@databricks/sdk-accessmanagement 0.34.0 → 0.35.0

package/dist/v1/model.d.ts

@@ -1,371 +1,364 @@
-import { z } from 'zod';
+import { z } from "zod";
+
+//#region src/v1/model.d.ts
 /** Permission level */
-export declare const PermissionLevel: {
-    readonly CAN_MANAGE: "CAN_MANAGE";
-    readonly CAN_RESTART: "CAN_RESTART";
-    readonly CAN_ATTACH_TO: "CAN_ATTACH_TO";
-    readonly IS_OWNER: "IS_OWNER";
-    readonly CAN_MANAGE_RUN: "CAN_MANAGE_RUN";
-    readonly CAN_VIEW: "CAN_VIEW";
-    readonly CAN_READ: "CAN_READ";
-    readonly CAN_RUN: "CAN_RUN";
-    readonly CAN_EDIT: "CAN_EDIT";
-    readonly CAN_USE: "CAN_USE";
-    readonly CAN_MANAGE_STAGING_VERSIONS: "CAN_MANAGE_STAGING_VERSIONS";
-    readonly CAN_MANAGE_PRODUCTION_VERSIONS: "CAN_MANAGE_PRODUCTION_VERSIONS";
-    readonly CAN_EDIT_METADATA: "CAN_EDIT_METADATA";
-    readonly CAN_VIEW_METADATA: "CAN_VIEW_METADATA";
-    readonly CAN_BIND: "CAN_BIND";
-    readonly CAN_QUERY: "CAN_QUERY";
-    readonly CAN_MONITOR: "CAN_MONITOR";
-    readonly CAN_CREATE: "CAN_CREATE";
-    readonly CAN_MONITOR_ONLY: "CAN_MONITOR_ONLY";
-    readonly CAN_CREATE_APP: "CAN_CREATE_APP";
+declare const PermissionLevel: {
+  readonly CAN_MANAGE: "CAN_MANAGE";
+  readonly CAN_RESTART: "CAN_RESTART";
+  readonly CAN_ATTACH_TO: "CAN_ATTACH_TO";
+  readonly IS_OWNER: "IS_OWNER";
+  readonly CAN_MANAGE_RUN: "CAN_MANAGE_RUN";
+  readonly CAN_VIEW: "CAN_VIEW";
+  readonly CAN_READ: "CAN_READ";
+  readonly CAN_RUN: "CAN_RUN";
+  readonly CAN_EDIT: "CAN_EDIT";
+  readonly CAN_USE: "CAN_USE";
+  readonly CAN_MANAGE_STAGING_VERSIONS: "CAN_MANAGE_STAGING_VERSIONS";
+  readonly CAN_MANAGE_PRODUCTION_VERSIONS: "CAN_MANAGE_PRODUCTION_VERSIONS";
+  readonly CAN_EDIT_METADATA: "CAN_EDIT_METADATA";
+  readonly CAN_VIEW_METADATA: "CAN_VIEW_METADATA";
+  readonly CAN_BIND: "CAN_BIND";
+  readonly CAN_QUERY: "CAN_QUERY";
+  readonly CAN_MONITOR: "CAN_MONITOR";
+  readonly CAN_CREATE: "CAN_CREATE";
+  readonly CAN_MONITOR_ONLY: "CAN_MONITOR_ONLY";
+  readonly CAN_CREATE_APP: "CAN_CREATE_APP";
 };
-export type PermissionLevel = (typeof PermissionLevel)[keyof typeof PermissionLevel] | (string & {});
+type PermissionLevel = (typeof PermissionLevel)[keyof typeof PermissionLevel] | (string & {});
 /**
  * Defines the identity to be used for authZ of the request on the server side. See one pager for
  * for more information: http://go/acl/service-identity
  */
-export declare const RequestAuthzIdentity: {
-    readonly REQUEST_AUTHZ_IDENTITY_UNSPECIFIED: "REQUEST_AUTHZ_IDENTITY_UNSPECIFIED";
-    readonly REQUEST_AUTHZ_IDENTITY_USER_CONTEXT: "REQUEST_AUTHZ_IDENTITY_USER_CONTEXT";
-    readonly REQUEST_AUTHZ_IDENTITY_SERVICE_IDENTITY: "REQUEST_AUTHZ_IDENTITY_SERVICE_IDENTITY";
+declare const RequestAuthzIdentity: {
+  readonly REQUEST_AUTHZ_IDENTITY_UNSPECIFIED: "REQUEST_AUTHZ_IDENTITY_UNSPECIFIED";
+  readonly REQUEST_AUTHZ_IDENTITY_USER_CONTEXT: "REQUEST_AUTHZ_IDENTITY_USER_CONTEXT";
+  readonly REQUEST_AUTHZ_IDENTITY_SERVICE_IDENTITY: "REQUEST_AUTHZ_IDENTITY_SERVICE_IDENTITY";
 };
-export type RequestAuthzIdentity = (typeof RequestAuthzIdentity)[keyof typeof RequestAuthzIdentity] | (string & {});
-export declare const WorkspacePermission: {
-    readonly UNKNOWN: "UNKNOWN";
-    /** The most basic workspace permission */
-    readonly USER: "USER";
-    readonly ADMIN: "ADMIN";
+type RequestAuthzIdentity = (typeof RequestAuthzIdentity)[keyof typeof RequestAuthzIdentity] | (string & {});
+declare const WorkspacePermission: {
+  readonly UNKNOWN: "UNKNOWN"; /** The most basic workspace permission */
+  readonly USER: "USER";
+  readonly ADMIN: "ADMIN";
 };
-export type WorkspacePermission = (typeof WorkspacePermission)[keyof typeof WorkspacePermission] | (string & {});
-export interface AccessControlRequest {
-    principalName?: {
-        $case: 'userName';
-        /** name of the user */
-        userName: string;
-    } | {
-        $case: 'groupName';
-        /** name of the group */
-        groupName: string;
-    } | {
-        $case: 'servicePrincipalName';
-        /** application ID of a service principal */
-        servicePrincipalName: string;
-    } | undefined;
-    permissionLevel?: PermissionLevel | undefined;
-}
-export interface AccessControlResponse {
