@homeflare/distilled-proxmox 0.2.0

package/dist/services/access.d.ts

@@ -0,0 +1,975 @@
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import { type ProxmoxOpError, type ProxmoxOpContext } from "../protocol.ts";
+export type { ProxmoxOpError, ProxmoxOpContext };
+export type CreateAccessDomainRequestMode = "ldap" | "ldaps" | "ldap+starttls";
+export declare const CreateAccessDomainRequestMode: any;
+export type CreateAccessDomainRequestSslversion = "tlsv1" | "tlsv1_1" | "tlsv1_2" | "tlsv1_3";
+export declare const CreateAccessDomainRequestSslversion: any;
+export type CreateAccessDomainRequestType = "ad" | "ldap" | "openid" | "pam" | "pve";
+export declare const CreateAccessDomainRequestType: any;
+export interface CreateAccessDomainRequest {
+    /** Specifies the Authentication Context Class Reference values that theAuthorization Server is being requested to use for the Auth Request. */
+    acr_values?: string;
+    /** A list of audiences that the OpenID Issuer may include that are accepted in addition to 'client-id'. */
+    audiences?: string;
+    /** Automatically create users if they do not exist. */
+    autocreate?: string;
+    /** LDAP base domain name */
+    base_dn?: string;
+    /** LDAP bind domain name */
+    bind_dn?: string;
+    /** Path to the CA certificate store */
+    capath?: string;
+    /** username is case-sensitive */
+    case_sensitive?: string;
+    /** Path to the client certificate */
+    cert?: string;
+    /** Path to the client certificate key */
+    certkey?: string;
+    /** Check bind connection to the server. */
+    check_connection?: string;
+    /** OpenID Client ID */
+    client_id?: string;
+    /** OpenID Client Key */
+    client_key?: string;
+    /** Description. */
+    comment?: string;
+    /** Use this as default realm */
+    default?: string;
+    /** AD domain name */
+    domain?: string;
+    /** LDAP filter for user sync. */
+    filter?: string;
+    /** The objectclasses for groups. */
+    group_classes?: string;
+    /** LDAP base domain name for group sync. If not set, the base_dn will be used. */
+    group_dn?: string;
+    /** LDAP filter for group sync. */
+    group_filter?: string;
+    /** LDAP attribute representing a groups name. If not set or found, the first value of the DN will be used as name. */
+    group_name_attr?: string;
+    /** Automatically create groups if they do not exist. */
+    groups_autocreate?: string;
+    /** OpenID claim used to retrieve groups with. */
+    groups_claim?: string;
+    /** All groups will be overwritten for the user on login. */
+    groups_overwrite?: string;
+    /** OpenID Issuer Url */
+    issuer_url?: string;
+    /** LDAP protocol mode. */
+    mode?: CreateAccessDomainRequestMode | (string & {});
+    /** LDAP bind password. Will be stored in '/etc/pve/priv/realm/<REALM>.pw'. */
+    password?: string;
+    /** Server port. */
+    port?: string;
+    /** Specifies whether the Authorization Server prompts the End-User for reauthentication and consent. */
+    prompt?: string;
+    /** Enables querying the userinfo endpoint for claims values. */
+    query_userinfo?: string;
+    /** Authentication domain ID */
+    realm: string;
+    /** Specifies the scopes (user details) that should be authorized and returned, for example 'email' or 'profile'. */
+    scopes?: string;
+    /** Use secure LDAPS protocol. DEPRECATED: use 'mode' instead. */
+    secure?: string;
+    /** Server IP address (or DNS name) */
+    server1?: string;
+    /** Fallback Server IP address (or DNS name) */
+    server2?: string;
+    /** LDAPS TLS/SSL version. It's not recommended to use version older than 1.2! */
+    sslversion?: CreateAccessDomainRequestSslversion | (string & {});
+    /** The default options for behavior of synchronizations. */
+    sync_defaults_options?: string;
+    /** Comma separated list of key=value pairs for specifying which LDAP attributes map to which PVE user field. For example, to map the LDAP attribute 'mail' to PVEs 'email', write 'email=mail'. By default, each PVE user field is represented by an LDAP attribute of the same name. */
+    sync_attributes?: string;
+    /** Use Two-factor authentication. */
+    tfa?: string;
+    /** Realm type. */
+    type: CreateAccessDomainRequestType | (string & {});
+    /** LDAP user attribute name */
+    user_attr?: string;
+    /** The objectclasses for users. */
+    user_classes?: string;
+    /** OpenID claim used to generate the unique username. */
+    username_claim?: string;
+    /** Verify the server's SSL certificate */
+    verify?: string;
+}
+export declare const CreateAccessDomainRequest: S.Schema<CreateAccessDomainRequest>;
+export interface CreateAccessDomainResponse {
+}
+export declare const CreateAccessDomainResponse: S.Schema<CreateAccessDomainResponse>;
+export interface CreateAccessGroupRequest {
+    comment?: string;
+    groupid: string;
+}
+export declare const CreateAccessGroupRequest: S.Schema<CreateAccessGroupRequest>;
+export interface CreateAccessGroupResponse {
+}
+export declare const CreateAccessGroupResponse: S.Schema<CreateAccessGroupResponse>;
+export interface CreateAccessOpenidAuthUrlRequest {
+    /** Authentication domain ID */
+    realm: string;
+    /** Redirection Url. The client should set this to the used server url (location.origin). */
+    redirect_url: string;
+}
+export declare const CreateAccessOpenidAuthUrlRequest: S.Schema<CreateAccessOpenidAuthUrlRequest>;
+export type CreateAccessOpenidAuthUrlResponse = string;
+export declare const CreateAccessOpenidAuthUrlResponse: S.Schema<CreateAccessOpenidAuthUrlResponse>;
+export interface CreateAccessRoleRequest {
+    privs?: string;
+    roleid: string;
+}
+export declare const CreateAccessRoleRequest: S.Schema<CreateAccessRoleRequest>;
+export interface CreateAccessRoleResponse {
+}
+export declare const CreateAccessRoleResponse: S.Schema<CreateAccessRoleResponse>;
+export interface CreateAccessTicketRequest {
+    /** This parameter is now ignored and assumed to be 1. */
+    new_format?: string;
+    /** One-time password for Two-factor authentication. */
+    otp?: string;
+    /** The secret password. This can also be a valid ticket. */
+    password: string;
+    /** Verify ticket, and check if user have access 'privs' on 'path' */
