@distilled.cloud/stackit 0.0.0-placeholder → 1.0.0-rc.13

package/src/services/authorization.ts

@@ -0,0 +1,740 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  StackitProtocol,
+  type StackitOpError,
+  type StackitOpContext,
+} from "../protocol.ts";
+import { UnknownStackitError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { StackitOpError, StackitOpContext };
+
+export class BadRequest
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BadRequest>()("BadRequest", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400 }],
+  ) {}
+
+export class Forbidden
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Forbidden>()("Forbidden", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withAuthError),
+    [{ status: 403 }],
+  ) {}
+
+export interface Member {
+  role: string;
+  subject: string;
+}
+export const Member = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    role: S.String,
+    subject: S.String,
+  }),
+).annotate({ identifier: "Member" }) as any as S.Schema<Member>;
+
+export type AddMembersRequestMembersList = Array<Member>;
+export const AddMembersRequestMembersList = /*@__PURE__*/ S.Array(
+  Member,
+) as any as S.Schema<AddMembersRequestMembersList>;
+
+export interface AddMembersRequest {
+  resourceId: string;
+  members: AddMembersRequestMembersList;
+  resourceType: string;
+}
+export const AddMembersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String.pipe(T.Label()),
+    members: AddMembersRequestMembersList,
+    resourceType: S.String,
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v2/{resourceId}/members",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "AddMembersRequest",
+}) as any as S.Schema<AddMembersRequest>;
+
+export type MembersResponseMembersList = Array<Member>;
+export const MembersResponseMembersList = /*@__PURE__*/ S.Array(
+  Member,
+) as any as S.Schema<MembersResponseMembersList>;
+
+export interface Zookie {
+  zookie?: string;
+}
+export const Zookie = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    zookie: S.optional(S.String),
+  }),
+).annotate({ identifier: "Zookie" }) as any as S.Schema<Zookie>;
+
+export interface MembersResponse {
+  members: MembersResponseMembersList;
+  resourceId: string;
+  resourceType: string;
+  writtenAt?: Zookie;
+}
+export const MembersResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    members: MembersResponseMembersList,
+    resourceId: S.String,
+    resourceType: S.String,
+    writtenAt: S.optional(Zookie),
+  }),
+).annotate({
+  identifier: "MembersResponse",
+}) as any as S.Schema<MembersResponse>;
+
+export interface PermissionRequest {
+  name: string;
+}
+export const PermissionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.String,
+  }),
+).annotate({
+  identifier: "PermissionRequest",
+}) as any as S.Schema<PermissionRequest>;
+
+export type AddRoleRequestPermissionsList = Array<PermissionRequest>;
+export const AddRoleRequestPermissionsList = /*@__PURE__*/ S.Array(
+  PermissionRequest,
+) as any as S.Schema<AddRoleRequestPermissionsList>;
+
+export interface AddRoleRequest {
+  resourceType: string;
+  resourceId: string;
+  description: string;
+  name: string;
+  permissions: AddRoleRequestPermissionsList;
+}
+export const AddRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+    description: S.String,
+    name: S.String,
+    permissions: AddRoleRequestPermissionsList,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/{resourceType}/{resourceId}/roles",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "AddRoleRequest" }) as any as S.Schema<AddRoleRequest>;
+
+export interface Permission {
+  description: string;
+  name: string;
+}
+export const Permission = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    description: S.String,
+    name: S.String,
+  }),
+).annotate({ identifier: "Permission" }) as any as S.Schema<Permission>;
+
+export type RolePermissionsList = Array<Permission>;
+export const RolePermissionsList = /*@__PURE__*/ S.Array(
+  Permission,
+) as any as S.Schema<RolePermissionsList>;
+
+export interface Role {
+  description: string;
+  etag?: string;
+  id?: string;
+  name: string;
+  permissions: RolePermissionsList;
+}
+export const Role = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    description: S.String,
+    etag: S.optional(S.String),
+    id: S.optional(S.String),
+    name: S.String,
+    permissions: RolePermissionsList,
+  }),
+).annotate({ identifier: "Role" }) as any as S.Schema<Role>;
+
+export interface AddCustomRoleResponse {
+  resourceId: string;
+  resourceType: string;
+  role: Role;
+}
+export const AddCustomRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String,
+    resourceType: S.String,
+    role: Role,
+  }),
+).annotate({
+  identifier: "AddCustomRoleResponse",
+}) as any as S.Schema<AddCustomRoleResponse>;
+
+export interface DeleteRoleRequest {
+  resourceType: string;
+  resourceId: string;
+  roleId: string;
+  etag?: string;
+}
+export const DeleteRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+    roleId: S.String.pipe(T.Label()),
+    etag: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteRoleRequest",
+}) as any as S.Schema<DeleteRoleRequest>;
+
+export interface DeleteRoleResponse {
+  writtenAt: Zookie;
+}
+export const DeleteRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    writtenAt: Zookie,
+  }),
+).annotate({
+  identifier: "DeleteRoleResponse",
+}) as any as S.Schema<DeleteRoleResponse>;
+
+export interface GetRoleRequest {
+  resourceType: string;
+  resourceId: string;
+  roleId: string;
+}
+export const GetRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+    roleId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "GetRoleRequest" }) as any as S.Schema<GetRoleRequest>;
+
+export interface GetRoleResponse {
+  resourceId: string;
+  resourceType: string;
+  role: Role;
+}
+export const GetRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String,
+    resourceType: S.String,
+    role: Role,
+  }),
+).annotate({
+  identifier: "GetRoleResponse",
+}) as any as S.Schema<GetRoleResponse>;
+
+export interface ListMembersRequest {
+  resourceType: string;
+  resourceId: string;
+  subject?: string;
+}
+export const ListMembersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+    subject: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/{resourceType}/{resourceId}/members",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListMembersRequest",
+}) as any as S.Schema<ListMembersRequest>;
+
+export type ListMembersResponseMembersList = Array<Member>;
+export const ListMembersResponseMembersList = /*@__PURE__*/ S.Array(
+  Member,
+) as any as S.Schema<ListMembersResponseMembersList>;
+
+export interface ListMembersResponse {
+  members: ListMembersResponseMembersList;
+  resourceId: string;
+  resourceType: string;
+}
+export const ListMembersResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    members: ListMembersResponseMembersList,
+    resourceId: S.String,
+    resourceType: S.String,
+  }),
+).annotate({
+  identifier: "ListMembersResponse",
+}) as any as S.Schema<ListMembersResponse>;
+
+export interface ListPermissionsRequest {
+  resourceType?: string;
+}
+export const ListPermissionsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/permissions",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListPermissionsRequest",
+}) as any as S.Schema<ListPermissionsRequest>;
+
+export type ListPermissionsResponsePermissionsList = Array<Permission>;
+export const ListPermissionsResponsePermissionsList = /*@__PURE__*/ S.Array(
+  Permission,
+) as any as S.Schema<ListPermissionsResponsePermissionsList>;
+
+export interface ListPermissionsResponse {
+  permissions: ListPermissionsResponsePermissionsList;
+}
+export const ListPermissionsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    permissions: ListPermissionsResponsePermissionsList,
+  }),
+).annotate({
+  identifier: "ListPermissionsResponse",
+}) as any as S.Schema<ListPermissionsResponse>;
+
+export interface ListRolesRequest {
+  resourceType: string;
+  resourceId: string;
+}
+export const ListRolesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/{resourceType}/{resourceId}/roles",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListRolesRequest",
+}) as any as S.Schema<ListRolesRequest>;
+
+export type RolesResponseRolesList = Array<Role>;
+export const RolesResponseRolesList = /*@__PURE__*/ S.Array(
+  Role,
+) as any as S.Schema<RolesResponseRolesList>;
+
+export interface RolesResponse {
+  resourceId: string;
+  resourceType: string;
+  roles: RolesResponseRolesList;
+}
+export const RolesResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String,
+    resourceType: S.String,
+    roles: RolesResponseRolesList,
+  }),
+).annotate({ identifier: "RolesResponse" }) as any as S.Schema<RolesResponse>;
+
+export interface ListUserMembershipsRequest {
+  email: string;
+  resourceType?: string;
+  resourceId?: string;
+  parentResourceId?: string;
+}
+export const ListUserMembershipsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    email: S.String.pipe(T.Label()),
+    resourceType: S.optional(S.String.pipe(T.Query())),
+    resourceId: S.optional(S.String.pipe(T.Query())),
+    parentResourceId: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/users/{email}/memberships",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListUserMembershipsRequest",
+}) as any as S.Schema<ListUserMembershipsRequest>;
+
+export interface UserMembership {
+  resourceId: string;
+  resourceType: string;
+  role: string;
+  subject: string;
+}
+export const UserMembership = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String,
+    resourceType: S.String,
+    role: S.String,
+    subject: S.String,
+  }),
+).annotate({ identifier: "UserMembership" }) as any as S.Schema<UserMembership>;
+
+export type ListUserMembershipsResponseItemsList = Array<UserMembership>;
+export const ListUserMembershipsResponseItemsList = /*@__PURE__*/ S.Array(
+  UserMembership,
+) as any as S.Schema<ListUserMembershipsResponseItemsList>;
+
+export interface ListUserMembershipsResponse {
+  items: ListUserMembershipsResponseItemsList;
+}
+export const ListUserMembershipsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    items: ListUserMembershipsResponseItemsList,
+  }),
+).annotate({
+  identifier: "ListUserMembershipsResponse",
+}) as any as S.Schema<ListUserMembershipsResponse>;
+
+export type ListUserPermissionsRequestPermissionsList = Array<string>;
+export const ListUserPermissionsRequestPermissionsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<ListUserPermissionsRequestPermissionsList>;
+
+export interface ListUserPermissionsRequest {
+  email: string;
+  resource?: string;
+  resourceType?: string;
+  permissions?: ListUserPermissionsRequestPermissionsList;
+}
+export const ListUserPermissionsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    email: S.String.pipe(T.Label()),
+    resource: S.optional(S.String.pipe(T.Query())),
+    resourceType: S.optional(S.String.pipe(T.Query())),
+    permissions: S.optional(
+      ListUserPermissionsRequestPermissionsList.pipe(T.Query()),
+    ),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/users/{email}/permissions",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListUserPermissionsRequest",
+}) as any as S.Schema<ListUserPermissionsRequest>;
+
+export type ExistingPermission = Permission;
+export const ExistingPermission = Permission;
+
+export type UserPermissionPermissionsList = Array<Permission>;
+export const UserPermissionPermissionsList = /*@__PURE__*/ S.Array(
+  Permission,
+) as any as S.Schema<UserPermissionPermissionsList>;
+
+export interface UserPermission {
+  permissions: UserPermissionPermissionsList;
+  resourceId: string;
+  resourceType: string;
+}
+export const UserPermission = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    permissions: UserPermissionPermissionsList,
+    resourceId: S.String,
+    resourceType: S.String,
+  }),
+).annotate({ identifier: "UserPermission" }) as any as S.Schema<UserPermission>;
+
+export type ListUserPermissionsResponseItemsList = Array<UserPermission>;
+export const ListUserPermissionsResponseItemsList = /*@__PURE__*/ S.Array(
+  UserPermission,
+) as any as S.Schema<ListUserPermissionsResponseItemsList>;
+
+export interface ListUserPermissionsResponse {
+  items: ListUserPermissionsResponseItemsList;
+}
+export const ListUserPermissionsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    items: ListUserPermissionsResponseItemsList,
+  }),
+).annotate({
+  identifier: "ListUserPermissionsResponse",
+}) as any as S.Schema<ListUserPermissionsResponse>;
+
+export type RemoveMembersRequestMembersList = Array<Member>;
+export const RemoveMembersRequestMembersList = /*@__PURE__*/ S.Array(
+  Member,
+) as any as S.Schema<RemoveMembersRequestMembersList>;
+
+export interface RemoveMembersRequest {
+  resourceId: string;
+  forceRemove?: boolean;
+  members: RemoveMembersRequestMembersList;
+  resourceType: string;
+}
+export const RemoveMembersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String.pipe(T.Label()),
+    forceRemove: S.optional(S.Boolean),
+    members: RemoveMembersRequestMembersList,
+    resourceType: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/{resourceId}/members/remove",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "RemoveMembersRequest",
+}) as any as S.Schema<RemoveMembersRequest>;
+
+export type UpdateRoleRequestPermissionsList = Array<PermissionRequest>;
+export const UpdateRoleRequestPermissionsList = /*@__PURE__*/ S.Array(
+  PermissionRequest,
+) as any as S.Schema<UpdateRoleRequestPermissionsList>;
+
+export interface UpdateRoleRequest {
+  resourceType: string;
+  resourceId: string;
+  roleId: string;
+  description: string;
+  etag?: string;
+  name: string;
+  permissions: UpdateRoleRequestPermissionsList;
+}
+export const UpdateRoleRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceType: S.String.pipe(T.Label()),
+    resourceId: S.String.pipe(T.Label()),
+    roleId: S.String.pipe(T.Label()),
+    description: S.String,
+    etag: S.optional(S.String),
+    name: S.String,
+    permissions: UpdateRoleRequestPermissionsList,
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v2/{resourceType}/{resourceId}/roles/{roleId}",
+      code: 200,
+      baseUrl: "https://authorization.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateRoleRequest",
+}) as any as S.Schema<UpdateRoleRequest>;
+
+export interface UpdateRoleResponse {
+  resourceId: string;
+  resourceType: string;
+  role: Role;
+}
+export const UpdateRoleResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    resourceId: S.String,
+    resourceType: S.String,
+    role: Role,
+  }),
+).annotate({
+  identifier: "UpdateRoleResponse",
+}) as any as S.Schema<UpdateRoleResponse>;
+
+export type AddMembersError = BadRequest | Forbidden | StackitOpError;
