * SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
-      * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
-      *
-      * @param request CreateSCIMServerCredentialRequest
-      * @return CreateSCIMServerCredentialResponse
+     * @summary Creates a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
+     * This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
+     *
+     * @param request CreateSCIMServerCredentialRequest
+     * @return CreateSCIMServerCredentialResponse
      */
     createSCIMServerCredential(request: CreateSCIMServerCredentialRequest): Promise<CreateSCIMServerCredentialResponse>;
     /**
-      * This topic provides an example on how to create a user named `Alice`.
-      *
-      * @param request CreateUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return CreateUserResponse
+     * @summary Creates a user.
+     *
+     * @description This topic provides an example on how to create a user named `Alice`.
+     *
+     * @param request CreateUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateUserResponse
      */
     createUserWithOptions(request: CreateUserRequest, runtime: $Util.RuntimeOptions): Promise<CreateUserResponse>;
     /**
-      * This topic provides an example on how to create a user named `Alice`.
-      *
-      * @param request CreateUserRequest
-      * @return CreateUserResponse
+     * @summary Creates a user.
+     *
+     * @description This topic provides an example on how to create a user named `Alice`.
+     *
+     * @param request CreateUserRequest
+     * @return CreateUserResponse
      */
     createUser(request: CreateUserRequest): Promise<CreateUserResponse>;
+    /**
+     * @summary Creates a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request CreateUserProvisioningRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return CreateUserProvisioningResponse
+     */
     createUserProvisioningWithOptions(request: CreateUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<CreateUserProvisioningResponse>;
+    /**
+     * @summary Creates a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request CreateUserProvisioningRequest
+     * @return CreateUserProvisioningResponse
+     */
     createUserProvisioning(request: CreateUserProvisioningRequest): Promise<CreateUserProvisioningResponse>;
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request DeleteAccessAssignmentRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteAccessAssignmentResponse
+     * @summary Removes the access permissions on an account in a resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request DeleteAccessAssignmentRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteAccessAssignmentResponse
      */
     deleteAccessAssignmentWithOptions(request: DeleteAccessAssignmentRequest, runtime: $Util.RuntimeOptions): Promise<DeleteAccessAssignmentResponse>;
     /**
-      * When you call this operation, an asynchronous task is created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request DeleteAccessAssignmentRequest
-      * @return DeleteAccessAssignmentResponse
+     * @summary Removes the access permissions on an account in a resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request DeleteAccessAssignmentRequest
+     * @return DeleteAccessAssignmentResponse
      */
     deleteAccessAssignment(request: DeleteAccessAssignmentRequest): Promise<DeleteAccessAssignmentResponse>;
     /**
-      * This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
-      * ## Prerequisites
-      * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](~~338352~~).
-      *
-      * @param request DeleteAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteAccessConfigurationResponse
+     * @summary Deletes an access configuration.
+     *
+     * @description This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
+     * ## Prerequisites
+     * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](https://help.aliyun.com/document_detail/338352.html).
+     *
+     * @param request DeleteAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteAccessConfigurationResponse
      */
     deleteAccessConfigurationWithOptions(request: DeleteAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<DeleteAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
-      * ## Prerequisites
-      * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](~~338352~~).
-      *
-      * @param request DeleteAccessConfigurationRequest
-      * @return DeleteAccessConfigurationResponse
+     * @summary Deletes an access configuration.
+     *
+     * @description This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
+     * ## Prerequisites
+     * The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](https://help.aliyun.com/document_detail/338352.html).
+     *
+     * @param request DeleteAccessConfigurationRequest
+     * @return DeleteAccessConfigurationResponse
      */
     deleteAccessConfiguration(request: DeleteAccessConfigurationRequest): Promise<DeleteAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
-      * ## Prerequisites
-      * No resources are contained in the directory that you want to delete.
-      * *   Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](~~338350~~).
-      * *   Users are deleted. For more information, see [DeleteUser](~~341671~~).
-      * *   Groups are deleted. For more information, see [DeleteGroup](~~341821~~).
-      * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](~~336907~~).
-      * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](~~341842~~).
-      * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](~~341573~~).
-      *
-      * @param request DeleteDirectoryRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteDirectoryResponse
+     * @summary Deletes a directory.
+     *
+     * @description This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
+     * ## Prerequisites
+     * No resources are contained in the directory that you want to delete.
+     * *   Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * *   Users are deleted. For more information, see [DeleteUser](https://help.aliyun.com/document_detail/341671.html).
+     * *   Groups are deleted. For more information, see [DeleteGroup](https://help.aliyun.com/document_detail/341821.html).
+     * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](https://help.aliyun.com/document_detail/336907.html).
+     * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](https://help.aliyun.com/document_detail/341842.html).
+     * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](https://help.aliyun.com/document_detail/341573.html).
+     *
+     * @param request DeleteDirectoryRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteDirectoryResponse
      */
     deleteDirectoryWithOptions(request: DeleteDirectoryRequest, runtime: $Util.RuntimeOptions): Promise<DeleteDirectoryResponse>;
     /**
-      * This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
-      * ## Prerequisites
-      * No resources are contained in the directory that you want to delete.
-      * *   Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](~~338350~~).
-      * *   Users are deleted. For more information, see [DeleteUser](~~341671~~).
-      * *   Groups are deleted. For more information, see [DeleteGroup](~~341821~~).
-      * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](~~336907~~).
-      * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](~~341842~~).
-      * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](~~341573~~).
-      *
-      * @param request DeleteDirectoryRequest
-      * @return DeleteDirectoryResponse
+     * @summary Deletes a directory.
+     *
+     * @description This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
+     * ## Prerequisites
+     * No resources are contained in the directory that you want to delete.
+     * *   Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * *   Users are deleted. For more information, see [DeleteUser](https://help.aliyun.com/document_detail/341671.html).
+     * *   Groups are deleted. For more information, see [DeleteGroup](https://help.aliyun.com/document_detail/341821.html).
+     * *   Access configurations are deleted. For more information, see [DeleteAccessConfiguration](https://help.aliyun.com/document_detail/336907.html).
+     * *   System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](https://help.aliyun.com/document_detail/341842.html).
+     * *   SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](https://help.aliyun.com/document_detail/341573.html).
+     *
+     * @param request DeleteDirectoryRequest
+     * @return DeleteDirectoryResponse
      */
     deleteDirectory(request: DeleteDirectoryRequest): Promise<DeleteDirectoryResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
-      * ## Prerequisites
-      * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
-      * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](~~335116~~).
-      * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](~~338350~~).
-      *
-      * @param request DeleteGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteGroupResponse
+     * @summary Deletes a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
+     * ## Prerequisites
+     * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
+     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     *
+     * @param request DeleteGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteGroupResponse
      */
     deleteGroupWithOptions(request: DeleteGroupRequest, runtime: $Util.RuntimeOptions): Promise<DeleteGroupResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
-      * ## Prerequisites
-      * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
-      * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](~~335116~~).
-      * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](~~338350~~).
-      *
-      * @param request DeleteGroupRequest
-      * @return DeleteGroupResponse
+     * @summary Deletes a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
+     * ## Prerequisites
+     * The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
+     * *   Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     *
+     * @param request DeleteGroupRequest
+     * @return DeleteGroupResponse
      */
     deleteGroup(request: DeleteGroupRequest): Promise<DeleteGroupResponse>;
     /**
-      * This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
-      *
-      * @param request DeleteMFADeviceForUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteMFADeviceForUserResponse
+     * @summary Unbinds a multi-factor authentication (MFA) device from a user.
+     *
+     * @description This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
+     *
+     * @param request DeleteMFADeviceForUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteMFADeviceForUserResponse
      */
     deleteMFADeviceForUserWithOptions(request: DeleteMFADeviceForUserRequest, runtime: $Util.RuntimeOptions): Promise<DeleteMFADeviceForUserResponse>;
     /**
-      * This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
-      *
-      * @param request DeleteMFADeviceForUserRequest
-      * @return DeleteMFADeviceForUserResponse
+     * @summary Unbinds a multi-factor authentication (MFA) device from a user.
