@maxim_mazurok/gapi.client.cloudidentity-v1beta1 0.1.20260310 → 0.2.20260317

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://cloudidentity.googleapis.com/$discovery/rest?version=v1beta1
-// Revision: 20260310
+// Revision: 20260317
 
 /// <reference types="gapi.client" />
 
@@ -46,8 +46,12 @@ declare namespace gapi.client {
       /** Whether this account is on an owner/primary profile. For phones, only true for owner profiles. Android 4+ devices can have secondary or restricted user profiles. */
       ownerProfileAccount?: boolean;
       /** Ownership privileges on device. */
-      ownershipPrivilege?: string;
-      /** Whether device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy. */
+      ownershipPrivilege?:
+        | 'OWNERSHIP_PRIVILEGE_UNSPECIFIED'
+        | 'DEVICE_ADMINISTRATOR'
+        | 'PROFILE_OWNER'
+        | 'DEVICE_OWNER';
+      /** Whether the device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy. */
       supportsWorkProfile?: boolean;
       /** Whether Android verified boot status is GREEN. */
       verifiedBoot?: boolean;
@@ -80,7 +84,12 @@ declare namespace gapi.client {
     }
     interface BrowserInfo {
       /** Output only. Browser's management state. */
-      browserManagementState?: string;
+      browserManagementState?:
+        | 'UNSPECIFIED'
+        | 'UNMANAGED'
+        | 'MANAGED_BY_OTHER_DOMAIN'
+        | 'PROFILE_MANAGED'
+        | 'BROWSER_MANAGED';
       /** Version of the request initiating browser. E.g. `91.0.4442.4`. */
       browserVersion?: string;
       /** Current state of [built-in DNS client](https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled). */
@@ -104,11 +113,19 @@ declare namespace gapi.client {
       /** Current state of [third-party blocking](https://chromeenterprise.google/policies/#ThirdPartyBlockingEnabled). */
       isThirdPartyBlockingEnabled?: boolean;
       /** Current state of [password protection trigger](https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger). */
-      passwordProtectionWarningTrigger?: string;
+      passwordProtectionWarningTrigger?:
+        | 'PASSWORD_PROTECTION_TRIGGER_UNSPECIFIED'
+        | 'PROTECTION_OFF'
+        | 'PASSWORD_REUSE'
+        | 'PHISHING_REUSE';
       /** Output only. Chrome policies information for the browser as can be seen in chrome://policy. Full possibilities of policies can be consulted in [Chrome Enterprise Policy List](https://chromeenterprise.google/policies/). */
       policies?: ChromePolicy[];
       /** Current state of [Safe Browsing protection level](https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel). */
-      safeBrowsingProtectionLevel?: string;
+      safeBrowsingProtectionLevel?:
+        | 'SAFE_BROWSING_LEVEL_UNSPECIFIED'
+        | 'DISABLED'
+        | 'STANDARD'
+        | 'ENHANCED';
     }
     interface CancelUserInvitationRequest {}
     interface CancelWipeDeviceRequest {
@@ -141,7 +158,10 @@ declare namespace gapi.client {
       /** The certificate thumbprint. */
       thumbprint?: string;
       /** Validation state of this certificate. */
-      validationState?: string;
+      validationState?:
+        | 'CERTIFICATE_VALIDATION_STATE_UNSPECIFIED'
+        | 'VALIDATION_SUCCESSFUL'
+        | 'VALIDATION_FAILED';
       /** Certificate not valid at or after this timestamp. */
       validityExpirationTime?: string;
       /** Certificate not valid before this timestamp. */
@@ -165,9 +185,20 @@ declare namespace gapi.client {
       /** Output only. The unique name of the Chrome policy. These names correspond to the policy names listed in [Chrome Enterprise Policy List](https://chromeenterprise.google/policies/) */
       name?: string;
       /** Output only. The scope at which the *applied* policy value is set (USER or MACHINE). */
-      scope?: string;
+      scope?: 'SCOPE_UNKNOWN' | 'USER' | 'MACHINE';
       /** Output only. The source from which the *applied* policy value originated. */
-      source?: string;
+      source?:
+        | 'SOURCE_UNKNOWN'
+        | 'ENTERPRISE_DEFAULT'
+        | 'CLOUD'
+        | 'ACTIVE_DIRECTORY'
+        | 'DEVICE_LOCAL_ACCOUNT_OVERRIDE_DEPRECATED'
+        | 'PLATFORM'
+        | 'PRIORITY_CLOUD_DEPRECATED'
+        | 'MERGED'
+        | 'COMMAND_LINE'
+        | 'CLOUD_FROM_ASH'
+        | 'RESTRICTED_MANAGED_GUEST_SESSION_OVERRIDE';
       /** Output only. The currently applied value of the policy. The format depends on the policy type (e.g., boolean, string, JSON array/object). */
       value?: string;
     }
@@ -175,7 +206,10 @@ declare namespace gapi.client {
       /** The caller can specify asset tags for this resource */
       assetTags?: string[];
       /** The compliance state of the resource as specified by the API client. */
-      complianceState?: string;
+      complianceState?:
+        | 'COMPLIANCE_STATE_UNSPECIFIED'
+        | 'COMPLIANT'
+        | 'NON_COMPLIANT';
       /** Output only. The time the client state data was created. */
       createTime?: string;
       /** This field may be used to store a unique identifier for the API resource within which these CustomAttributes are a field. */
@@ -183,17 +217,26 @@ declare namespace gapi.client {
       /** The token that needs to be passed back for concurrency control in updates. Token needs to be passed back in UpdateRequest */
       etag?: string;
       /** The Health score of the resource */
-      healthScore?: string;
+      healthScore?:
+        | 'HEALTH_SCORE_UNSPECIFIED'
+        | 'VERY_POOR'
+        | 'POOR'
+        | 'NEUTRAL'
+        | 'GOOD'
+        | 'VERY_GOOD';
       /** The map of key-value attributes stored by callers specific to a device. The total serialized length of this map may not exceed 10KB. No limit is placed on the number of attributes in a map. */
       keyValuePairs?: {[P in string]: CustomAttributeValue};
       /** Output only. The time the client state data was last updated. */
       lastUpdateTime?: string;
       /** The management state of the resource as specified by the API client. */
-      managed?: string;
+      managed?: 'MANAGED_STATE_UNSPECIFIED' | 'MANAGED' | 'UNMANAGED';
       /** Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the ClientState in format: `devices/{device_id}/deviceUsers/{device_user_id}/clientState/{partner_id}`, where partner_id corresponds to the partner storing the data. */