+    path?: string;
+    /** Verify ticket, and check if user have access 'privs' on 'path' */
+    privs?: string;
+    /** You can optionally pass the realm using this parameter. Normally the realm is simply added to the username <username>@<realm>. */
+    realm?: string;
+    /** The signed TFA challenge string the user wants to respond to. */
+    tfa_challenge?: string;
+    /** User name */
+    username: string;
+}
+export declare const CreateAccessTicketRequest: S.Schema<CreateAccessTicketRequest>;
+export interface CreateAccessTicketResponse {
+    CSRFPreventionToken?: string;
+    clustername?: string;
+    ticket?: string;
+    username: string;
+}
+export declare const CreateAccessTicketResponse: S.Schema<CreateAccessTicketResponse>;
+export interface CreateAccessUserRequest {
+    comment?: string;
+    email?: string;
+    /** Enable the account (default). You can set this to '0' to disable the account */
+    enable?: string;
+    /** Account expiration date (seconds since epoch). '0' means no expiration date. */
+    expire?: string;
+    firstname?: string;
+    groups?: string;
+    /** Keys for two factor auth (yubico). */
+    keys?: string;
+    lastname?: string;
+    /** Initial password. */
+    password?: string;
+    /** Full User ID, in the `name@realm` format. */
+    userid: string;
+}
+export declare const CreateAccessUserRequest: S.Schema<CreateAccessUserRequest>;
+export interface CreateAccessUserResponse {
+}
+export declare const CreateAccessUserResponse: S.Schema<CreateAccessUserResponse>;
+export interface CreateAccessVncticketRequest {
+    /** UserId or token */
+    authid: string;
+    /** Verify ticket, and check if user have access 'privs' on 'path' */
+    path: string;
+    /** Verify that the ticket is valid for this port. */
+    port?: string;
+    /** Verify ticket, and check if user have access 'privs' on 'path' */
+    privs: string;
+    /** The VNC ticket. */
+    vncticket: string;
+}
+export declare const CreateAccessVncticketRequest: S.Schema<CreateAccessVncticketRequest>;
+export interface CreateAccessVncticketResponse {
+}
+export declare const CreateAccessVncticketResponse: S.Schema<CreateAccessVncticketResponse>;
+export interface DeleteAccessDomainRequest {
+    realm: string;
+}
+export declare const DeleteAccessDomainRequest: S.Schema<DeleteAccessDomainRequest>;
+export interface DeleteAccessDomainResponse {
+}
+export declare const DeleteAccessDomainResponse: S.Schema<DeleteAccessDomainResponse>;
+export interface DeleteAccessGroupRequest {
+    groupid: string;
+}
+export declare const DeleteAccessGroupRequest: S.Schema<DeleteAccessGroupRequest>;
+export interface DeleteAccessGroupResponse {
+}
+export declare const DeleteAccessGroupResponse: S.Schema<DeleteAccessGroupResponse>;
+export interface DeleteAccessRoleRequest {
+    roleid: string;
+}
+export declare const DeleteAccessRoleRequest: S.Schema<DeleteAccessRoleRequest>;
+export interface DeleteAccessRoleResponse {
+}
+export declare const DeleteAccessRoleResponse: S.Schema<DeleteAccessRoleResponse>;
+export interface DeleteAccessTfaRequest {
+    userid: string;
+    id: string;
+    /** The current password of the user performing the change. */
+    password?: string;
+}
+export declare const DeleteAccessTfaRequest: S.Schema<DeleteAccessTfaRequest>;
+export interface DeleteAccessTfaResponse {
+}
+export declare const DeleteAccessTfaResponse: S.Schema<DeleteAccessTfaResponse>;
+export interface DeleteAccessUserRequest {
+    userid: string;
+}
+export declare const DeleteAccessUserRequest: S.Schema<DeleteAccessUserRequest>;
+export interface DeleteAccessUserResponse {
+}
+export declare const DeleteAccessUserResponse: S.Schema<DeleteAccessUserResponse>;
+export interface DeleteAccessUserTokenRequest {
+    userid: string;
+    tokenid: string;
+}
+export declare const DeleteAccessUserTokenRequest: S.Schema<DeleteAccessUserTokenRequest>;
+export interface DeleteAccessUserTokenResponse {
+}
+export declare const DeleteAccessUserTokenResponse: S.Schema<DeleteAccessUserTokenResponse>;
+export interface GetAccessDomainRequest {
+    realm: string;
+}
+export declare const GetAccessDomainRequest: S.Schema<GetAccessDomainRequest>;
+export type GetAccessDomainResponse = unknown;
+export declare const GetAccessDomainResponse: S.Schema<GetAccessDomainResponse>;
+export interface GetAccessGroupRequest {
+    groupid: string;
+}
+export declare const GetAccessGroupRequest: S.Schema<GetAccessGroupRequest>;
+export type GetAccessGroupResponseMembersList = Array<string>;
+export declare const GetAccessGroupResponseMembersList: S.Schema<GetAccessGroupResponseMembersList>;
+export interface GetAccessGroupResponse {
+    comment?: string;
+    members: GetAccessGroupResponseMembersList;
+}
+export declare const GetAccessGroupResponse: S.Schema<GetAccessGroupResponse>;
+export interface GetAccessPermissionsRequest {
+    /** Only dump this specific path, not the whole tree. */
+    path?: string;
+    /** User ID or full API token ID */
+    userid?: string;
+}
+export declare const GetAccessPermissionsRequest: S.Schema<GetAccessPermissionsRequest>;
+export type GetAccessPermissionsResponse = unknown;
+export declare const GetAccessPermissionsResponse: S.Schema<GetAccessPermissionsResponse>;
+export interface GetAccessRoleRequest {
+    roleid: string;
+}
+export declare const GetAccessRoleRequest: S.Schema<GetAccessRoleRequest>;
+export interface GetAccessRoleResponse {
+    Datastore_Allocate?: unknown;
+    Datastore_AllocateSpace?: unknown;
+    Datastore_AllocateTemplate?: unknown;
+    Datastore_Audit?: unknown;
+    Group_Allocate?: unknown;
+    Mapping_Audit?: unknown;
+    Mapping_Modify?: unknown;
+    Mapping_Use?: unknown;
+    Permissions_Modify?: unknown;
+    Pool_Allocate?: unknown;
+    Pool_Audit?: unknown;
+    Realm_Allocate?: unknown;
+    Realm_AllocateUser?: unknown;
+    SDN_Allocate?: unknown;
+    SDN_Audit?: unknown;
+    SDN_Use?: unknown;
+    Sys_AccessNetwork?: unknown;
+    Sys_Audit?: unknown;
+    Sys_Console?: unknown;
+    Sys_Incoming?: unknown;
+    Sys_Modify?: unknown;
+    Sys_PowerMgmt?: unknown;
+    Sys_Syslog?: unknown;
+    User_Modify?: unknown;
+    VM_Allocate?: unknown;
+    VM_Audit?: unknown;
+    VM_Backup?: unknown;
+    VM_Clone?: unknown;
+    VM_Config_CDROM?: unknown;
+    VM_Config_CPU?: unknown;
+    VM_Config_Cloudinit?: unknown;
+    VM_Config_Disk?: unknown;
+    VM_Config_HWType?: unknown;
+    VM_Config_Memory?: unknown;
+    VM_Config_Network?: unknown;
+    VM_Config_Options?: unknown;
+    VM_Console?: unknown;
+    VM_GuestAgent_Audit?: unknown;
+    VM_GuestAgent_FileRead?: unknown;
+    VM_GuestAgent_FileSystemMgmt?: unknown;
+    VM_GuestAgent_FileWrite?: unknown;
+    VM_GuestAgent_Unrestricted?: unknown;
+    VM_Migrate?: unknown;
+    VM_PowerMgmt?: unknown;
+    VM_Replicate?: unknown;
+    VM_Snapshot?: unknown;
+    VM_Snapshot_Rollback?: unknown;
+}
+export declare const GetAccessRoleResponse: S.Schema<GetAccessRoleResponse>;
+export interface GetAccessTfaRequest {
+    userid: string;
+}
+export declare const GetAccessTfaRequest: S.Schema<GetAccessTfaRequest>;
+export type GetAccessTfaResponseBodyItemType = "totp" | "u2f" | "webauthn" | "recovery" | "yubico";
+export declare const GetAccessTfaResponseBodyItemType: any;
+export interface GetAccessTfaResponseBodyItem {
+    created: number;
+    description: string;
+    enable?: unknown;
+    id: string;
+    type: GetAccessTfaResponseBodyItemType;
+}
+export declare const GetAccessTfaResponseBodyItem: S.Schema<GetAccessTfaResponseBodyItem>;
+export type GetAccessTfaResponseBodyList = Array<GetAccessTfaResponseBodyItem>;
+export declare const GetAccessTfaResponseBodyList: S.Schema<GetAccessTfaResponseBodyList>;
+export type GetAccessTfaResponse = GetAccessTfaResponseBodyList;
+export declare const GetAccessTfaResponse: S.Schema<GetAccessTfaResponse>;
+export interface GetAccessTfa2Request {
+    userid: string;
+    id: string;
+}
+export declare const GetAccessTfa2Request: S.Schema<GetAccessTfa2Request>;
+export type GetAccessTfa2ResponseType = "totp" | "u2f" | "webauthn" | "recovery" | "yubico";
+export declare const GetAccessTfa2ResponseType: any;
+export interface GetAccessTfa2Response {
+    created: number;
+    description: string;
+    enable?: unknown;
+    id: string;
+    type: GetAccessTfa2ResponseType;
+}
+export declare const GetAccessTfa2Response: S.Schema<GetAccessTfa2Response>;
+export interface GetAccessTicketRequest {
+}
+export declare const GetAccessTicketRequest: S.Schema<GetAccessTicketRequest>;
+export interface GetAccessTicketResponse {
+}
+export declare const GetAccessTicketResponse: S.Schema<GetAccessTicketResponse>;
+export interface GetAccessUserRequest {
+    userid: string;
+}
+export declare const GetAccessUserRequest: S.Schema<GetAccessUserRequest>;
+export type GetAccessUserResponseGroupsList = Array<string>;
+export declare const GetAccessUserResponseGroupsList: S.Schema<GetAccessUserResponseGroupsList>;
+export interface GetAccessUserResponse {
+    comment?: string;
+    email?: string;
+    enable?: unknown;
+    expire?: number;
+    firstname?: string;
+    groups?: GetAccessUserResponseGroupsList;
+    keys?: string;
+    lastname?: string;
+    tokens?: unknown;
+}
+export declare const GetAccessUserResponse: S.Schema<GetAccessUserResponse>;
+export interface GetAccessUserTfaRequest {
+    userid: string;
+    /** Request all entries as an array. */
+    multiple?: string;
+}
+export declare const GetAccessUserTfaRequest: S.Schema<GetAccessUserTfaRequest>;
+export type GetAccessUserTfaResponseRealm = "oath" | "yubico";
+export declare const GetAccessUserTfaResponseRealm: any;
+export type GetAccessUserTfaResponseTypesItem = "totp" | "u2f" | "yubico" | "webauthn" | "recovedry";
+export declare const GetAccessUserTfaResponseTypesItem: any;
+export type GetAccessUserTfaResponseTypesList = Array<GetAccessUserTfaResponseTypesItem>;
+export declare const GetAccessUserTfaResponseTypesList: S.Schema<GetAccessUserTfaResponseTypesList>;
+export type GetAccessUserTfaResponseUser = "oath" | "u2f";
+export declare const GetAccessUserTfaResponseUser: any;
+export interface GetAccessUserTfaResponse {
+    realm?: GetAccessUserTfaResponseRealm;
+    types?: GetAccessUserTfaResponseTypesList;
+    user?: GetAccessUserTfaResponseUser;
+}
+export declare const GetAccessUserTfaResponse: S.Schema<GetAccessUserTfaResponse>;
+export interface GetAccessUserTokenRequest {
+    userid: string;
+    tokenid: string;
+}
+export declare const GetAccessUserTokenRequest: S.Schema<GetAccessUserTokenRequest>;
+export interface GetAccessUserTokenResponse {
+    comment?: string;
+    expire?: number;
+    privsep?: unknown;
+}
+export declare const GetAccessUserTokenResponse: S.Schema<GetAccessUserTokenResponse>;
+export interface ListAccessRequest {
+}
+export declare const ListAccessRequest: S.Schema<ListAccessRequest>;
+export interface ListAccessResponseBodyItem {
+    subdir: string;
+}
+export declare const ListAccessResponseBodyItem: S.Schema<ListAccessResponseBodyItem>;
+export type ListAccessResponseBodyList = Array<ListAccessResponseBodyItem>;
+export declare const ListAccessResponseBodyList: S.Schema<ListAccessResponseBodyList>;
+export type ListAccessResponse = ListAccessResponseBodyList;
+export declare const ListAccessResponse: S.Schema<ListAccessResponse>;
+export interface ListAccessAclRequest {
+}
+export declare const ListAccessAclRequest: S.Schema<ListAccessAclRequest>;
+export type ListAccessAclResponseBodyItemType = "user" | "group" | "token";
+export declare const ListAccessAclResponseBodyItemType: any;
+export interface ListAccessAclResponseBodyItem {
+    path: string;
+    propagate?: unknown;
+    roleid: string;
+    type: ListAccessAclResponseBodyItemType;
+    ugid: string;
+}
+export declare const ListAccessAclResponseBodyItem: S.Schema<ListAccessAclResponseBodyItem>;
+export type ListAccessAclResponseBodyList = Array<ListAccessAclResponseBodyItem>;
+export declare const ListAccessAclResponseBodyList: S.Schema<ListAccessAclResponseBodyList>;
+export type ListAccessAclResponse = ListAccessAclResponseBodyList;
+export declare const ListAccessAclResponse: S.Schema<ListAccessAclResponse>;
+export interface ListAccessDomainsRequest {
+}
+export declare const ListAccessDomainsRequest: S.Schema<ListAccessDomainsRequest>;
+export type ListAccessDomainsResponseBodyItemTfa = "yubico" | "oath";
+export declare const ListAccessDomainsResponseBodyItemTfa: any;
+export interface ListAccessDomainsResponseBodyItem {