+     *
+     * @description This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
+     *
+     * @param request DeleteMFADeviceForUserRequest
+     * @return DeleteMFADeviceForUserResponse
      */
     deleteMFADeviceForUser(request: DeleteMFADeviceForUserRequest): Promise<DeleteMFADeviceForUserResponse>;
     /**
-      * After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
-      * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
-      *
-      * @param request DeleteSCIMServerCredentialRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteSCIMServerCredentialResponse
+     * @summary Deletes a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
+     * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
+     *
+     * @param request DeleteSCIMServerCredentialRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteSCIMServerCredentialResponse
      */
     deleteSCIMServerCredentialWithOptions(request: DeleteSCIMServerCredentialRequest, runtime: $Util.RuntimeOptions): Promise<DeleteSCIMServerCredentialResponse>;
     /**
-      * After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
-      * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
-      *
-      * @param request DeleteSCIMServerCredentialRequest
-      * @return DeleteSCIMServerCredentialResponse
+     * @summary Deletes a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
+     * This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
+     *
+     * @param request DeleteSCIMServerCredentialRequest
+     * @return DeleteSCIMServerCredentialResponse
      */
     deleteSCIMServerCredential(request: DeleteSCIMServerCredentialRequest): Promise<DeleteSCIMServerCredentialResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
-      * ## Prerequisites
-      * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
-      * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
-      * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
-      * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
-      *
-      * @param request DeleteUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeleteUserResponse
+     * @summary Deletes a user.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
+     * ## Prerequisites
+     * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
+     * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](https://help.aliyun.com/document_detail/341675.html).
+     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     *
+     * @param request DeleteUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteUserResponse
      */
     deleteUserWithOptions(request: DeleteUserRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
-      * ## Prerequisites
-      * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
-      * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](~~341675~~).
-      * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](~~338350~~).
-      * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](~~335116~~).
-      *
-      * @param request DeleteUserRequest
-      * @return DeleteUserResponse
+     * @summary Deletes a user.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
+     * ## Prerequisites
+     * The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
+     * *   Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](https://help.aliyun.com/document_detail/341675.html).
+     * *   Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
+     * *   Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
+     *
+     * @param request DeleteUserRequest
+     * @return DeleteUserResponse
      */
     deleteUser(request: DeleteUserRequest): Promise<DeleteUserResponse>;
+    /**
+     * @summary Deletes a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request DeleteUserProvisioningRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteUserProvisioningResponse
+     */
     deleteUserProvisioningWithOptions(request: DeleteUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserProvisioningResponse>;
+    /**
+     * @summary Deletes a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request DeleteUserProvisioningRequest
+     * @return DeleteUserProvisioningResponse
+     */
     deleteUserProvisioning(request: DeleteUserProvisioningRequest): Promise<DeleteUserProvisioningResponse>;
+    /**
+     * @summary Deletes a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request DeleteUserProvisioningEventRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeleteUserProvisioningEventResponse
+     */
     deleteUserProvisioningEventWithOptions(request: DeleteUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<DeleteUserProvisioningEventResponse>;
+    /**
+     * @summary Deletes a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request DeleteUserProvisioningEventRequest
+     * @return DeleteUserProvisioningEventResponse
+     */
     deleteUserProvisioningEvent(request: DeleteUserProvisioningEventRequest): Promise<DeleteUserProvisioningEventResponse>;
     /**
-      * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
-      *
-      * @param request DeprovisionAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DeprovisionAccessConfigurationResponse
+     * @summary De-provisions an access configuration from an account in your resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
+     *
+     * @param request DeprovisionAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DeprovisionAccessConfigurationResponse
      */
     deprovisionAccessConfigurationWithOptions(request: DeprovisionAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<DeprovisionAccessConfigurationResponse>;
     /**
-      * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
-      *
-      * @param request DeprovisionAccessConfigurationRequest
-      * @return DeprovisionAccessConfigurationResponse
+     * @summary De-provisions an access configuration from an account in your resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
+     *
+     * @param request DeprovisionAccessConfigurationRequest
+     * @return DeprovisionAccessConfigurationResponse
      */
     deprovisionAccessConfiguration(request: DeprovisionAccessConfigurationRequest): Promise<DeprovisionAccessConfigurationResponse>;
     /**
-      * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
-      *
-      * @param request DisableServiceRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return DisableServiceResponse
+     * @summary DisableDelegateAccount
+     *
+     * @param request DisableDelegateAccountRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DisableDelegateAccountResponse
+     */
+    disableDelegateAccountWithOptions(request: DisableDelegateAccountRequest, runtime: $Util.RuntimeOptions): Promise<DisableDelegateAccountResponse>;
+    /**
+     * @summary DisableDelegateAccount
+     *
+     * @param request DisableDelegateAccountRequest
+     * @return DisableDelegateAccountResponse
+     */
+    disableDelegateAccount(request: DisableDelegateAccountRequest): Promise<DisableDelegateAccountResponse>;
+    /**
+     * @summary Disables CloudSSO.
+     *
+     * @description If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
+     *
+     * @param request DisableServiceRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DisableServiceResponse
      */
     disableServiceWithOptions(runtime: $Util.RuntimeOptions): Promise<DisableServiceResponse>;
     /**
-      * If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
-      *
-      * @return DisableServiceResponse
+     * @summary Disables CloudSSO.
+     *
+     * @description If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
+     *
+     * @return DisableServiceResponse
      */
     disableService(): Promise<DisableServiceResponse>;
     /**
-      * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](~~262819~~).
-      * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
-      *
-      * @param request EnableServiceRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return EnableServiceResponse
+     * @summary EnableDelegateAccount
+     *
+     * @param request EnableDelegateAccountRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return EnableDelegateAccountResponse
+     */
+    enableDelegateAccountWithOptions(request: EnableDelegateAccountRequest, runtime: $Util.RuntimeOptions): Promise<EnableDelegateAccountResponse>;
+    /**
+     * @summary EnableDelegateAccount
+     *
+     * @param request EnableDelegateAccountRequest
+     * @return EnableDelegateAccountResponse
+     */
+    enableDelegateAccount(request: EnableDelegateAccountRequest): Promise<EnableDelegateAccountResponse>;
+    /**
+     * @summary Enables CloudSSO.
+     *
+     * @description You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
+     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
+     *
+     * @param request EnableServiceRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return EnableServiceResponse
      */
     enableServiceWithOptions(runtime: $Util.RuntimeOptions): Promise<EnableServiceResponse>;
     /**
-      * You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](~~262819~~).
-      * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
-      *
-      * @return EnableServiceResponse
+     * @summary Enables CloudSSO.
+     *
+     * @description You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
+     * If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
+     *
+     * @return EnableServiceResponse
      */
     enableService(): Promise<EnableServiceResponse>;
     /**
-      * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
-      *
-      * @param request GetAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetAccessConfigurationResponse
+     * @summary Queries information about an access configuration.
+     *
+     * @description This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
+     *
+     * @param request GetAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetAccessConfigurationResponse
      */
     getAccessConfigurationWithOptions(request: GetAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<GetAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
-      *
-      * @param request GetAccessConfigurationRequest
-      * @return GetAccessConfigurationResponse
+     * @summary Queries information about an access configuration.
+     *
+     * @description This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
+     *
+     * @param request GetAccessConfigurationRequest
+     * @return GetAccessConfigurationResponse
      */
     getAccessConfiguration(request: GetAccessConfigurationRequest): Promise<GetAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
-      *
-      * @param request GetDirectoryRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetDirectoryResponse
+     * @summary Queries information about a directory.
+     *
+     * @description This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
+     *
+     * @param request GetDirectoryRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetDirectoryResponse
      */
     getDirectoryWithOptions(request: GetDirectoryRequest, runtime: $Util.RuntimeOptions): Promise<GetDirectoryResponse>;
     /**
-      * This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
-      *
-      * @param request GetDirectoryRequest
-      * @return GetDirectoryResponse
+     * @summary Queries information about a directory.
+     *
+     * @description This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
+     *
+     * @param request GetDirectoryRequest
+     * @return GetDirectoryResponse
      */
     getDirectory(request: GetDirectoryRequest): Promise<GetDirectoryResponse>;
     /**
-      * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
-      * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
-      *
-      * @param request GetDirectorySAMLServiceProviderInfoRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetDirectorySAMLServiceProviderInfoResponse
+     * @summary Queries information about a Security Assertion Markup Language (SAML) service provider (SP).
+     *
+     * @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
+     * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
+     *
+     * @param request GetDirectorySAMLServiceProviderInfoRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetDirectorySAMLServiceProviderInfoResponse
      */
     getDirectorySAMLServiceProviderInfoWithOptions(request: GetDirectorySAMLServiceProviderInfoRequest, runtime: $Util.RuntimeOptions): Promise<GetDirectorySAMLServiceProviderInfoResponse>;
     /**
-      * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
-      * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
-      *
-      * @param request GetDirectorySAMLServiceProviderInfoRequest
-      * @return GetDirectorySAMLServiceProviderInfoResponse
+     * @summary Queries information about a Security Assertion Markup Language (SAML) service provider (SP).
