@databricks/sdk-accessmanagement 0.34.0 → 0.35.0

package/dist/v1/client.js

@@ -1,458 +1,363 @@
-// Code generated from API definition by Databricks SDK Generator. DO NOT EDIT.
-import { VERSION as AUTH_VERSION } from '@databricks/sdk-auth';
-import { createDefault } from '@databricks/sdk-core/clientinfo';
-import { NoOpLogger } from '@databricks/sdk-core/logger';
-import { resolveClientConfig } from './transport';
-import { buildHttpRequest, executeCall, executeHttpCall, marshalRequest, parseResponse, flattenQueryParams, } from './utils';
-import pkgJson from '../../package.json' with { type: 'json' };
-import { marshalActorSchema, marshalConsistencyTokenSchema, marshalResourceInfoSchema, marshalSetObjectPermissionsRequestSchema, marshalUpdateObjectPermissionsRequestSchema, marshalUpdateRuleSetRequestSchema, marshalUpdateWorkspacePermissionAssignmentRequestSchema, unmarshalCheckPolicyResponseSchema, unmarshalDeleteWorkspacePermissionAssignmentResponseSchema, unmarshalListAssignableRolesForResourceResponseSchema, unmarshalListPermissionLevelsResponseSchema, unmarshalListWorkspacePermissionAssignmentsResponseSchema, unmarshalListWorkspacePermissionsResponseSchema, unmarshalPermissionsResponseSchema, unmarshalRuleSetSchema, unmarshalWorkspacePermissionAssignmentOutputSchema, } from './model';
-// Package identity segment for this client to be used in the User-Agent header.
+import { resolveClientConfig } from "./transport.js";
+import { buildHttpRequest, executeCall, executeHttpCall, flattenQueryParams, marshalRequest, parseResponse } from "./utils.js";
+import { name, version } from "../package.js";
+import { marshalActorSchema, marshalConsistencyTokenSchema, marshalResourceInfoSchema, marshalSetObjectPermissionsRequestSchema, marshalUpdateObjectPermissionsRequestSchema, marshalUpdateRuleSetRequestSchema, marshalUpdateWorkspacePermissionAssignmentRequestSchema, unmarshalCheckPolicyResponseSchema, unmarshalDeleteWorkspacePermissionAssignmentResponseSchema, unmarshalListAssignableRolesForResourceResponseSchema, unmarshalListPermissionLevelsResponseSchema, unmarshalListWorkspacePermissionAssignmentsResponseSchema, unmarshalListWorkspacePermissionsResponseSchema, unmarshalPermissionsResponseSchema, unmarshalRuleSetSchema, unmarshalWorkspacePermissionAssignmentOutputSchema } from "./model.js";
+import { VERSION } from "@databricks/sdk-auth";
+import { createDefault } from "@databricks/sdk-core/clientinfo";
+import { NoOpLogger } from "@databricks/sdk-core/logger";
+
+//#region src/v1/client.ts
 const PACKAGE_SEGMENT = {
-    key: 'sdk-js-' + pkgJson.name.replace(/^@[^/]+\/sdk-/, ''),
-    value: pkgJson.version,
+	key: "sdk-js-" + name.replace(/^@[^/]+\/sdk-/, ""),
+	value: version
 };
-export class AccessManagementClient {
-    options;
-    logger;
-    // User-Agent header value. Composed once at construction from
-    // createDefault() merged with this package's identity and the active
-    // credential's name.
-    userAgent;
-    // Memoized configuration. The profile is resolved once, lazily, on the first
-    // request, then reused; host, workspaceId/accountId, and credentials are
-    // filled from it when not set explicitly on the options.
