@flipdish/authorization 0.2.51 → 0.2.52

package/dist/api.js

@@ -84,14 +84,31 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
     return to.concat(ar || Array.prototype.slice.call(from));
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = exports.AuthenticationApi = exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.RoleNames = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = void 0;
-exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = void 0;
+exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = exports.AuthenticationApi = exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.UnblockPrincipalAccessResponseStatusEnum = exports.TimedAccessGrantResponseStatusEnum = exports.TimedAccessGrantResponsePrincipalTypeEnum = exports.TimedAccessGrantRequestBodyRoleNameEnum = exports.TimedAccessGrantStatusEnum = exports.TimedAccessGrantPrincipalTypeEnum = exports.RoleNames = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = exports.AcceptJoinRequestRoleNameEnum = void 0;
+exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = void 0;
 var axios_1 = require("axios");
 // Some imports not used depending on template conditions
 // @ts-ignore
 var common_1 = require("./common");
 // @ts-ignore
 var base_1 = require("./base");
+exports.AcceptJoinRequestRoleNameEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
+exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
 exports.AccessRequestResponseStateEnum = {
     Pending: 'Pending',
     Approved: 'Approved',
@@ -284,6 +301,7 @@ exports.Permissions = {
     ViewMenu: 'ViewMenu',
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
+    BlockPrincipalAccess: 'BlockPrincipalAccess',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -510,6 +528,33 @@ exports.RoleNames = {
     AuthDeveloper: 'AuthDeveloper',
     FlipdishStaff: 'FlipdishStaff'
 };
+exports.TimedAccessGrantPrincipalTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
+exports.TimedAccessGrantStatusEnum = {
+    Active: 'active',
+    Expired: 'expired'
+};
+exports.TimedAccessGrantRequestBodyRoleNameEnum = {
+    Owner: 'Owner'
+};
+exports.TimedAccessGrantResponsePrincipalTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
+exports.TimedAccessGrantResponseStatusEnum = {
+    Active: 'active',
+    Expired: 'expired'
+};
+exports.UnblockPrincipalAccessResponseStatusEnum = {
+    RestorationInProgress: 'restoration_in_progress',
+    NotBlocked: 'not_blocked'
+};
 /**
  * APIKeysApi - axios parameter creator
  * @export
@@ -2267,19 +2312,20 @@ var JoinAccessApiAxiosParamCreator = function (configuration) {
     var _this = this;
     return {
         /**
-         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * Grants access via AuthZ V2 role assignment (source join). Optional body fields override the role and property scope stored on the pending request; omitted fields use the request defaults from the invite token.
          * @summary Accept a pending join access request
          * @param {string} orgId
          * @param {string} requestId
+         * @param {AcceptJoinRequest} [acceptJoinRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        acceptJoinAccessRequest: function (orgId_1, requestId_1) {
+        acceptJoinAccessRequest: function (orgId_1, requestId_1, acceptJoinRequest_1) {
             var args_1 = [];
-            for (var _i = 2; _i < arguments.length; _i++) {
-                args_1[_i - 2] = arguments[_i];
+            for (var _i = 3; _i < arguments.length; _i++) {
+                args_1[_i - 3] = arguments[_i];
             }
-            return __awaiter(_this, __spreadArray([orgId_1, requestId_1], args_1, true), void 0, function (orgId, requestId, options) {
+            return __awaiter(_this, __spreadArray([orgId_1, requestId_1, acceptJoinRequest_1], args_1, true), void 0, function (orgId, requestId, acceptJoinRequest, options) {
                 var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
                 if (options === void 0) { options = {}; }
                 return __generator(this, function (_a) {
@@ -2304,9 +2350,11 @@ var JoinAccessApiAxiosParamCreator = function (configuration) {
                         case 1:
                             // authentication ApiKeyAuth required
                             _a.sent();
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
                             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
                             headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
                             localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(acceptJoinRequest, localVarRequestOptions, configuration);
                             return [2 /*return*/, {
                                     url: (0, common_1.toPathString)(localVarUrlObj),
                                     options: localVarRequestOptions,
@@ -2573,20 +2621,21 @@ var JoinAccessApiFp = function (configuration) {
     var localVarAxiosParamCreator = (0, exports.JoinAccessApiAxiosParamCreator)(configuration);
     return {
         /**
-         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * Grants access via AuthZ V2 role assignment (source join). Optional body fields override the role and property scope stored on the pending request; omitted fields use the request defaults from the invite token.