+     *
+     * @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
+     * This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
+     *
+     * @param request GetDirectorySAMLServiceProviderInfoRequest
+     * @return GetDirectorySAMLServiceProviderInfoResponse
      */
     getDirectorySAMLServiceProviderInfo(request: GetDirectorySAMLServiceProviderInfoRequest): Promise<GetDirectorySAMLServiceProviderInfoResponse>;
     /**
-      * ### [](#)
-      * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
-      * ### [](#qps)Limit
-      * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-      *
-      * @param request GetDirectoryStatisticsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetDirectoryStatisticsResponse
+     * @summary Queries the statistics of a directory.
+     *
+     * @description ### [](#)
+     * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
+     * ### [](#qps)Limit
+     * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+     *
+     * @param request GetDirectoryStatisticsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetDirectoryStatisticsResponse
      */
     getDirectoryStatisticsWithOptions(request: GetDirectoryStatisticsRequest, runtime: $Util.RuntimeOptions): Promise<GetDirectoryStatisticsResponse>;
     /**
-      * ### [](#)
-      * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
-      * ### [](#qps)Limit
-      * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
-      *
-      * @param request GetDirectoryStatisticsRequest
-      * @return GetDirectoryStatisticsResponse
+     * @summary Queries the statistics of a directory.
+     *
+     * @description ### [](#)
+     * This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
+     * ### [](#qps)Limit
+     * You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
+     *
+     * @param request GetDirectoryStatisticsRequest
+     * @return GetDirectoryStatisticsResponse
      */
     getDirectoryStatistics(request: GetDirectoryStatisticsRequest): Promise<GetDirectoryStatisticsResponse>;
     /**
-      * This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-      *
-      * @param request GetExternalSAMLIdentityProviderRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetExternalSAMLIdentityProviderResponse
+     * @summary Queries the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
+     *
+     * @param request GetExternalSAMLIdentityProviderRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetExternalSAMLIdentityProviderResponse
      */
     getExternalSAMLIdentityProviderWithOptions(request: GetExternalSAMLIdentityProviderRequest, runtime: $Util.RuntimeOptions): Promise<GetExternalSAMLIdentityProviderResponse>;
     /**
-      * This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
-      *
-      * @param request GetExternalSAMLIdentityProviderRequest
-      * @return GetExternalSAMLIdentityProviderResponse
+     * @summary Queries the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
+     *
+     * @param request GetExternalSAMLIdentityProviderRequest
+     * @return GetExternalSAMLIdentityProviderResponse
      */
     getExternalSAMLIdentityProvider(request: GetExternalSAMLIdentityProviderRequest): Promise<GetExternalSAMLIdentityProviderResponse>;
     /**
-      * This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
-      *
-      * @param request GetGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetGroupResponse
+     * @summary Queries information about a group.
+     *
+     * @description This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
+     *
+     * @param request GetGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetGroupResponse
      */
     getGroupWithOptions(request: GetGroupRequest, runtime: $Util.RuntimeOptions): Promise<GetGroupResponse>;
     /**
-      * This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
-      *
-      * @param request GetGroupRequest
-      * @return GetGroupResponse
+     * @summary Queries information about a group.
+     *
+     * @description This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
+     *
+     * @param request GetGroupRequest
+     * @return GetGroupResponse
      */
     getGroup(request: GetGroupRequest): Promise<GetGroupResponse>;
+    /**
+     * @summary Queries the logon preference of CloudSSO users.
+     *
+     * @param request GetLoginPreferenceRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetLoginPreferenceResponse
+     */
     getLoginPreferenceWithOptions(request: GetLoginPreferenceRequest, runtime: $Util.RuntimeOptions): Promise<GetLoginPreferenceResponse>;
+    /**
+     * @summary Queries the logon preference of CloudSSO users.
+     *
+     * @param request GetLoginPreferenceRequest
+     * @return GetLoginPreferenceResponse
+     */
     getLoginPreference(request: GetLoginPreferenceRequest): Promise<GetLoginPreferenceResponse>;
     /**
-      * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-      * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
-      *
-      * @param request GetMFAAuthenticationSettingInfoRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetMFAAuthenticationSettingInfoResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
+     * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
+     *
+     * @param request GetMFAAuthenticationSettingInfoRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetMFAAuthenticationSettingInfoResponse
      */
     getMFAAuthenticationSettingInfoWithOptions(request: GetMFAAuthenticationSettingInfoRequest, runtime: $Util.RuntimeOptions): Promise<GetMFAAuthenticationSettingInfoResponse>;
     /**
-      * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-      * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
-      *
-      * @param request GetMFAAuthenticationSettingInfoRequest
-      * @return GetMFAAuthenticationSettingInfoResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
+     * This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
+     *
+     * @param request GetMFAAuthenticationSettingInfoRequest
+     * @return GetMFAAuthenticationSettingInfoResponse
      */
     getMFAAuthenticationSettingInfo(request: GetMFAAuthenticationSettingInfoRequest): Promise<GetMFAAuthenticationSettingInfoResponse>;
     /**
-      * > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](~~611286~~) operation to query more detailed information.
-      * This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
-      *
-      * @param request GetMFAAuthenticationSettingsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetMFAAuthenticationSettingsResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](https://help.aliyun.com/document_detail/611286.html) operation to query more detailed information.
+     * This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
+     *
+     * @param request GetMFAAuthenticationSettingsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetMFAAuthenticationSettingsResponse
      */
     getMFAAuthenticationSettingsWithOptions(request: GetMFAAuthenticationSettingsRequest, runtime: $Util.RuntimeOptions): Promise<GetMFAAuthenticationSettingsResponse>;
     /**
-      * > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](~~611286~~) operation to query more detailed information.
-      * This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
-      *
-      * @param request GetMFAAuthenticationSettingsRequest
-      * @return GetMFAAuthenticationSettingsResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](https://help.aliyun.com/document_detail/611286.html) operation to query more detailed information.
+     * This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
+     *
+     * @param request GetMFAAuthenticationSettingsRequest
+     * @return GetMFAAuthenticationSettingsResponse
      */
     getMFAAuthenticationSettings(request: GetMFAAuthenticationSettingsRequest): Promise<GetMFAAuthenticationSettingsResponse>;
     /**
-      * This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
-      *
-      * @param request GetMFAAuthenticationStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetMFAAuthenticationStatusResponse
+     * @summary Checks whether multi-factor authentication (MFA) is enabled for users.
+     *
+     * @description This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
+     *
+     * @param request GetMFAAuthenticationStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetMFAAuthenticationStatusResponse
      */
     getMFAAuthenticationStatusWithOptions(request: GetMFAAuthenticationStatusRequest, runtime: $Util.RuntimeOptions): Promise<GetMFAAuthenticationStatusResponse>;
     /**
-      * This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
-      *
-      * @param request GetMFAAuthenticationStatusRequest
-      * @return GetMFAAuthenticationStatusResponse
+     * @summary Checks whether multi-factor authentication (MFA) is enabled for users.
+     *
+     * @description This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
+     *
+     * @param request GetMFAAuthenticationStatusRequest
+     * @return GetMFAAuthenticationStatusResponse
      */
     getMFAAuthenticationStatus(request: GetMFAAuthenticationStatusRequest): Promise<GetMFAAuthenticationStatusResponse>;
+    /**
+     * @summary Queries the password policy of CloudSSO users.
+     *
+     * @param request GetPasswordPolicyRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetPasswordPolicyResponse
+     */
     getPasswordPolicyWithOptions(request: GetPasswordPolicyRequest, runtime: $Util.RuntimeOptions): Promise<GetPasswordPolicyResponse>;
+    /**
+     * @summary Queries the password policy of CloudSSO users.
+     *
+     * @param request GetPasswordPolicyRequest
+     * @return GetPasswordPolicyResponse
+     */
     getPasswordPolicy(request: GetPasswordPolicyRequest): Promise<GetPasswordPolicyResponse>;
     /**
-      * This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
-      *
-      * @param request GetSCIMSynchronizationStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetSCIMSynchronizationStatusResponse
+     * @summary Queries the status of System for Cross-domain Identity Management (SCIM) synchronization.
+     *
+     * @description This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
+     *
+     * @param request GetSCIMSynchronizationStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetSCIMSynchronizationStatusResponse
      */
     getSCIMSynchronizationStatusWithOptions(request: GetSCIMSynchronizationStatusRequest, runtime: $Util.RuntimeOptions): Promise<GetSCIMSynchronizationStatusResponse>;
     /**
-      * This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
-      *
-      * @param request GetSCIMSynchronizationStatusRequest
-      * @return GetSCIMSynchronizationStatusResponse
+     * @summary Queries the status of System for Cross-domain Identity Management (SCIM) synchronization.