-    config;
-    constructor(options) {
-        this.options = options;
-        this.logger = options.logger ?? new NoOpLogger();
-        const info = createDefault()
-            .with(PACKAGE_SEGMENT)
-            .with({ key: 'sdk-js-auth', value: AUTH_VERSION })
-            .with({ key: 'auth', value: options.credentials?.name() ?? 'default' });
-        this.userAgent = info.toString();
-    }
-    resolveConfig() {
-        this.config ??= resolveClientConfig(this.options);
-        return this.config;
-    }
-    /** Deletes the workspace permissions assignment in a given account and workspace for the specified principal. */
-    async deleteWorkspacePermissionAssignment(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ''}/workspaces/${String(req.workspaceId ?? '')}/permissionassignments/principals/${String(req.principalId ?? '')}`;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('DELETE', url, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalDeleteWorkspacePermissionAssignmentResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Get the permission assignments for the specified <Account> and <Workspace>. */
-    async listWorkspacePermissionAssignments(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ''}/workspaces/${String(req.workspaceId ?? '')}/permissionassignments`;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', url, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalListWorkspacePermissionAssignmentsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Get an array of workspace permissions for the specified account and workspace. */
-    async listWorkspacePermissions(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ''}/workspaces/${String(req.workspaceId ?? '')}/permissionassignments/permissions`;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', url, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalListWorkspacePermissionsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Creates or updates the workspace permissions assignment in a given account and workspace for the specified principal. */
-    async updateWorkspacePermissionAssignment(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ''}/workspaces/${String(req.workspaceId ?? '')}/permissionassignments/principals/${String(req.principalId ?? '')}`;
-        const body = marshalRequest(req, marshalUpdateWorkspacePermissionAssignmentRequestSchema);
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers({ 'Content-Type': 'application/json' });
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('PUT', url, headers, callSignal, body);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalWorkspacePermissionAssignmentOutputSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the
-     * said resource. Currently only a default rule set for each resource is supported.
-     */
-    async getRuleSet(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/rule-sets`;
-        const params = new URLSearchParams();
-        if (req.name !== undefined) {
-            params.append('name', req.name);
-        }
-        if (req.etag !== undefined) {
-            params.append('etag', req.etag);
-        }
-        const query = params.toString();
-        const fullUrl = query !== '' ? `${url}?${query}` : url;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', fullUrl, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalRuleSetSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the
-     * said resource. Currently only a default rule set for each resource is supported.
-     */
-    async getRuleSetProxy(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/rule-sets`;
-        const params = new URLSearchParams();
-        if (req.name !== undefined) {
-            params.append('name', req.name);
-        }
-        if (req.etag !== undefined) {
-            params.append('etag', req.etag);
-        }
-        const query = params.toString();
-        const fullUrl = query !== '' ? `${url}?${query}` : url;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', fullUrl, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalRuleSetSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the
-     * resource can contain an access rule of the role.
-     */
-    async listAssignableRolesForResource(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/assignable-roles`;
-        const params = new URLSearchParams();
-        if (req.resource !== undefined) {
-            params.append('resource', req.resource);
-        }
-        const query = params.toString();
-        const fullUrl = query !== '' ? `${url}?${query}` : url;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', fullUrl, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalListAssignableRolesForResourceResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the
-     * resource can contain an access rule of the role.
-     */
-    async listAssignableRolesForResourceProxy(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/assignable-roles`;
-        const params = new URLSearchParams();
-        if (req.resource !== undefined) {
-            params.append('resource', req.resource);
-        }
-        const query = params.toString();
-        const fullUrl = query !== '' ? `${url}?${query}` : url;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', fullUrl, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalListAssignableRolesForResourceResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it.
-     * This pattern helps prevent conflicts between concurrent updates.
-     */
-    async updateRuleSet(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/rule-sets`;
-        const body = marshalRequest(req, marshalUpdateRuleSetRequestSchema);
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers({ 'Content-Type': 'application/json' });
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('PUT', url, headers, callSignal, body);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalRuleSetSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /**
-     * Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it.
-     * This pattern helps prevent conflicts between concurrent updates.