+    comment?: string;
+    realm: string;
+    tfa?: ListAccessDomainsResponseBodyItemTfa;
+    type: string;
+}
+export declare const ListAccessDomainsResponseBodyItem: S.Schema<ListAccessDomainsResponseBodyItem>;
+export type ListAccessDomainsResponseBodyList = Array<ListAccessDomainsResponseBodyItem>;
+export declare const ListAccessDomainsResponseBodyList: S.Schema<ListAccessDomainsResponseBodyList>;
+export type ListAccessDomainsResponse = ListAccessDomainsResponseBodyList;
+export declare const ListAccessDomainsResponse: S.Schema<ListAccessDomainsResponse>;
+export interface ListAccessGroupsRequest {
+}
+export declare const ListAccessGroupsRequest: S.Schema<ListAccessGroupsRequest>;
+export interface ListAccessGroupsResponseBodyItem {
+    comment?: string;
+    groupid: string;
+    users?: string;
+}
+export declare const ListAccessGroupsResponseBodyItem: S.Schema<ListAccessGroupsResponseBodyItem>;
+export type ListAccessGroupsResponseBodyList = Array<ListAccessGroupsResponseBodyItem>;
+export declare const ListAccessGroupsResponseBodyList: S.Schema<ListAccessGroupsResponseBodyList>;
+export type ListAccessGroupsResponse = ListAccessGroupsResponseBodyList;
+export declare const ListAccessGroupsResponse: S.Schema<ListAccessGroupsResponse>;
+export interface ListAccessOpenidRequest {
+}
+export declare const ListAccessOpenidRequest: S.Schema<ListAccessOpenidRequest>;
+export type ListAccessOpenidResponseBodyItem = ListAccessResponseBodyItem;
+export declare const ListAccessOpenidResponseBodyItem: S.Schema<ListAccessResponseBodyItem>;
+export type ListAccessOpenidResponseBodyList = Array<ListAccessResponseBodyItem>;
+export declare const ListAccessOpenidResponseBodyList: S.Schema<ListAccessOpenidResponseBodyList>;
+export type ListAccessOpenidResponse = ListAccessOpenidResponseBodyList;
+export declare const ListAccessOpenidResponse: S.Schema<ListAccessOpenidResponse>;
+export interface ListAccessRolesRequest {
+}
+export declare const ListAccessRolesRequest: S.Schema<ListAccessRolesRequest>;
+export interface ListAccessRolesResponseBodyItem {
+    privs?: string;
+    roleid: string;
+    special?: unknown;
+}
+export declare const ListAccessRolesResponseBodyItem: S.Schema<ListAccessRolesResponseBodyItem>;
+export type ListAccessRolesResponseBodyList = Array<ListAccessRolesResponseBodyItem>;
+export declare const ListAccessRolesResponseBodyList: S.Schema<ListAccessRolesResponseBodyList>;
+export type ListAccessRolesResponse = ListAccessRolesResponseBodyList;
+export declare const ListAccessRolesResponse: S.Schema<ListAccessRolesResponse>;
+export interface ListAccessTfaRequest {
+}
+export declare const ListAccessTfaRequest: S.Schema<ListAccessTfaRequest>;
+export type ListAccessTfaResponseBodyItemEntriesItemType = "totp" | "u2f" | "webauthn" | "recovery" | "yubico";
+export declare const ListAccessTfaResponseBodyItemEntriesItemType: any;
+export interface ListAccessTfaResponseBodyItemEntriesItem {
+    created: number;
+    description: string;
+    enable?: unknown;
+    id: string;
+    type: ListAccessTfaResponseBodyItemEntriesItemType;
+}
+export declare const ListAccessTfaResponseBodyItemEntriesItem: S.Schema<ListAccessTfaResponseBodyItemEntriesItem>;
+export type ListAccessTfaResponseBodyItemEntriesList = Array<ListAccessTfaResponseBodyItemEntriesItem>;
+export declare const ListAccessTfaResponseBodyItemEntriesList: S.Schema<ListAccessTfaResponseBodyItemEntriesList>;
+export interface ListAccessTfaResponseBodyItem {
+    entries: ListAccessTfaResponseBodyItemEntriesList;
+    tfa_locked_until?: number;
+    totp_locked?: unknown;
+    userid: string;
+}
+export declare const ListAccessTfaResponseBodyItem: S.Schema<ListAccessTfaResponseBodyItem>;
+export type ListAccessTfaResponseBodyList = Array<ListAccessTfaResponseBodyItem>;
+export declare const ListAccessTfaResponseBodyList: S.Schema<ListAccessTfaResponseBodyList>;
+export type ListAccessTfaResponse = ListAccessTfaResponseBodyList;
+export declare const ListAccessTfaResponse: S.Schema<ListAccessTfaResponse>;
+export interface ListAccessUsersRequest {
+    /** Optional filter for enable property. */
+    enabled?: string;
+    /** Include group and token information. */
+    full?: string;
+}
+export declare const ListAccessUsersRequest: S.Schema<ListAccessUsersRequest>;
+export interface ListAccessUsersResponseBodyItemTokensItem {
+    comment?: string;
+    expire?: number;
+    privsep?: unknown;
+    tokenid: string;
+}
+export declare const ListAccessUsersResponseBodyItemTokensItem: S.Schema<ListAccessUsersResponseBodyItemTokensItem>;
+export type ListAccessUsersResponseBodyItemTokensList = Array<ListAccessUsersResponseBodyItemTokensItem>;
+export declare const ListAccessUsersResponseBodyItemTokensList: S.Schema<ListAccessUsersResponseBodyItemTokensList>;
+export interface ListAccessUsersResponseBodyItem {
+    comment?: string;
+    email?: string;
+    enable?: unknown;
+    expire?: number;
+    firstname?: string;
+    groups?: string;
+    keys?: string;
+    lastname?: string;
+    realm_type?: string;
+    tfa_locked_until?: number;
+    tokens?: ListAccessUsersResponseBodyItemTokensList;
+    totp_locked?: unknown;
+    userid: string;
+}
+export declare const ListAccessUsersResponseBodyItem: S.Schema<ListAccessUsersResponseBodyItem>;
+export type ListAccessUsersResponseBodyList = Array<ListAccessUsersResponseBodyItem>;
+export declare const ListAccessUsersResponseBodyList: S.Schema<ListAccessUsersResponseBodyList>;
+export type ListAccessUsersResponse = ListAccessUsersResponseBodyList;
+export declare const ListAccessUsersResponse: S.Schema<ListAccessUsersResponse>;
+export interface ListAccessUserTokenRequest {
+    userid: string;
+}
+export declare const ListAccessUserTokenRequest: S.Schema<ListAccessUserTokenRequest>;
+export type ListAccessUserTokenResponseBodyItem = ListAccessUsersResponseBodyItemTokensItem;
+export declare const ListAccessUserTokenResponseBodyItem: S.Schema<ListAccessUsersResponseBodyItemTokensItem>;
+export type ListAccessUserTokenResponseBodyList = Array<ListAccessUsersResponseBodyItemTokensItem>;
+export declare const ListAccessUserTokenResponseBodyList: S.Schema<ListAccessUserTokenResponseBodyList>;
+export type ListAccessUserTokenResponse = ListAccessUserTokenResponseBodyList;