+     *
+     * @description This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
+     *
+     * @param request GetSCIMSynchronizationStatusRequest
+     * @return GetSCIMSynchronizationStatusResponse
      */
     getSCIMSynchronizationStatus(request: GetSCIMSynchronizationStatusRequest): Promise<GetSCIMSynchronizationStatusResponse>;
+    /**
+     * @summary Queries the status of CloudSSO.
+     *
+     * @param request GetServiceStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetServiceStatusResponse
+     */
     getServiceStatusWithOptions(runtime: $Util.RuntimeOptions): Promise<GetServiceStatusResponse>;
+    /**
+     * @summary Queries the status of CloudSSO.
+     *
+     * @return GetServiceStatusResponse
+     */
     getServiceStatus(): Promise<GetServiceStatusResponse>;
     /**
-      * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-      *
-      * @param request GetTaskRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetTaskResponse
+     * @summary Queries information about an asynchronous task.
+     *
+     * @description This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
+     *
+     * @param request GetTaskRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetTaskResponse
      */
     getTaskWithOptions(request: GetTaskRequest, runtime: $Util.RuntimeOptions): Promise<GetTaskResponse>;
     /**
-      * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-      *
-      * @param request GetTaskRequest
-      * @return GetTaskResponse
+     * @summary Queries information about an asynchronous task.
+     *
+     * @description This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
+     *
+     * @param request GetTaskRequest
+     * @return GetTaskResponse
      */
     getTask(request: GetTaskRequest): Promise<GetTaskResponse>;
     /**
-      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](~~340670~~) operation.
-      * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-      *
-      * @param request GetTaskStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetTaskStatusResponse
+     * @summary Queries the status of an asynchronous task.
+     *
+     * @description You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation.
+     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
+     *
+     * @param request GetTaskStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetTaskStatusResponse
      */
     getTaskStatusWithOptions(request: GetTaskStatusRequest, runtime: $Util.RuntimeOptions): Promise<GetTaskStatusResponse>;
     /**
-      * You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](~~340670~~) operation.
-      * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
-      *
-      * @param request GetTaskStatusRequest
-      * @return GetTaskStatusResponse
+     * @summary Queries the status of an asynchronous task.
+     *
+     * @description You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation.
+     * This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
+     *
+     * @param request GetTaskStatusRequest
+     * @return GetTaskStatusResponse
      */
     getTaskStatus(request: GetTaskStatusRequest): Promise<GetTaskStatusResponse>;
     /**
-      * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
-      *
-      * @param request GetUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetUserResponse
+     * @summary Queries information about a user.
+     *
+     * @description This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
+     *
+     * @param request GetUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserResponse
      */
     getUserWithOptions(request: GetUserRequest, runtime: $Util.RuntimeOptions): Promise<GetUserResponse>;
     /**
-      * This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
-      *
-      * @param request GetUserRequest
-      * @return GetUserResponse
+     * @summary Queries information about a user.
+     *
+     * @description This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
+     *
+     * @param request GetUserRequest
+     * @return GetUserResponse
      */
     getUser(request: GetUserRequest): Promise<GetUserResponse>;
+    /**
+     * @summary Queries the ID of a user in a resource directory by using the ExternalId parameter.
+     *
+     * @param tmpReq GetUserIdRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserIdResponse
+     */
     getUserIdWithOptions(tmpReq: GetUserIdRequest, runtime: $Util.RuntimeOptions): Promise<GetUserIdResponse>;
+    /**
+     * @summary Queries the ID of a user in a resource directory by using the ExternalId parameter.
+     *
+     * @param request GetUserIdRequest
+     * @return GetUserIdResponse
+     */
     getUserId(request: GetUserIdRequest): Promise<GetUserIdResponse>;
     /**
-      * This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
-      *
-      * @param request GetUserMFAAuthenticationSettingsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return GetUserMFAAuthenticationSettingsResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of a single user.
+     *
+     * @description This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
+     *
+     * @param request GetUserMFAAuthenticationSettingsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserMFAAuthenticationSettingsResponse
      */
     getUserMFAAuthenticationSettingsWithOptions(request: GetUserMFAAuthenticationSettingsRequest, runtime: $Util.RuntimeOptions): Promise<GetUserMFAAuthenticationSettingsResponse>;
     /**
-      * This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
-      *
-      * @param request GetUserMFAAuthenticationSettingsRequest
-      * @return GetUserMFAAuthenticationSettingsResponse
+     * @summary Queries the multi-factor authentication (MFA) setting of a single user.
+     *
+     * @description This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
+     *
+     * @param request GetUserMFAAuthenticationSettingsRequest
+     * @return GetUserMFAAuthenticationSettingsResponse
      */
     getUserMFAAuthenticationSettings(request: GetUserMFAAuthenticationSettingsRequest): Promise<GetUserMFAAuthenticationSettingsResponse>;
+    /**
+     * @summary Queries a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserProvisioningResponse
+     */
     getUserProvisioningWithOptions(request: GetUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningResponse>;
+    /**
+     * @summary Queries a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningRequest
+     * @return GetUserProvisioningResponse
+     */
     getUserProvisioning(request: GetUserProvisioningRequest): Promise<GetUserProvisioningResponse>;
+    /**
+     * @summary Queries the global configurations of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserProvisioningConfigurationResponse
+     */
     getUserProvisioningConfigurationWithOptions(request: GetUserProvisioningConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningConfigurationResponse>;
+    /**
+     * @summary Queries the global configurations of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningConfigurationRequest
+     * @return GetUserProvisioningConfigurationResponse
+     */
     getUserProvisioningConfiguration(request: GetUserProvisioningConfigurationRequest): Promise<GetUserProvisioningConfigurationResponse>;
+    /**
+     * @summary Queries a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request GetUserProvisioningEventRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserProvisioningEventResponse
+     */
     getUserProvisioningEventWithOptions(request: GetUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningEventResponse>;
+    /**
+     * @summary Queries a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request GetUserProvisioningEventRequest
+     * @return GetUserProvisioningEventResponse
+     */
     getUserProvisioningEvent(request: GetUserProvisioningEventRequest): Promise<GetUserProvisioningEventResponse>;
+    /**
+     * @summary Queries statistics of Resource Access Management (RAM) user provisioning events that are created for the member in a resource directory.
+     *
+     * @param request GetUserProvisioningRdAccountStatisticsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserProvisioningRdAccountStatisticsResponse
+     */
     getUserProvisioningRdAccountStatisticsWithOptions(request: GetUserProvisioningRdAccountStatisticsRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningRdAccountStatisticsResponse>;
+    /**
+     * @summary Queries statistics of Resource Access Management (RAM) user provisioning events that are created for the member in a resource directory.
+     *
+     * @param request GetUserProvisioningRdAccountStatisticsRequest
+     * @return GetUserProvisioningRdAccountStatisticsResponse
+     */
     getUserProvisioningRdAccountStatistics(request: GetUserProvisioningRdAccountStatisticsRequest): Promise<GetUserProvisioningRdAccountStatisticsResponse>;
+    /**
+     * @summary Queries the statistics of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningStatisticsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return GetUserProvisioningStatisticsResponse
+     */
     getUserProvisioningStatisticsWithOptions(request: GetUserProvisioningStatisticsRequest, runtime: $Util.RuntimeOptions): Promise<GetUserProvisioningStatisticsResponse>;
+    /**
+     * @summary Queries the statistics of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request GetUserProvisioningStatisticsRequest
+     * @return GetUserProvisioningStatisticsResponse
+     */
     getUserProvisioningStatistics(request: GetUserProvisioningStatisticsRequest): Promise<GetUserProvisioningStatisticsResponse>;
     /**
-      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
-      *
-      * @param request ListAccessAssignmentsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListAccessAssignmentsResponse
+     * @summary Queries the access permissions that are assigned.
+     *
+     * @description This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
+     *
+     * @param request ListAccessAssignmentsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListAccessAssignmentsResponse
      */
     listAccessAssignmentsWithOptions(request: ListAccessAssignmentsRequest, runtime: $Util.RuntimeOptions): Promise<ListAccessAssignmentsResponse>;
     /**
-      * This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
-      *
-      * @param request ListAccessAssignmentsRequest
-      * @return ListAccessAssignmentsResponse
+     * @summary Queries the access permissions that are assigned.
+     *
+     * @description This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
+     *
+     * @param request ListAccessAssignmentsRequest
+     * @return ListAccessAssignmentsResponse
      */
     listAccessAssignments(request: ListAccessAssignmentsRequest): Promise<ListAccessAssignmentsResponse>;
     /**
-      * This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
-      *
-      * @param request ListAccessConfigurationProvisioningsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListAccessConfigurationProvisioningsResponse
+     * @summary Queries the access configurations that are provisioned.
