@emilgroup/tenant-sdk 1.42.1-beta.76 → 1.42.1-beta.78

package/README.md

@@ -17,11 +17,11 @@ Although this package can be used in both TypeScript and JavaScript, it is inten
 Navigate to the folder of your consuming project and run one of the following commands:
 
 ```
-npm install @emilgroup/tenant-sdk@1.42.1-beta.76 --save
+npm install @emilgroup/tenant-sdk@1.42.1-beta.78 --save
 ```
 or 
 ```
-yarn add @emilgroup/tenant-sdk@1.42.1-beta.76
+yarn add @emilgroup/tenant-sdk@1.42.1-beta.78
 ```
 
 And then you can import `UsersApi`.

package/api/ssoconnection-api.ts

@@ -45,7 +45,7 @@ import { UpdateSsoConnectionStatusResponseClass } from '../models';
 export const SSOConnectionApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -92,7 +92,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -137,7 +137,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -178,7 +178,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -223,7 +223,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -264,7 +264,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -315,7 +315,7 @@ export const SSOConnectionApiAxiosParamCreator = function (configuration?: Confi
             };
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -376,7 +376,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = SSOConnectionApiAxiosParamCreator(configuration)
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -388,7 +388,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -400,7 +400,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -411,7 +411,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -423,7 +423,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -434,7 +434,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -447,7 +447,7 @@ export const SSOConnectionApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -470,7 +470,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
     const localVarFp = SSOConnectionApiFp(configuration)
     return {
         /**
-         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Create the tenant\'s SSO connection
          * @param {CreateSsoConnectionRequestDto} createSsoConnectionRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -481,7 +481,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.createSsoConnection(createSsoConnectionRequestDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+         * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -492,7 +492,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.deleteSsoConnection(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s current SSO connection
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -502,7 +502,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getCurrentSsoConnection(authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+         * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {string} [authorization] Bearer Token
@@ -513,7 +513,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getSsoConnection(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Read the values an SSO connection is created with
          * @param {string} [authorization] Bearer Token
          * @param {*} [options] Override http request option.
@@ -523,7 +523,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.getSsoConnectionSetup(authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Edit the tenant\'s SSO connection
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionBodyDto} updateSsoConnectionBodyDto 
@@ -535,7 +535,7 @@ export const SSOConnectionApiFactory = function (configuration?: Configuration,
             return localVarFp.updateSsoConnection(code, updateSsoConnectionBodyDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Switch the tenant\'s SSO connection on or off
          * @param {string} code Connection code.
          * @param {UpdateSsoConnectionStatusBodyDto} updateSsoConnectionStatusBodyDto 
@@ -704,7 +704,7 @@ export interface SSOConnectionApiUpdateSsoConnectionStatusRequest {
  */
 export class SSOConnectionApi extends BaseAPI {
     /**
-     * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Validates the identity provider data, stores the configuration, and prepares the tenant\'s Cognito user pool for the mapped claims. The connection is created inactive: activating it is a separate action. One connection per tenant.  **Required Permissions**  \"identity-management.sso.create\"
      * @summary Create the tenant\'s SSO connection
      * @param {SSOConnectionApiCreateSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -716,7 +716,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"tenant-management.settings.delete\"
+     * Removes the configuration, so the tenant can be configured again from scratch. Only an inactive connection can be deleted, so deactivate it first: deleting a live one would lock every SSO user out of the tenant. Custom attributes an attribute mapping provisioned stay on the user pool permanently, because Cognito cannot remove them.  **Required Permissions**  \"identity-management.sso.delete\"
      * @summary Delete the tenant\'s SSO connection
      * @param {SSOConnectionApiDeleteSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -728,7 +728,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"tenant-management.settings.view\"
+     * Returns the SSO connection of the calling tenant. A tenant has at most one connection, so no code has to be known up front. Responds with a not found when the tenant has never configured one.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the tenant\'s current SSO connection
      * @param {SSOConnectionApiGetCurrentSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -740,7 +740,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns the SSO Connection entity identified by code  **Required Permissions**  \"tenant-management.settings.view\"
+     * Returns the SSO Connection entity identified by code  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the tenant\'s SSO connection
      * @param {SSOConnectionApiGetSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -752,7 +752,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Returns what the creation form with required data.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Returns what the creation form with required data.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Read the values an SSO connection is created with
      * @param {SSOConnectionApiGetSsoConnectionSetupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -764,7 +764,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Replaces the display name, identity provider details and the claim mapping. The protocol and the provider are fixed for the lifetime of a connection. Editing is only allowed while the connection is inactive, so deactivate it first. Leaving the OIDC client secret out keeps the stored one, and an edit never activates the connection.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Edit the tenant\'s SSO connection
      * @param {SSOConnectionApiUpdateSsoConnectionRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -776,7 +776,7 @@ export class SSOConnectionApi extends BaseAPI {
     }
 