-    principalName?: {
-        $case: 'userName';
-        /** name of the user */
-        userName: string;
-    } | {
-        $case: 'groupName';
-        /** name of the group */
-        groupName: string;
-    } | {
-        $case: 'servicePrincipalName';
-        /** Name of the service principal. */
-        servicePrincipalName: string;
-    } | undefined;
-    /** Display name of the user or service principal. */
-    displayName?: string | undefined;
-    /** All permissions. */
-    allPermissions?: Permission[] | undefined;
+type WorkspacePermission = (typeof WorkspacePermission)[keyof typeof WorkspacePermission] | (string & {});
+interface AccessControlRequest {
+  principalName?: {
+    $case: 'userName'; /** name of the user */
+    userName: string;
+  } | {
+    $case: 'groupName'; /** name of the group */
+    groupName: string;
+  } | {
+    $case: 'servicePrincipalName'; /** application ID of a service principal */
+    servicePrincipalName: string;
+  } | undefined;
+  permissionLevel?: PermissionLevel | undefined;
+}
+interface AccessControlResponse {
+  principalName?: {
+    $case: 'userName'; /** name of the user */
+    userName: string;
+  } | {
+    $case: 'groupName'; /** name of the group */
+    groupName: string;
+  } | {
+    $case: 'servicePrincipalName'; /** Name of the service principal. */
+    servicePrincipalName: string;
+  } | undefined;
+  /** Display name of the user or service principal. */
+  displayName?: string | undefined;
+  /** All permissions. */
+  allPermissions?: Permission[] | undefined;
 }
 /**
  * represents an identity trying to access a resource - user or a service principal
  * group can be a principal of a permission set assignment but an actor is always a user or a service principal
  */
-export interface Actor {
-    kind?: {
-        $case: 'actorId';
-        actorId: bigint;
-    } | undefined;
-}
-export interface CheckPolicyRequest {
-    actor?: Actor | undefined;
-    permission?: string | undefined;
-    /**
-     * Ex: (servicePrincipal/use, accounts/<account-id>/servicePrincipals/<sp-id>)
-     * Ex: (servicePrincipal.ruleSet/update, accounts/<account-id>/servicePrincipals/<sp-id>/ruleSets/default)
-     */
-    resource?: string | undefined;
-    consistencyToken?: ConsistencyToken | undefined;
-    authzIdentity?: RequestAuthzIdentity | undefined;
-    resourceInfo?: ResourceInfo | undefined;
-}
-export interface CheckPolicyResponse {
-    isPermitted?: boolean | undefined;
-    consistencyToken?: ConsistencyToken | undefined;
-}
-export interface ConsistencyToken {
-    value?: string | undefined;
+interface Actor {
+  kind?: {
+    $case: 'actorId';
+    actorId: bigint;
+  } | undefined;
+}
+interface CheckPolicyRequest {
+  actor?: Actor | undefined;
+  permission?: string | undefined;
+  /**
+   * Ex: (servicePrincipal/use, accounts/<account-id>/servicePrincipals/<sp-id>)
+   * Ex: (servicePrincipal.ruleSet/update, accounts/<account-id>/servicePrincipals/<sp-id>/ruleSets/default)
+   */
+  resource?: string | undefined;
+  consistencyToken?: ConsistencyToken | undefined;
+  authzIdentity?: RequestAuthzIdentity | undefined;
+  resourceInfo?: ResourceInfo | undefined;
+}
+interface CheckPolicyResponse {
+  isPermitted?: boolean | undefined;
+  consistencyToken?: ConsistencyToken | undefined;
+}
+interface ConsistencyToken {
+  value?: string | undefined;
 }
 /** Removes all permission assignments for a workspace given a principal. */
-export interface DeleteWorkspacePermissionAssignmentRequest {
-    /** The account ID. */
-    accountId?: string | undefined;
-    /** The workspace ID for the account. */
-    workspaceId?: bigint | undefined;
-    /** The ID of the user, service principal, or group. */
-    principalId?: bigint | undefined;
-}
-export interface DeleteWorkspacePermissionAssignmentResponse {
-}
-export interface GetObjectPermissionsRequest {
-    /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
-    requestObjectType?: string | undefined;
-    /** The id of the request object. */
-    requestObjectId?: string | undefined;
-}
-export interface GetRuleSetRequest {
-    /** <Databricks> account ID. */
-    accountId?: string | undefined;
-    /**
-     * The ruleset name associated with the request.