+     *
+     * @description This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
+     *
+     * @param request ListAccessConfigurationProvisioningsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListAccessConfigurationProvisioningsResponse
      */
     listAccessConfigurationProvisioningsWithOptions(request: ListAccessConfigurationProvisioningsRequest, runtime: $Util.RuntimeOptions): Promise<ListAccessConfigurationProvisioningsResponse>;
     /**
-      * This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
-      *
-      * @param request ListAccessConfigurationProvisioningsRequest
-      * @return ListAccessConfigurationProvisioningsResponse
+     * @summary Queries the access configurations that are provisioned.
+     *
+     * @description This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
+     *
+     * @param request ListAccessConfigurationProvisioningsRequest
+     * @return ListAccessConfigurationProvisioningsResponse
      */
     listAccessConfigurationProvisionings(request: ListAccessConfigurationProvisioningsRequest): Promise<ListAccessConfigurationProvisioningsResponse>;
     /**
-      * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
-      *
-      * @param request ListAccessConfigurationsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListAccessConfigurationsResponse
+     * @summary Queries access configurations.
+     *
+     * @description This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
+     *
+     * @param request ListAccessConfigurationsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListAccessConfigurationsResponse
      */
     listAccessConfigurationsWithOptions(request: ListAccessConfigurationsRequest, runtime: $Util.RuntimeOptions): Promise<ListAccessConfigurationsResponse>;
     /**
-      * This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
-      *
-      * @param request ListAccessConfigurationsRequest
-      * @return ListAccessConfigurationsResponse
+     * @summary Queries access configurations.
+     *
+     * @description This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
+     *
+     * @param request ListAccessConfigurationsRequest
+     * @return ListAccessConfigurationsResponse
      */
     listAccessConfigurations(request: ListAccessConfigurationsRequest): Promise<ListAccessConfigurationsResponse>;
     /**
-      * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
-      *
-      * @param request ListDirectoriesRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListDirectoriesResponse
+     * @summary Queries directories.
+     *
+     * @description This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
+     *
+     * @param request ListDirectoriesRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListDirectoriesResponse
      */
     listDirectoriesWithOptions(runtime: $Util.RuntimeOptions): Promise<ListDirectoriesResponse>;
     /**
-      * This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
-      *
-      * @return ListDirectoriesResponse
+     * @summary Queries directories.
+     *
+     * @description This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
+     *
+     * @return ListDirectoriesResponse
      */
     listDirectories(): Promise<ListDirectoriesResponse>;
     /**
-      * This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
-      *
-      * @param request ListExternalSAMLIdPCertificatesRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListExternalSAMLIdPCertificatesResponse
+     * @summary Queries Security Assertion Markup Language (SAML) signing certificates.
+     *
+     * @description This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
+     *
+     * @param request ListExternalSAMLIdPCertificatesRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListExternalSAMLIdPCertificatesResponse
      */
     listExternalSAMLIdPCertificatesWithOptions(request: ListExternalSAMLIdPCertificatesRequest, runtime: $Util.RuntimeOptions): Promise<ListExternalSAMLIdPCertificatesResponse>;
     /**
-      * This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
-      *
-      * @param request ListExternalSAMLIdPCertificatesRequest
-      * @return ListExternalSAMLIdPCertificatesResponse
+     * @summary Queries Security Assertion Markup Language (SAML) signing certificates.
+     *
+     * @description This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
+     *
+     * @param request ListExternalSAMLIdPCertificatesRequest
+     * @return ListExternalSAMLIdPCertificatesResponse
      */
     listExternalSAMLIdPCertificates(request: ListExternalSAMLIdPCertificatesRequest): Promise<ListExternalSAMLIdPCertificatesResponse>;
     /**
-      * This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
-      *
-      * @param request ListGroupMembersRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListGroupMembersResponse
+     * @summary Queries the users in a group.
+     *
+     * @description This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
+     *
+     * @param request ListGroupMembersRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListGroupMembersResponse
      */
     listGroupMembersWithOptions(request: ListGroupMembersRequest, runtime: $Util.RuntimeOptions): Promise<ListGroupMembersResponse>;
     /**
-      * This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
-      *
-      * @param request ListGroupMembersRequest
-      * @return ListGroupMembersResponse
+     * @summary Queries the users in a group.
+     *
+     * @description This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
+     *
+     * @param request ListGroupMembersRequest
+     * @return ListGroupMembersResponse
      */
     listGroupMembers(request: ListGroupMembersRequest): Promise<ListGroupMembersResponse>;
     /**
-      * This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
-      *
-      * @param request ListGroupsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListGroupsResponse
+     * @summary Queries groups.
+     *
+     * @description This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
+     *
+     * @param request ListGroupsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListGroupsResponse
      */
     listGroupsWithOptions(request: ListGroupsRequest, runtime: $Util.RuntimeOptions): Promise<ListGroupsResponse>;
     /**
-      * This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
-      *
-      * @param request ListGroupsRequest
-      * @return ListGroupsResponse
+     * @summary Queries groups.
+     *
+     * @description This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
+     *
+     * @param request ListGroupsRequest
+     * @return ListGroupsResponse
      */
     listGroups(request: ListGroupsRequest): Promise<ListGroupsResponse>;
     /**
-      * This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
-      *
-      * @param request ListJoinedGroupsForUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListJoinedGroupsForUserResponse
+     * @summary Queries the groups to which a user is added.
+     *
+     * @description This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
+     *
+     * @param request ListJoinedGroupsForUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListJoinedGroupsForUserResponse
      */
     listJoinedGroupsForUserWithOptions(request: ListJoinedGroupsForUserRequest, runtime: $Util.RuntimeOptions): Promise<ListJoinedGroupsForUserResponse>;
     /**
-      * This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
-      *
-      * @param request ListJoinedGroupsForUserRequest
-      * @return ListJoinedGroupsForUserResponse
+     * @summary Queries the groups to which a user is added.
+     *
+     * @description This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
+     *
+     * @param request ListJoinedGroupsForUserRequest
+     * @return ListJoinedGroupsForUserResponse
      */
     listJoinedGroupsForUser(request: ListJoinedGroupsForUserRequest): Promise<ListJoinedGroupsForUserResponse>;
     /**
-      * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
-      *
-      * @param request ListMFADevicesForUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListMFADevicesForUserResponse
+     * @summary Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
+     *
+     * @description This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
+     *
+     * @param request ListMFADevicesForUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListMFADevicesForUserResponse
      */
     listMFADevicesForUserWithOptions(request: ListMFADevicesForUserRequest, runtime: $Util.RuntimeOptions): Promise<ListMFADevicesForUserResponse>;
     /**
-      * This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
-      *
-      * @param request ListMFADevicesForUserRequest
-      * @return ListMFADevicesForUserResponse
+     * @summary Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
+     *
+     * @description This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
+     *
+     * @param request ListMFADevicesForUserRequest
+     * @return ListMFADevicesForUserResponse
      */
     listMFADevicesForUser(request: ListMFADevicesForUserRequest): Promise<ListMFADevicesForUserResponse>;
     /**
-      * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
-      *
-      * @param request ListPermissionPoliciesInAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListPermissionPoliciesInAccessConfigurationResponse
+     * @summary Queries the policies that are created for an access configuration.
+     *
+     * @description This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
+     *
+     * @param request ListPermissionPoliciesInAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListPermissionPoliciesInAccessConfigurationResponse
      */
     listPermissionPoliciesInAccessConfigurationWithOptions(request: ListPermissionPoliciesInAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<ListPermissionPoliciesInAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
-      *
-      * @param request ListPermissionPoliciesInAccessConfigurationRequest
-      * @return ListPermissionPoliciesInAccessConfigurationResponse
+     * @summary Queries the policies that are created for an access configuration.
+     *
+     * @description This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
+     *
+     * @param request ListPermissionPoliciesInAccessConfigurationRequest
+     * @return ListPermissionPoliciesInAccessConfigurationResponse
      */
     listPermissionPoliciesInAccessConfiguration(request: ListPermissionPoliciesInAccessConfigurationRequest): Promise<ListPermissionPoliciesInAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
-      *
-      * @param request ListSCIMServerCredentialsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListSCIMServerCredentialsResponse
+     * @summary Queries Cross-domain Identity Management (SCIM) credentials.
+     *
+     * @description This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
+     *
+     * @param request ListSCIMServerCredentialsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListSCIMServerCredentialsResponse
      */
     listSCIMServerCredentialsWithOptions(request: ListSCIMServerCredentialsRequest, runtime: $Util.RuntimeOptions): Promise<ListSCIMServerCredentialsResponse>;
     /**
-      * This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
-      *
-      * @param request ListSCIMServerCredentialsRequest
-      * @return ListSCIMServerCredentialsResponse
+     * @summary Queries Cross-domain Identity Management (SCIM) credentials.