-     */
-    async updateRuleSetProxy(req, options) {
-        const { host, accountId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ''}/access-control/rule-sets`;
-        const body = marshalRequest(req, marshalUpdateRuleSetRequestSchema);
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers({ 'Content-Type': 'application/json' });
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('PUT', url, headers, callSignal, body);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalRuleSetSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Gets the permissions of an object. Objects can inherit permissions from their parent objects or root object. */
-    async getObjectPermissions(req, options) {
-        const { host, workspaceId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ''}/${req.requestObjectId ?? ''}`;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            if (workspaceId !== undefined) {
-                headers.set('X-Databricks-Workspace-Id', workspaceId);
-            }
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', url, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalPermissionsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Gets the permission levels that a user can have on an object. */
-    async listPermissionLevels(req, options) {
-        const { host, workspaceId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ''}/${req.requestObjectId ?? ''}/permissionLevels`;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            if (workspaceId !== undefined) {
-                headers.set('X-Databricks-Workspace-Id', workspaceId);
-            }
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', url, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalListPermissionLevelsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Sets permissions on an object, replacing existing permissions if they exist. Deletes all direct permissions if none are specified. Objects can inherit permissions from their parent objects or root object. */
-    async setObjectPermissions(req, options) {
-        const { host, workspaceId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ''}/${req.requestObjectId ?? ''}`;
-        const body = marshalRequest(req, marshalSetObjectPermissionsRequestSchema);
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers({ 'Content-Type': 'application/json' });
-            if (workspaceId !== undefined) {
-                headers.set('X-Databricks-Workspace-Id', workspaceId);
-            }
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('PUT', url, headers, callSignal, body);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalPermissionsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Updates the permissions on an object. Objects can inherit permissions from their parent objects or root object. */
-    async updateObjectPermissions(req, options) {
-        const { host, workspaceId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ''}/${req.requestObjectId ?? ''}`;
-        const body = marshalRequest(req, marshalUpdateObjectPermissionsRequestSchema);
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers({ 'Content-Type': 'application/json' });
-            if (workspaceId !== undefined) {
-                headers.set('X-Databricks-Workspace-Id', workspaceId);
-            }
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('PATCH', url, headers, callSignal, body);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalPermissionsResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-    /** Check access policy to a resource. */
-    async checkPolicy(req, options) {
-        const { host, workspaceId, httpClient } = await this.resolveConfig();
-        const url = `${host}/api/2.0/access-control/check-policy-v2`;
-        const params = new URLSearchParams();
-        if (req.actor !== undefined) {
-            flattenQueryParams('actor', marshalActorSchema.parse(req.actor), params);
-        }
-        if (req.permission !== undefined) {
-            params.append('permission', req.permission);
-        }
-        if (req.resource !== undefined) {
-            params.append('resource', req.resource);
-        }
-        if (req.consistencyToken !== undefined) {
-            flattenQueryParams('consistency_token', marshalConsistencyTokenSchema.parse(req.consistencyToken), params);
-        }
-        if (req.authzIdentity !== undefined) {
-            params.append('authz_identity', req.authzIdentity);
-        }
-        if (req.resourceInfo !== undefined) {
-            flattenQueryParams('resource_info', marshalResourceInfoSchema.parse(req.resourceInfo), params);
-        }
-        const query = params.toString();
-        const fullUrl = query !== '' ? `${url}?${query}` : url;
-        let resp;
-        const call = async (callSignal) => {
-            const headers = new Headers();
-            if (workspaceId !== undefined) {
-                headers.set('X-Databricks-Workspace-Id', workspaceId);
-            }
-            headers.set('User-Agent', this.userAgent);
-            const httpReq = buildHttpRequest('GET', fullUrl, headers, callSignal);
-            const respBody = await executeHttpCall({
-                request: httpReq,
-                httpClient,
-                logger: this.logger,
-            });
-            resp = parseResponse(respBody, unmarshalCheckPolicyResponseSchema);
-        };
-        await executeCall(call, options);
-        if (resp === undefined) {
-            throw new Error('operation completed without a result.');
-        }
-        return resp;
-    }
-}
+var AccessManagementClient = class {
+	options;
+	logger;
+	userAgent;
+	config;
+	constructor(options) {