-     *
-     * Examples | Summary
-     * :--- | :---
-     * `name=accounts/<ACCOUNT_ID>/ruleSets/default` | A name for a rule set on the account.
-     * `name=accounts/<ACCOUNT_ID>/groups/<GROUP_ID>/ruleSets/default` | A name for a rule set on the group.
-     * `name=accounts/<ACCOUNT_ID>/servicePrincipals/<SERVICE_PRINCIPAL_APPLICATION_ID>/ruleSets/default` | A name for a rule set on the service principal.
-     * `name=accounts/<ACCOUNT_ID>/tagPolicies/<TAG_POLICY_ID>/ruleSets/default` | A name for a rule set on the tag policy.
-     */
-    name?: string | undefined;
-    /**
-     * Etag used for versioning. The response is at least as fresh as the eTag provided. Etag is used for optimistic
-     * concurrency control as a way to help prevent simultaneous updates of a rule set from overwriting each other. It is
-     * strongly suggested that systems make use of the etag in the read -> modify -> write pattern to perform rule set
-     * updates in order to avoid race conditions that is get an etag from a GET rule set request, and pass it with the
-     * PUT update request to identify the rule set version you are updating.
-     *
-     * Examples | Summary
-     * :--- | :---
-     * `etag=` | An empty etag can only be used in GET to indicate no freshness requirements.
-     * `etag=RENUAAABhSweA4NvVmmUYdiU717H3Tgy0UJdor3gE4a+mq/oj9NjAf8ZsQ==` | An etag encoded a specific version of the rule set to get or to be updated.
-     */
-    etag?: string | undefined;
-}
-export interface GrantRule {
-    /**
-     * Principals this grant rule applies to.
-     * A principal can be a user (for end users), a service principal (for applications and
-     * compute workloads), or an account group. Each principal has its own identifier format:
-     * * users/<USERNAME>
-     * * groups/<GROUP_NAME>
-     * * servicePrincipals/<SERVICE_PRINCIPAL_APPLICATION_ID>
-     */
-    principals?: string[] | undefined;
-    /** Role that is assigned to the list of principals. */
-    role?: string | undefined;
-}
-export interface ListAssignableRolesForResourceRequest {
-    /** <Databricks> account ID. */
-    accountId?: string | undefined;
-    /**
-     * The resource name for which assignable roles will be listed.
-     *
-     * Examples | Summary
-     * :--- | :---
-     * `resource=accounts/<ACCOUNT_ID>` | A resource name for the account.
-     * `resource=accounts/<ACCOUNT_ID>/groups/<GROUP_ID>` | A resource name for the group.
-     * `resource=accounts/<ACCOUNT_ID>/servicePrincipals/<SP_ID>` | A resource name for the service principal.
-     * `resource=accounts/<ACCOUNT_ID>/tagPolicies/<TAG_POLICY_ID>` | A resource name for the tag policy.
-     */
-    resource?: string | undefined;
-}
-export interface ListAssignableRolesForResourceResponse {
-    roles?: Role[] | undefined;
-}
-export interface ListPermissionLevelsRequest {
-    /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
-    requestObjectType?: string | undefined;
-    requestObjectId?: string | undefined;
-}
-export interface ListPermissionLevelsResponse {
-    /** Specific permission levels */
-    permissionLevels?: PermissionsDescription[] | undefined;
+interface DeleteWorkspacePermissionAssignmentRequest {
+  /** The account ID. */
+  accountId?: string | undefined;
+  /** The workspace ID for the account. */
+  workspaceId?: bigint | undefined;
+  /** The ID of the user, service principal, or group. */
+  principalId?: bigint | undefined;
+}
+interface DeleteWorkspacePermissionAssignmentResponse {}
+interface GetObjectPermissionsRequest {
+  /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
+  requestObjectType?: string | undefined;
+  /** The id of the request object. */
+  requestObjectId?: string | undefined;
+}
+interface GetRuleSetRequest {
+  /** <Databricks> account ID. */
+  accountId?: string | undefined;
+  /**
+   * The ruleset name associated with the request.