+     *
+     * @description This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
+     *
+     * @param request ListSCIMServerCredentialsRequest
+     * @return ListSCIMServerCredentialsResponse
      */
     listSCIMServerCredentials(request: ListSCIMServerCredentialsRequest): Promise<ListSCIMServerCredentialsResponse>;
     /**
-      * By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
-      * This topic provides an example on how to query the tasks within the previous 24 hours.
-      *
-      * @param request ListTasksRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListTasksResponse
+     * @summary Queries asynchronous tasks.
+     *
+     * @description By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
+     * This topic provides an example on how to query the tasks within the previous 24 hours.
+     *
+     * @param request ListTasksRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListTasksResponse
      */
     listTasksWithOptions(request: ListTasksRequest, runtime: $Util.RuntimeOptions): Promise<ListTasksResponse>;
     /**
-      * By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
-      * This topic provides an example on how to query the tasks within the previous 24 hours.
-      *
-      * @param request ListTasksRequest
-      * @return ListTasksResponse
+     * @summary Queries asynchronous tasks.
+     *
+     * @description By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
+     * This topic provides an example on how to query the tasks within the previous 24 hours.
+     *
+     * @param request ListTasksRequest
+     * @return ListTasksResponse
      */
     listTasks(request: ListTasksRequest): Promise<ListTasksResponse>;
+    /**
+     * @summary Queries Resource Access Management (RAM) user provisioning events.
+     *
+     * @param request ListUserProvisioningEventsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListUserProvisioningEventsResponse
+     */
     listUserProvisioningEventsWithOptions(request: ListUserProvisioningEventsRequest, runtime: $Util.RuntimeOptions): Promise<ListUserProvisioningEventsResponse>;
+    /**
+     * @summary Queries Resource Access Management (RAM) user provisioning events.
+     *
+     * @param request ListUserProvisioningEventsRequest
+     * @return ListUserProvisioningEventsResponse
+     */
     listUserProvisioningEvents(request: ListUserProvisioningEventsRequest): Promise<ListUserProvisioningEventsResponse>;
+    /**
+     * @summary Queries Resource Access Management (RAM) user provisionings.
+     *
+     * @param request ListUserProvisioningsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListUserProvisioningsResponse
+     */
     listUserProvisioningsWithOptions(request: ListUserProvisioningsRequest, runtime: $Util.RuntimeOptions): Promise<ListUserProvisioningsResponse>;
+    /**
+     * @summary Queries Resource Access Management (RAM) user provisionings.
+     *
+     * @param request ListUserProvisioningsRequest
+     * @return ListUserProvisioningsResponse
+     */
     listUserProvisionings(request: ListUserProvisioningsRequest): Promise<ListUserProvisioningsResponse>;
     /**
-      * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
-      *
-      * @param request ListUsersRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ListUsersResponse
+     * @summary Queries users.
+     *
+     * @description This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
+     *
+     * @param request ListUsersRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ListUsersResponse
      */
     listUsersWithOptions(request: ListUsersRequest, runtime: $Util.RuntimeOptions): Promise<ListUsersResponse>;
     /**
-      * This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
-      *
-      * @param request ListUsersRequest
-      * @return ListUsersResponse
+     * @summary Queries users.
+     *
+     * @description This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
+     *
+     * @param request ListUsersRequest
+     * @return ListUsersResponse
      */
     listUsers(request: ListUsersRequest): Promise<ListUsersResponse>;
     /**
-      * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
-      *
-      * @param request ProvisionAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ProvisionAccessConfigurationResponse
+     * @summary Provisions an access configuration for an account in your resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
+     *
+     * @param request ProvisionAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ProvisionAccessConfigurationResponse
      */
     provisionAccessConfigurationWithOptions(request: ProvisionAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<ProvisionAccessConfigurationResponse>;
     /**
-      * When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](~~340670~~) operation to query the progress of the task based on the value of the `TaskId` response parameter.
-      * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
-      *
-      * @param request ProvisionAccessConfigurationRequest
-      * @return ProvisionAccessConfigurationResponse
+     * @summary Provisions an access configuration for an account in your resource directory.
+     *
+     * @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
+     * This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
+     *
+     * @param request ProvisionAccessConfigurationRequest
+     * @return ProvisionAccessConfigurationResponse
      */
     provisionAccessConfiguration(request: ProvisionAccessConfigurationRequest): Promise<ProvisionAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
-      *
-      * @param request RemoveExternalSAMLIdPCertificateRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return RemoveExternalSAMLIdPCertificateResponse
+     * @summary Removes a Security Assertion Markup Language (SAML) signing certificate.
+     *
+     * @description This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
+     *
+     * @param request RemoveExternalSAMLIdPCertificateRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return RemoveExternalSAMLIdPCertificateResponse
      */
     removeExternalSAMLIdPCertificateWithOptions(request: RemoveExternalSAMLIdPCertificateRequest, runtime: $Util.RuntimeOptions): Promise<RemoveExternalSAMLIdPCertificateResponse>;
     /**
-      * This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
-      *
-      * @param request RemoveExternalSAMLIdPCertificateRequest
-      * @return RemoveExternalSAMLIdPCertificateResponse
+     * @summary Removes a Security Assertion Markup Language (SAML) signing certificate.
+     *
+     * @description This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
+     *
+     * @param request RemoveExternalSAMLIdPCertificateRequest
+     * @return RemoveExternalSAMLIdPCertificateResponse
      */
     removeExternalSAMLIdPCertificate(request: RemoveExternalSAMLIdPCertificateRequest): Promise<RemoveExternalSAMLIdPCertificateResponse>;
     /**
-      * After you remove an inline policy from an access configuration, the policy cannot be restored.
-      * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request RemovePermissionPolicyFromAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return RemovePermissionPolicyFromAccessConfigurationResponse
+     * @summary Removes a policy from an access configuration.
+     *
+     * @description After you remove an inline policy from an access configuration, the policy cannot be restored.
+     * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request RemovePermissionPolicyFromAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return RemovePermissionPolicyFromAccessConfigurationResponse
      */
     removePermissionPolicyFromAccessConfigurationWithOptions(request: RemovePermissionPolicyFromAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<RemovePermissionPolicyFromAccessConfigurationResponse>;
     /**
-      * After you remove an inline policy from an access configuration, the policy cannot be restored.
-      * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request RemovePermissionPolicyFromAccessConfigurationRequest
-      * @return RemovePermissionPolicyFromAccessConfigurationResponse
+     * @summary Removes a policy from an access configuration.
+     *
+     * @description After you remove an inline policy from an access configuration, the policy cannot be restored.
+     * This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request RemovePermissionPolicyFromAccessConfigurationRequest
+     * @return RemovePermissionPolicyFromAccessConfigurationResponse
      */
     removePermissionPolicyFromAccessConfiguration(request: RemovePermissionPolicyFromAccessConfigurationRequest): Promise<RemovePermissionPolicyFromAccessConfigurationResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
-      * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
-      *
-      * @param request RemoveUserFromGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return RemoveUserFromGroupResponse
+     * @summary Removes a user from a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
+     * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
+     *
+     * @param request RemoveUserFromGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return RemoveUserFromGroupResponse
      */
     removeUserFromGroupWithOptions(request: RemoveUserFromGroupRequest, runtime: $Util.RuntimeOptions): Promise<RemoveUserFromGroupResponse>;
     /**
-      * If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
-      * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
-      *
-      * @param request RemoveUserFromGroupRequest
-      * @return RemoveUserFromGroupResponse
+     * @summary Removes a user from a group.
+     *
+     * @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
+     * This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
+     *
+     * @param request RemoveUserFromGroupRequest
+     * @return RemoveUserFromGroupResponse
      */
     removeUserFromGroup(request: RemoveUserFromGroupRequest): Promise<RemoveUserFromGroupResponse>;
     /**
-      * If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
-      * >  After you enable SSO logon, your password cannot be reset.
-      * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
-      *
-      * @param request ResetUserPasswordRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return ResetUserPasswordResponse
+     * @summary Resets the password of a user.
+     *
+     * @description If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
+     * >  After you enable SSO logon, your password cannot be reset.
+     * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
+     *
+     * @param request ResetUserPasswordRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return ResetUserPasswordResponse
      */
     resetUserPasswordWithOptions(request: ResetUserPasswordRequest, runtime: $Util.RuntimeOptions): Promise<ResetUserPasswordResponse>;
     /**
-      * If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
-      * >  After you enable SSO logon, your password cannot be reset.
-      * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
-      *
-      * @param request ResetUserPasswordRequest
-      * @return ResetUserPasswordResponse
+     * @summary Resets the password of a user.