+		this.options = options;
+		this.logger = options.logger ?? new NoOpLogger();
+		this.userAgent = createDefault().with(PACKAGE_SEGMENT).with({
+			key: "sdk-js-auth",
+			value: VERSION
+		}).with({
+			key: "auth",
+			value: options.credentials?.name() ?? "default"
+		}).toString();
+	}
+	resolveConfig() {
+		this.config ??= resolveClientConfig(this.options);
+		return this.config;
+	}
+	/** Deletes the workspace permissions assignment in a given account and workspace for the specified principal. */
+	async deleteWorkspacePermissionAssignment(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ""}/workspaces/${String(req.workspaceId ?? "")}/permissionassignments/principals/${String(req.principalId ?? "")}`;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("DELETE", url, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalDeleteWorkspacePermissionAssignmentResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Get the permission assignments for the specified <Account> and <Workspace>. */
+	async listWorkspacePermissionAssignments(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ""}/workspaces/${String(req.workspaceId ?? "")}/permissionassignments`;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", url, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalListWorkspacePermissionAssignmentsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Get an array of workspace permissions for the specified account and workspace. */
+	async listWorkspacePermissions(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ""}/workspaces/${String(req.workspaceId ?? "")}/permissionassignments/permissions`;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", url, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalListWorkspacePermissionsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Creates or updates the workspace permissions assignment in a given account and workspace for the specified principal. */
+	async updateWorkspacePermissionAssignment(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/accounts/${req.accountId ?? accountId ?? ""}/workspaces/${String(req.workspaceId ?? "")}/permissionassignments/principals/${String(req.principalId ?? "")}`;
+		const body = marshalRequest(req, marshalUpdateWorkspacePermissionAssignmentRequestSchema);
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers({ "Content-Type": "application/json" });
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("PUT", url, headers, callSignal, body),
+				httpClient,
+				logger: this.logger
+			}), unmarshalWorkspacePermissionAssignmentOutputSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the
+	* said resource. Currently only a default rule set for each resource is supported.
+	*/
+	async getRuleSet(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/rule-sets`;
+		const params = new URLSearchParams();
+		if (req.name !== void 0) params.append("name", req.name);
+		if (req.etag !== void 0) params.append("etag", req.etag);
+		const query = params.toString();
+		const fullUrl = query !== "" ? `${url}?${query}` : url;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", fullUrl, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalRuleSetSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the
+	* said resource. Currently only a default rule set for each resource is supported.
+	*/
+	async getRuleSetProxy(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/rule-sets`;
+		const params = new URLSearchParams();
+		if (req.name !== void 0) params.append("name", req.name);
+		if (req.etag !== void 0) params.append("etag", req.etag);
+		const query = params.toString();
+		const fullUrl = query !== "" ? `${url}?${query}` : url;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", fullUrl, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalRuleSetSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the
+	* resource can contain an access rule of the role.
+	*/
+	async listAssignableRolesForResource(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/assignable-roles`;
+		const params = new URLSearchParams();
+		if (req.resource !== void 0) params.append("resource", req.resource);
+		const query = params.toString();
+		const fullUrl = query !== "" ? `${url}?${query}` : url;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", fullUrl, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalListAssignableRolesForResourceResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the
+	* resource can contain an access rule of the role.
+	*/
+	async listAssignableRolesForResourceProxy(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/assignable-roles`;
+		const params = new URLSearchParams();
+		if (req.resource !== void 0) params.append("resource", req.resource);
+		const query = params.toString();
+		const fullUrl = query !== "" ? `${url}?${query}` : url;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", fullUrl, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalListAssignableRolesForResourceResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it.
+	* This pattern helps prevent conflicts between concurrent updates.
+	*/
+	async updateRuleSet(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/rule-sets`;
+		const body = marshalRequest(req, marshalUpdateRuleSetRequestSchema);
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers({ "Content-Type": "application/json" });
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("PUT", url, headers, callSignal, body),
+				httpClient,
+				logger: this.logger
+			}), unmarshalRuleSetSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/**
+	* Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it.
+	* This pattern helps prevent conflicts between concurrent updates.
+	*/
+	async updateRuleSetProxy(req, options) {
+		const { host, accountId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/preview/accounts/${req.accountId ?? accountId ?? ""}/access-control/rule-sets`;
+		const body = marshalRequest(req, marshalUpdateRuleSetRequestSchema);
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers({ "Content-Type": "application/json" });
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("PUT", url, headers, callSignal, body),
+				httpClient,
+				logger: this.logger
+			}), unmarshalRuleSetSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Gets the permissions of an object. Objects can inherit permissions from their parent objects or root object. */
+	async getObjectPermissions(req, options) {
+		const { host, workspaceId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ""}/${req.requestObjectId ?? ""}`;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			if (workspaceId !== void 0) headers.set("X-Databricks-Workspace-Id", workspaceId);
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", url, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalPermissionsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Gets the permission levels that a user can have on an object. */
+	async listPermissionLevels(req, options) {
+		const { host, workspaceId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ""}/${req.requestObjectId ?? ""}/permissionLevels`;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			if (workspaceId !== void 0) headers.set("X-Databricks-Workspace-Id", workspaceId);
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", url, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalListPermissionLevelsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Sets permissions on an object, replacing existing permissions if they exist. Deletes all direct permissions if none are specified. Objects can inherit permissions from their parent objects or root object. */
+	async setObjectPermissions(req, options) {
+		const { host, workspaceId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ""}/${req.requestObjectId ?? ""}`;
+		const body = marshalRequest(req, marshalSetObjectPermissionsRequestSchema);
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers({ "Content-Type": "application/json" });
+			if (workspaceId !== void 0) headers.set("X-Databricks-Workspace-Id", workspaceId);
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("PUT", url, headers, callSignal, body),
+				httpClient,
+				logger: this.logger
+			}), unmarshalPermissionsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Updates the permissions on an object. Objects can inherit permissions from their parent objects or root object. */
+	async updateObjectPermissions(req, options) {
+		const { host, workspaceId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/permissions/${req.requestObjectType ?? ""}/${req.requestObjectId ?? ""}`;
+		const body = marshalRequest(req, marshalUpdateObjectPermissionsRequestSchema);
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers({ "Content-Type": "application/json" });
+			if (workspaceId !== void 0) headers.set("X-Databricks-Workspace-Id", workspaceId);
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("PATCH", url, headers, callSignal, body),
+				httpClient,
+				logger: this.logger
+			}), unmarshalPermissionsResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+	/** Check access policy to a resource. */
+	async checkPolicy(req, options) {
+		const { host, workspaceId, httpClient } = await this.resolveConfig();
+		const url = `${host}/api/2.0/access-control/check-policy-v2`;
+		const params = new URLSearchParams();
+		if (req.actor !== void 0) flattenQueryParams("actor", marshalActorSchema.parse(req.actor), params);
+		if (req.permission !== void 0) params.append("permission", req.permission);
+		if (req.resource !== void 0) params.append("resource", req.resource);
+		if (req.consistencyToken !== void 0) flattenQueryParams("consistency_token", marshalConsistencyTokenSchema.parse(req.consistencyToken), params);
+		if (req.authzIdentity !== void 0) params.append("authz_identity", req.authzIdentity);
+		if (req.resourceInfo !== void 0) flattenQueryParams("resource_info", marshalResourceInfoSchema.parse(req.resourceInfo), params);
+		const query = params.toString();
+		const fullUrl = query !== "" ? `${url}?${query}` : url;
+		let resp;
+		const call = async (callSignal) => {
+			const headers = new Headers();
+			if (workspaceId !== void 0) headers.set("X-Databricks-Workspace-Id", workspaceId);
+			headers.set("User-Agent", this.userAgent);
+			resp = parseResponse(await executeHttpCall({
+				request: buildHttpRequest("GET", fullUrl, headers, callSignal),
+				httpClient,
+				logger: this.logger
+			}), unmarshalCheckPolicyResponseSchema);
+		};
+		await executeCall(call, options);
+		if (resp === void 0) throw new Error("operation completed without a result.");
+		return resp;
+	}
+};
+
+//#endregion
+export { AccessManagementClient };
 //# sourceMappingURL=client.js.map