       name?: string;
       /** Output only. The owner of the ClientState */
-      ownerType?: string;
+      ownerType?:
+        | 'OWNER_TYPE_UNSPECIFIED'
+        | 'OWNER_TYPE_CUSTOMER'
+        | 'OWNER_TYPE_PARTNER';
       /** A descriptive cause of the health score. */
       scoreReason?: string;
     }
@@ -240,21 +283,42 @@ declare namespace gapi.client {
       /** Output only. Build number of the device. */
       buildNumber?: string;
       /** List of the clients the device is reporting to. */
-      clientTypes?: string[];
+      clientTypes?:
+        | 'CLIENT_TYPE_UNSPECIFIED'
+        | 'DRIVE_FS'
+        | 'FUNDAMENTAL'
+        | 'ENDPOINT_VERIFICATION'
+        | 'WINDOWS_ADVANCED'
+        | 'GOOGLE_CREDENTIALS_PROVIDER_FOR_WINDOWS'[];
       /** Output only. Represents whether the Device is compromised. */
-      compromisedState?: string;
+      compromisedState?:
+        | 'COMPROMISED_STATE_UNSPECIFIED'
+        | 'COMPROMISED'
+        | 'UNCOMPROMISED';
       /** Output only. When the Company-Owned device was imported. This field is empty for BYOD devices. */
       createTime?: string;
       /** Unique identifier for the device. */
       deviceId?: string;
       /** Output only. Type of device. */
-      deviceType?: string;
+      deviceType?:
+        | 'DEVICE_TYPE_UNSPECIFIED'
+        | 'ANDROID'
+        | 'IOS'
+        | 'GOOGLE_SYNC'
+        | 'WINDOWS'
+        | 'MAC_OS'
+        | 'LINUX'
+        | 'CHROME_OS';
       /** Output only. Whether developer options is enabled on device. */
       enabledDeveloperOptions?: boolean;
       /** Output only. Whether USB debugging is enabled on device. */
       enabledUsbDebugging?: boolean;
       /** Output only. Device encryption state. */
-      encryptionState?: string;
+      encryptionState?:
+        | 'ENCRYPTION_STATE_UNSPECIFIED'
+        | 'UNSUPPORTED_BY_DEVICE'
+        | 'ENCRYPTED'
+        | 'NOT_ENCRYPTED';
       /** Output only. Attributes specific to [Endpoint Verification](https://cloud.google.com/endpoint-verification/docs/overview) devices. */
       endpointVerificationSpecificAttributes?: EndpointVerificationSpecificAttributes;
       /** Host name of the device. */
@@ -266,7 +330,14 @@ declare namespace gapi.client {
       /** Most recent time when device synced with this service. */
       lastSyncTime?: string;
       /** Output only. Management state of the device */
-      managementState?: string;
+      managementState?:
+        | 'MANAGEMENT_STATE_UNSPECIFIED'
+        | 'APPROVED'
+        | 'BLOCKED'
+        | 'PENDING'
+        | 'UNPROVISIONED'
+        | 'WIPING'
+        | 'WIPED';
       /** Output only. Device manufacturer. Example: Motorola. */
       manufacturer?: string;
       /** Output only. MEID number of device if CDMA device; empty otherwise. */
@@ -282,7 +353,7 @@ declare namespace gapi.client {
       /** Output only. Domain name for Google accounts on device. Type for other accounts on device. On Android, will only be populated if |ownership_privilege| is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in to the device policy app if that account's domain has only one account. Examples: "com.example", "xyz.com". */
       otherAccounts?: string[];
       /** Output only. Whether the device is owned by the company or an individual */
-      ownerType?: string;
+      ownerType?: 'DEVICE_OWNERSHIP_UNSPECIFIED' | 'COMPANY' | 'BYOD';
       /** Output only. OS release version. Example: 6.0. */
       releaseVersion?: string;
       /** Output only. OS security patch update time on device. */
@@ -296,7 +367,10 @@ declare namespace gapi.client {
     }
     interface DeviceUser {
       /** Compromised State of the DeviceUser object */
-      compromisedState?: string;
+      compromisedState?:
+        | 'COMPROMISED_STATE_UNSPECIFIED'
+        | 'COMPROMISED'
+        | 'NOT_COMPROMISED';
       /** When the user first signed in to the device */
       createTime?: string;
       /** Output only. Most recent time when user registered with this service. */
@@ -306,11 +380,21 @@ declare namespace gapi.client {
       /** Output only. Last time when user synced with policies. */
       lastSyncTime?: string;
       /** Output only. Management state of the user on the device. */
-      managementState?: string;
+      managementState?:
+        | 'MANAGEMENT_STATE_UNSPECIFIED'
+        | 'WIPING'
+        | 'WIPED'
+        | 'APPROVED'
+        | 'BLOCKED'
+        | 'PENDING_APPROVAL'
+        | 'UNENROLLED';
       /** Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the DeviceUser in format: `devices/{device_id}/deviceUsers/{device_user_id}`, where `device_user_id` uniquely identifies a user's use of a device. */
       name?: string;
       /** Password state of the DeviceUser object */
-      passwordState?: string;
+      passwordState?:
+        | 'PASSWORD_STATE_UNSPECIFIED'
+        | 'PASSWORD_SET'
+        | 'PASSWORD_NOT_SET';
       /** Output only. User agent on the device for this specific user */
       userAgent?: string;
       /** Email address of the user registered on the device. */
@@ -329,11 +413,15 @@ declare namespace gapi.client {
     interface DynamicGroupQuery {
       /** Query that determines the memberships of the dynamic group. Examples: All users with at least one `organizations.department` of engineering. `user.organizations.exists(org, org.department=='engineering')` All users with at least one location that has `area` of `foo` and `building_id` of `bar`. `user.locations.exists(loc, loc.area=='foo' && loc.building_id=='bar')` All users with any variation of the name John Doe (case-insensitive queries add `equalsIgnoreCase()` to the value being queried). `user.name.value.equalsIgnoreCase('jOhn DoE')` */
       query?: string;
-      resourceType?: string;
+      resourceType?: 'RESOURCE_TYPE_UNSPECIFIED' | 'USER';
     }
     interface DynamicGroupStatus {
       /** Status of the dynamic group. */
-      status?: string;
+      status?:
+        | 'STATUS_UNSPECIFIED'
+        | 'UP_TO_DATE'
+        | 'UPDATING_MEMBERSHIPS'
+        | 'INVALID_QUERY';
       /** The latest time at which the dynamic group is guaranteed to be in the given status. If status is `UP_TO_DATE`, the latest time at which the dynamic group was confirmed to be up-to-date. If status is `UPDATING_MEMBERSHIPS`, the time at which dynamic group was created. */
