@emilgroup/tenant-sdk-node 1.39.1-beta.78 → 1.39.1-beta.79

package/.openapi-generator/FILES

@@ -74,6 +74,7 @@ models/data-report-filter-value-dto.ts
 models/dbconfig-dto.ts
 models/delete-by-code-response-class.ts
 models/delete-response-class.ts
+models/delete-tenant-request-dto.ts
 models/disable-users-request-dto.ts
 models/disable-users-response-class.ts
 models/duplicate-dashboard-request-dto.ts

package/README.md

@@ -17,11 +17,11 @@ Although this package can be used in both TypeScript and JavaScript, it is inten
 Navigate to the folder of your consuming project and run one of the following commands:
 
 ```
-npm install @emilgroup/tenant-sdk-node@1.39.1-beta.78 --save
+npm install @emilgroup/tenant-sdk-node@1.39.1-beta.79 --save
 ```
 or 
 ```
-yarn add @emilgroup/tenant-sdk-node@1.39.1-beta.78
+yarn add @emilgroup/tenant-sdk-node@1.39.1-beta.79
 ```
 
 And then you can import `UsersApi`.

package/api/ssoconnection-api.ts

@@ -49,7 +49,7 @@ const FormData = require('form-data');
 export const SSOConnectionApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -96,7 +96,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -141,7 +141,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -182,7 +182,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -227,7 +227,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -268,7 +268,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -319,7 +319,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -380,7 +380,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = SSOConnectionApiAxiosParamCreator(configuration)
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -392,7 +392,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -404,7 +404,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -415,7 +415,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -427,7 +427,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -438,7 +438,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -451,7 +451,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -474,7 +474,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
     const localVarFp = SSOConnectionApiFp(configuration)
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -485,7 +485,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.createSsoConnection(createSsoConnectionRequestDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -496,7 +496,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.deleteSsoConnection(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -506,7 +506,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getCurrentSsoConnection(authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -517,7 +517,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getSsoConnection(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -527,7 +527,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getSsoConnectionSetup(authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -539,7 +539,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.updateSsoConnection(code, updateSsoConnectionBodyDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -708,7 +708,7 @@ export interface SSOConnectionApiUpdateSsoConnectionStatusRequest {
  */
 export class SSOConnectionApi extends BaseAPI {
     /**
-     * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
      * @summary Create the tenant\'s SSO connection
      * @param {SSOConnectionApiCreateSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -720,7 +720,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+     * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
      * @summary Delete the tenant\'s SSO connection
      * @param {SSOConnectionApiDeleteSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -732,7 +732,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+     * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the tenant\'s current SSO connection
      * @param {SSOConnectionApiGetCurrentSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -744,7 +744,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+     * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the tenant\'s SSO connection
      * @param {SSOConnectionApiGetSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -756,7 +756,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the values an SSO connection is created with
      * @param {SSOConnectionApiGetSsoConnectionSetupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -768,7 +768,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Edit the tenant\'s SSO connection
      * @param {SSOConnectionApiUpdateSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -780,7 +780,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Switch the tenant\'s SSO connection on or off
      * @param {SSOConnectionApiUpdateSsoConnectionStatusRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/api/ssoid-pgroups-api.ts

@@ -49,7 +49,7 @@ const FormData = require('form-data');
 export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -96,7 +96,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -141,7 +141,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -186,7 +186,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -262,7 +262,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -313,7 +313,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -374,7 +374,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = SSOIdPGroupsApiAxiosParamCreator(configuration)
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -386,7 +386,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -398,7 +398,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -410,7 +410,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -428,7 +428,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -441,7 +441,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -464,7 +464,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
     const localVarFp = SSOIdPGroupsApiFp(configuration)
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -475,7 +475,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.createSsoIdpGroup(createSsoIdpGroupRequestDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -486,7 +486,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.deleteSsoIdpGroup(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -497,7 +497,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.getSsoIdpGroup(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -514,7 +514,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.listSsoIdpGroups(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then((request) => request(axios, basePath));
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -526,7 +526,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.updateSsoIdpGroup(code, updateSsoIdpGroupBodyDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -730,7 +730,7 @@ export interface SSOIdPGroupsApiUpdateSsoIdpGroupStatusRequest {
  */
 export class SSOIdPGroupsApi extends BaseAPI {
     /**
-     * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
      * @summary Register an IdP group and its EIS mappings
      * @param {SSOIdPGroupsApiCreateSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -742,7 +742,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+     * undefined  **Required Permissions**  \"identity-management.sso.delete\"
      * @summary Delete an IdP group and all of its mappings
      * @param {SSOIdPGroupsApiDeleteSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -754,7 +754,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+     * undefined  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Get an IdP group by code
      * @param {SSOIdPGroupsApiGetSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -766,7 +766,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+     * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary List registered IdP groups
      * @param {SSOIdPGroupsApiListSsoIdpGroupsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -778,7 +778,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+     * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Update the EIS mappings of an IdP group
      * @param {SSOIdPGroupsApiUpdateSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -790,7 +790,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Activate or deactivate an IdP group
      * @param {SSOIdPGroupsApiUpdateSsoIdpGroupStatusRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.