+export declare const ListAccessUserTokenResponse: S.Schema<ListAccessUserTokenResponse>;
+export interface LoginAccessOpenidRequest {
+    /** OpenId authorization code. */
+    code: string;
+    /** Redirection Url. The client should set this to the used server url (location.origin). */
+    redirect_url: string;
+    /** OpenId state. */
+    state: string;
+}
+export declare const LoginAccessOpenidRequest: S.Schema<LoginAccessOpenidRequest>;
+export type LoginAccessOpenidResponse = unknown;
+export declare const LoginAccessOpenidResponse: S.Schema<LoginAccessOpenidResponse>;
+export interface PutAccessAclRequest {
+    /** Remove permissions (instead of adding it). */
+    delete?: string;
+    /** List of groups. */
+    groups?: string;
+    /** Access control path */
+    path: string;
+    /** Allow to propagate (inherit) permissions. */
+    propagate?: string;
+    /** List of roles. */
+    roles: string;
+    /** List of API tokens. */
+    tokens?: string;
+    /** List of users. */
+    users?: string;
+}
+export declare const PutAccessAclRequest: S.Schema<PutAccessAclRequest>;
+export interface PutAccessAclResponse {
+}
+export declare const PutAccessAclResponse: S.Schema<PutAccessAclResponse>;
+export type PutAccessDomainRequestMode = "ldap" | "ldaps" | "ldap+starttls";
+export declare const PutAccessDomainRequestMode: any;
+export type PutAccessDomainRequestSslversion = "tlsv1" | "tlsv1_1" | "tlsv1_2" | "tlsv1_3";
+export declare const PutAccessDomainRequestSslversion: any;
+export interface PutAccessDomainRequest {
+    realm: string;
+    /** Specifies the Authentication Context Class Reference values that theAuthorization Server is being requested to use for the Auth Request. */
+    acr_values?: string;
+    /** A list of audiences that the OpenID Issuer may include that are accepted in addition to 'client-id'. */
+    audiences?: string;
+    /** Automatically create users if they do not exist. */
+    autocreate?: string;
+    /** LDAP base domain name */
+    base_dn?: string;
+    /** LDAP bind domain name */
+    bind_dn?: string;
+    /** Path to the CA certificate store */
+    capath?: string;
+    /** username is case-sensitive */
+    case_sensitive?: string;
+    /** Path to the client certificate */
+    cert?: string;
+    /** Path to the client certificate key */
+    certkey?: string;
+    /** Check bind connection to the server. */
+    check_connection?: string;
+    /** OpenID Client ID */
+    client_id?: string;
+    /** OpenID Client Key */
+    client_key?: string;
+    /** Description. */
+    comment?: string;
+    /** Use this as default realm */
+    default?: string;
+    /** A list of settings you want to delete. */
+    delete?: string;
+    /** Prevent changes if current configuration file has a different digest. This can be used to prevent concurrent modifications. */
+    digest?: string;
+    /** AD domain name */
+    domain?: string;
+    /** LDAP filter for user sync. */
+    filter?: string;
+    /** The objectclasses for groups. */
+    group_classes?: string;
+    /** LDAP base domain name for group sync. If not set, the base_dn will be used. */
+    group_dn?: string;
+    /** LDAP filter for group sync. */
+    group_filter?: string;
+    /** LDAP attribute representing a groups name. If not set or found, the first value of the DN will be used as name. */
+    group_name_attr?: string;
+    /** Automatically create groups if they do not exist. */
+    groups_autocreate?: string;
+    /** OpenID claim used to retrieve groups with. */
+    groups_claim?: string;
+    /** All groups will be overwritten for the user on login. */
+    groups_overwrite?: string;
+    /** OpenID Issuer Url */
+    issuer_url?: string;
+    /** LDAP protocol mode. */
+    mode?: PutAccessDomainRequestMode | (string & {});
+    /** LDAP bind password. Will be stored in '/etc/pve/priv/realm/<REALM>.pw'. */
+    password?: string;
+    /** Server port. */
+    port?: string;
+    /** Specifies whether the Authorization Server prompts the End-User for reauthentication and consent. */
+    prompt?: string;
+    /** Enables querying the userinfo endpoint for claims values. */
+    query_userinfo?: string;
+    /** Specifies the scopes (user details) that should be authorized and returned, for example 'email' or 'profile'. */
+    scopes?: string;
+    /** Use secure LDAPS protocol. DEPRECATED: use 'mode' instead. */
+    secure?: string;
+    /** Server IP address (or DNS name) */
+    server1?: string;
+    /** Fallback Server IP address (or DNS name) */
+    server2?: string;
+    /** LDAPS TLS/SSL version. It's not recommended to use version older than 1.2! */
+    sslversion?: PutAccessDomainRequestSslversion | (string & {});
+    /** The default options for behavior of synchronizations. */
+    sync_defaults_options?: string;
+    /** Comma separated list of key=value pairs for specifying which LDAP attributes map to which PVE user field. For example, to map the LDAP attribute 'mail' to PVEs 'email', write 'email=mail'. By default, each PVE user field is represented by an LDAP attribute of the same name. */
+    sync_attributes?: string;
+    /** Use Two-factor authentication. */
+    tfa?: string;
+    /** LDAP user attribute name */
+    user_attr?: string;
+    /** The objectclasses for users. */
+    user_classes?: string;
+    /** Verify the server's SSL certificate */
+    verify?: string;
+}
+export declare const PutAccessDomainRequest: S.Schema<PutAccessDomainRequest>;
+export interface PutAccessDomainResponse {
+}
+export declare const PutAccessDomainResponse: S.Schema<PutAccessDomainResponse>;
+export interface PutAccessGroupRequest {
+    groupid: string;
+    comment?: string;
+}
+export declare const PutAccessGroupRequest: S.Schema<PutAccessGroupRequest>;
+export interface PutAccessGroupResponse {
+}
+export declare const PutAccessGroupResponse: S.Schema<PutAccessGroupResponse>;
+export interface PutAccessPasswordRequest {
+    /** The current password of the user performing the change. */
+    confirmation_password?: string;
+    /** The new password. */
+    password: string;
+    /** Full User ID, in the `name@realm` format. */
+    userid: string;
+}
+export declare const PutAccessPasswordRequest: S.Schema<PutAccessPasswordRequest>;