       statusTime?: string;
     }
@@ -371,7 +459,11 @@ declare namespace gapi.client {
       /** Whether this account is on an owner/primary profile. For phones, only true for owner profiles. Android 4+ devices can have secondary or restricted user profiles. */
       ownerProfileAccount?: boolean;
       /** Ownership privileges on device. */
-      ownershipPrivilege?: string;
+      ownershipPrivilege?:
+        | 'OWNERSHIP_PRIVILEGE_UNSPECIFIED'
+        | 'DEVICE_ADMINISTRATOR'
+        | 'PROFILE_OWNER'
+        | 'DEVICE_OWNER';
       /** Whether device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy. */
       supportsWorkProfile?: boolean;
       /** Whether Android verified boot status is GREEN. */
@@ -399,7 +491,12 @@ declare namespace gapi.client {
     }
     interface GoogleAppsCloudidentityDevicesV1BrowserInfo {
       /** Output only. Browser's management state. */
-      browserManagementState?: string;
+      browserManagementState?:
+        | 'UNSPECIFIED'
+        | 'UNMANAGED'
+        | 'MANAGED_BY_OTHER_DOMAIN'
+        | 'PROFILE_MANAGED'
+        | 'BROWSER_MANAGED';
       /** Version of the request initiating browser. E.g. `91.0.4442.4`. */
       browserVersion?: string;
       /** Current state of [built-in DNS client](https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled). */
@@ -423,9 +520,17 @@ declare namespace gapi.client {
       /** Current state of [third-party blocking](https://chromeenterprise.google/policies/#ThirdPartyBlockingEnabled). */
       isThirdPartyBlockingEnabled?: boolean;
       /** Current state of [password protection trigger](https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger). */
-      passwordProtectionWarningTrigger?: string;
+      passwordProtectionWarningTrigger?:
+        | 'PASSWORD_PROTECTION_TRIGGER_UNSPECIFIED'
+        | 'PROTECTION_OFF'
+        | 'PASSWORD_REUSE'
+        | 'PHISHING_REUSE';
       /** Current state of [Safe Browsing protection level](https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel). */
-      safeBrowsingProtectionLevel?: string;
+      safeBrowsingProtectionLevel?:
+        | 'SAFE_BROWSING_LEVEL_UNSPECIFIED'
+        | 'DISABLED'
+        | 'STANDARD'
+        | 'ENHANCED';
     }
     interface GoogleAppsCloudidentityDevicesV1CancelWipeDeviceMetadata {}
     interface GoogleAppsCloudidentityDevicesV1CancelWipeDeviceResponse {
@@ -451,7 +556,10 @@ declare namespace gapi.client {
       /** The certificate thumbprint. */
       thumbprint?: string;
       /** Output only. Validation state of this certificate. */
-      validationState?: string;
+      validationState?:
+        | 'CERTIFICATE_VALIDATION_STATE_UNSPECIFIED'
+        | 'VALIDATION_SUCCESSFUL'
+        | 'VALIDATION_FAILED';
       /** Certificate not valid at or after this timestamp. */
       validityExpirationTime?: string;
       /** Certificate not valid before this timestamp. */
@@ -469,7 +577,10 @@ declare namespace gapi.client {
       /** The caller can specify asset tags for this resource */
       assetTags?: string[];
       /** The compliance state of the resource as specified by the API client. */
-      complianceState?: string;
+      complianceState?:
+        | 'COMPLIANCE_STATE_UNSPECIFIED'
+        | 'COMPLIANT'
+        | 'NON_COMPLIANT';
       /** Output only. The time the client state data was created. */
       createTime?: string;
       /** This field may be used to store a unique identifier for the API resource within which these CustomAttributes are a field. */
@@ -477,7 +588,13 @@ declare namespace gapi.client {
       /** The token that needs to be passed back for concurrency control in updates. Token needs to be passed back in UpdateRequest */
       etag?: string;
       /** The Health score of the resource. The Health score is the callers specification of the condition of the device from a usability point of view. For example, a third-party device management provider may specify a health score based on its compliance with organizational policies. */
-      healthScore?: string;
+      healthScore?:
+        | 'HEALTH_SCORE_UNSPECIFIED'
+        | 'VERY_POOR'
+        | 'POOR'
+        | 'NEUTRAL'
+        | 'GOOD'
+        | 'VERY_GOOD';
       /** The map of key-value attributes stored by callers specific to a device. The total serialized length of this map may not exceed 10KB. No limit is placed on the number of attributes in a map. */
       keyValuePairs?: {
         [P in string]: GoogleAppsCloudidentityDevicesV1CustomAttributeValue;
@@ -485,11 +602,14 @@ declare namespace gapi.client {
       /** Output only. The time the client state data was last updated. */
       lastUpdateTime?: string;
       /** The management state of the resource as specified by the API client. */
-      managed?: string;
+      managed?: 'MANAGED_STATE_UNSPECIFIED' | 'MANAGED' | 'UNMANAGED';
       /** Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the ClientState in format: `devices/{device}/deviceUsers/{device_user}/clientState/{partner}`, where partner corresponds to the partner storing the data. For partners belonging to the "BeyondCorp Alliance", this is the partner ID specified to you by Google. For all other callers, this is a string of the form: `{customer}-suffix`, where `customer` is your customer ID. The *suffix* is any string the caller specifies. This string will be displayed verbatim in the administration console. This suffix is used in setting up Custom Access Levels in Context-Aware Access. Your organization's customer ID can be obtained from the URL: `GET https://www.googleapis.com/admin/directory/v1/customers/my_customer` The `id` field in the response contains the customer ID starting with the letter 'C'. The customer ID to be used in this API is the string after the letter 'C' (not including 'C') */
       name?: string;
       /** Output only. The owner of the ClientState */
-      ownerType?: string;
+      ownerType?:
+        | 'OWNER_TYPE_UNSPECIFIED'
+        | 'OWNER_TYPE_CUSTOMER'
+        | 'OWNER_TYPE_PARTNER';
       /** A descriptive cause of the health score. */
       scoreReason?: string;
     }
@@ -518,19 +638,34 @@ declare namespace gapi.client {
       /** Output only. Build number of the device. */
       buildNumber?: string;
       /** Output only. Represents whether the Device is compromised. */