+   *
+   * Examples | Summary
+   * :--- | :---
+   * `name=accounts/<ACCOUNT_ID>/ruleSets/default` | A name for a rule set on the account.
+   * `name=accounts/<ACCOUNT_ID>/groups/<GROUP_ID>/ruleSets/default` | A name for a rule set on the group.
+   * `name=accounts/<ACCOUNT_ID>/servicePrincipals/<SERVICE_PRINCIPAL_APPLICATION_ID>/ruleSets/default` | A name for a rule set on the service principal.
+   * `name=accounts/<ACCOUNT_ID>/tagPolicies/<TAG_POLICY_ID>/ruleSets/default` | A name for a rule set on the tag policy.
+   */
+  name?: string | undefined;
+  /**
+   * Etag used for versioning. The response is at least as fresh as the eTag provided. Etag is used for optimistic
+   * concurrency control as a way to help prevent simultaneous updates of a rule set from overwriting each other. It is
+   * strongly suggested that systems make use of the etag in the read -> modify -> write pattern to perform rule set
+   * updates in order to avoid race conditions that is get an etag from a GET rule set request, and pass it with the
+   * PUT update request to identify the rule set version you are updating.
+   *
+   * Examples | Summary
+   * :--- | :---
+   * `etag=` | An empty etag can only be used in GET to indicate no freshness requirements.
+   * `etag=RENUAAABhSweA4NvVmmUYdiU717H3Tgy0UJdor3gE4a+mq/oj9NjAf8ZsQ==` | An etag encoded a specific version of the rule set to get or to be updated.
+   */
+  etag?: string | undefined;
+}
+interface GrantRule {
+  /**
+   * Principals this grant rule applies to.
+   * A principal can be a user (for end users), a service principal (for applications and
+   * compute workloads), or an account group. Each principal has its own identifier format:
+   * * users/<USERNAME>
+   * * groups/<GROUP_NAME>
+   * * servicePrincipals/<SERVICE_PRINCIPAL_APPLICATION_ID>
+   */
+  principals?: string[] | undefined;
+  /** Role that is assigned to the list of principals. */
+  role?: string | undefined;
+}
+interface ListAssignableRolesForResourceRequest {
+  /** <Databricks> account ID. */
+  accountId?: string | undefined;
+  /**
+   * The resource name for which assignable roles will be listed.
+   *
+   * Examples | Summary
+   * :--- | :---
+   * `resource=accounts/<ACCOUNT_ID>` | A resource name for the account.
+   * `resource=accounts/<ACCOUNT_ID>/groups/<GROUP_ID>` | A resource name for the group.
+   * `resource=accounts/<ACCOUNT_ID>/servicePrincipals/<SP_ID>` | A resource name for the service principal.
+   * `resource=accounts/<ACCOUNT_ID>/tagPolicies/<TAG_POLICY_ID>` | A resource name for the tag policy.
+   */
+  resource?: string | undefined;
+}
+interface ListAssignableRolesForResourceResponse {
+  roles?: Role[] | undefined;
+}
+interface ListPermissionLevelsRequest {
+  /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
+  requestObjectType?: string | undefined;
+  requestObjectId?: string | undefined;
+}
+interface ListPermissionLevelsResponse {
+  /** Specific permission levels */
+  permissionLevels?: PermissionsDescription[] | undefined;
 }
 /** Gets all the permission assignments for a workspace, given an account and a workspace. */
-export interface ListWorkspacePermissionAssignmentsRequest {
-    /** The account ID. */
-    accountId?: string | undefined;
-    /** The workspace ID for the account. */
-    workspaceId?: bigint | undefined;
+interface ListWorkspacePermissionAssignmentsRequest {
+  /** The account ID. */
+  accountId?: string | undefined;
+  /** The workspace ID for the account. */
+  workspaceId?: bigint | undefined;
 }
-export interface ListWorkspacePermissionAssignmentsResponse {
-    /** Array of permissions assignments defined for a workspace. */
-    permissionAssignments?: WorkspacePermissionAssignmentOutput[] | undefined;
+interface ListWorkspacePermissionAssignmentsResponse {
+  /** Array of permissions assignments defined for a workspace. */
+  permissionAssignments?: WorkspacePermissionAssignmentOutput[] | undefined;
 }
 /** List permissions for a workspace, given an account and a workspace. */
-export interface ListWorkspacePermissionsRequest {
-    /** The account ID. */
-    accountId?: string | undefined;
-    /** The workspace ID. */
-    workspaceId?: bigint | undefined;
-}
-export interface ListWorkspacePermissionsResponse {
-    /** Array of permissions defined for a workspace. */
-    permissions?: PermissionOutput[] | undefined;
-}
-export interface Permission {