+export interface PutAccessPasswordResponse {
+}
+export declare const PutAccessPasswordResponse: S.Schema<PutAccessPasswordResponse>;
+export interface PutAccessRoleRequest {
+    roleid: string;
+    append?: string;
+    privs?: string;
+}
+export declare const PutAccessRoleRequest: S.Schema<PutAccessRoleRequest>;
+export interface PutAccessRoleResponse {
+}
+export declare const PutAccessRoleResponse: S.Schema<PutAccessRoleResponse>;
+export interface PutAccessTfaRequest {
+    userid: string;
+    id: string;
+    /** A description to distinguish multiple entries from one another */
+    description?: string;
+    /** Whether the entry should be enabled for login. */
+    enable?: string;
+    /** The current password of the user performing the change. */
+    password?: string;
+}
+export declare const PutAccessTfaRequest: S.Schema<PutAccessTfaRequest>;
+export interface PutAccessTfaResponse {
+}
+export declare const PutAccessTfaResponse: S.Schema<PutAccessTfaResponse>;
+export interface PutAccessUserRequest {
+    userid: string;
+    append?: string;
+    comment?: string;
+    email?: string;
+    /** Enable the account (default). You can set this to '0' to disable the account */
+    enable?: string;
+    /** Account expiration date (seconds since epoch). '0' means no expiration date. */
+    expire?: string;
+    firstname?: string;
+    groups?: string;
+    /** Keys for two factor auth (yubico). */
+    keys?: string;
+    lastname?: string;
+}
+export declare const PutAccessUserRequest: S.Schema<PutAccessUserRequest>;
+export interface PutAccessUserResponse {
+}
+export declare const PutAccessUserResponse: S.Schema<PutAccessUserResponse>;
+export interface PutAccessUserTokenRequest {
+    userid: string;
+    tokenid: string;
+    comment?: string;
+    /** A list of settings you want to delete. */
+    delete?: string;
+    /** API token expiration date (seconds since epoch). '0' means no expiration date. */
+    expire?: string;
+    /** Restrict API token privileges with separate ACLs (default), or give full privileges of corresponding user. */
+    privsep?: string;
+    /** Regenerate the token's secret value. All users of the previous secret will lose access after this operation. */
+    regenerate?: string;
+}
+export declare const PutAccessUserTokenRequest: S.Schema<PutAccessUserTokenRequest>;
+export interface PutAccessUserTokenResponse {
+    comment?: string;
+    expire?: number;
+    full_tokenid?: string;
+    privsep?: unknown;
+    value?: string;
+}
+export declare const PutAccessUserTokenResponse: S.Schema<PutAccessUserTokenResponse>;
+export interface PutAccessUserUnlockTfaRequest {
+    userid: string;
+}
+export declare const PutAccessUserUnlockTfaRequest: S.Schema<PutAccessUserUnlockTfaRequest>;
+export type PutAccessUserUnlockTfaResponse = unknown;
+export declare const PutAccessUserUnlockTfaResponse: S.Schema<PutAccessUserUnlockTfaResponse>;
+export type SyncAccessDomainRequestScope = "users" | "groups" | "both";
+export declare const SyncAccessDomainRequestScope: any;
+export interface SyncAccessDomainRequest {
+    realm: string;
+    /** If set, does not write anything. */
+    dry_run?: string;
+    /** Enable newly synced users immediately. */
+    enable_new: string;
+    /** DEPRECATED: use 'remove-vanished' instead. If set, uses the LDAP Directory as source of truth, deleting users or groups not returned from the sync and removing all locally modified properties of synced users. If not set, only syncs information which is present in the synced data, and does not delete or modify anything else. */
+    full: string;
+    /** DEPRECATED: use 'remove-vanished' instead. Remove ACLs for users or groups which were removed from the config during a sync. */
+    purge: string;
+    /** A semicolon-separated list of things to remove when they or the user vanishes during a sync. The following values are possible: 'entry' removes the user/group when not returned from the sync. 'properties' removes the set properties on existing user/group that do not appear in the source (even custom ones). 'acl' removes acls when the user/group is not returned from the sync. Instead of a list it also can be 'none' (the default). */
+    remove_vanished: string;
+    /** Select what to sync. */
+    scope: SyncAccessDomainRequestScope | (string & {});
+}
+export declare const SyncAccessDomainRequest: S.Schema<SyncAccessDomainRequest>;
+export type SyncAccessDomainResponse = string;
+export declare const SyncAccessDomainResponse: S.Schema<SyncAccessDomainResponse>;
+export type UpdateAccessTfaRequestType = "totp" | "u2f" | "webauthn" | "recovery" | "yubico";
+export declare const UpdateAccessTfaRequestType: any;
+export interface UpdateAccessTfaRequest {
+    userid: string;
+    /** When responding to a u2f challenge: the original challenge string */
+    challenge?: string;
+    /** A description to distinguish multiple entries from one another */
+    description?: string;
+    /** The current password of the user performing the change. */
+    password?: string;
+    /** A totp URI. */
+    totp?: string;
+    /** TFA Entry Type. */
+    type: UpdateAccessTfaRequestType | (string & {});
+    /** The current value for the provided totp URI, or a Webauthn/U2F challenge response */
+    value?: string;
+}
+export declare const UpdateAccessTfaRequest: S.Schema<UpdateAccessTfaRequest>;
+export type UpdateAccessTfaResponseRecoveryList = Array<string>;
+export declare const UpdateAccessTfaResponseRecoveryList: S.Schema<UpdateAccessTfaResponseRecoveryList>;
+export interface UpdateAccessTfaResponse {
+    challenge?: string;
+    id: string;
+    recovery?: UpdateAccessTfaResponseRecoveryList;
+}
+export declare const UpdateAccessTfaResponse: S.Schema<UpdateAccessTfaResponse>;
+export interface UpdateAccessUserTokenRequest {
+    userid: string;
+    tokenid: string;
+    comment?: string;
+    /** API token expiration date (seconds since epoch). '0' means no expiration date. */
+    expire?: string;
+    /** Restrict API token privileges with separate ACLs (default), or give full privileges of corresponding user. */
+    privsep?: string;
+}
+export declare const UpdateAccessUserTokenRequest: S.Schema<UpdateAccessUserTokenRequest>;
+export interface UpdateAccessUserTokenResponseInfo {
+    comment?: string;