-      compromisedState?: string;
+      compromisedState?:
+        | 'COMPROMISED_STATE_UNSPECIFIED'
+        | 'COMPROMISED'
+        | 'UNCOMPROMISED';
       /** Output only. When the Company-Owned device was imported. This field is empty for BYOD devices. */
       createTime?: string;
       /** Unique identifier for the device. */
       deviceId?: string;
       /** Output only. Type of device. */
-      deviceType?: string;
+      deviceType?:
+        | 'DEVICE_TYPE_UNSPECIFIED'
+        | 'ANDROID'
+        | 'IOS'
+        | 'GOOGLE_SYNC'
+        | 'WINDOWS'
+        | 'MAC_OS'
+        | 'LINUX'
+        | 'CHROME_OS';
       /** Output only. Whether developer options is enabled on device. */
       enabledDeveloperOptions?: boolean;
       /** Output only. Whether USB debugging is enabled on device. */
       enabledUsbDebugging?: boolean;
       /** Output only. Device encryption state. */
-      encryptionState?: string;
+      encryptionState?:
+        | 'ENCRYPTION_STATE_UNSPECIFIED'
+        | 'UNSUPPORTED_BY_DEVICE'
+        | 'ENCRYPTED'
+        | 'NOT_ENCRYPTED';
       /** Output only. Attributes specific to [Endpoint Verification](https://cloud.google.com/endpoint-verification/docs/overview) devices. */
       endpointVerificationSpecificAttributes?: GoogleAppsCloudidentityDevicesV1EndpointVerificationSpecificAttributes;
       /** Host name of the device. */
@@ -542,7 +677,14 @@ declare namespace gapi.client {
       /** Most recent time when device synced with this service. */
       lastSyncTime?: string;
       /** Output only. Management state of the device */
-      managementState?: string;
+      managementState?:
+        | 'MANAGEMENT_STATE_UNSPECIFIED'
+        | 'APPROVED'
+        | 'BLOCKED'
+        | 'PENDING'
+        | 'UNPROVISIONED'
+        | 'WIPING'
+        | 'WIPED';
       /** Output only. Device manufacturer. Example: Motorola. */
       manufacturer?: string;
       /** Output only. MEID number of device if CDMA device; empty otherwise. */
@@ -558,7 +700,7 @@ declare namespace gapi.client {
       /** Output only. Domain name for Google accounts on device. Type for other accounts on device. On Android, will only be populated if |ownership_privilege| is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in to the device policy app if that account's domain has only one account. Examples: "com.example", "xyz.com". */
       otherAccounts?: string[];
       /** Output only. Whether the device is owned by the company or an individual */
-      ownerType?: string;
+      ownerType?: 'DEVICE_OWNERSHIP_UNSPECIFIED' | 'COMPANY' | 'BYOD';
       /** Output only. OS release version. Example: 6.0. */
       releaseVersion?: string;
       /** Output only. OS security patch update time on device. */
@@ -572,7 +714,10 @@ declare namespace gapi.client {
     }
     interface GoogleAppsCloudidentityDevicesV1DeviceUser {
       /** Compromised State of the DeviceUser object */
-      compromisedState?: string;
+      compromisedState?:
+        | 'COMPROMISED_STATE_UNSPECIFIED'
+        | 'COMPROMISED'
+        | 'NOT_COMPROMISED';
       /** When the user first signed in to the device */
       createTime?: string;
       /** Output only. Most recent time when user registered with this service. */
@@ -582,11 +727,21 @@ declare namespace gapi.client {
       /** Output only. Last time when user synced with policies. */
       lastSyncTime?: string;
       /** Output only. Management state of the user on the device. */
-      managementState?: string;
+      managementState?:
+        | 'MANAGEMENT_STATE_UNSPECIFIED'
+        | 'WIPING'
+        | 'WIPED'
+        | 'APPROVED'
+        | 'BLOCKED'
+        | 'PENDING_APPROVAL'
+        | 'UNENROLLED';
       /** Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the DeviceUser in format: `devices/{device}/deviceUsers/{device_user}`, where `device_user` uniquely identifies a user's use of a device. */
       name?: string;
       /** Password state of the DeviceUser object */
-      passwordState?: string;
+      passwordState?:
+        | 'PASSWORD_STATE_UNSPECIFIED'
+        | 'PASSWORD_SET'
+        | 'PASSWORD_NOT_SET';
       /** Output only. User agent on the device for this specific user */
       userAgent?: string;
       /** Email address of the user registered on the device. */
@@ -648,7 +803,11 @@ declare namespace gapi.client {
       /** Labels for Group resource. */
       labels?: {[P in string]: string};
       /** The relation between the member and the transitive group. */
-      relationType?: string;
+      relationType?:
+        | 'RELATION_TYPE_UNSPECIFIED'
+        | 'DIRECT'
+        | 'INDIRECT'
+        | 'DIRECT_AND_INDIRECT';
       /** Membership roles of the member for the group. */
       roles?: TransitiveMembershipRole[];
     }
@@ -700,7 +859,12 @@ declare namespace gapi.client {
       /** Assertions about users assigned to an IdP will always be accepted from that IdP. This controls whether/when Google should redirect a user to the IdP. Unset (defaults) is the recommended configuration. */
       signInBehavior?: SignInBehavior;
       /** Inbound SSO behavior. */
-      ssoMode?: string;
+      ssoMode?:
+        | 'SSO_MODE_UNSPECIFIED'
+        | 'SSO_OFF'
+        | 'SAML_SSO'
+        | 'OIDC_SSO'
+        | 'DOMAIN_WIDE_SAML_IF_ENABLED';
       /** Immutable. Must be of the form `groups/{group}`. */
       targetGroup?: string;
       /** Immutable. Must be of the form `orgUnits/{org_unit}`. */
@@ -804,7 +968,11 @@ declare namespace gapi.client {
       /** Entity key has an id and a namespace. In case of discussion forums, the id will be an email address without a namespace. */
       preferredMemberKey?: EntityKey[];
       /** The relation between the group and the transitive membership. */
-      relationType?: string;
+      relationType?:
+        | 'RELATION_TYPE_UNSPECIFIED'
+        | 'DIRECT'
+        | 'INDIRECT'
+        | 'DIRECT_AND_INDIRECT';
       /** The membership role details (i.e name of role and expiry time). */
       roles?: TransitiveMembershipRole[];
     }
@@ -818,7 +986,13 @@ declare namespace gapi.client {
       /** Output only. The time when the `Membership` was created. */
       createTime?: string;
       /** Output only. Delivery setting associated with the membership. */
-      deliverySetting?: string;
