@flipdish/authorization 0.0.342-rc.1787325938 → 0.0.344-rc.1787564453

package/api.ts

@@ -23,116 +23,6 @@ import type { RequestArgs } from './base';
 // @ts-ignore
 import { BASE_PATH, COLLECTION_FORMATS, BaseAPI, RequiredError, operationServerMap } from './base';
 
-/**
- * 
- * @export
- * @interface AccessBlockStateResponse
- */
-export interface AccessBlockStateResponse {
-    /**
-     * 
-     * @type {AccessBlockStateResponseBlockedPrincipal}
-     * @memberof AccessBlockStateResponse
-     */
-    'principal': AccessBlockStateResponseBlockedPrincipal;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponse
-     */
-    'reason'?: string;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponse
-     */
-    'blockedAt': string;
-    /**
-     * 
-     * @type {AccessBlockStateResponseBlockedBlockedBy}
-     * @memberof AccessBlockStateResponse
-     */
-    'blockedBy': AccessBlockStateResponseBlockedBlockedBy;
-}
-/**
- * 
- * @export
- * @interface AccessBlockStateResponseBlocked
- */
-export interface AccessBlockStateResponseBlocked {
-    /**
-     * 
-     * @type {AccessBlockStateResponseBlockedPrincipal}
-     * @memberof AccessBlockStateResponseBlocked
-     */
-    'principal': AccessBlockStateResponseBlockedPrincipal;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlocked
-     */
-    'reason'?: string;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlocked
-     */
-    'blockedAt': string;
-    /**
-     * 
-     * @type {AccessBlockStateResponseBlockedBlockedBy}
-     * @memberof AccessBlockStateResponseBlocked
-     */
-    'blockedBy': AccessBlockStateResponseBlockedBlockedBy;
-}
-/**
- * 
- * @export
- * @interface AccessBlockStateResponseBlockedBlockedBy
- */
-export interface AccessBlockStateResponseBlockedBlockedBy {
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlockedBlockedBy
-     */
-    'principalId': string;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlockedBlockedBy
-     */
-    'email': string;
-}
-/**
- * 
- * @export
- * @interface AccessBlockStateResponseBlockedPrincipal
- */
-export interface AccessBlockStateResponseBlockedPrincipal {
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlockedPrincipal
-     */
-    'type': AccessBlockStateResponseBlockedPrincipalTypeEnum;
-    /**
-     * 
-     * @type {string}
-     * @memberof AccessBlockStateResponseBlockedPrincipal
-     */
-    'id': string;
-}
-
-export const AccessBlockStateResponseBlockedPrincipalTypeEnum = {
-    User: 'User',
-    Automation: 'Automation',
-    Kiosk: 'Kiosk',
-    Terminal: 'Terminal'
-} as const;
-
-export type AccessBlockStateResponseBlockedPrincipalTypeEnum = typeof AccessBlockStateResponseBlockedPrincipalTypeEnum[keyof typeof AccessBlockStateResponseBlockedPrincipalTypeEnum];
-
 /**
  * 
  * @export
@@ -866,25 +756,6 @@ export interface AuthorizeBatchChecks400ResponseAnyOfInner {
  */
 export interface AuthorizeBatchChecks400ResponseAnyOfInnerPathInner {
 }
-/**
- * 
- * @export
- * @interface BlockPrincipalAccessRequest
- */
-export interface BlockPrincipalAccessRequest {
-    /**
-     * 
-     * @type {AccessBlockStateResponseBlockedPrincipal}
-     * @memberof BlockPrincipalAccessRequest
-     */
-    'principal': AccessBlockStateResponseBlockedPrincipal;
-    /**
-     * 
-     * @type {string}
-     * @memberof BlockPrincipalAccessRequest
-     */
-    'reason'?: string;
-}
 /**
  * 
  * @export
@@ -1892,19 +1763,6 @@ export interface ListPermissionsSuccessResponse {
      */
     'permissions': Permissions & Array<Permissions>;
 }
-/**
- * 
- * @export
- * @interface ListPrincipalAccessBlocksResponse
- */
-export interface ListPrincipalAccessBlocksResponse {
-    /**
-     * 
-     * @type {Array<AccessBlockStateResponse>}
-     * @memberof ListPrincipalAccessBlocksResponse
-     */
-    'items': Array<AccessBlockStateResponse>;
-}
 /**
  * Successful roles retrieval response
  * @export
@@ -1918,6 +1776,19 @@ export interface ListRolesSuccessResponse {
      */
     'roles': Array<RoleNames>;
 }
+/**
+ * The caller\'s active staff access grants
+ * @export
+ * @interface ListStaffAccessGrantsResponse
+ */
+export interface ListStaffAccessGrantsResponse {
+    /**
+     * 
+     * @type {Array<StaffAccessGrant>}
+     * @memberof ListStaffAccessGrantsResponse
+     */
+    'grants': Array<StaffAccessGrant>;
+}
 /**
  * Permissions
  * @export
@@ -1988,7 +1859,6 @@ export const Permissions = {
     ViewMenu: 'ViewMenu',
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
-    BlockPrincipalAccess: 'BlockPrincipalAccess',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -2653,43 +2523,244 @@ export type RoleNames = typeof RoleNames[keyof typeof RoleNames];
 