-    permissionLevel?: PermissionLevel | undefined;
-    inherited?: boolean | undefined;
-    inheritedFromObject?: string[] | undefined;
-}
-export interface PermissionOutput {
-    permissionLevel?: WorkspacePermission | undefined;
-    /** The results of a permissions query. */
-    description?: string | undefined;
-}
-export interface PermissionsDescription {
-    permissionLevel?: PermissionLevel | undefined;
-    description?: string | undefined;
-}
-export interface PermissionsResponse {
-    objectId?: string | undefined;
-    objectType?: string | undefined;
-    accessControlList?: AccessControlResponse[] | undefined;
+interface ListWorkspacePermissionsRequest {
+  /** The account ID. */
+  accountId?: string | undefined;
+  /** The workspace ID. */
+  workspaceId?: bigint | undefined;
+}
+interface ListWorkspacePermissionsResponse {
+  /** Array of permissions defined for a workspace. */
+  permissions?: PermissionOutput[] | undefined;
+}
+interface Permission {
+  permissionLevel?: PermissionLevel | undefined;
+  inherited?: boolean | undefined;
+  inheritedFromObject?: string[] | undefined;
+}
+interface PermissionOutput {
+  permissionLevel?: WorkspacePermission | undefined;
+  /** The results of a permissions query. */
+  description?: string | undefined;
+}
+interface PermissionsDescription {
+  permissionLevel?: PermissionLevel | undefined;
+  description?: string | undefined;
+}
+interface PermissionsResponse {
+  objectId?: string | undefined;
+  objectType?: string | undefined;
+  accessControlList?: AccessControlResponse[] | undefined;
 }
 /** Information about the principal assigned to the workspace. */
-export interface PrincipalOutput {
-    principalName?: {
-        $case: 'userName';
-        /** The username of the user. Present only if the principal is a user. */
-        userName: string;
-    } | {
-        $case: 'groupName';
-        /** The group name of the group. Present only if the principal is a group. */
-        groupName: string;
-    } | {
-        $case: 'servicePrincipalName';
-        /** The name of the service principal. Present only if the principal is a service principal. */
-        servicePrincipalName: string;
-    } | undefined;
-    /** The unique, opaque id of the principal. */
-    principalId?: bigint | undefined;
-    /** The display name of the principal. */
-    displayName?: string | undefined;
-}
-export interface ResourceInfo {
-    /** Id of the current resource. */
-    id?: string | undefined;
-    /** Parent resource info for the current resource. The parent may have another parent. */
-    parentResourceInfo?: ResourceInfo | undefined;
-    /** The legacy acl path of the current resource. */
-    legacyAclPath?: string | undefined;
-}
-export interface Role {
-    /** Role to assign to a principal or a list of principals on a resource. */
-    name?: string | undefined;
-}
-export interface RuleSet {
-    /** Name of the rule set. */
-    name?: string | undefined;
-    /**
-     * Identifies the version of the rule set returned.
-     * Etag used for versioning. The response is at least as fresh as the eTag provided.
-     * Etag is used for optimistic concurrency control as a way to help prevent simultaneous
-     * updates of a rule set from overwriting each other. It is strongly suggested that systems
-     * make use of the etag in the read -> modify -> write pattern to perform rule set updates in
-     * order to avoid race conditions that is get an etag from a GET rule set request, and pass it
-     * with the PUT update request to identify the rule set version you are updating.
-     */
-    etag?: string | undefined;
-    grantRules?: GrantRule[] | undefined;
-}
-export interface RuleSetUpdateRequest {
-    /** Name of the rule set. */
-    name?: string | undefined;
-    /**
-     * Identifies the version of the rule set returned.
-     * Etag used for versioning. The response is at least as fresh as the eTag provided.
-     * Etag is used for optimistic concurrency control as a way to help prevent simultaneous
-     * updates of a rule set from overwriting each other. It is strongly suggested that systems
-     * make use of the etag in the read -> modify -> write pattern to perform rule set updates in
-     * order to avoid race conditions that is get an etag from a GET rule set request, and pass it
-     * with the PUT update request to identify the rule set version you are updating.