+      deliverySetting?:
+        | 'DELIVERY_SETTING_UNSPECIFIED'
+        | 'ALL_MAIL'
+        | 'DIGEST'
+        | 'DAILY'
+        | 'NONE'
+        | 'DISABLED';
       /** Immutable. The `EntityKey` of the member. Either `member_key` or `preferred_member_key` must be set when calling MembershipsService.CreateMembership but not both; both shall be set when returned. */
       memberKey?: EntityKey;
       /** Output only. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Membership`. Shall be of the form `groups/{group_id}/memberships/{membership_id}`. */
@@ -828,7 +1002,14 @@ declare namespace gapi.client {
       /** The `MembershipRole`s that apply to the `Membership`. If unspecified, defaults to a single `MembershipRole` with `name` `MEMBER`. Must not contain duplicate `MembershipRole`s with the same `name`. */
       roles?: MembershipRole[];
       /** Output only. The type of the membership. */
-      type?: string;
+      type?:
+        | 'TYPE_UNSPECIFIED'
+        | 'USER'
+        | 'SERVICE_ACCOUNT'
+        | 'GROUP'
+        | 'SHARED_DRIVE'
+        | 'CBCM_BROWSER'
+        | 'OTHER';
       /** Output only. The time when the `Membership` was last updated. */
       updateTime?: string;
     }
@@ -864,7 +1045,12 @@ declare namespace gapi.client {
     }
     interface MembershipRoleRestrictionEvaluation {
       /** Output only. The current state of the restriction */
-      state?: string;
+      state?:
+        | 'STATE_UNSPECIFIED'
+        | 'COMPLIANT'
+        | 'FORWARD_COMPLIANT'
+        | 'NON_COMPLIANT'
+        | 'EVALUATING';
     }
     interface ModifyMembershipRolesRequest {
       /** The `MembershipRole`s to be added. Adding or removing roles in the same request as updating roles is not supported. Must not be set if `update_roles_params` is set. */
@@ -922,7 +1108,7 @@ declare namespace gapi.client {
       /** Required. Immutable. The [resource name](https://cloud.google.com/apis/design/resource_names) of the OrgMembership. Format: orgUnits/{$orgUnitId}/memberships/{$membership} The `$orgUnitId` is the `orgUnitId` from the [Admin SDK `OrgUnit` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/orgunits). The `$membership` shall be of the form `{$entityType};{$memberId}`, where `$entityType` is the enum value of [OrgMembership.EntityType], and `memberId` is the `id` from [Drive API (V3) `Drive` resource](https://developers.google.com/drive/api/v3/reference/drives#resource) for OrgMembership.EntityType.SHARED_DRIVE. */
       name?: string;
       /** Immutable. Entity type for the org member. */
-      type?: string;
+      type?: 'ENTITY_TYPE_UNSPECIFIED' | 'SHARED_DRIVE';
     }
     interface Policy {
       /** Immutable. Customer that the Policy belongs to. The value is in the format 'customers/{customerId}'. The `customerId` must begin with "C" To find your customer ID in Admin Console see https://support.google.com/a/answer/10070793. */
@@ -934,13 +1120,24 @@ declare namespace gapi.client {
       /** Required. The Setting configured by this Policy. */
       setting?: Setting;
       /** Output only. The type of the policy. */
-      type?: string;
+      type?: 'POLICY_TYPE_UNSPECIFIED' | 'SYSTEM' | 'ADMIN';
     }
     interface PolicyConflict {
       /** Output only. The scope at which this lower-priority policy is set (USER or MACHINE). */
-      scope?: string;
+      scope?: 'SCOPE_UNKNOWN' | 'USER' | 'MACHINE';
       /** Output only. The source from which this lower-priority policy value originated. */
-      source?: string;
+      source?:
+        | 'SOURCE_UNKNOWN'
+        | 'ENTERPRISE_DEFAULT'
+        | 'CLOUD'
+        | 'ACTIVE_DIRECTORY'
+        | 'DEVICE_LOCAL_ACCOUNT_OVERRIDE_DEPRECATED'
+        | 'PLATFORM'
+        | 'PRIORITY_CLOUD_DEPRECATED'
+        | 'MERGED'
+        | 'COMMAND_LINE'
+        | 'CLOUD_FROM_ASH'
+        | 'RESTRICTED_MANAGED_GUEST_SESSION_OVERRIDE';
       /** Output only. The policy value from this lower-priority source. */
       value?: string;
     }
@@ -964,7 +1161,12 @@ declare namespace gapi.client {
     }
     interface RestrictionEvaluation {
       /** Output only. The current state of the restriction */
-      state?: string;
+      state?:
+        | 'STATE_UNSPECIFIED'
+        | 'EVALUATING'
+        | 'COMPLIANT'
+        | 'FORWARD_COMPLIANT'
+        | 'NON_COMPLIANT';
     }
     interface RestrictionEvaluations {
       /** Evaluation of the member restriction applied to this membership. Empty if the user lacks permission to view the restriction evaluation. */
@@ -1033,7 +1235,7 @@ declare namespace gapi.client {
     }
     interface SignInBehavior {
       /** When to redirect sign-ins to the IdP. */
-      redirectCondition?: string;
+      redirectCondition?: 'REDIRECT_CONDITION_UNSPECIFIED' | 'NEVER';
     }
     interface Status {
       /** The status code, which should be an enum value of google.rpc.Code. */
@@ -1068,7 +1270,12 @@ declare namespace gapi.client {
       /** Shall be of the form `customers/{customer}/userinvitations/{user_email_address}`. */
       name?: string;
       /** State of the `UserInvitation`. */
-      state?: string;
+      state?:
+        | 'STATE_UNSPECIFIED'
+        | 'NOT_YET_SENT'
+        | 'INVITED'
+        | 'ACCEPTED'
+        | 'DECLINED';
       /** Time when the `UserInvitation` was last updated. */
       updateTime?: string;
     }
@@ -1094,11 +1301,11 @@ declare namespace gapi.client {
       /** Cancels a UserInvitation that was already sent. */
       cancel(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1123,11 +1330,11 @@ declare namespace gapi.client {
       cancel(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1152,11 +1359,11 @@ declare namespace gapi.client {
       /** Retrieves a UserInvitation resource. **Note:** New consumer accounts with the customer's verified domain created within the previous 48 hours will not appear in the result. This delay also applies to newly-verified domains. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1179,11 +1386,11 @@ declare namespace gapi.client {
       /** Verifies whether a user account is eligible to receive a UserInvitation (is an unmanaged account). Eligibility is based on the following criteria: * the email address is a consumer account and it's the primary email address of the account, and * the domain of the email address matches an existing verified Google Workspace or Cloud Identity domain If both conditions are met, the user is eligible. **Note:** This method is not supported for Workspace Essentials customers. */