+     *
+     * @description If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
+     * >  After you enable SSO logon, your password cannot be reset.
+     * This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
+     *
+     * @param request ResetUserPasswordRequest
+     * @return ResetUserPasswordResponse
      */
     resetUserPassword(request: ResetUserPasswordRequest): Promise<ResetUserPasswordResponse>;
+    /**
+     * @summary Retries a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request RetryUserProvisioningEventRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return RetryUserProvisioningEventResponse
+     */
     retryUserProvisioningEventWithOptions(request: RetryUserProvisioningEventRequest, runtime: $Util.RuntimeOptions): Promise<RetryUserProvisioningEventResponse>;
+    /**
+     * @summary Retries a Resource Access Management (RAM) user provisioning event.
+     *
+     * @param request RetryUserProvisioningEventRequest
+     * @return RetryUserProvisioningEventResponse
+     */
     retryUserProvisioningEvent(request: RetryUserProvisioningEventRequest): Promise<RetryUserProvisioningEventResponse>;
     /**
-      * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
-      * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
-      * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
-      * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
-      * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
-      * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
-      * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
-      * >  If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
-      * This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
-      *
-      * @param request SetExternalSAMLIdentityProviderRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return SetExternalSAMLIdentityProviderResponse
+     * @summary Configures a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
+     * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
+     * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
+     * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
+     * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
+     * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
+     * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
+     * >  If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
+     * This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
+     *
+     * @param request SetExternalSAMLIdentityProviderRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return SetExternalSAMLIdentityProviderResponse
      */
     setExternalSAMLIdentityProviderWithOptions(request: SetExternalSAMLIdentityProviderRequest, runtime: $Util.RuntimeOptions): Promise<SetExternalSAMLIdentityProviderResponse>;
     /**
-      * During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
-      * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
-      * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
-      * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
-      * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
-      * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
-      * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
-      * >  If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
-      * This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
-      *
-      * @param request SetExternalSAMLIdentityProviderRequest
-      * @return SetExternalSAMLIdentityProviderResponse
+     * @summary Configures a Security Assertion Markup Language (SAML) identity provider (IdP).
+     *
+     * @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
+     * You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
+     * *   Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
+     * *   Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
+     * If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
+     * *   If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
+     * *   If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
+     * >  If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
+     * This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
+     *
+     * @param request SetExternalSAMLIdentityProviderRequest
+     * @return SetExternalSAMLIdentityProviderResponse
      */
     setExternalSAMLIdentityProvider(request: SetExternalSAMLIdentityProviderRequest): Promise<SetExternalSAMLIdentityProviderResponse>;
+    /**
+     * @summary Configures the logon preference of CloudSSO users.
+     *
+     * @param request SetLoginPreferenceRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return SetLoginPreferenceResponse
+     */
     setLoginPreferenceWithOptions(request: SetLoginPreferenceRequest, runtime: $Util.RuntimeOptions): Promise<SetLoginPreferenceResponse>;
+    /**
+     * @summary Configures the logon preference of CloudSSO users.
+     *
+     * @param request SetLoginPreferenceRequest
+     * @return SetLoginPreferenceResponse
+     */
     setLoginPreference(request: SetLoginPreferenceRequest): Promise<SetLoginPreferenceResponse>;
     /**
-      * If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
-      * This topic provides an example on how to enable MFA for users.
-      *
-      * @param request SetMFAAuthenticationStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return SetMFAAuthenticationStatusResponse
+     * @summary Enables or disables multi-factor authentication (MFA) for users in a directory.
+     *
+     * @description If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
+     * This topic provides an example on how to enable MFA for users.
+     *
+     * @param request SetMFAAuthenticationStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return SetMFAAuthenticationStatusResponse
      */
     setMFAAuthenticationStatusWithOptions(request: SetMFAAuthenticationStatusRequest, runtime: $Util.RuntimeOptions): Promise<SetMFAAuthenticationStatusResponse>;
     /**
-      * If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
-      * This topic provides an example on how to enable MFA for users.
-      *
-      * @param request SetMFAAuthenticationStatusRequest
-      * @return SetMFAAuthenticationStatusResponse
+     * @summary Enables or disables multi-factor authentication (MFA) for users in a directory.
+     *
+     * @description If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
+     * This topic provides an example on how to enable MFA for users.
+     *
+     * @param request SetMFAAuthenticationStatusRequest
+     * @return SetMFAAuthenticationStatusResponse
      */
     setMFAAuthenticationStatus(request: SetMFAAuthenticationStatusRequest): Promise<SetMFAAuthenticationStatusResponse>;
+    /**
+     * @summary Configures a password policy for CloudSSO users.
+     *
+     * @param request SetPasswordPolicyRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return SetPasswordPolicyResponse
+     */
     setPasswordPolicyWithOptions(request: SetPasswordPolicyRequest, runtime: $Util.RuntimeOptions): Promise<SetPasswordPolicyResponse>;
+    /**
+     * @summary Configures a password policy for CloudSSO users.
+     *
+     * @param request SetPasswordPolicyRequest
+     * @return SetPasswordPolicyResponse
+     */
     setPasswordPolicy(request: SetPasswordPolicyRequest): Promise<SetPasswordPolicyResponse>;
     /**
-      * You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
-      * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
-      * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
-      * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
-      *
-      * @param request SetSCIMSynchronizationStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return SetSCIMSynchronizationStatusResponse
+     * @summary Enables or disables Cross-domain Identity Management (SCIM) synchronization.
+     *
+     * @description You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
+     * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
+     * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
+     * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
+     *
+     * @param request SetSCIMSynchronizationStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return SetSCIMSynchronizationStatusResponse
      */
     setSCIMSynchronizationStatusWithOptions(request: SetSCIMSynchronizationStatusRequest, runtime: $Util.RuntimeOptions): Promise<SetSCIMSynchronizationStatusResponse>;
     /**
-      * You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
-      * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
-      * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
-      * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
-      *
-      * @param request SetSCIMSynchronizationStatusRequest
-      * @return SetSCIMSynchronizationStatusResponse
+     * @summary Enables or disables Cross-domain Identity Management (SCIM) synchronization.
+     *
+     * @description You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
+     * *   After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
+     * *   After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
+     * This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
+     *
+     * @param request SetSCIMSynchronizationStatusRequest
+     * @return SetSCIMSynchronizationStatusResponse
      */
     setSCIMSynchronizationStatus(request: SetSCIMSynchronizationStatusRequest): Promise<SetSCIMSynchronizationStatusResponse>;
     /**
-      * You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
-      * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
-      *
-      * @param request UpdateAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateAccessConfigurationResponse
+     * @summary Modifies information about an access configuration.
+     *
+     * @description You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
+     * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
+     *
+     * @param request UpdateAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateAccessConfigurationResponse
      */
     updateAccessConfigurationWithOptions(request: UpdateAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<UpdateAccessConfigurationResponse>;
     /**
-      * You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
-      * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
-      *
-      * @param request UpdateAccessConfigurationRequest
-      * @return UpdateAccessConfigurationResponse
+     * @summary Modifies information about an access configuration.
+     *
+     * @description You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
+     * This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
+     *
+     * @param request UpdateAccessConfigurationRequest
+     * @return UpdateAccessConfigurationResponse
      */
     updateAccessConfiguration(request: UpdateAccessConfigurationRequest): Promise<UpdateAccessConfigurationResponse>;
     /**
-      * After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
-      * This topic provides an example on how to change the name of a directory to `new-example`.
-      *
-      * @param request UpdateDirectoryRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateDirectoryResponse
+     * @summary Changes the name of a directory.
+     *
+     * @description After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
+     * This topic provides an example on how to change the name of a directory to `new-example`.
+     *
+     * @param request UpdateDirectoryRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateDirectoryResponse
      */
     updateDirectoryWithOptions(request: UpdateDirectoryRequest, runtime: $Util.RuntimeOptions): Promise<UpdateDirectoryResponse>;
     /**
-      * After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
-      * This topic provides an example on how to change the name of a directory to `new-example`.
-      *
-      * @param request UpdateDirectoryRequest
-      * @return UpdateDirectoryResponse
+     * @summary Changes the name of a directory.
+     *
+     * @description After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
+     * This topic provides an example on how to change the name of a directory to `new-example`.
+     *
+     * @param request UpdateDirectoryRequest
+     * @return UpdateDirectoryResponse
      */
     updateDirectory(request: UpdateDirectoryRequest): Promise<UpdateDirectoryResponse>;
     /**
-      * You can modify `GroupName` and `Description` for a group.
-      * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
-      * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
-      *
-      * @param request UpdateGroupRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateGroupResponse
+     * @summary Modifies information about a group.