          * @summary Accept a pending join access request
          * @param {string} orgId
          * @param {string} requestId
+         * @param {AcceptJoinRequest} [acceptJoinRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        acceptJoinAccessRequest: function (orgId, requestId, options) {
+        acceptJoinAccessRequest: function (orgId, requestId, acceptJoinRequest, options) {
             return __awaiter(this, void 0, void 0, function () {
                 var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
                 var _a, _b, _c;
                 return __generator(this, function (_d) {
                     switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.acceptJoinAccessRequest(orgId, requestId, options)];
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.acceptJoinAccessRequest(orgId, requestId, acceptJoinRequest, options)];
                         case 1:
                             localVarAxiosArgs = _d.sent();
                             localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
@@ -2728,15 +2777,16 @@ var JoinAccessApiFactory = function (configuration, basePath, axios) {
     var localVarFp = (0, exports.JoinAccessApiFp)(configuration);
     return {
         /**
-         * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+         * Grants access via AuthZ V2 role assignment (source join). Optional body fields override the role and property scope stored on the pending request; omitted fields use the request defaults from the invite token.
          * @summary Accept a pending join access request
          * @param {string} orgId
          * @param {string} requestId
+         * @param {AcceptJoinRequest} [acceptJoinRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        acceptJoinAccessRequest: function (orgId, requestId, options) {
-            return localVarFp.acceptJoinAccessRequest(orgId, requestId, options).then(function (request) { return request(axios, basePath); });
+        acceptJoinAccessRequest: function (orgId, requestId, acceptJoinRequest, options) {
+            return localVarFp.acceptJoinAccessRequest(orgId, requestId, acceptJoinRequest, options).then(function (request) { return request(axios, basePath); });
         },
         /**
          * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
@@ -2809,17 +2859,18 @@ var JoinAccessApi = /** @class */ (function (_super) {
         return _super !== null && _super.apply(this, arguments) || this;
     }
     /**
-     * Grants the role stored on the access request (copied from the invite token at create time) via AuthZ V2 role assignment (source join).
+     * Grants access via AuthZ V2 role assignment (source join). Optional body fields override the role and property scope stored on the pending request; omitted fields use the request defaults from the invite token.
      * @summary Accept a pending join access request
      * @param {string} orgId
      * @param {string} requestId
+     * @param {AcceptJoinRequest} [acceptJoinRequest]
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof JoinAccessApi
      */
-    JoinAccessApi.prototype.acceptJoinAccessRequest = function (orgId, requestId, options) {
+    JoinAccessApi.prototype.acceptJoinAccessRequest = function (orgId, requestId, acceptJoinRequest, options) {
         var _this = this;
-        return (0, exports.JoinAccessApiFp)(this.configuration).acceptJoinAccessRequest(orgId, requestId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+        return (0, exports.JoinAccessApiFp)(this.configuration).acceptJoinAccessRequest(orgId, requestId, acceptJoinRequest, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
      * Mints an opaque invite token after validating the RMS terminal passport. Call again when a previous token expires to get a new one.
@@ -2891,35 +2942,31 @@ var JoinAccessApi = /** @class */ (function (_super) {
 }(base_1.BaseAPI));
 exports.JoinAccessApi = JoinAccessApi;
 /**
- * RoleAssignmentApi - axios parameter creator
+ * PrincipalAccessBlockApi - axios parameter creator
  * @export
  */
-var RoleAssignmentApiAxiosParamCreator = function (configuration) {
+var PrincipalAccessBlockApiAxiosParamCreator = function (configuration) {
     var _this = this;
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
-         * @param {string} orgId
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * Write an access_block flag and a temporary AVP forbid so authorization checks DENY. Decision-cache bust is delayed like other grant changes. Grant drain/restore runs asynchronously. Authentication still succeeds. Requires BlockPrincipalAccess.
+         * @summary Block principal access
+         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        applyRoleAssignment: function (orgId_1, roleAssignmentRequestBody_1) {
+        blockPrincipalAccess: function (blockPrincipalAccessRequest_1) {
             var args_1 = [];
-            for (var _i = 2; _i < arguments.length; _i++) {
-                args_1[_i - 2] = arguments[_i];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
             }
-            return __awaiter(_this, __spreadArray([orgId_1, roleAssignmentRequestBody_1], args_1, true), void 0, function (orgId, roleAssignmentRequestBody, options) {
+            return __awaiter(_this, __spreadArray([blockPrincipalAccessRequest_1], args_1, true), void 0, function (blockPrincipalAccessRequest, options) {
                 var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
                 if (options === void 0) { options = {}; }
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            // verify required parameter 'orgId' is not null or undefined
-                            (0, common_1.assertParamExists)('applyRoleAssignment', 'orgId', orgId);
-                            localVarPath = "/orgs/{orgId}/roleAssignments/apply"
-                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarPath = "/principals/block";
                             localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
                             if (configuration) {
                                 baseOptions = configuration.baseOptions;
@@ -2936,7 +2983,7 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
                             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
                             headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
                             localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(roleAssignmentRequestBody, localVarRequestOptions, configuration);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(blockPrincipalAccessRequest, localVarRequestOptions, configuration);
                             return [2 /*return*/, {
                                     url: (0, common_1.toPathString)(localVarUrlObj),
                                     options: localVarRequestOptions,
@@ -2946,33 +2993,34 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
             });
         },
         /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
-         * @param {string} orgId
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * Get the current access block for a principal. Requires BlockPrincipalAccess.