       isInvitableUser(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1206,11 +1413,11 @@ declare namespace gapi.client {
       /** Retrieves a list of UserInvitation resources. **Note:** New consumer accounts with the customer's verified domain created within the previous 48 hours will not appear in the result. This delay also applies to newly-verified domains. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1241,11 +1448,11 @@ declare namespace gapi.client {
       /** Sends a UserInvitation to email. If the `UserInvitation` does not exist for this request and it is a valid request, the request creates a `UserInvitation`. **Note:** The `get` and `list` methods have a 48-hour delay where newly-created consumer accounts will not appear in the results. You can still send a `UserInvitation` to those accounts if you know the unmanaged email address and IsInvitableUser==True. */
       send(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1270,11 +1477,11 @@ declare namespace gapi.client {
       send(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1304,11 +1511,11 @@ declare namespace gapi.client {
       /** Gets the client state for the device user */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1333,11 +1540,11 @@ declare namespace gapi.client {
       /** Updates the client state for the device user **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity Premium */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1366,11 +1573,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1401,11 +1608,11 @@ declare namespace gapi.client {
       /** Approves device to access user data. */
       approve(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1430,11 +1637,11 @@ declare namespace gapi.client {
       approve(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1459,11 +1666,11 @@ declare namespace gapi.client {
       /** Blocks device from accessing user data */
       block(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1488,11 +1695,11 @@ declare namespace gapi.client {
       block(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1517,11 +1724,11 @@ declare namespace gapi.client {
       /** Cancels an unfinished user account wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being wiped. */
       cancelWipe(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1546,11 +1753,11 @@ declare namespace gapi.client {
       cancelWipe(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1575,11 +1782,11 @@ declare namespace gapi.client {
       /** Deletes the specified DeviceUser. This also revokes the user's access to device data. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1604,11 +1811,11 @@ declare namespace gapi.client {
       /** Retrieves the specified DeviceUser */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1633,11 +1840,11 @@ declare namespace gapi.client {
       /** Lists/Searches DeviceUsers. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1670,11 +1877,11 @@ declare namespace gapi.client {
       /** Looks up resource names of the DeviceUsers associated with the caller's credentials, as well as the properties provided in the request. This method must be called with end-user credentials with the scope: https://www.googleapis.com/auth/cloud-identity.devices.lookup If multiple properties are provided, only DeviceUsers having all of these properties are considered as matches - i.e. the query behaves like an AND. Different platforms require different amounts of information from the caller to ensure that the DeviceUser is uniquely identified. - iOS: If either the `partner` or `ios_device_id` field is provided, then both fields are required. - Android: Specifying the `android_id` field is required. - Desktop: Specifying the `raw_resource_id` field is required. */
       lookup(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** Android Id returned by [Settings.Secure#ANDROID_ID](https://developer.android.com/reference/android/provider/Settings.Secure.html#ANDROID_ID). */
         androidId?: string;
         /** JSONP */
@@ -1711,11 +1918,11 @@ declare namespace gapi.client {
       /** Wipes the user's account on a device. */
       wipe(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1740,11 +1947,11 @@ declare namespace gapi.client {
       wipe(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1772,11 +1979,11 @@ declare namespace gapi.client {
       /** Cancels an unfinished device wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being wiped. */
       cancelWipe(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1801,11 +2008,11 @@ declare namespace gapi.client {
       cancelWipe(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1830,11 +2037,11 @@ declare namespace gapi.client {
       /** Creates a device. Only company-owned device may be created. **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity Premium */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -1857,11 +2064,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -1884,11 +2091,11 @@ declare namespace gapi.client {
       /** Deletes the specified device. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1913,11 +2120,11 @@ declare namespace gapi.client {
       /** Retrieves the specified device. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Customer in format: `customers/{customer_id}`, where customer_id is the customer to whom the device belongs. */
@@ -1942,11 +2149,11 @@ declare namespace gapi.client {
       /** Lists/Searches devices. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. */
@@ -1974,16 +2181,19 @@ declare namespace gapi.client {
         /** Legacy upload protocol for media (e.g. "media", "multipart"). */
         uploadType?: string;
         /** Optional. The view to use for the List request. */
-        view?: string;
+        view?:
+          | 'VIEW_UNSPECIFIED'
+          | 'COMPANY_INVENTORY'
+          | 'USER_ASSIGNED_DEVICES';
       }): Request<ListDevicesResponse>;
       /** Wipes all data on the specified device. */
       wipe(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2008,11 +2218,11 @@ declare namespace gapi.client {