+     *
+     * @description You can modify `GroupName` and `Description` for a group.
+     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
+     * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
+     *
+     * @param request UpdateGroupRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateGroupResponse
      */
     updateGroupWithOptions(request: UpdateGroupRequest, runtime: $Util.RuntimeOptions): Promise<UpdateGroupResponse>;
     /**
-      * You can modify `GroupName` and `Description` for a group.
-      * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
-      * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
-      *
-      * @param request UpdateGroupRequest
-      * @return UpdateGroupResponse
+     * @summary Modifies information about a group.
+     *
+     * @description You can modify `GroupName` and `Description` for a group.
+     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
+     * This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
+     *
+     * @param request UpdateGroupRequest
+     * @return UpdateGroupResponse
      */
     updateGroup(request: UpdateGroupRequest): Promise<UpdateGroupResponse>;
     /**
-      * This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request UpdateInlinePolicyForAccessConfigurationRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateInlinePolicyForAccessConfigurationResponse
+     * @summary Modifies an inline policy that is created for an access configuration.
+     *
+     * @description This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request UpdateInlinePolicyForAccessConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateInlinePolicyForAccessConfigurationResponse
      */
     updateInlinePolicyForAccessConfigurationWithOptions(request: UpdateInlinePolicyForAccessConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<UpdateInlinePolicyForAccessConfigurationResponse>;
     /**
-      * This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
-      *
-      * @param request UpdateInlinePolicyForAccessConfigurationRequest
-      * @return UpdateInlinePolicyForAccessConfigurationResponse
+     * @summary Modifies an inline policy that is created for an access configuration.
+     *
+     * @description This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
+     *
+     * @param request UpdateInlinePolicyForAccessConfigurationRequest
+     * @return UpdateInlinePolicyForAccessConfigurationResponse
      */
     updateInlinePolicyForAccessConfiguration(request: UpdateInlinePolicyForAccessConfigurationRequest): Promise<UpdateInlinePolicyForAccessConfigurationResponse>;
     /**
-      * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-      * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
-      *
-      * @param request UpdateMFAAuthenticationSettingsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateMFAAuthenticationSettingsResponse
+     * @summary Modifies the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
+     * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
+     *
+     * @param request UpdateMFAAuthenticationSettingsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateMFAAuthenticationSettingsResponse
      */
     updateMFAAuthenticationSettingsWithOptions(request: UpdateMFAAuthenticationSettingsRequest, runtime: $Util.RuntimeOptions): Promise<UpdateMFAAuthenticationSettingsResponse>;
     /**
-      * If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
-      * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
-      *
-      * @param request UpdateMFAAuthenticationSettingsRequest
-      * @return UpdateMFAAuthenticationSettingsResponse
+     * @summary Modifies the multi-factor authentication (MFA) setting of all users.
+     *
+     * @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
+     * This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
+     *
+     * @param request UpdateMFAAuthenticationSettingsRequest
+     * @return UpdateMFAAuthenticationSettingsResponse
      */
     updateMFAAuthenticationSettings(request: UpdateMFAAuthenticationSettingsRequest): Promise<UpdateMFAAuthenticationSettingsResponse>;
     /**
-      * This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
-      *
-      * @param request UpdateSCIMServerCredentialStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateSCIMServerCredentialStatusResponse
+     * @summary Enables or disables a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
+     *
+     * @param request UpdateSCIMServerCredentialStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateSCIMServerCredentialStatusResponse
      */
     updateSCIMServerCredentialStatusWithOptions(request: UpdateSCIMServerCredentialStatusRequest, runtime: $Util.RuntimeOptions): Promise<UpdateSCIMServerCredentialStatusResponse>;
     /**
-      * This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
-      *
-      * @param request UpdateSCIMServerCredentialStatusRequest
-      * @return UpdateSCIMServerCredentialStatusResponse
+     * @summary Enables or disables a Cross-domain Identity Management (SCIM) credential.
+     *
+     * @description This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
+     *
+     * @param request UpdateSCIMServerCredentialStatusRequest
+     * @return UpdateSCIMServerCredentialStatusResponse
      */
     updateSCIMServerCredentialStatus(request: UpdateSCIMServerCredentialStatusRequest): Promise<UpdateSCIMServerCredentialStatusResponse>;
     /**
-      * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
-      * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
-      * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
-      *
-      * @param request UpdateUserRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateUserResponse
+     * @summary Modifies information about a user.
+     *
+     * @description You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
+     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
+     * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
+     *
+     * @param request UpdateUserRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateUserResponse
      */
     updateUserWithOptions(request: UpdateUserRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserResponse>;
     /**
-      * You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
-      * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
-      * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
-      *
-      * @param request UpdateUserRequest
-      * @return UpdateUserResponse
+     * @summary Modifies information about a user.
+     *
+     * @description You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
+     * >  If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
+     * This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
+     *
+     * @param request UpdateUserRequest
+     * @return UpdateUserResponse
      */
     updateUser(request: UpdateUserRequest): Promise<UpdateUserResponse>;
     /**
-      * If you call the [UpdateMFAAuthenticationSettings](~~450134~~) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
-      * By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
-      * This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
-      *
-      * @param request UpdateUserMFAAuthenticationSettingsRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateUserMFAAuthenticationSettingsResponse
+     * @summary Modifies the multi-factor authentication (MFA) setting of a single user.
+     *
+     * @description If you call the [UpdateMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450134.html) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
+     * By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
+     * This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
+     *
+     * @param request UpdateUserMFAAuthenticationSettingsRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateUserMFAAuthenticationSettingsResponse
      */
     updateUserMFAAuthenticationSettingsWithOptions(request: UpdateUserMFAAuthenticationSettingsRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserMFAAuthenticationSettingsResponse>;
     /**
-      * If you call the [UpdateMFAAuthenticationSettings](~~450134~~) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
-      * By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
-      * This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
-      *
-      * @param request UpdateUserMFAAuthenticationSettingsRequest
-      * @return UpdateUserMFAAuthenticationSettingsResponse
+     * @summary Modifies the multi-factor authentication (MFA) setting of a single user.
+     *
+     * @description If you call the [UpdateMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450134.html) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
+     * By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
+     * This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
+     *
+     * @param request UpdateUserMFAAuthenticationSettingsRequest
+     * @return UpdateUserMFAAuthenticationSettingsResponse
      */
     updateUserMFAAuthenticationSettings(request: UpdateUserMFAAuthenticationSettingsRequest): Promise<UpdateUserMFAAuthenticationSettingsResponse>;
+    /**
+     * @summary Modifies a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request UpdateUserProvisioningRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateUserProvisioningResponse
+     */
     updateUserProvisioningWithOptions(request: UpdateUserProvisioningRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserProvisioningResponse>;
+    /**
+     * @summary Modifies a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request UpdateUserProvisioningRequest
+     * @return UpdateUserProvisioningResponse
+     */
     updateUserProvisioning(request: UpdateUserProvisioningRequest): Promise<UpdateUserProvisioningResponse>;
+    /**
+     * @summary Modifies the global configurations of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request UpdateUserProvisioningConfigurationRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateUserProvisioningConfigurationResponse
+     */
     updateUserProvisioningConfigurationWithOptions(request: UpdateUserProvisioningConfigurationRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserProvisioningConfigurationResponse>;
+    /**
+     * @summary Modifies the global configurations of a Resource Access Management (RAM) user provisioning.
+     *
+     * @param request UpdateUserProvisioningConfigurationRequest
+     * @return UpdateUserProvisioningConfigurationResponse
+     */
     updateUserProvisioningConfiguration(request: UpdateUserProvisioningConfigurationRequest): Promise<UpdateUserProvisioningConfigurationResponse>;
     /**
-      * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
-      *
-      * @param request UpdateUserStatusRequest
-      * @param runtime runtime options for this request RuntimeOptions
-      * @return UpdateUserStatusResponse
+     * @summary Changes the status of a user.
+     *
+     * @description This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
+     *
+     * @param request UpdateUserStatusRequest
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateUserStatusResponse
      */
     updateUserStatusWithOptions(request: UpdateUserStatusRequest, runtime: $Util.RuntimeOptions): Promise<UpdateUserStatusResponse>;
     /**
-      * This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
-      *
-      * @param request UpdateUserStatusRequest
-      * @return UpdateUserStatusResponse
+     * @summary Changes the status of a user.
+     *
+     * @description This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
+     *
+     * @param request UpdateUserStatusRequest
+     * @return UpdateUserStatusResponse
      */
     updateUserStatus(request: UpdateUserStatusRequest): Promise<UpdateUserStatusResponse>;
 }