+         * @summary Get principal access block
+         * @param {GetPrincipalAccessBlockTypeEnum} type
+         * @param {string} id
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        rematerializeRoleAssignmentV2: function (orgId_1, rematerializeRoleAssignmentRequestBody_1) {
+        getPrincipalAccessBlock: function (type_1, id_1) {
             var args_1 = [];
             for (var _i = 2; _i < arguments.length; _i++) {
                 args_1[_i - 2] = arguments[_i];
             }
-            return __awaiter(_this, __spreadArray([orgId_1, rematerializeRoleAssignmentRequestBody_1], args_1, true), void 0, function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+            return __awaiter(_this, __spreadArray([type_1, id_1], args_1, true), void 0, function (type, id, options) {
                 var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
                 if (options === void 0) { options = {}; }
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            // verify required parameter 'orgId' is not null or undefined
-                            (0, common_1.assertParamExists)('rematerializeRoleAssignmentV2', 'orgId', orgId);
-                            localVarPath = "/orgs/{orgId}/roleAssignments/rematerialize"
-                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            // verify required parameter 'type' is not null or undefined
+                            (0, common_1.assertParamExists)('getPrincipalAccessBlock', 'type', type);
+                            // verify required parameter 'id' is not null or undefined
+                            (0, common_1.assertParamExists)('getPrincipalAccessBlock', 'id', id);
+                            localVarPath = "/principals/block";
                             localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
                             if (configuration) {
                                 baseOptions = configuration.baseOptions;
                             }
-                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
                             localVarHeaderParameter = {};
                             localVarQueryParameter = {};
                             // authentication ApiKeyAuth required
@@ -2980,11 +3028,15 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
                         case 1:
                             // authentication ApiKeyAuth required
                             _a.sent();
-                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            if (type !== undefined) {
+                                localVarQueryParameter['type'] = type;
+                            }
+                            if (id !== undefined) {
+                                localVarQueryParameter['id'] = id;
+                            }
                             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
                             headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
                             localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(rematerializeRoleAssignmentRequestBody, localVarRequestOptions, configuration);
                             return [2 /*return*/, {
                                     url: (0, common_1.toPathString)(localVarUrlObj),
                                     options: localVarRequestOptions,
@@ -2994,28 +3046,69 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
             });
         },
         /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
-         * @param {string} orgId
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
+         * @summary List principal access blocks
+         * @param {ListPrincipalAccessBlocksTypeEnum} [type]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        removeTeammate: function (orgId_1, removeTeammateRequestBody_1) {
+        listPrincipalAccessBlocks: function (type_1) {
             var args_1 = [];
-            for (var _i = 2; _i < arguments.length; _i++) {
-                args_1[_i - 2] = arguments[_i];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
             }
-            return __awaiter(_this, __spreadArray([orgId_1, removeTeammateRequestBody_1], args_1, true), void 0, function (orgId, removeTeammateRequestBody, options) {
+            return __awaiter(_this, __spreadArray([type_1], args_1, true), void 0, function (type, options) {
                 var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
                 if (options === void 0) { options = {}; }
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            // verify required parameter 'orgId' is not null or undefined
-                            (0, common_1.assertParamExists)('removeTeammate', 'orgId', orgId);
-                            localVarPath = "/orgs/{orgId}/roleAssignments/remove"
-                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarPath = "/principals/blocks";
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            if (type !== undefined) {
+                                localVarQueryParameter['type'] = type;
+                            }
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+        /**
+         * Start restoring existing role assignments. The access_block flag is removed asynchronously after restoration completes, and authorization remains denied until then. Requires BlockPrincipalAccess.
+         * @summary Unblock principal access
+         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        unblockPrincipalAccess: function (unblockPrincipalAccessRequest_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([unblockPrincipalAccessRequest_1], args_1, true), void 0, function (unblockPrincipalAccessRequest, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            localVarPath = "/principals/unblock";
                             localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
                             if (configuration) {
                                 baseOptions = configuration.baseOptions;
@@ -3032,7 +3125,7 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
                             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
                             headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
                             localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(removeTeammateRequestBody, localVarRequestOptions, configuration);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(unblockPrincipalAccessRequest, localVarRequestOptions, configuration);
                             return [2 /*return*/, {
                                     url: (0, common_1.toPathString)(localVarUrlObj),
                                     options: localVarRequestOptions,
@@ -3043,81 +3136,102 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
         },
     };
 };
-exports.RoleAssignmentApiAxiosParamCreator = RoleAssignmentApiAxiosParamCreator;
+exports.PrincipalAccessBlockApiAxiosParamCreator = PrincipalAccessBlockApiAxiosParamCreator;
 /**
- * RoleAssignmentApi - functional programming interface
+ * PrincipalAccessBlockApi - functional programming interface
  * @export
  */
-var RoleAssignmentApiFp = function (configuration) {
-    var localVarAxiosParamCreator = (0, exports.RoleAssignmentApiAxiosParamCreator)(configuration);
+var PrincipalAccessBlockApiFp = function (configuration) {
+    var localVarAxiosParamCreator = (0, exports.PrincipalAccessBlockApiAxiosParamCreator)(configuration);
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
-         * @param {string} orgId
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * Write an access_block flag and a temporary AVP forbid so authorization checks DENY. Decision-cache bust is delayed like other grant changes. Grant drain/restore runs asynchronously. Authentication still succeeds. Requires BlockPrincipalAccess.
+         * @summary Block principal access
+         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        applyRoleAssignment: function (orgId, roleAssignmentRequestBody, options) {
+        blockPrincipalAccess: function (blockPrincipalAccessRequest, options) {
             return __awaiter(this, void 0, void 0, function () {
                 var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
                 var _a, _b, _c;
                 return __generator(this, function (_d) {
                     switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.applyRoleAssignment(orgId, roleAssignmentRequestBody, options)];
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.blockPrincipalAccess(blockPrincipalAccessRequest, options)];
                         case 1:
                             localVarAxiosArgs = _d.sent();
                             localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.applyRoleAssignment']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalAccessBlockApi.blockPrincipalAccess']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                             return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
                     }
                 });
             });
         },
         /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
-         * @param {string} orgId
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * Get the current access block for a principal. Requires BlockPrincipalAccess.
+         * @summary Get principal access block
+         * @param {GetPrincipalAccessBlockTypeEnum} type
+         * @param {string} id
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        rematerializeRoleAssignmentV2: function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+        getPrincipalAccessBlock: function (type, id, options) {
             return __awaiter(this, void 0, void 0, function () {
                 var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
                 var _a, _b, _c;
                 return __generator(this, function (_d) {
                     switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options)];
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.getPrincipalAccessBlock(type, id, options)];
                         case 1:
                             localVarAxiosArgs = _d.sent();
                             localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.rematerializeRoleAssignmentV2']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalAccessBlockApi.getPrincipalAccessBlock']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                             return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
                     }
                 });
             });
         },
         /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
-         * @param {string} orgId
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
+         * @summary List principal access blocks
+         * @param {ListPrincipalAccessBlocksTypeEnum} [type]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        removeTeammate: function (orgId, removeTeammateRequestBody, options) {
+        listPrincipalAccessBlocks: function (type, options) {
             return __awaiter(this, void 0, void 0, function () {
                 var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
                 var _a, _b, _c;
                 return __generator(this, function (_d) {
                     switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.removeTeammate(orgId, removeTeammateRequestBody, options)];
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listPrincipalAccessBlocks(type, options)];
                         case 1:
                             localVarAxiosArgs = _d.sent();
                             localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.removeTeammate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalAccessBlockApi.listPrincipalAccessBlocks']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+        /**
+         * Start restoring existing role assignments. The access_block flag is removed asynchronously after restoration completes, and authorization remains denied until then. Requires BlockPrincipalAccess.
+         * @summary Unblock principal access
+         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        unblockPrincipalAccess: function (unblockPrincipalAccessRequest, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.unblockPrincipalAccess(unblockPrincipalAccessRequest, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalAccessBlockApi.unblockPrincipalAccess']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                             return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
                     }
                 });
@@ -3125,103 +3239,714 @@ var RoleAssignmentApiFp = function (configuration) {
         },
     };
 };
-exports.RoleAssignmentApiFp = RoleAssignmentApiFp;
+exports.PrincipalAccessBlockApiFp = PrincipalAccessBlockApiFp;
 /**
- * RoleAssignmentApi - factory interface
+ * PrincipalAccessBlockApi - factory interface
  * @export
  */
-var RoleAssignmentApiFactory = function (configuration, basePath, axios) {
-    var localVarFp = (0, exports.RoleAssignmentApiFp)(configuration);
+var PrincipalAccessBlockApiFactory = function (configuration, basePath, axios) {
+    var localVarFp = (0, exports.PrincipalAccessBlockApiFp)(configuration);
     return {
         /**
-         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-         * @summary Apply role assignment
-         * @param {string} orgId
-         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * Write an access_block flag and a temporary AVP forbid so authorization checks DENY. Decision-cache bust is delayed like other grant changes. Grant drain/restore runs asynchronously. Authentication still succeeds. Requires BlockPrincipalAccess.