+/** Add members to a resource Add members to the given resource with specified roles. */
+export const addMembers: API.OperationMethod<
+  AddMembersRequest,
+  MembersResponse,
+  AddMembersError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: AddMembersRequest,
+  output: MembersResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type AddRoleError = BadRequest | Forbidden | StackitOpError;
+/** Add a new role Add new, user specified roles to a resource, and bind permissions to them. Permissions are predefined. */
+export const addRole: API.OperationMethod<
+  AddRoleRequest,
+  AddCustomRoleResponse,
+  AddRoleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: AddRoleRequest,
+  output: AddCustomRoleResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteRoleError = BadRequest | Forbidden | StackitOpError;
+/** Delete an existing role Delete a custom role by ID. */
+export const deleteRole: API.OperationMethod<
+  DeleteRoleRequest,
+  DeleteRoleResponse,
+  DeleteRoleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteRoleRequest,
+  output: DeleteRoleResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetRoleError = BadRequest | Forbidden | StackitOpError;
+/** Get an existing role Get a custom role by ID. */
+export const getRole: API.OperationMethod<
+  GetRoleRequest,
+  GetRoleResponse,
+  GetRoleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetRoleRequest,
+  output: GetRoleResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListMembersError = BadRequest | Forbidden | StackitOpError;
+/** Get members to a resource List members of the given resource. */
+export const listMembers: API.OperationMethod<
+  ListMembersRequest,
+  ListMembersResponse,
+  ListMembersError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListMembersRequest,
+  output: ListMembersResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListPermissionsError = BadRequest | Forbidden | StackitOpError;
+/** Get available permissions Get available permissions */
+export const listPermissions: API.OperationMethod<
+  ListPermissionsRequest,
+  ListPermissionsResponse,
+  ListPermissionsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListPermissionsRequest,
+  output: ListPermissionsResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListRolesError = BadRequest | Forbidden | StackitOpError;
+/** Get roles and permissions of a resource Get roles and permissions of a resource */
+export const listRoles: API.OperationMethod<
+  ListRolesRequest,
+  RolesResponse,
+  ListRolesError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListRolesRequest,
+  output: RolesResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListUserMembershipsError = BadRequest | Forbidden | StackitOpError;
+/** List memberships of a user List memberships of a user. An administrative access is needed to list any user's memberships, while the user can do it on his/her own email. You can use filters to scope the request to a project/folder/organization. In this case -if caller is not the subject-, owner permissions are required. Because of hierarchical role bindings, the user might have permissions on more resources. */
+export const listUserMemberships: API.OperationMethod<
+  ListUserMembershipsRequest,
+  ListUserMembershipsResponse,
+  ListUserMembershipsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListUserMembershipsRequest,
+  output: ListUserMembershipsResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListUserPermissionsError = BadRequest | Forbidden | StackitOpError;
+/** List permissions of a user List permissions of a user. An administrative access is needed to list any user's permissions, while the user can do it on his/her own email. Lists every resource of the given type where the user has any effective permissions. When requested, also lists why the permission is present. */
+export const listUserPermissions: API.OperationMethod<
+  ListUserPermissionsRequest,
+  ListUserPermissionsResponse,
+  ListUserPermissionsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListUserPermissionsRequest,
+  output: ListUserPermissionsResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RemoveMembersError = BadRequest | Forbidden | StackitOpError;
+/** Remove members from a resource Remove members from the given resource with specified roles. */
+export const removeMembers: API.OperationMethod<
+  RemoveMembersRequest,
+  MembersResponse,
+  RemoveMembersError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RemoveMembersRequest,
+  output: MembersResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateRoleError = BadRequest | Forbidden | StackitOpError;
+/** Update an existing role Update a custom role by ID. */
+export const updateRole: API.OperationMethod<
+  UpdateRoleRequest,
+  UpdateRoleResponse,
+  UpdateRoleError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateRoleRequest,
+  output: UpdateRoleResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));