-     */
-    etag?: string | undefined;
-    grantRules?: GrantRule[] | undefined;
-}
-export interface SetObjectPermissionsRequest {
-    /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
-    requestObjectType?: string | undefined;
-    /** The id of the request object. */
-    requestObjectId?: string | undefined;
-    accessControlList?: AccessControlRequest[] | undefined;
-}
-export interface UpdateObjectPermissionsRequest {
-    /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
-    requestObjectType?: string | undefined;
-    /** The id of the request object. */
-    requestObjectId?: string | undefined;
-    accessControlList?: AccessControlRequest[] | undefined;
-}
-export interface UpdateRuleSetRequest {
-    /** <Databricks> account ID. */
-    accountId?: string | undefined;
-    /** Name of the rule set. */
-    name?: string | undefined;
-    ruleSet?: RuleSetUpdateRequest | undefined;
-}
-export interface UpdateWorkspacePermissionAssignmentRequest {
-    /** The account ID. */
-    accountId?: string | undefined;
-    /** The workspace ID. */
-    workspaceId?: bigint | undefined;
-    /** The ID of the user, service principal, or group. */
-    principalId?: bigint | undefined;
-    /**
-     * Array of permissions assignments to update on the workspace.
-     * Valid values are "USER" and "ADMIN" (case-sensitive).
-     * If both "USER" and "ADMIN" are provided, "ADMIN" takes precedence.
-     * Other values will be ignored.
-     * Note that excluding this field, or providing unsupported values, will have the same effect as providing an empty list, which will result in the deletion of all permissions for the principal.
-     */
-    permissions?: WorkspacePermission[] | undefined;
+interface PrincipalOutput {
+  principalName?: {
+    $case: 'userName'; /** The username of the user. Present only if the principal is a user. */
+    userName: string;
+  } | {
+    $case: 'groupName'; /** The group name of the group. Present only if the principal is a group. */
+    groupName: string;
+  } | {
+    $case: 'servicePrincipalName'; /** The name of the service principal. Present only if the principal is a service principal. */
+    servicePrincipalName: string;
+  } | undefined;
+  /** The unique, opaque id of the principal. */
+  principalId?: bigint | undefined;
+  /** The display name of the principal. */
+  displayName?: string | undefined;
+}
+interface ResourceInfo {
+  /** Id of the current resource. */
+  id?: string | undefined;
+  /** Parent resource info for the current resource. The parent may have another parent. */
+  parentResourceInfo?: ResourceInfo | undefined;
+  /** The legacy acl path of the current resource. */
+  legacyAclPath?: string | undefined;
+}
+interface Role {
+  /** Role to assign to a principal or a list of principals on a resource. */
+  name?: string | undefined;
+}
+interface RuleSet {
+  /** Name of the rule set. */
+  name?: string | undefined;
+  /**
+   * Identifies the version of the rule set returned.
+   * Etag used for versioning. The response is at least as fresh as the eTag provided.
+   * Etag is used for optimistic concurrency control as a way to help prevent simultaneous
+   * updates of a rule set from overwriting each other. It is strongly suggested that systems
+   * make use of the etag in the read -> modify -> write pattern to perform rule set updates in
+   * order to avoid race conditions that is get an etag from a GET rule set request, and pass it
+   * with the PUT update request to identify the rule set version you are updating.
+   */
+  etag?: string | undefined;
+  grantRules?: GrantRule[] | undefined;
+}
+interface RuleSetUpdateRequest {
+  /** Name of the rule set. */
+  name?: string | undefined;
+  /**
+   * Identifies the version of the rule set returned.
+   * Etag used for versioning. The response is at least as fresh as the eTag provided.
+   * Etag is used for optimistic concurrency control as a way to help prevent simultaneous
+   * updates of a rule set from overwriting each other. It is strongly suggested that systems
+   * make use of the etag in the read -> modify -> write pattern to perform rule set updates in
+   * order to avoid race conditions that is get an etag from a GET rule set request, and pass it
+   * with the PUT update request to identify the rule set version you are updating.
+   */
+  etag?: string | undefined;
+  grantRules?: GrantRule[] | undefined;
+}
+interface SetObjectPermissionsRequest {
+  /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
+  requestObjectType?: string | undefined;
+  /** The id of the request object. */
+  requestObjectId?: string | undefined;
+  accessControlList?: AccessControlRequest[] | undefined;
+}
+interface UpdateObjectPermissionsRequest {
+  /** The type of the request object. Can be one of the following: alerts, alertsv2, authorization, clusters, cluster-policies, dashboards, database-projects, dbsql-dashboards, directories, experiments, files, genie, instance-pools, jobs, knowledge-assistants, notebooks, pipelines, queries, registered-models, repos, serving-endpoints, supervisor-agents, vector-search-endpoints, or warehouses. */
+  requestObjectType?: string | undefined;
+  /** The id of the request object. */
+  requestObjectId?: string | undefined;
+  accessControlList?: AccessControlRequest[] | undefined;
+}
+interface UpdateRuleSetRequest {
+  /** <Databricks> account ID. */
+  accountId?: string | undefined;
+  /** Name of the rule set. */
+  name?: string | undefined;
+  ruleSet?: RuleSetUpdateRequest | undefined;
+}
+interface UpdateWorkspacePermissionAssignmentRequest {
+  /** The account ID. */
+  accountId?: string | undefined;
+  /** The workspace ID. */
+  workspaceId?: bigint | undefined;
+  /** The ID of the user, service principal, or group. */
+  principalId?: bigint | undefined;
+  /**
+   * Array of permissions assignments to update on the workspace.