+         * @summary Block principal access
+         * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        applyRoleAssignment: function (orgId, roleAssignmentRequestBody, options) {
-            return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(axios, basePath); });
+        blockPrincipalAccess: function (blockPrincipalAccessRequest, options) {
+            return localVarFp.blockPrincipalAccess(blockPrincipalAccessRequest, options).then(function (request) { return request(axios, basePath); });
         },
         /**
-         * Rematerializes a role assignment and applies the resulting policy assignments
-         * @summary Rematerialize Role Assignment
-         * @param {string} orgId
-         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * Get the current access block for a principal. Requires BlockPrincipalAccess.
+         * @summary Get principal access block
+         * @param {GetPrincipalAccessBlockTypeEnum} type
+         * @param {string} id
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        rematerializeRoleAssignmentV2: function (orgId, rematerializeRoleAssignmentRequestBody, options) {
-            return localVarFp.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then(function (request) { return request(axios, basePath); });
+        getPrincipalAccessBlock: function (type, id, options) {
+            return localVarFp.getPrincipalAccessBlock(type, id, options).then(function (request) { return request(axios, basePath); });
         },
         /**
-         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-         * @summary Remove teammate
-         * @param {string} orgId
-         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
+         * @summary List principal access blocks
+         * @param {ListPrincipalAccessBlocksTypeEnum} [type]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        removeTeammate: function (orgId, removeTeammateRequestBody, options) {
-            return localVarFp.removeTeammate(orgId, removeTeammateRequestBody, options).then(function (request) { return request(axios, basePath); });
+        listPrincipalAccessBlocks: function (type, options) {
+            return localVarFp.listPrincipalAccessBlocks(type, options).then(function (request) { return request(axios, basePath); });
+        },
+        /**
+         * Start restoring existing role assignments. The access_block flag is removed asynchronously after restoration completes, and authorization remains denied until then. Requires BlockPrincipalAccess.
+         * @summary Unblock principal access
+         * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        unblockPrincipalAccess: function (unblockPrincipalAccessRequest, options) {
+            return localVarFp.unblockPrincipalAccess(unblockPrincipalAccessRequest, options).then(function (request) { return request(axios, basePath); });
         },
     };
 };
-exports.RoleAssignmentApiFactory = RoleAssignmentApiFactory;
+exports.PrincipalAccessBlockApiFactory = PrincipalAccessBlockApiFactory;
 /**
- * RoleAssignmentApi - object-oriented interface
+ * PrincipalAccessBlockApi - object-oriented interface
  * @export
- * @class RoleAssignmentApi
+ * @class PrincipalAccessBlockApi
  * @extends {BaseAPI}
  */
-var RoleAssignmentApi = /** @class */ (function (_super) {
-    __extends(RoleAssignmentApi, _super);
-    function RoleAssignmentApi() {
+var PrincipalAccessBlockApi = /** @class */ (function (_super) {
+    __extends(PrincipalAccessBlockApi, _super);
+    function PrincipalAccessBlockApi() {
         return _super !== null && _super.apply(this, arguments) || this;
     }
     /**
-     * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
-     * @summary Apply role assignment
-     * @param {string} orgId
-     * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+     * Write an access_block flag and a temporary AVP forbid so authorization checks DENY. Decision-cache bust is delayed like other grant changes. Grant drain/restore runs asynchronously. Authentication still succeeds. Requires BlockPrincipalAccess.
+     * @summary Block principal access
+     * @param {BlockPrincipalAccessRequest} [blockPrincipalAccessRequest]
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
+     * @memberof PrincipalAccessBlockApi
      */
-    RoleAssignmentApi.prototype.applyRoleAssignment = function (orgId, roleAssignmentRequestBody, options) {
+    PrincipalAccessBlockApi.prototype.blockPrincipalAccess = function (blockPrincipalAccessRequest, options) {
         var _this = this;
-        return (0, exports.RoleAssignmentApiFp)(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+        return (0, exports.PrincipalAccessBlockApiFp)(this.configuration).blockPrincipalAccess(blockPrincipalAccessRequest, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
-     * Rematerializes a role assignment and applies the resulting policy assignments
-     * @summary Rematerialize Role Assignment
-     * @param {string} orgId
-     * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+     * Get the current access block for a principal. Requires BlockPrincipalAccess.