 
 /**
- * 
+ * A temporary staff access grant
  * @export
- * @interface UnblockPrincipalAccessRequest
+ * @interface StaffAccessGrant
  */
-export interface UnblockPrincipalAccessRequest {
+export interface StaffAccessGrant {
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'grantId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'principalType': StaffAccessGrantPrincipalTypeEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'principalId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'email': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'orgId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'roleName': string;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrant
+     */
+    'propertyIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrant
+     */
+    'brandIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrant
+     */
+    'salesChannelIds': Array<string>;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'startsAt': string;
     /**
      * 
-     * @type {AccessBlockStateResponseBlockedPrincipal}
-     * @memberof UnblockPrincipalAccessRequest
+     * @type {string}
+     * @memberof StaffAccessGrant
+     */
+    'expiresAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrant
      */
-    'principal': AccessBlockStateResponseBlockedPrincipal;
+    'status': StaffAccessGrantStatusEnum;
 }
+
+export const StaffAccessGrantPrincipalTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type StaffAccessGrantPrincipalTypeEnum = typeof StaffAccessGrantPrincipalTypeEnum[keyof typeof StaffAccessGrantPrincipalTypeEnum];
+export const StaffAccessGrantStatusEnum = {
+    Active: 'active',
+    Expired: 'expired'
+} as const;
+
+export type StaffAccessGrantStatusEnum = typeof StaffAccessGrantStatusEnum[keyof typeof StaffAccessGrantStatusEnum];
+
 /**
  * 
  * @export
- * @interface UnblockPrincipalAccessResponse
+ * @interface StaffAccessGrantRequestBody
+ */
+export interface StaffAccessGrantRequestBody {
+    /**
+     * Must match the authenticated caller
+     * @type {string}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'userId': string;
+    /**
+     * The org to grant temporary access to
+     * @type {string}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'orgId': string;
+    /**
+     * Role the pass grants
+     * @type {string}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'roleName': StaffAccessGrantRequestBodyRoleNameEnum;
+    /**
+     * Optional property scope
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'propertyIds'?: Array<string>;
+    /**
+     * Optional brand scope
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'brandIds'?: Array<string>;
+    /**
+     * Optional sales channel scope
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantRequestBody
+     */
+    'salesChannelIds'?: Array<string>;
+}
+
+export const StaffAccessGrantRequestBodyRoleNameEnum = {
+    Owner: 'Owner'
+} as const;
+
+export type StaffAccessGrantRequestBodyRoleNameEnum = typeof StaffAccessGrantRequestBodyRoleNameEnum[keyof typeof StaffAccessGrantRequestBodyRoleNameEnum];
+
+/**
+ * The staff access grant that was created or refreshed
+ * @export
+ * @interface StaffAccessGrantResponse
  */
-export interface UnblockPrincipalAccessResponse {
+export interface StaffAccessGrantResponse {
     /**
      * 
-     * @type {AccessBlockStateResponseBlockedPrincipal}
-     * @memberof UnblockPrincipalAccessResponse
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
      */
-    'principal': AccessBlockStateResponseBlockedPrincipal;
+    'grantId': string;
     /**
      * 
-     * @type {boolean}
-     * @memberof UnblockPrincipalAccessResponse
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'principalType': StaffAccessGrantResponsePrincipalTypeEnum;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'principalId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'email': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'orgId': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'roleName': string;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantResponse
+     */
+    'propertyIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantResponse
+     */
+    'brandIds': Array<string>;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof StaffAccessGrantResponse
+     */
+    'salesChannelIds': Array<string>;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'startsAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
+     */
+    'expiresAt': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof StaffAccessGrantResponse
      */
-    'unblocked': UnblockPrincipalAccessResponseUnblockedEnum;
+    'status': StaffAccessGrantResponseStatusEnum;
 }
 