+    expire?: number;
+    privsep?: unknown;
+}
+export declare const UpdateAccessUserTokenResponseInfo: S.Schema<UpdateAccessUserTokenResponseInfo>;
+export interface UpdateAccessUserTokenResponse {
+    full_tokenid?: string;
+    info: UpdateAccessUserTokenResponseInfo;
+    value: string;
+}
+export declare const UpdateAccessUserTokenResponse: S.Schema<UpdateAccessUserTokenResponse>;
+export type CreateAccessDomainError = ProxmoxOpError;
+/** Add an authentication server. (root-privileged endpoint) */
+export declare const createAccessDomain: API.OperationMethod<CreateAccessDomainRequest, CreateAccessDomainResponse, CreateAccessDomainError, ProxmoxOpContext>;
+export type CreateAccessGroupError = ProxmoxOpError;
+/** Create new group. (root-privileged endpoint) */
+export declare const createAccessGroup: API.OperationMethod<CreateAccessGroupRequest, CreateAccessGroupResponse, CreateAccessGroupError, ProxmoxOpContext>;
+export type CreateAccessOpenidAuthUrlError = ProxmoxOpError;
+/** Get the OpenId Authorization Url for the specified realm. (root-privileged endpoint) */
+export declare const createAccessOpenidAuthUrl: API.OperationMethod<CreateAccessOpenidAuthUrlRequest, CreateAccessOpenidAuthUrlResponse, CreateAccessOpenidAuthUrlError, ProxmoxOpContext>;
+export type CreateAccessRoleError = ProxmoxOpError;
+/** Create new role. (root-privileged endpoint) */
+export declare const createAccessRole: API.OperationMethod<CreateAccessRoleRequest, CreateAccessRoleResponse, CreateAccessRoleError, ProxmoxOpContext>;
+export type CreateAccessTicketError = ProxmoxOpError;
+/** Create or verify authentication ticket. (root-privileged endpoint) */
+export declare const createAccessTicket: API.OperationMethod<CreateAccessTicketRequest, CreateAccessTicketResponse, CreateAccessTicketError, ProxmoxOpContext>;
+export type CreateAccessUserError = ProxmoxOpError;
+/** Create new user. (root-privileged endpoint) */
+export declare const createAccessUser: API.OperationMethod<CreateAccessUserRequest, CreateAccessUserResponse, CreateAccessUserError, ProxmoxOpContext>;
+export type CreateAccessVncticketError = ProxmoxOpError;
+/** verify VNC authentication ticket. (root-privileged endpoint) */
+export declare const createAccessVncticket: API.OperationMethod<CreateAccessVncticketRequest, CreateAccessVncticketResponse, CreateAccessVncticketError, ProxmoxOpContext>;
+export type DeleteAccessDomainError = ProxmoxOpError;
+/** Delete an authentication server. (root-privileged endpoint) */
+export declare const deleteAccessDomain: API.OperationMethod<DeleteAccessDomainRequest, DeleteAccessDomainResponse, DeleteAccessDomainError, ProxmoxOpContext>;
+export type DeleteAccessGroupError = ProxmoxOpError;
+/** Delete group. (root-privileged endpoint) */
+export declare const deleteAccessGroup: API.OperationMethod<DeleteAccessGroupRequest, DeleteAccessGroupResponse, DeleteAccessGroupError, ProxmoxOpContext>;
+export type DeleteAccessRoleError = ProxmoxOpError;
+/** Delete role. (root-privileged endpoint) */
+export declare const deleteAccessRole: API.OperationMethod<DeleteAccessRoleRequest, DeleteAccessRoleResponse, DeleteAccessRoleError, ProxmoxOpContext>;
+export type DeleteAccessTfaError = ProxmoxOpError;
+/** Delete a TFA entry by ID. (root-privileged endpoint) */
+export declare const deleteAccessTfa: API.OperationMethod<DeleteAccessTfaRequest, DeleteAccessTfaResponse, DeleteAccessTfaError, ProxmoxOpContext>;
+export type DeleteAccessUserError = ProxmoxOpError;
+/** Delete user. (root-privileged endpoint) */
+export declare const deleteAccessUser: API.OperationMethod<DeleteAccessUserRequest, DeleteAccessUserResponse, DeleteAccessUserError, ProxmoxOpContext>;
+export type DeleteAccessUserTokenError = ProxmoxOpError;
+/** Remove API token for a specific user. (root-privileged endpoint) */
+export declare const deleteAccessUserToken: API.OperationMethod<DeleteAccessUserTokenRequest, DeleteAccessUserTokenResponse, DeleteAccessUserTokenError, ProxmoxOpContext>;
+export type GetAccessDomainError = ProxmoxOpError;
+/** Get auth server configuration. */
+export declare const getAccessDomain: API.OperationMethod<GetAccessDomainRequest, GetAccessDomainResponse, GetAccessDomainError, ProxmoxOpContext>;
+export type GetAccessGroupError = ProxmoxOpError;
+/** Get group configuration. */
+export declare const getAccessGroup: API.OperationMethod<GetAccessGroupRequest, GetAccessGroupResponse, GetAccessGroupError, ProxmoxOpContext>;
+export type GetAccessPermissionsError = ProxmoxOpError;
+/** Retrieve effective permissions of given user/token. */
+export declare const getAccessPermissions: API.OperationMethod<GetAccessPermissionsRequest, GetAccessPermissionsResponse, GetAccessPermissionsError, ProxmoxOpContext>;
+export type GetAccessRoleError = ProxmoxOpError;
+/** Get role configuration. */
+export declare const getAccessRole: API.OperationMethod<GetAccessRoleRequest, GetAccessRoleResponse, GetAccessRoleError, ProxmoxOpContext>;
+export type GetAccessTfaError = ProxmoxOpError;
+/** List TFA configurations of users. (root-privileged endpoint) */
+export declare const getAccessTfa: API.OperationMethod<GetAccessTfaRequest, GetAccessTfaResponse, GetAccessTfaError, ProxmoxOpContext>;
+export type GetAccessTfa2Error = ProxmoxOpError;
+/** Fetch a requested TFA entry if present. (root-privileged endpoint) */
+export declare const getAccessTfa2: API.OperationMethod<GetAccessTfa2Request, GetAccessTfa2Response, GetAccessTfa2Error, ProxmoxOpContext>;
+export type GetAccessTicketError = ProxmoxOpError;
+/** Dummy. Useful for formatters which want to provide a login page. */
+export declare const getAccessTicket: API.OperationMethod<GetAccessTicketRequest, GetAccessTicketResponse, GetAccessTicketError, ProxmoxOpContext>;
+export type GetAccessUserError = ProxmoxOpError;
+/** Get user configuration. */
+export declare const getAccessUser: API.OperationMethod<GetAccessUserRequest, GetAccessUserResponse, GetAccessUserError, ProxmoxOpContext>;
+export type GetAccessUserTfaError = ProxmoxOpError;
+/** Get user TFA types (Personal and Realm). (root-privileged endpoint) */
+export declare const getAccessUserTfa: API.OperationMethod<GetAccessUserTfaRequest, GetAccessUserTfaResponse, GetAccessUserTfaError, ProxmoxOpContext>;