+     * @summary Get principal access block
+     * @param {GetPrincipalAccessBlockTypeEnum} type
+     * @param {string} id
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
+     * @memberof PrincipalAccessBlockApi
      */
-    RoleAssignmentApi.prototype.rematerializeRoleAssignmentV2 = function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+    PrincipalAccessBlockApi.prototype.getPrincipalAccessBlock = function (type, id, options) {
         var _this = this;
-        return (0, exports.RoleAssignmentApiFp)(this.configuration).rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+        return (0, exports.PrincipalAccessBlockApiFp)(this.configuration).getPrincipalAccessBlock(type, id, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
-     * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
-     * @summary Remove teammate
-     * @param {string} orgId
-     * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+     * List currently blocked principals. Optional type filter. Requires BlockPrincipalAccess.
+     * @summary List principal access blocks
+     * @param {ListPrincipalAccessBlocksTypeEnum} [type]
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
-     * @memberof RoleAssignmentApi
+     * @memberof PrincipalAccessBlockApi
      */
-    RoleAssignmentApi.prototype.removeTeammate = function (orgId, removeTeammateRequestBody, options) {
+    PrincipalAccessBlockApi.prototype.listPrincipalAccessBlocks = function (type, options) {
         var _this = this;
-        return (0, exports.RoleAssignmentApiFp)(this.configuration).removeTeammate(orgId, removeTeammateRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+        return (0, exports.PrincipalAccessBlockApiFp)(this.configuration).listPrincipalAccessBlocks(type, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
-    return RoleAssignmentApi;
+    /**
+     * Start restoring existing role assignments. The access_block flag is removed asynchronously after restoration completes, and authorization remains denied until then. Requires BlockPrincipalAccess.
+     * @summary Unblock principal access
+     * @param {UnblockPrincipalAccessRequest} [unblockPrincipalAccessRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalAccessBlockApi
+     */
+    PrincipalAccessBlockApi.prototype.unblockPrincipalAccess = function (unblockPrincipalAccessRequest, options) {
+        var _this = this;
+        return (0, exports.PrincipalAccessBlockApiFp)(this.configuration).unblockPrincipalAccess(unblockPrincipalAccessRequest, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    return PrincipalAccessBlockApi;
 }(base_1.BaseAPI));
-exports.RoleAssignmentApi = RoleAssignmentApi;
+exports.PrincipalAccessBlockApi = PrincipalAccessBlockApi;
+/**
+ * @export
+ */
+exports.GetPrincipalAccessBlockTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
+/**
+ * @export
+ */
+exports.ListPrincipalAccessBlocksTypeEnum = {
+    User: 'User',
+    Automation: 'Automation',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
+/**
+ * RoleAssignmentApi - axios parameter creator
+ * @export
+ */
+var RoleAssignmentApiAxiosParamCreator = function (configuration) {
+    var _this = this;
+    return {
+        /**
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        applyRoleAssignment: function (orgId_1, roleAssignmentRequestBody_1) {
+            var args_1 = [];
+            for (var _i = 2; _i < arguments.length; _i++) {
+                args_1[_i - 2] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1, roleAssignmentRequestBody_1], args_1, true), void 0, function (orgId, roleAssignmentRequestBody, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('applyRoleAssignment', 'orgId', orgId);
+                            localVarPath = "/orgs/{orgId}/roleAssignments/apply"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(roleAssignmentRequestBody, localVarRequestOptions, configuration);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+        /**
+         * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rematerializeRoleAssignmentV2: function (orgId_1, rematerializeRoleAssignmentRequestBody_1) {
+            var args_1 = [];
+            for (var _i = 2; _i < arguments.length; _i++) {
+                args_1[_i - 2] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1, rematerializeRoleAssignmentRequestBody_1], args_1, true), void 0, function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('rematerializeRoleAssignmentV2', 'orgId', orgId);
+                            localVarPath = "/orgs/{orgId}/roleAssignments/rematerialize"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(rematerializeRoleAssignmentRequestBody, localVarRequestOptions, configuration);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+        /**
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        removeTeammate: function (orgId_1, removeTeammateRequestBody_1) {
+            var args_1 = [];
+            for (var _i = 2; _i < arguments.length; _i++) {
+                args_1[_i - 2] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1, removeTeammateRequestBody_1], args_1, true), void 0, function (orgId, removeTeammateRequestBody, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('removeTeammate', 'orgId', orgId);
+                            localVarPath = "/orgs/{orgId}/roleAssignments/remove"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(removeTeammateRequestBody, localVarRequestOptions, configuration);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.RoleAssignmentApiAxiosParamCreator = RoleAssignmentApiAxiosParamCreator;
+/**
+ * RoleAssignmentApi - functional programming interface
+ * @export
+ */
+var RoleAssignmentApiFp = function (configuration) {
+    var localVarAxiosParamCreator = (0, exports.RoleAssignmentApiAxiosParamCreator)(configuration);
+    return {
+        /**
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        applyRoleAssignment: function (orgId, roleAssignmentRequestBody, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.applyRoleAssignment(orgId, roleAssignmentRequestBody, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.applyRoleAssignment']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+        /**
+         * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rematerializeRoleAssignmentV2: function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.rematerializeRoleAssignmentV2']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+        /**
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        removeTeammate: function (orgId, removeTeammateRequestBody, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.removeTeammate(orgId, removeTeammateRequestBody, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.removeTeammate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.RoleAssignmentApiFp = RoleAssignmentApiFp;
+/**
+ * RoleAssignmentApi - factory interface
+ * @export
+ */
+var RoleAssignmentApiFactory = function (configuration, basePath, axios) {
+    var localVarFp = (0, exports.RoleAssignmentApiFp)(configuration);
+    return {
+        /**
+         * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+         * @summary Apply role assignment
+         * @param {string} orgId
+         * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        applyRoleAssignment: function (orgId, roleAssignmentRequestBody, options) {
+            return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(axios, basePath); });
+        },
+        /**
+         * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
+         * @summary Rematerialize Role Assignment
+         * @param {string} orgId
+         * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rematerializeRoleAssignmentV2: function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+            return localVarFp.rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then(function (request) { return request(axios, basePath); });
+        },
+        /**
+         * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+         * @summary Remove teammate
+         * @param {string} orgId
+         * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        removeTeammate: function (orgId, removeTeammateRequestBody, options) {
+            return localVarFp.removeTeammate(orgId, removeTeammateRequestBody, options).then(function (request) { return request(axios, basePath); });
+        },
+    };
+};
+exports.RoleAssignmentApiFactory = RoleAssignmentApiFactory;
+/**
+ * RoleAssignmentApi - object-oriented interface
+ * @export
+ * @class RoleAssignmentApi
+ * @extends {BaseAPI}
+ */
+var RoleAssignmentApi = /** @class */ (function (_super) {
+    __extends(RoleAssignmentApi, _super);
+    function RoleAssignmentApi() {
+        return _super !== null && _super.apply(this, arguments) || this;
+    }
+    /**
+     * Apply a role assignment for the target user without invoking legacy teammate/Zeus role assignment flows.
+     * @summary Apply role assignment
+     * @param {string} orgId
+     * @param {RoleAssignmentRequestBody} [roleAssignmentRequestBody]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RoleAssignmentApi
+     */
+    RoleAssignmentApi.prototype.applyRoleAssignment = function (orgId, roleAssignmentRequestBody, options) {
+        var _this = this;
+        return (0, exports.RoleAssignmentApiFp)(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    /**
+     * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
+     * @summary Rematerialize Role Assignment
+     * @param {string} orgId
+     * @param {RematerializeRoleAssignmentRequestBody} [rematerializeRoleAssignmentRequestBody]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RoleAssignmentApi
+     */
+    RoleAssignmentApi.prototype.rematerializeRoleAssignmentV2 = function (orgId, rematerializeRoleAssignmentRequestBody, options) {
+        var _this = this;
+        return (0, exports.RoleAssignmentApiFp)(this.configuration).rematerializeRoleAssignmentV2(orgId, rematerializeRoleAssignmentRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    /**
+     * Revokes all V2 role assignments for the teammate in this org, reconciles away their policies, and removes them from the org user list. Does not delete the teammate account in Zeus.
+     * @summary Remove teammate
+     * @param {string} orgId
+     * @param {RemoveTeammateRequestBody} [removeTeammateRequestBody]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RoleAssignmentApi
+     */
+    RoleAssignmentApi.prototype.removeTeammate = function (orgId, removeTeammateRequestBody, options) {
+        var _this = this;
+        return (0, exports.RoleAssignmentApiFp)(this.configuration).removeTeammate(orgId, removeTeammateRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    return RoleAssignmentApi;
+}(base_1.BaseAPI));
+exports.RoleAssignmentApi = RoleAssignmentApi;
+/**
+ * TimedAccessApi - axios parameter creator
+ * @export
+ */
+var TimedAccessApiAxiosParamCreator = function (configuration) {
+    var _this = this;
+    return {
+        /**
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a timed access pass
+         * @param {string} orgId
+         * @param {TimedAccessGrantRequestBody} [timedAccessGrantRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createTimedAccessGrant: function (orgId_1, timedAccessGrantRequestBody_1) {
+            var args_1 = [];
+            for (var _i = 2; _i < arguments.length; _i++) {
+                args_1[_i - 2] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1, timedAccessGrantRequestBody_1], args_1, true), void 0, function (orgId, timedAccessGrantRequestBody, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('createTimedAccessGrant', 'orgId', orgId);
+                            localVarPath = "/timedAccess/orgs/{orgId}/grants"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            localVarHeaderParameter['Content-Type'] = 'application/json';