     /**
-     * Activates and deactivates SSO connection status.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Activates and deactivates SSO connection status.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Switch the tenant\'s SSO connection on or off
      * @param {SSOConnectionApiUpdateSsoConnectionStatusRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/api/ssoid-pgroups-api.ts

@@ -45,7 +45,7 @@ import { UpdateSsoIdpGroupStatusResponseClass } from '../models';
 export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -92,7 +92,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -137,7 +137,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -182,7 +182,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -258,7 +258,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -309,7 +309,7 @@ export const SSOIdPGroupsApiAxiosParamCreator = function (configuration?: Config
             };
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -370,7 +370,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = SSOIdPGroupsApiAxiosParamCreator(configuration)
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -382,7 +382,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -394,7 +394,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -406,7 +406,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -424,7 +424,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -437,7 +437,7 @@ export const SSOIdPGroupsApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -460,7 +460,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
     const localVarFp = SSOIdPGroupsApiFp(configuration)
     return {
         /**
-         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+         * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
          * @summary Register an IdP group and its EIS mappings
          * @param {CreateSsoIdpGroupRequestDto} createSsoIdpGroupRequestDto 
          * @param {string} [authorization] Bearer Token
@@ -471,7 +471,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.createSsoIdpGroup(createSsoIdpGroupRequestDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+         * undefined  **Required Permissions**  \"identity-management.sso.delete\"
          * @summary Delete an IdP group and all of its mappings
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -482,7 +482,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.deleteSsoIdpGroup(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+         * undefined  **Required Permissions**  \"identity-management.sso.view\"
          * @summary Get an IdP group by code
          * @param {string} code IdP group code.
          * @param {string} [authorization] Bearer Token
@@ -493,7 +493,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.getSsoIdpGroup(code, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+         * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
          * @summary List registered IdP groups
          * @param {string} [authorization] Bearer Token
          * @param {number} [pageSize] Number of items per page.
@@ -510,7 +510,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.listSsoIdpGroups(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then((request) => request(axios, basePath));
         },
         /**
-         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+         * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Update the EIS mappings of an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupBodyDto} updateSsoIdpGroupBodyDto 
@@ -522,7 +522,7 @@ export const SSOIdPGroupsApiFactory = function (configuration?: Configuration, b
             return localVarFp.updateSsoIdpGroup(code, updateSsoIdpGroupBodyDto, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+         * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
          * @summary Activate or deactivate an IdP group
          * @param {string} code IdP group code.
          * @param {UpdateSsoIdpGroupStatusBodyDto} updateSsoIdpGroupStatusBodyDto 
@@ -726,7 +726,7 @@ export interface SSOIdPGroupsApiUpdateSsoIdpGroupStatusRequest {
  */
 export class SSOIdPGroupsApi extends BaseAPI {
     /**
-     * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"tenant-management.settings.create\"
+     * Creates an inactive IdP group with at least one EIS user-group mapping. externalId is any text and is immutable after create.  **Required Permissions**  \"identity-management.sso.create\"
      * @summary Register an IdP group and its EIS mappings
      * @param {SSOIdPGroupsApiCreateSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -738,7 +738,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * undefined  **Required Permissions**  \"tenant-management.settings.delete\"
+     * undefined  **Required Permissions**  \"identity-management.sso.delete\"
      * @summary Delete an IdP group and all of its mappings
      * @param {SSOIdPGroupsApiDeleteSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -750,7 +750,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * undefined  **Required Permissions**  \"tenant-management.settings.view\"
+     * undefined  **Required Permissions**  \"identity-management.sso.view\"
      * @summary Get an IdP group by code
      * @param {SSOIdPGroupsApiGetSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -762,7 +762,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"tenant-management.settings.view\"
+     * The `name` field is deprecated in favor of `externalId`.  **Required Permissions**  \"identity-management.sso.view\"
      * @summary List registered IdP groups
      * @param {SSOIdPGroupsApiListSsoIdpGroupsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -774,7 +774,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"tenant-management.settings.update\"
+     * externalId is immutable. eisUserGroupCodes is set-replace when present.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Update the EIS mappings of an IdP group
      * @param {SSOIdPGroupsApiUpdateSsoIdpGroupRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -786,7 +786,7 @@ export class SSOIdPGroupsApi extends BaseAPI {
     }
 
     /**
-     * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"tenant-management.settings.update\"
+     * Switches whether the IdP group participates in login-time access resolution. Status is shared across every mapping edge for that group.  **Required Permissions**  \"identity-management.sso.update\"
      * @summary Activate or deactivate an IdP group
      * @param {SSOIdPGroupsApiUpdateSsoIdpGroupStatusRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.