-export const UnblockPrincipalAccessResponseUnblockedEnum = {
-    True: true
+export const StaffAccessGrantResponsePrincipalTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+} as const;
+
+export type StaffAccessGrantResponsePrincipalTypeEnum = typeof StaffAccessGrantResponsePrincipalTypeEnum[keyof typeof StaffAccessGrantResponsePrincipalTypeEnum];
+export const StaffAccessGrantResponseStatusEnum = {
+    Active: 'active',
+    Expired: 'expired'
 } as const;
 
-export type UnblockPrincipalAccessResponseUnblockedEnum = typeof UnblockPrincipalAccessResponseUnblockedEnum[keyof typeof UnblockPrincipalAccessResponseUnblockedEnum];
+export type StaffAccessGrantResponseStatusEnum = typeof StaffAccessGrantResponseStatusEnum[keyof typeof StaffAccessGrantResponseStatusEnum];
 
 /**
  * 
@@ -4684,20 +4755,24 @@ export class JoinAccessApi extends BaseAPI {
 
 
 /**
- * PrincipalAccessBlockApi - axios parameter creator
+ * RoleAssignmentApi - axios parameter creator
  * @export
  */
-export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?: Configuration) {
+export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Write an access_block flag that denies all authorization checks for the principal until unblocked. Authentication still succeeds. Requires BlockPrincipalAccess.
-         * @summary Block principal access
-         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest] 
-         * @param {*} [options] Override http request option.
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId 
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
+         * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        blockPrincipalAccess: async (blockPrincipalAccessRequest?: BlockPrincipalAccessRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            const localVarPath = `/principals/block`;
+        applyRoleAssignment: async (orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('applyRoleAssignment', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/roleAssignments/apply`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -4719,7 +4794,7 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(blockPrincipalAccessRequest, localVarRequestOptions, configuration)
+            localVarRequestOptions.data = serializeDataIfNeeded(roleAssignmentRequestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -4727,19 +4802,18 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
             };
         },
         /**
-         * Get the current access block for a principal. Requires BlockPrincipalAccess.
-         * @summary Get principal access block
-         * @param {GetPrincipalAccessBlockTypeEnum} type 
-         * @param {string} id 
+         * Rematerializes a role assignment and applies the resulting policy assignments
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId 
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getPrincipalAccessBlock: async (type: GetPrincipalAccessBlockTypeEnum, id: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'type' is not null or undefined
-            assertParamExists('getPrincipalAccessBlock', 'type', type)
-            // verify required parameter 'id' is not null or undefined
-            assertParamExists('getPrincipalAccessBlock', 'id', id)
-            const localVarPath = `/principals/block`;
+        rematerializeRoleAssignmentV2: async (orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('rematerializeRoleAssignmentV2', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/roleAssignments/rematerialize`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -4747,64 +4821,21 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
                 baseOptions = configuration.baseOptions;
             }
 
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
             const localVarHeaderParameter = {} as any;
             const localVarQueryParameter = {} as any;
 
             // authentication ApiKeyAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
-            if (type !== undefined) {
-                localVarQueryParameter['type'] = type;
-            }
-
-            if (id !== undefined) {
-                localVarQueryParameter['id'] = id;
-            }
-
 
     
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
-         * @summary List principal access blocks
-         * @param {ListPrincipalAccessBlocksTypeEnum} [type] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        listPrincipalAccessBlocks: async (type?: ListPrincipalAccessBlocksTypeEnum, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            const localVarPath = `/principals/blocks`;
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication ApiKeyAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
-
-            if (type !== undefined) {
-                localVarQueryParameter['type'] = type;
-            }
-
+            localVarHeaderParameter['Content-Type'] = 'application/json';
 
-    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(rematerializeRoleAssignmentRequestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -4812,14 +4843,18 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
             };
         },
         /**
-         * Delete the access_block flag and restore existing role assignments. Cached DENYs may last ~10s. Requires BlockPrincipalAccess.
-         * @summary Unblock principal access
-         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest] 
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId 
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        unblockPrincipalAccess: async (unblockPrincipalAccessRequest?: UnblockPrincipalAccessRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            const localVarPath = `/principals/unblock`;
+        removeTeammate: async (orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('removeTeammate', 'orgId', orgId)
+            const localVarPath = `/orgs/{orgId}/roleAssignments/remove`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -4841,7 +4876,7 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(unblockPrincipalAccessRequest, localVarRequestOptions, configuration)
+            localVarRequestOptions.data = serializeDataIfNeeded(removeTeammateRequestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -4852,216 +4887,167 @@ export const PrincipalAccessBlockApiAxiosParamCreator = function (configuration?
 };
 
 /**
- * PrincipalAccessBlockApi - functional programming interface
+ * RoleAssignmentApi - functional programming interface
  * @export
  */
-export const PrincipalAccessBlockApiFp = function(configuration?: Configuration) {
-    const localVarAxiosParamCreator = PrincipalAccessBlockApiAxiosParamCreator(configuration)
+export const RoleAssignmentApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = RoleAssignmentApiAxiosParamCreator(configuration)
     return {
         /**
-         * Write an access_block flag that denies all authorization checks for the principal until unblocked. Authentication still succeeds. Requires BlockPrincipalAccess.
-         * @summary Block principal access
-         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async blockPrincipalAccess(blockPrincipalAccessRequest?: BlockPrincipalAccessRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessBlockStateResponseBlocked>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.blockPrincipalAccess(blockPrincipalAccessRequest, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['PrincipalAccessBlockApi.blockPrincipalAccess']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-        /**
-         * Get the current access block for a principal. Requires BlockPrincipalAccess.
-         * @summary Get principal access block
-         * @param {GetPrincipalAccessBlockTypeEnum} type 
-         * @param {string} id 
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId 
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async getPrincipalAccessBlock(type: GetPrincipalAccessBlockTypeEnum, id: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessBlockStateResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getPrincipalAccessBlock(type, id, options);
+        async applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RoleAssignmentSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.applyRoleAssignment(orgId, roleAssignmentRequestBody, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['PrincipalAccessBlockApi.getPrincipalAccessBlock']?.[localVarOperationServerIndex]?.url;
+            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.applyRoleAssignment']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
-         * @summary List principal access blocks
-         * @param {ListPrincipalAccessBlocksTypeEnum} [type] 
+         * Rematerializes a role assignment and applies the resulting policy assignments
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId 
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listPrincipalAccessBlocks(type?: ListPrincipalAccessBlocksTypeEnum, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListPrincipalAccessBlocksResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listPrincipalAccessBlocks(type, options);
+        async rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RematerializeRoleAssignmentSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['PrincipalAccessBlockApi.listPrincipalAccessBlocks']?.[localVarOperationServerIndex]?.url;
+            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.rematerializeRoleAssignmentV2']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Delete the access_block flag and restore existing role assignments. Cached DENYs may last ~10s. Requires BlockPrincipalAccess.
-         * @summary Unblock principal access
-         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest] 
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId 
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async unblockPrincipalAccess(unblockPrincipalAccessRequest?: UnblockPrincipalAccessRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UnblockPrincipalAccessResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.unblockPrincipalAccess(unblockPrincipalAccessRequest, options);
+        async removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RemoveTeammateSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.removeTeammate(orgId, removeTeammateRequestBody, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['PrincipalAccessBlockApi.unblockPrincipalAccess']?.[localVarOperationServerIndex]?.url;
+            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.removeTeammate']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
     }
 };
 
 /**
- * PrincipalAccessBlockApi - factory interface
+ * RoleAssignmentApi - factory interface
  * @export
  */
-export const PrincipalAccessBlockApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
-    const localVarFp = PrincipalAccessBlockApiFp(configuration)
+export const RoleAssignmentApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = RoleAssignmentApiFp(configuration)
     return {
         /**
-         * Write an access_block flag that denies all authorization checks for the principal until unblocked. Authentication still succeeds. Requires BlockPrincipalAccess.
-         * @summary Block principal access
-         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        blockPrincipalAccess(blockPrincipalAccessRequest?: BlockPrincipalAccessRequest, options?: RawAxiosRequestConfig): AxiosPromise<AccessBlockStateResponseBlocked> {
-            return localVarFp.blockPrincipalAccess(blockPrincipalAccessRequest, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Get the current access block for a principal. Requires BlockPrincipalAccess.
-         * @summary Get principal access block
-         * @param {GetPrincipalAccessBlockTypeEnum} type 
-         * @param {string} id 
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId 
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getPrincipalAccessBlock(type: GetPrincipalAccessBlockTypeEnum, id: string, options?: RawAxiosRequestConfig): AxiosPromise<AccessBlockStateResponse> {
-            return localVarFp.getPrincipalAccessBlock(type, id, options).then((request) => request(axios, basePath));
+        applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RoleAssignmentSuccessResponse> {
+            return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(axios, basePath));
         },
         /**
-         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
-         * @summary List principal access blocks
-         * @param {ListPrincipalAccessBlocksTypeEnum} [type] 
+         * Rematerializes a role assignment and applies the resulting policy assignments
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId 
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listPrincipalAccessBlocks(type?: ListPrincipalAccessBlocksTypeEnum, options?: RawAxiosRequestConfig): AxiosPromise<ListPrincipalAccessBlocksResponse> {
-            return localVarFp.listPrincipalAccessBlocks(type, options).then((request) => request(axios, basePath));
+        rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RematerializeRoleAssignmentSuccessResponse> {
+            return localVarFp.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then((request) => request(axios, basePath));
         },
         /**
-         * Delete the access_block flag and restore existing role assignments. Cached DENYs may last ~10s. Requires BlockPrincipalAccess.
-         * @summary Unblock principal access
-         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest] 
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId 
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        unblockPrincipalAccess(unblockPrincipalAccessRequest?: UnblockPrincipalAccessRequest, options?: RawAxiosRequestConfig): AxiosPromise<UnblockPrincipalAccessResponse> {
-            return localVarFp.unblockPrincipalAccess(unblockPrincipalAccessRequest, options).then((request) => request(axios, basePath));
+        removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RemoveTeammateSuccessResponse> {
+            return localVarFp.removeTeammate(orgId, removeTeammateRequestBody, options).then((request) => request(axios, basePath));
         },
     };
 };
 
 /**
- * PrincipalAccessBlockApi - object-oriented interface
+ * RoleAssignmentApi - object-oriented interface
  * @export
- * @class PrincipalAccessBlockApi
+ * @class RoleAssignmentApi
  * @extends {BaseAPI}
  */
-export class PrincipalAccessBlockApi extends BaseAPI {
-    /**
-     * Write an access_block flag that denies all authorization checks for the principal until unblocked. Authentication still succeeds. Requires BlockPrincipalAccess.
-     * @summary Block principal access
-     * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest] 
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof PrincipalAccessBlockApi
-     */
-    public blockPrincipalAccess(blockPrincipalAccessRequest?: BlockPrincipalAccessRequest, options?: RawAxiosRequestConfig) {
-        return PrincipalAccessBlockApiFp(this.configuration).blockPrincipalAccess(blockPrincipalAccessRequest, options).then((request) => request(this.axios, this.basePath));
-    }
-
+export class RoleAssignmentApi extends BaseAPI {
     /**
-     * Get the current access block for a principal. Requires BlockPrincipalAccess.
-     * @summary Get principal access block
-     * @param {GetPrincipalAccessBlockTypeEnum} type 
-     * @param {string} id 
+     * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+     * @summary Apply role assignment
+     * @param {string} orgId 
+     * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof PrincipalAccessBlockApi
+     * @memberof RoleAssignmentApi
      */
-    public getPrincipalAccessBlock(type: GetPrincipalAccessBlockTypeEnum, id: string, options?: RawAxiosRequestConfig) {
-        return PrincipalAccessBlockApiFp(this.configuration).getPrincipalAccessBlock(type, id, options).then((request) => request(this.axios, this.basePath));
+    public applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig) {
+        return RoleAssignmentApiFp(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**
-     * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
-     * @summary List principal access blocks
-     * @param {ListPrincipalAccessBlocksTypeEnum} [type] 
+     * Rematerializes a role assignment and applies the resulting policy assignments
+     * @summary Rematerialize Role Assignment
+     * @param {string} orgId 
+     * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof PrincipalAccessBlockApi
+     * @memberof RoleAssignmentApi
      */
-    public listPrincipalAccessBlocks(type?: ListPrincipalAccessBlocksTypeEnum, options?: RawAxiosRequestConfig) {
-        return PrincipalAccessBlockApiFp(this.configuration).listPrincipalAccessBlocks(type, options).then((request) => request(this.axios, this.basePath));
+    public rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig) {
+        return RoleAssignmentApiFp(this.configuration).rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**
-     * Delete the access_block flag and restore existing role assignments. Cached DENYs may last ~10s. Requires BlockPrincipalAccess.
-     * @summary Unblock principal access
-     * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest] 
+     * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+     * @summary Remove teammate
+     * @param {string} orgId 
+     * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof PrincipalAccessBlockApi
+     * @memberof RoleAssignmentApi
      */
-    public unblockPrincipalAccess(unblockPrincipalAccessRequest?: UnblockPrincipalAccessRequest, options?: RawAxiosRequestConfig) {
-        return PrincipalAccessBlockApiFp(this.configuration).unblockPrincipalAccess(unblockPrincipalAccessRequest, options).then((request) => request(this.axios, this.basePath));
+    public removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig) {
+        return RoleAssignmentApiFp(this.configuration).removeTeammate(orgId, removeTeammateRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 }
 
-/**
- * @export
- */
-export const GetPrincipalAccessBlockTypeEnum = {
-    User: 'User',
-    Automation: 'Automation',
-    Kiosk: 'Kiosk',
-    Terminal: 'Terminal'
-} as const;
-export type GetPrincipalAccessBlockTypeEnum = typeof GetPrincipalAccessBlockTypeEnum[keyof typeof GetPrincipalAccessBlockTypeEnum];
-/**
- * @export
- */
-export const ListPrincipalAccessBlocksTypeEnum = {
-    User: 'User',
-    Automation: 'Automation',
-    Kiosk: 'Kiosk',
-    Terminal: 'Terminal'
-} as const;
-export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
 
 
 /**
- * RoleAssignmentApi - axios parameter creator
+ * StaffAccessApi - axios parameter creator
  * @export
  */
-export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Configuration) {
+export const StaffAccessApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a staff access pass
          * @param {string} orgId 
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
+         * @param {StaffAccessGrantRequestBody} [staffAccessGrantRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        applyRoleAssignment: async (orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        createStaffAccessGrant: async (orgId: string, staffAccessGrantRequestBody?: StaffAccessGrantRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgId' is not null or undefined
-            assertParamExists('applyRoleAssignment', 'orgId', orgId)
-            const localVarPath = `/orgs/{orgId}/roleAssignments/apply`
+            assertParamExists('createStaffAccessGrant', 'orgId', orgId)
+            const localVarPath = `/staffAccess/orgs/{orgId}/grants`
                 .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
@@ -5084,7 +5070,7 @@ export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Conf
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(roleAssignmentRequestBody, localVarRequestOptions, configuration)
+            localVarRequestOptions.data = serializeDataIfNeeded(staffAccessGrantRequestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -5092,17 +5078,17 @@ export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Conf
             };
         },
         /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active staff access pass for an org
          * @param {string} orgId 
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
+         * @param {ListMyStaffAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        rematerializeRoleAssignmentV2: async (orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        listMyStaffAccessGrants: async (orgId: string, status?: ListMyStaffAccessGrantsStatusEnum, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgId' is not null or undefined
-            assertParamExists('rematerializeRoleAssignmentV2', 'orgId', orgId)
-            const localVarPath = `/orgs/{orgId}/roleAssignments/rematerialize`
+            assertParamExists('listMyStaffAccessGrants', 'orgId', orgId)
+            const localVarPath = `/staffAccess/orgs/{orgId}/grants`
                 .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
@@ -5111,62 +5097,22 @@ export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Conf
                 baseOptions = configuration.baseOptions;
             }
 
-            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
             const localVarHeaderParameter = {} as any;
             const localVarQueryParameter = {} as any;
 
             // authentication ApiKeyAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
-
-    
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(rematerializeRoleAssignmentRequestBody, localVarRequestOptions, configuration)
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
-         * @param {string} orgId 
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        removeTeammate: async (orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'orgId' is not null or undefined
-            assertParamExists('removeTeammate', 'orgId', orgId)
-            const localVarPath = `/orgs/{orgId}/roleAssignments/remove`
-                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
+            if (status !== undefined) {
+                localVarQueryParameter['status'] = status;
             }
 
-            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication ApiKeyAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
-
 
     
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(removeTeammateRequestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -5177,147 +5123,116 @@ export const RoleAssignmentApiAxiosParamCreator = function (configuration?: Conf
 };
 
 /**
- * RoleAssignmentApi - functional programming interface
+ * StaffAccessApi - functional programming interface
  * @export
  */
-export const RoleAssignmentApiFp = function(configuration?: Configuration) {
-    const localVarAxiosParamCreator = RoleAssignmentApiAxiosParamCreator(configuration)
+export const StaffAccessApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = StaffAccessApiAxiosParamCreator(configuration)
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
-         * @param {string} orgId 
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RoleAssignmentSuccessResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.applyRoleAssignment(orgId, roleAssignmentRequestBody, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.applyRoleAssignment']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-        /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a staff access pass
          * @param {string} orgId 
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
+         * @param {StaffAccessGrantRequestBody} [staffAccessGrantRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RematerializeRoleAssignmentSuccessResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options);
+        async createStaffAccessGrant(orgId: string, staffAccessGrantRequestBody?: StaffAccessGrantRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<StaffAccessGrantResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createStaffAccessGrant(orgId, staffAccessGrantRequestBody, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.rematerializeRoleAssignmentV2']?.[localVarOperationServerIndex]?.url;
+            const localVarOperationServerBasePath = operationServerMap['StaffAccessApi.createStaffAccessGrant']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active staff access pass for an org
          * @param {string} orgId 
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
+         * @param {ListMyStaffAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RemoveTeammateSuccessResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.removeTeammate(orgId, removeTeammateRequestBody, options);
+        async listMyStaffAccessGrants(orgId: string, status?: ListMyStaffAccessGrantsStatusEnum, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListStaffAccessGrantsResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listMyStaffAccessGrants(orgId, status, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['RoleAssignmentApi.removeTeammate']?.[localVarOperationServerIndex]?.url;
+            const localVarOperationServerBasePath = operationServerMap['StaffAccessApi.listMyStaffAccessGrants']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
     }
 };
 
 /**
- * RoleAssignmentApi - factory interface
+ * StaffAccessApi - factory interface
  * @export
  */
-export const RoleAssignmentApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
-    const localVarFp = RoleAssignmentApiFp(configuration)
+export const StaffAccessApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = StaffAccessApiFp(configuration)
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a staff access pass
          * @param {string} orgId 
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
+         * @param {StaffAccessGrantRequestBody} [staffAccessGrantRequestBody] 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RoleAssignmentSuccessResponse> {
-            return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(axios, basePath));
+        createStaffAccessGrant(orgId: string, staffAccessGrantRequestBody?: StaffAccessGrantRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<StaffAccessGrantResponse> {
+            return localVarFp.createStaffAccessGrant(orgId, staffAccessGrantRequestBody, options).then((request) => request(axios, basePath));
         },
         /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active staff access pass for an org
          * @param {string} orgId 
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
+         * @param {ListMyStaffAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RematerializeRoleAssignmentSuccessResponse> {
-            return localVarFp.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
-         * @param {string} orgId 
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<RemoveTeammateSuccessResponse> {
-            return localVarFp.removeTeammate(orgId, removeTeammateRequestBody, options).then((request) => request(axios, basePath));
+        listMyStaffAccessGrants(orgId: string, status?: ListMyStaffAccessGrantsStatusEnum, options?: RawAxiosRequestConfig): AxiosPromise<ListStaffAccessGrantsResponse> {
+            return localVarFp.listMyStaffAccessGrants(orgId, status, options).then((request) => request(axios, basePath));
         },
     };
 };
 
 /**
- * RoleAssignmentApi - object-oriented interface
+ * StaffAccessApi - object-oriented interface
  * @export
- * @class RoleAssignmentApi
+ * @class StaffAccessApi
  * @extends {BaseAPI}
  */
-export class RoleAssignmentApi extends BaseAPI {
+export class StaffAccessApi extends BaseAPI {
     /**
-     * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-     * @summary Apply role assignment
+     * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+     * @summary Create a staff access pass
      * @param {string} orgId 
-     * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody] 
+     * @param {StaffAccessGrantRequestBody} [staffAccessGrantRequestBody] 
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
+     * @memberof StaffAccessApi
      */
-    public applyRoleAssignment(orgId: string, roleAssignmentRequestBody?: RoleAssignmentRequestBody, options?: RawAxiosRequestConfig) {
-        return RoleAssignmentApiFp(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then((request) => request(this.axios, this.basePath));
+    public createStaffAccessGrant(orgId: string, staffAccessGrantRequestBody?: StaffAccessGrantRequestBody, options?: RawAxiosRequestConfig) {
+        return StaffAccessApiFp(this.configuration).createStaffAccessGrant(orgId, staffAccessGrantRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**
-     * Rematerializes a role assignment and applies the resulting policy assignments
-     * @summary Rematerialize Role Assignment
+     * Returns the authenticated caller\'s active pass for the requested org.
+     * @summary List the caller\'s active staff access pass for an org
      * @param {string} orgId 
-     * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody] 
+     * @param {ListMyStaffAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
+     * @memberof StaffAccessApi
      */
-    public rematerializeRoleAssignmentV2(orgId: string, rematerializeRoleAssignmentRequestBody?: RematerializeRoleAssignmentRequestBody, options?: RawAxiosRequestConfig) {
-        return RoleAssignmentApiFp(this.configuration).rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then((request) => request(this.axios, this.basePath));
-    }
-
-    /**
-     * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-     * @summary Remove teammate
-     * @param {string} orgId 
-     * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody] 
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
-     */
-    public removeTeammate(orgId: string, removeTeammateRequestBody?: RemoveTeammateRequestBody, options?: RawAxiosRequestConfig) {
-        return RoleAssignmentApiFp(this.configuration).removeTeammate(orgId, removeTeammateRequestBody, options).then((request) => request(this.axios, this.basePath));
+    public listMyStaffAccessGrants(orgId: string, status?: ListMyStaffAccessGrantsStatusEnum, options?: RawAxiosRequestConfig) {
+        return StaffAccessApiFp(this.configuration).listMyStaffAccessGrants(orgId, status, options).then((request) => request(this.axios, this.basePath));
     }
 }
 
+/**
+ * @export
+ */
+export const ListMyStaffAccessGrantsStatusEnum = {
+    Active: 'active'
+} as const;
+export type ListMyStaffAccessGrantsStatusEnum = typeof ListMyStaffAccessGrantsStatusEnum[keyof typeof ListMyStaffAccessGrantsStatusEnum];
 
 
 /**