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(timedAccessGrantRequestBody, localVarRequestOptions, configuration);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+        /**
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active timed access pass for an org
+         * @param {string} orgId
+         * @param {ListMyTimedAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listMyTimedAccessGrants: function (orgId_1, status_1) {
+            var args_1 = [];
+            for (var _i = 2; _i < arguments.length; _i++) {
+                args_1[_i - 2] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1, status_1], args_1, true), void 0, function (orgId, status, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('listMyTimedAccessGrants', 'orgId', orgId);
+                            localVarPath = "/timedAccess/orgs/{orgId}/grants"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            if (status !== undefined) {
+                                localVarQueryParameter['status'] = status;
+                            }
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.TimedAccessApiAxiosParamCreator = TimedAccessApiAxiosParamCreator;
+/**
+ * TimedAccessApi - functional programming interface
+ * @export
+ */
+var TimedAccessApiFp = function (configuration) {
+    var localVarAxiosParamCreator = (0, exports.TimedAccessApiAxiosParamCreator)(configuration);
+    return {
+        /**
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a timed access pass
+         * @param {string} orgId
+         * @param {TimedAccessGrantRequestBody} [timedAccessGrantRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createTimedAccessGrant: function (orgId, timedAccessGrantRequestBody, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.createTimedAccessGrant(orgId, timedAccessGrantRequestBody, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['TimedAccessApi.createTimedAccessGrant']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+        /**
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active timed access pass for an org
+         * @param {string} orgId
+         * @param {ListMyTimedAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listMyTimedAccessGrants: function (orgId, status, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listMyTimedAccessGrants(orgId, status, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['TimedAccessApi.listMyTimedAccessGrants']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.TimedAccessApiFp = TimedAccessApiFp;
+/**
+ * TimedAccessApi - factory interface
+ * @export
+ */
+var TimedAccessApiFactory = function (configuration, basePath, axios) {
+    var localVarFp = (0, exports.TimedAccessApiFp)(configuration);
+    return {
+        /**
+         * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+         * @summary Create a timed access pass
+         * @param {string} orgId
+         * @param {TimedAccessGrantRequestBody} [timedAccessGrantRequestBody]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        createTimedAccessGrant: function (orgId, timedAccessGrantRequestBody, options) {
+            return localVarFp.createTimedAccessGrant(orgId, timedAccessGrantRequestBody, options).then(function (request) { return request(axios, basePath); });
+        },
+        /**
+         * Returns the authenticated caller\'s active pass for the requested org.
+         * @summary List the caller\'s active timed access pass for an org
+         * @param {string} orgId
+         * @param {ListMyTimedAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listMyTimedAccessGrants: function (orgId, status, options) {
+            return localVarFp.listMyTimedAccessGrants(orgId, status, options).then(function (request) { return request(axios, basePath); });
+        },
+    };
+};
+exports.TimedAccessApiFactory = TimedAccessApiFactory;
+/**
+ * TimedAccessApi - object-oriented interface
+ * @export
+ * @class TimedAccessApi
+ * @extends {BaseAPI}
+ */
+var TimedAccessApi = /** @class */ (function (_super) {
+    __extends(TimedAccessApi, _super);
+    function TimedAccessApi() {
+        return _super !== null && _super.apply(this, arguments) || this;
+    }
+    /**
+     * Grants the authenticated caller temporary Owner access to a single org. Requesting again while a pass is active extends it rather than creating a second one.
+     * @summary Create a timed access pass
+     * @param {string} orgId
+     * @param {TimedAccessGrantRequestBody} [timedAccessGrantRequestBody]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof TimedAccessApi
+     */
+    TimedAccessApi.prototype.createTimedAccessGrant = function (orgId, timedAccessGrantRequestBody, options) {
+        var _this = this;
+        return (0, exports.TimedAccessApiFp)(this.configuration).createTimedAccessGrant(orgId, timedAccessGrantRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    /**
+     * Returns the authenticated caller\'s active pass for the requested org.
+     * @summary List the caller\'s active timed access pass for an org
+     * @param {string} orgId
+     * @param {ListMyTimedAccessGrantsStatusEnum} [status] Only active grants are returned. The caller comes from the auth context
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof TimedAccessApi
+     */
+    TimedAccessApi.prototype.listMyTimedAccessGrants = function (orgId, status, options) {
+        var _this = this;
+        return (0, exports.TimedAccessApiFp)(this.configuration).listMyTimedAccessGrants(orgId, status, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    return TimedAccessApi;
+}(base_1.BaseAPI));
+exports.TimedAccessApi = TimedAccessApi;
+/**
+ * @export
+ */
+exports.ListMyTimedAccessGrantsStatusEnum = {
+    Active: 'active'
+};
 /**
  * UserManagementApi - axios parameter creator
  * @export