+   * Valid values are "USER" and "ADMIN" (case-sensitive).
+   * If both "USER" and "ADMIN" are provided, "ADMIN" takes precedence.
+   * Other values will be ignored.
+   * Note that excluding this field, or providing unsupported values, will have the same effect as providing an empty list, which will result in the deletion of all permissions for the principal.
+   */
+  permissions?: WorkspacePermission[] | undefined;
 }
 /**
  * The output format for existing workspace PermissionAssignment records, which contains some info for
  * user consumption.
  */
-export interface WorkspacePermissionAssignmentOutput {
-    /** Information about the principal assigned to the workspace. */
-    principal?: PrincipalOutput | undefined;
-    /** The permissions level of the principal. */
-    permissions?: WorkspacePermission[] | undefined;
-    /** Error response associated with a workspace permission assignment, if any. */
-    error?: string | undefined;
-}
-export declare const unmarshalAccessControlResponseSchema: z.ZodType<AccessControlResponse>;
-export declare const unmarshalCheckPolicyResponseSchema: z.ZodType<CheckPolicyResponse>;
-export declare const unmarshalConsistencyTokenSchema: z.ZodType<ConsistencyToken>;
-export declare const unmarshalDeleteWorkspacePermissionAssignmentResponseSchema: z.ZodType<DeleteWorkspacePermissionAssignmentResponse>;
-export declare const unmarshalGrantRuleSchema: z.ZodType<GrantRule>;
-export declare const unmarshalListAssignableRolesForResourceResponseSchema: z.ZodType<ListAssignableRolesForResourceResponse>;
-export declare const unmarshalListPermissionLevelsResponseSchema: z.ZodType<ListPermissionLevelsResponse>;
-export declare const unmarshalListWorkspacePermissionAssignmentsResponseSchema: z.ZodType<ListWorkspacePermissionAssignmentsResponse>;
-export declare const unmarshalListWorkspacePermissionsResponseSchema: z.ZodType<ListWorkspacePermissionsResponse>;
-export declare const unmarshalPermissionSchema: z.ZodType<Permission>;
-export declare const unmarshalPermissionOutputSchema: z.ZodType<PermissionOutput>;
-export declare const unmarshalPermissionsDescriptionSchema: z.ZodType<PermissionsDescription>;
-export declare const unmarshalPermissionsResponseSchema: z.ZodType<PermissionsResponse>;
-export declare const unmarshalPrincipalOutputSchema: z.ZodType<PrincipalOutput>;
-export declare const unmarshalRoleSchema: z.ZodType<Role>;
-export declare const unmarshalRuleSetSchema: z.ZodType<RuleSet>;
-export declare const unmarshalWorkspacePermissionAssignmentOutputSchema: z.ZodType<WorkspacePermissionAssignmentOutput>;
-export declare const marshalAccessControlRequestSchema: z.ZodType;
-export declare const marshalActorSchema: z.ZodType;
-export declare const marshalConsistencyTokenSchema: z.ZodType;
-export declare const marshalGrantRuleSchema: z.ZodType;
-export declare const marshalResourceInfoSchema: z.ZodType;
-export declare const marshalRuleSetUpdateRequestSchema: z.ZodType;
-export declare const marshalSetObjectPermissionsRequestSchema: z.ZodType;
-export declare const marshalUpdateObjectPermissionsRequestSchema: z.ZodType;
-export declare const marshalUpdateRuleSetRequestSchema: z.ZodType;
-export declare const marshalUpdateWorkspacePermissionAssignmentRequestSchema: z.ZodType;
+interface WorkspacePermissionAssignmentOutput {
+  /** Information about the principal assigned to the workspace. */
+  principal?: PrincipalOutput | undefined;
+  /** The permissions level of the principal. */
+  permissions?: WorkspacePermission[] | undefined;
+  /** Error response associated with a workspace permission assignment, if any. */
+  error?: string | undefined;
+}
+declare const unmarshalAccessControlResponseSchema: z.ZodType<AccessControlResponse>;
+declare const unmarshalCheckPolicyResponseSchema: z.ZodType<CheckPolicyResponse>;
+declare const unmarshalConsistencyTokenSchema: z.ZodType<ConsistencyToken>;
+declare const unmarshalDeleteWorkspacePermissionAssignmentResponseSchema: z.ZodType<DeleteWorkspacePermissionAssignmentResponse>;
+declare const unmarshalGrantRuleSchema: z.ZodType<GrantRule>;
+declare const unmarshalListAssignableRolesForResourceResponseSchema: z.ZodType<ListAssignableRolesForResourceResponse>;
+declare const unmarshalListPermissionLevelsResponseSchema: z.ZodType<ListPermissionLevelsResponse>;
+declare const unmarshalListWorkspacePermissionAssignmentsResponseSchema: z.ZodType<ListWorkspacePermissionAssignmentsResponse>;
+declare const unmarshalListWorkspacePermissionsResponseSchema: z.ZodType<ListWorkspacePermissionsResponse>;
+declare const unmarshalPermissionSchema: z.ZodType<Permission>;
+declare const unmarshalPermissionOutputSchema: z.ZodType<PermissionOutput>;
+declare const unmarshalPermissionsDescriptionSchema: z.ZodType<PermissionsDescription>;
+declare const unmarshalPermissionsResponseSchema: z.ZodType<PermissionsResponse>;
+declare const unmarshalPrincipalOutputSchema: z.ZodType<PrincipalOutput>;
+declare const unmarshalRoleSchema: z.ZodType<Role>;
+declare const unmarshalRuleSetSchema: z.ZodType<RuleSet>;
+declare const unmarshalWorkspacePermissionAssignmentOutputSchema: z.ZodType<WorkspacePermissionAssignmentOutput>;
+declare const marshalAccessControlRequestSchema: z.ZodType;
+declare const marshalActorSchema: z.ZodType;
+declare const marshalConsistencyTokenSchema: z.ZodType;
+declare const marshalGrantRuleSchema: z.ZodType;
+declare const marshalResourceInfoSchema: z.ZodType;
+declare const marshalRuleSetUpdateRequestSchema: z.ZodType;
+declare const marshalSetObjectPermissionsRequestSchema: z.ZodType;
+declare const marshalUpdateObjectPermissionsRequestSchema: z.ZodType;
+declare const marshalUpdateRuleSetRequestSchema: z.ZodType;
+declare const marshalUpdateWorkspacePermissionAssignmentRequestSchema: z.ZodType;
+//#endregion
+export { AccessControlRequest, AccessControlResponse, Actor, CheckPolicyRequest, CheckPolicyResponse, ConsistencyToken, DeleteWorkspacePermissionAssignmentRequest, DeleteWorkspacePermissionAssignmentResponse, GetObjectPermissionsRequest, GetRuleSetRequest, GrantRule, ListAssignableRolesForResourceRequest, ListAssignableRolesForResourceResponse, ListPermissionLevelsRequest, ListPermissionLevelsResponse, ListWorkspacePermissionAssignmentsRequest, ListWorkspacePermissionAssignmentsResponse, ListWorkspacePermissionsRequest, ListWorkspacePermissionsResponse, Permission, PermissionLevel, PermissionOutput, PermissionsDescription, PermissionsResponse, PrincipalOutput, RequestAuthzIdentity, ResourceInfo, Role, RuleSet, RuleSetUpdateRequest, SetObjectPermissionsRequest, UpdateObjectPermissionsRequest, UpdateRuleSetRequest, UpdateWorkspacePermissionAssignmentRequest, WorkspacePermission, WorkspacePermissionAssignmentOutput, marshalAccessControlRequestSchema, marshalActorSchema, marshalConsistencyTokenSchema, marshalGrantRuleSchema, marshalResourceInfoSchema, marshalRuleSetUpdateRequestSchema, marshalSetObjectPermissionsRequestSchema, marshalUpdateObjectPermissionsRequestSchema, marshalUpdateRuleSetRequestSchema, marshalUpdateWorkspacePermissionAssignmentRequestSchema, unmarshalAccessControlResponseSchema, unmarshalCheckPolicyResponseSchema, unmarshalConsistencyTokenSchema, unmarshalDeleteWorkspacePermissionAssignmentResponseSchema, unmarshalGrantRuleSchema, unmarshalListAssignableRolesForResourceResponseSchema, unmarshalListPermissionLevelsResponseSchema, unmarshalListWorkspacePermissionAssignmentsResponseSchema, unmarshalListWorkspacePermissionsResponseSchema, unmarshalPermissionOutputSchema, unmarshalPermissionSchema, unmarshalPermissionsDescriptionSchema, unmarshalPermissionsResponseSchema, unmarshalPrincipalOutputSchema, unmarshalRoleSchema, unmarshalRuleSetSchema, unmarshalWorkspacePermissionAssignmentOutputSchema };
 //# sourceMappingURL=model.d.ts.map