+export type GetAccessUserTokenError = ProxmoxOpError;
+/** Get specific API token information. */
+export declare const getAccessUserToken: API.OperationMethod<GetAccessUserTokenRequest, GetAccessUserTokenResponse, GetAccessUserTokenError, ProxmoxOpContext>;
+export type ListAccessError = ProxmoxOpError;
+/** Directory index. */
+export declare const listAccess: API.OperationMethod<ListAccessRequest, ListAccessResponse, ListAccessError, ProxmoxOpContext>;
+export type ListAccessAclError = ProxmoxOpError;
+/** Get Access Control List (ACLs). */
+export declare const listAccessAcl: API.OperationMethod<ListAccessAclRequest, ListAccessAclResponse, ListAccessAclError, ProxmoxOpContext>;
+export type ListAccessDomainsError = ProxmoxOpError;
+/** Authentication domain index. */
+export declare const listAccessDomains: API.OperationMethod<ListAccessDomainsRequest, ListAccessDomainsResponse, ListAccessDomainsError, ProxmoxOpContext>;
+export type ListAccessGroupsError = ProxmoxOpError;
+/** Group index. */
+export declare const listAccessGroups: API.OperationMethod<ListAccessGroupsRequest, ListAccessGroupsResponse, ListAccessGroupsError, ProxmoxOpContext>;
+export type ListAccessOpenidError = ProxmoxOpError;
+/** Directory index. */
+export declare const listAccessOpenid: API.OperationMethod<ListAccessOpenidRequest, ListAccessOpenidResponse, ListAccessOpenidError, ProxmoxOpContext>;
+export type ListAccessRolesError = ProxmoxOpError;
+/** Role index. */
+export declare const listAccessRoles: API.OperationMethod<ListAccessRolesRequest, ListAccessRolesResponse, ListAccessRolesError, ProxmoxOpContext>;
+export type ListAccessTfaError = ProxmoxOpError;
+/** List TFA configurations of users. (root-privileged endpoint) */
+export declare const listAccessTfa: API.OperationMethod<ListAccessTfaRequest, ListAccessTfaResponse, ListAccessTfaError, ProxmoxOpContext>;
+export type ListAccessUsersError = ProxmoxOpError;
+/** User index. (root-privileged endpoint) */
+export declare const listAccessUsers: API.OperationMethod<ListAccessUsersRequest, ListAccessUsersResponse, ListAccessUsersError, ProxmoxOpContext>;
+export type ListAccessUserTokenError = ProxmoxOpError;
+/** Get user API tokens. */
+export declare const listAccessUserToken: API.OperationMethod<ListAccessUserTokenRequest, ListAccessUserTokenResponse, ListAccessUserTokenError, ProxmoxOpContext>;
+export type LoginAccessOpenidError = ProxmoxOpError;
+/** Verify OpenID authorization code and create a ticket. (root-privileged endpoint) */
+export declare const loginAccessOpenid: API.OperationMethod<LoginAccessOpenidRequest, LoginAccessOpenidResponse, LoginAccessOpenidError, ProxmoxOpContext>;
+export type PutAccessAclError = ProxmoxOpError;
+/** Update Access Control List (add or remove permissions). (root-privileged endpoint) */
+export declare const putAccessAcl: API.OperationMethod<PutAccessAclRequest, PutAccessAclResponse, PutAccessAclError, ProxmoxOpContext>;
+export type PutAccessDomainError = ProxmoxOpError;
+/** Update authentication server settings. (root-privileged endpoint) */
+export declare const putAccessDomain: API.OperationMethod<PutAccessDomainRequest, PutAccessDomainResponse, PutAccessDomainError, ProxmoxOpContext>;
+export type PutAccessGroupError = ProxmoxOpError;
+/** Update group data. (root-privileged endpoint) */
+export declare const putAccessGroup: API.OperationMethod<PutAccessGroupRequest, PutAccessGroupResponse, PutAccessGroupError, ProxmoxOpContext>;
+export type PutAccessPasswordError = ProxmoxOpError;
+/** Change user password. (root-privileged endpoint) */
+export declare const putAccessPassword: API.OperationMethod<PutAccessPasswordRequest, PutAccessPasswordResponse, PutAccessPasswordError, ProxmoxOpContext>;
+export type PutAccessRoleError = ProxmoxOpError;
+/** Update an existing role. (root-privileged endpoint) */
+export declare const putAccessRole: API.OperationMethod<PutAccessRoleRequest, PutAccessRoleResponse, PutAccessRoleError, ProxmoxOpContext>;
+export type PutAccessTfaError = ProxmoxOpError;
+/** Add a TFA entry for a user. (root-privileged endpoint) */
+export declare const putAccessTfa: API.OperationMethod<PutAccessTfaRequest, PutAccessTfaResponse, PutAccessTfaError, ProxmoxOpContext>;
+export type PutAccessUserError = ProxmoxOpError;
+/** Update user configuration. (root-privileged endpoint) */
+export declare const putAccessUser: API.OperationMethod<PutAccessUserRequest, PutAccessUserResponse, PutAccessUserError, ProxmoxOpContext>;
+export type PutAccessUserTokenError = ProxmoxOpError;
+/** Update API token for a specific user. NOTE: when 'regenerate' is set, the returned token value needs to be stored as it cannot be retrieved afterwards! (root-privileged endpoint) */
+export declare const putAccessUserToken: API.OperationMethod<PutAccessUserTokenRequest, PutAccessUserTokenResponse, PutAccessUserTokenError, ProxmoxOpContext>;
+export type PutAccessUserUnlockTfaError = ProxmoxOpError;
+/** Unlock a user's TFA authentication. (root-privileged endpoint) */
+export declare const putAccessUserUnlockTfa: API.OperationMethod<PutAccessUserUnlockTfaRequest, PutAccessUserUnlockTfaResponse, PutAccessUserUnlockTfaError, ProxmoxOpContext>;
+export type SyncAccessDomainError = ProxmoxOpError;
+/** Syncs users and/or groups from the configured LDAP to user.cfg. NOTE: Synced groups will have the name 'name-$realm', so make sure those groups do not exist to prevent overwriting. (root-privileged endpoint) */
+export declare const syncAccessDomain: API.OperationMethod<SyncAccessDomainRequest, SyncAccessDomainResponse, SyncAccessDomainError, ProxmoxOpContext>;
+export type UpdateAccessTfaError = ProxmoxOpError;
+/** Add a TFA entry for a user. (root-privileged endpoint) */
+export declare const updateAccessTfa: API.OperationMethod<UpdateAccessTfaRequest, UpdateAccessTfaResponse, UpdateAccessTfaError, ProxmoxOpContext>;
+export type UpdateAccessUserTokenError = ProxmoxOpError;
+/** Generate a new API token for a specific user. NOTE: returns API token value, which needs to be stored as it cannot be retrieved afterwards! (root-privileged endpoint) */
+export declare const updateAccessUserToken: API.OperationMethod<UpdateAccessUserTokenRequest, UpdateAccessUserTokenResponse, UpdateAccessUserTokenError, ProxmoxOpContext>;
+//# sourceMappingURL=access.d.ts.map