       wipe(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2040,11 +2250,11 @@ declare namespace gapi.client {
       /** Check a potential member for membership in a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. A member has membership to a group as long as there is a single viewable transitive membership between the group and the member. The actor must have view permissions to at least one transitive membership between the member and group. */
       checkTransitiveMembership(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2069,11 +2279,11 @@ declare namespace gapi.client {
       /** Creates a `Membership`. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2098,11 +2308,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2127,11 +2337,11 @@ declare namespace gapi.client {
       /** Deletes a `Membership`. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2154,11 +2364,11 @@ declare namespace gapi.client {
       /** Retrieves a `Membership`. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2181,11 +2391,11 @@ declare namespace gapi.client {
       /** Get a membership graph of just a member or both a member and a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. Given a member, the response will contain all membership paths from the member. Given both a group and a member, the response will contain all membership paths between the group and the member. */
       getMembershipGraph(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2210,11 +2420,11 @@ declare namespace gapi.client {
       /** Lists the `Membership`s within a `Group`. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2238,16 +2448,16 @@ declare namespace gapi.client {
         /** Legacy upload protocol for media (e.g. "media", "multipart"). */
         uploadType?: string;
         /** The level of detail to be returned. If unspecified, defaults to `MembershipView.BASIC`. */
-        view?: string;
+        view?: 'BASIC' | 'FULL';
       }): Request<ListMembershipsResponse>;
       /** Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Membership` by its `EntityKey`. */
       lookup(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2274,11 +2484,11 @@ declare namespace gapi.client {
       /** Modifies the `MembershipRole`s of a `Membership`. */
       modifyMembershipRoles(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2303,11 +2513,11 @@ declare namespace gapi.client {
       modifyMembershipRoles(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2332,11 +2542,11 @@ declare namespace gapi.client {
       /** Searches direct groups of a member. */
       searchDirectGroups(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2367,11 +2577,11 @@ declare namespace gapi.client {
       /** Search transitive groups of a member. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. A transitive group is any group that has a direct or indirect membership to the member. Actor must have view permissions all transitive groups. */
       searchTransitiveGroups(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2400,11 +2610,11 @@ declare namespace gapi.client {
       /** Search transitive memberships of a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. A transitive membership is any direct or indirect membership of a group. Actor must have view permissions to all transitive memberships. */
       searchTransitiveMemberships(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2433,17 +2643,20 @@ declare namespace gapi.client {
       /** Creates a `Group`. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
         /** Required. The initial configuration option for the `Group`. */
-        initialGroupConfig?: string;
+        initialGroupConfig?:
+          | 'INITIAL_GROUP_CONFIG_UNSPECIFIED'
+          | 'WITH_INITIAL_OWNER'
+          | 'EMPTY';
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
         /** OAuth 2.0 token for the current user. */
@@ -2462,17 +2675,20 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
           fields?: string;
           /** Required. The initial configuration option for the `Group`. */
-          initialGroupConfig?: string;
+          initialGroupConfig?:
+            | 'INITIAL_GROUP_CONFIG_UNSPECIFIED'
+            | 'WITH_INITIAL_OWNER'
+            | 'EMPTY';
           /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
           key?: string;
           /** OAuth 2.0 token for the current user. */
@@ -2491,11 +2707,11 @@ declare namespace gapi.client {
       /** Deletes a `Group`. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2518,11 +2734,11 @@ declare namespace gapi.client {
       /** Retrieves a `Group`. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2545,11 +2761,11 @@ declare namespace gapi.client {
       /** Get Security Settings */
       getSecuritySettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2574,11 +2790,11 @@ declare namespace gapi.client {
       /** Lists the `Group` resources under a customer or namespace. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2602,16 +2818,16 @@ declare namespace gapi.client {
         /** Legacy upload protocol for media (e.g. "media", "multipart"). */
         uploadType?: string;
         /** The level of detail to be returned. If unspecified, defaults to `View.BASIC`. */
-        view?: string;
+        view?: 'VIEW_UNSPECIFIED' | 'BASIC' | 'FULL';
       }): Request<ListGroupsResponse>;
       /** Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Group` by its `EntityKey`. */
       lookup(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2636,11 +2852,11 @@ declare namespace gapi.client {
       /** Updates a `Group`. */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2667,11 +2883,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2698,11 +2914,11 @@ declare namespace gapi.client {
       /** Searches for `Group` resources matching a specified query. */
       search(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2728,16 +2944,16 @@ declare namespace gapi.client {
         /** Legacy upload protocol for media (e.g. "media", "multipart"). */
         uploadType?: string;
         /** The level of detail to be returned. If unspecified, defaults to `View.BASIC`. */
-        view?: string;
+        view?: 'BASIC' | 'FULL';
       }): Request<SearchGroupsResponse>;
       /** Update Security Settings */
       updateSecuritySettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2764,11 +2980,11 @@ declare namespace gapi.client {
       updateSecuritySettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2798,11 +3014,11 @@ declare namespace gapi.client {
       /** Creates an InboundOidcSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2825,11 +3041,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -2852,11 +3068,11 @@ declare namespace gapi.client {
       /** Deletes an InboundOidcSsoProfile. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2879,11 +3095,11 @@ declare namespace gapi.client {
       /** Gets an InboundOidcSsoProfile. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2906,11 +3122,11 @@ declare namespace gapi.client {
       /** Lists InboundOidcSsoProfile objects for a Google enterprise customer. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2937,11 +3153,11 @@ declare namespace gapi.client {
       /** Updates an InboundOidcSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`. */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -2968,11 +3184,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3001,11 +3217,11 @@ declare namespace gapi.client {
       /** Adds an IdpCredential. Up to 2 credentials are allowed. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`. */
       add(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3030,11 +3246,11 @@ declare namespace gapi.client {
       add(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3059,11 +3275,11 @@ declare namespace gapi.client {
       /** Deletes an IdpCredential. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3086,11 +3302,11 @@ declare namespace gapi.client {
       /** Gets an IdpCredential. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3113,11 +3329,11 @@ declare namespace gapi.client {
       /** Returns a list of IdpCredentials in an InboundSamlSsoProfile. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3146,11 +3362,11 @@ declare namespace gapi.client {
       /** Creates an InboundSamlSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3173,11 +3389,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3200,11 +3416,11 @@ declare namespace gapi.client {
       /** Deletes an InboundSamlSsoProfile. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3227,11 +3443,11 @@ declare namespace gapi.client {
       /** Gets an InboundSamlSsoProfile. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3254,11 +3470,11 @@ declare namespace gapi.client {
       /** Lists InboundSamlSsoProfiles for a customer. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3285,11 +3501,11 @@ declare namespace gapi.client {
       /** Updates an InboundSamlSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`. */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3316,11 +3532,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3350,11 +3566,11 @@ declare namespace gapi.client {
       /** Creates an InboundSsoAssignment for users and devices in a `Customer` under a given `Group` or `OrgUnit`. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3377,11 +3593,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3404,11 +3620,11 @@ declare namespace gapi.client {
       /** Deletes an InboundSsoAssignment. To disable SSO, Create (or Update) an assignment that has `sso_mode` == `SSO_OFF`. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3431,11 +3647,11 @@ declare namespace gapi.client {
       /** Gets an InboundSsoAssignment. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3458,11 +3674,11 @@ declare namespace gapi.client {
       /** Lists the InboundSsoAssignments for a `Customer`. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3489,11 +3705,11 @@ declare namespace gapi.client {
       /** Updates an InboundSsoAssignment. The body of this request is the `inbound_sso_assignment` field and the `update_mask` is relative to that. For example: a PATCH to `/v1beta1/inboundSsoAssignments/0abcdefg1234567&update_mask=rank` with a body of `{ "rank": 1 }` moves that (presumably group-targeted) SSO assignment to the highest priority and shifts any other group-targeted assignments down in priority. */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3520,11 +3736,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3553,11 +3769,11 @@ declare namespace gapi.client {
       /** List OrgMembership resources in an OrgUnit treated as 'parent'. Parent format: orgUnits/{$orgUnitId} where `$orgUnitId` is the `orgUnitId` from the [Admin SDK `OrgUnit` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/orgunits) */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Required. Immutable. Customer that this OrgMembership belongs to. All authorization will happen on the role assignments of this customer. Format: customers/{$customerId} where `$customerId` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may also use `customers/my_customer` to specify your own organization. */
@@ -3588,11 +3804,11 @@ declare namespace gapi.client {
       /** Move an OrgMembership to a new OrgUnit. NOTE: This is an atomic copy-and-delete. The resource will have a new copy under the destination OrgUnit and be deleted from the source OrgUnit. The resource can only be searched under the destination OrgUnit afterwards. */
       move(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3617,11 +3833,11 @@ declare namespace gapi.client {
       move(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3651,11 +3867,11 @@ declare namespace gapi.client {
       /** Create a policy. */
       create(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3678,11 +3894,11 @@ declare namespace gapi.client {
       create(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3705,11 +3921,11 @@ declare namespace gapi.client {
       /** Delete a policy. */
       delete(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3732,11 +3948,11 @@ declare namespace gapi.client {
       /** Get a policy. */
       get(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3759,11 +3975,11 @@ declare namespace gapi.client {
       /** List policies. */
       list(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3790,11 +4006,11 @@ declare namespace gapi.client {
       /** Update a policy. */
       patch(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3819,11 +4035,11 @@ declare namespace gapi.client {
       patch(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */