@sailpoint/angular-sdk 0.0.19 → 0.0.21

package/types/sailpoint-angular-sdk-machine_accounts.d.ts

@@ -40,6 +40,53 @@ interface CreateMachineAccountSubtypeV1Request {
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
+interface MachineAccountAllOfCompliance {
+    /**
+     * Framework control id.
+     */
+    id?: string | null;
+}
+
+/**
+ * Identity Security Cloud API - Machine Accounts
+ *
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Entro risk for this machine account. Present when Entro enrichment is enabled for the tenant. Null when no risk has been recorded. `score` stays null until a risk-engine projection exists. Read-only; written only by aggregation. This is separate from machine-identity SAF risk.
+ */
+interface MachineAccountAllOfRisk {
+    /**
+     * Risk score. Null for Entro-only severity.
+     */
+    score?: number | null;
+    /**
+     * Risk severity. A null stored severity can render as UNKNOWN when that behavior is enabled.
+     */
+    severity?: MachineAccountAllOfRiskSeverityEnum | null;
+}
+declare enum MachineAccountAllOfRiskSeverityEnum {
+    Unknown = "UNKNOWN",
+    Low = "LOW",
+    Medium = "MEDIUM",
+    High = "HIGH",
+    Critical = "CRITICAL"
+}
+
+/**
+ * Identity Security Cloud API - Machine Accounts
+ *
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
 interface MachineAccount {
     /**
      * System-generated unique ID of the Object
@@ -129,6 +176,19 @@ interface MachineAccount {
      * The source this machine account belongs to.
      */
     source: any | null;
+    risk?: MachineAccountAllOfRisk | null;
+    /**
+     * Entro permission level. Null when not enriched. Read-only; written only by aggregation.
+     */
+    readonly permissionLevel?: MachineAccountPermissionLevelEnum | null;
+    /**
+     * Entro compliance control ids. Null when absent; empty when Entro recorded no violations. A violations count is the length of this array. There is no `complianceViolationsCount` field, and `compliance` is not a list filter or sort field. Read-only; written only by aggregation.
+     */
+    readonly compliance?: Array<MachineAccountAllOfCompliance> | null;
+    /**
+     * When the machine account was last used, from Entro. Null when not enriched. Read-only; written only by aggregation.
+     */
+    readonly lastUsedAt?: string | null;
 }
 declare enum MachineAccountClassificationMethodEnum {
     Source = "SOURCE",
@@ -136,6 +196,12 @@ declare enum MachineAccountClassificationMethodEnum {
     Discovery = "DISCOVERY",
     Manual = "MANUAL"
 }
+declare enum MachineAccountPermissionLevelEnum {
+    Privileged = "PRIVILEGED",
+    Elevated = "ELEVATED",
+    Basic = "BASIC",
+    Unknown = "UNKNOWN"
+}
 
 /**
  * Identity Security Cloud API - Machine Accounts
@@ -430,9 +496,9 @@ interface ListMachineAccountsV1RequestParams {
     offset?: number;
     /** If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. */
     count?: boolean;
-    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **uuid**: *eq, in*  **description**: *eq, in, sw*  **machineIdentity.id**: *eq, in*  **machineIdentity.name**: *eq, in, sw*  **subtype.technicalName**: *eq, in, sw*  **subtype.displayName**: *eq, in, sw*  **accessType**: *eq, in, sw*  **environment**: *eq, in, sw*  **ownerIdentity**: *eq, in*  **ownerIdentity.id**: *eq, in*  **ownerIdentity.name**: *eq, in, sw*  **manuallyCorrelated**: *eq*  **enabled**: *eq*  **locked**: *eq*  **hasEntitlements**: *eq*  **attributes**: *eq*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **created**: *eq, gt, lt, ge, le*  **modified**: *eq, gt, lt, ge, le* */
+    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **uuid**: *eq, in*  **description**: *eq, in, sw*  **machineIdentity.id**: *eq, in*  **machineIdentity.name**: *eq, in, sw*  **subtype.technicalName**: *eq, in, sw*  **subtype.displayName**: *eq, in, sw*  **accessType**: *eq, in, sw*  **environment**: *eq, in, sw*  **ownerIdentity**: *eq, in*  **ownerIdentity.id**: *eq, in*  **ownerIdentity.name**: *eq, in, sw*  **manuallyCorrelated**: *eq*  **enabled**: *eq*  **locked**: *eq*  **hasEntitlements**: *eq*  **attributes**: *eq*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **created**: *eq, gt, lt, ge, le*  **modified**: *eq, gt, lt, ge, le*  **risk.severity**: *eq, in*  **permissionLevel**: *eq, in*  **lastUsedAt**: *gt, lt, ge, le*  &#x60;risk.severity&#x60;, &#x60;permissionLevel&#x60;, and &#x60;lastUsedAt&#x60; require Entro enrichment to be enabled for the tenant. When it is not, those filters return &#x60;400&#x60;. &#x60;compliance&#x60; and &#x60;complianceViolationsCount&#x60; are not filter fields. With unknown-severity enabled, a null stored severity matches &#x60;risk.severity eq \&quot;UNKNOWN\&quot;&#x60;. */
     filters?: string;
-    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, nativeIdentity, ownerIdentity, uuid, description, machineIdentity.id, machineIdentity.name, subtype.technicalName, subtype.displayName, accessType, environment, manuallyCorrelated, enabled, locked, hasEntitlements, ownerIdentity.id, ownerIdentity.name, attributes, source.id, source.name, created, modified** */
+    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, nativeIdentity, ownerIdentity, uuid, description, machineIdentity.id, machineIdentity.name, subtype.technicalName, subtype.displayName, accessType, environment, manuallyCorrelated, enabled, locked, hasEntitlements, ownerIdentity.id, ownerIdentity.name, attributes, source.id, source.name, created, modified, risk.severity, permissionLevel, lastUsedAt**  &#x60;risk.severity&#x60;, &#x60;permissionLevel&#x60;, and &#x60;lastUsedAt&#x60; require Entro enrichment to be enabled; otherwise those sorters return &#x60;400&#x60;. &#x60;risk.severity&#x60; sorts by rank (UNKNOWN, LOW, MEDIUM, HIGH, CRITICAL), not alphabetically. Null Entro values sort last. &#x60;compliance&#x60; is not sortable. */
     sorters?: string;
     /** Use this header to enable this experimental API. */
     xSailPointExperimental?: string;
@@ -462,7 +528,7 @@ interface UnlockMachineAccountV1RequestParams {
 interface UpdateMachineAccountV1RequestParams {
     /** Machine Account ID. */
     id: string;
-    /** A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard. The following fields are patchable:           * description           * ownerIdentity           * subType           * accessType           * environment           * attributes           * classificationMethod           * manuallyEdited           * nativeIdentity           * uuid           * source           * manuallyCorrelated           * enabled           * locked           * hasEntitlements           * connectorAttributes */
+    /** A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard. The following fields are patchable:           * description           * environment           * accessType           * attributes           * manuallyEdited           * ownerIdentity           * subtype           * machineIdentity           * owners  Non-dataset accounts may patch ownerIdentity, subtype, and machineIdentity. Dataset accounts may patch owners. When expanded ownership is enabled, non-dataset accounts may also patch owners, and dataset accounts may also patch ownerIdentity. &#x60;risk&#x60;, &#x60;permissionLevel&#x60;, &#x60;compliance&#x60;, and &#x60;lastUsedAt&#x60; are read-only. Do not patch them; aggregation is the only writer. A patch of other fields still succeeds when those values are present on the account. */
     requestBody: Array<object>;
     /** Use this header to enable this experimental API. */
     xSailPointExperimental?: string;
@@ -934,5 +1000,5 @@ declare class ApiModule {
     static ɵinj: i0.ɵɵInjectorDeclaration<ApiModule>;
 }
 
-export { APIS, ApiModule, BASE_PATH, COLLECTION_FORMATS, Configuration, LocaleOrigin, MachineAccountClassificationMethodEnum, MachineAccountsService };
-export type { BaseCommonDto, ConfigurationParameters, CreateMachineAccountSubtypeV1Request, CreateMachineAccountSubtypeV1RequestParams, DataFormat, DataType, DeleteMachineAccountAsyncV1RequestParams, DeleteMachineAccountSubtypeByTechnicalNameV1RequestParams, DisableMachineAccountV1RequestParams, EnableMachineAccountV1RequestParams, ErrorMessageDto, ErrorResponseDto, GetMachineAccountSubtypeByIdV1RequestParams, GetMachineAccountSubtypeByTechnicalNameV1RequestParams, GetMachineAccountV1RequestParams, ListMachineAccountSubtypesV1RequestParams, ListMachineAccountsV1401Response, ListMachineAccountsV1429Response, ListMachineAccountsV1RequestParams, MachineAccount, MachineAccountsAsyncResult, Param, ParamLocation, ParamStyle, PatchMachineAccountSubtypeByTechnicalNameV1RequestParams, ReloadMachineAccountV1RequestParams, SourceSubtype, StandardDataFormat, StandardDataType, StandardParamStyle, UnlockMachineAccountV1RequestParams, UpdateMachineAccountV1RequestParams };
+export { APIS, ApiModule, BASE_PATH, COLLECTION_FORMATS, Configuration, LocaleOrigin, MachineAccountAllOfRiskSeverityEnum, MachineAccountClassificationMethodEnum, MachineAccountPermissionLevelEnum, MachineAccountsService };
+export type { BaseCommonDto, ConfigurationParameters, CreateMachineAccountSubtypeV1Request, CreateMachineAccountSubtypeV1RequestParams, DataFormat, DataType, DeleteMachineAccountAsyncV1RequestParams, DeleteMachineAccountSubtypeByTechnicalNameV1RequestParams, DisableMachineAccountV1RequestParams, EnableMachineAccountV1RequestParams, ErrorMessageDto, ErrorResponseDto, GetMachineAccountSubtypeByIdV1RequestParams, GetMachineAccountSubtypeByTechnicalNameV1RequestParams, GetMachineAccountV1RequestParams, ListMachineAccountSubtypesV1RequestParams, ListMachineAccountsV1401Response, ListMachineAccountsV1429Response, ListMachineAccountsV1RequestParams, MachineAccount, MachineAccountAllOfCompliance, MachineAccountAllOfRisk, MachineAccountsAsyncResult, Param, ParamLocation, ParamStyle, PatchMachineAccountSubtypeByTechnicalNameV1RequestParams, ReloadMachineAccountV1RequestParams, SourceSubtype, StandardDataFormat, StandardDataType, StandardParamStyle, UnlockMachineAccountV1RequestParams, UpdateMachineAccountV1RequestParams };

package/types/sailpoint-angular-sdk-machine_identities.d.ts

@@ -1353,6 +1353,22 @@ interface MachineidentityV2 {
      */
     readonly effectiveSanctionedStatus?: SanctionedStatus | null;
     risk?: MachineIdentityV2Risk;
+    /**
+     * Entro back-reference. Present when Entro enrichment is enabled for the tenant. Null means the identity is not Entro-correlated. Read-only; written only by aggregation. Not returned on older machine-identity versions.
+     */
+    readonly entroId?: string | null;
+    /**
+     * Entro insights. Null means not Entro-correlated; an empty array means enriched with no insights. Read-only; written only by aggregation. Filter matches a whole element, not a substring.
+     */
+    readonly insights?: Array<string> | null;
+    /**
+     * Entro session count. Null means not Entro-correlated and is not the same as 0. Read-only; written only by aggregation.
+     */
+    readonly sessionCount?: number | null;
+    /**
+     * Entro suspicious session count. Null means not Entro-correlated and is not the same as 0. Read-only; written only by aggregation.
+     */
+    readonly suspiciousSessionCount?: number | null;
 }
 
 /**
@@ -1613,9 +1629,9 @@ interface ListMachineIdentitiesV1RequestParams {
     offset?: number;
 }
 interface ListMachineIdentitiesV2RequestParams {
-    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **attributes**: *eq*  **manuallyEdited**: *eq*  **subtype**: *eq, in*  **owners.primaryIdentity.id**: *eq, in, sw*  **owners.primaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryIdentity.id**: *eq, in, sw*  **owners.secondaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryGovernanceGroup.id**: *eq, in*  **owners.secondaryGovernanceGroup.name**: *eq, in, isnull, pr*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, in, sw*  **risk.severity**: *eq, in*  **businessApplicationRefs.id**: *eq*  **effectiveSanctionedStatus**: *eq*  Business Application filters require Business Applications to be enabled for the tenant. Filter values are case-sensitive. When Business Applications is not enabled, these filters are not allowed and return &#x60;400&#x60;. */
+    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **attributes**: *eq*  **manuallyEdited**: *eq*  **subtype**: *eq, in*  **owners.primaryIdentity.id**: *eq, in, sw*  **owners.primaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryIdentity.id**: *eq, in, sw*  **owners.secondaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryGovernanceGroup.id**: *eq, in*  **owners.secondaryGovernanceGroup.name**: *eq, in, isnull, pr*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, in, sw*  **risk.severity**: *eq, in*  **businessApplicationRefs.id**: *eq*  **effectiveSanctionedStatus**: *eq*  **sessionCount**: *eq, gt, ge, lt, le, isnull*  **suspiciousSessionCount**: *eq, gt, ge, lt, le, isnull*  **entroId**: *eq*  **insights**: *eq*  Business Application filters require Business Applications to be enabled for the tenant. Filter values are case-sensitive. When Business Applications is not enabled, these filters are not allowed and return &#x60;400&#x60;.  &#x60;sessionCount&#x60;, &#x60;suspiciousSessionCount&#x60;, &#x60;entroId&#x60;, and &#x60;insights&#x60; require Entro enrichment to be enabled for the tenant. When it is not, those filters return &#x60;400&#x60;. &#x60;entroId&#x60; is an exact, case-sensitive match. &#x60;insights&#x60; matches one whole array element and does not match a substring. &#x60;sessionCount&#x60; and &#x60;suspiciousSessionCount&#x60; treat null as not enriched; &#x60;0&#x60; is a real count. */
     filters?: string;
-    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **nativeIdentity, name, owners.primaryIdentity.name, source.name, created, modified** */
+    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **nativeIdentity, name, owners.primaryIdentity.name, source.name, created, modified, sessionCount, suspiciousSessionCount**  &#x60;entroId&#x60; and &#x60;insights&#x60; are not sortable. &#x60;sessionCount&#x60; and &#x60;suspiciousSessionCount&#x60; require Entro enrichment to be enabled; otherwise those sorters return &#x60;400&#x60;. Null counts sort as not enriched, distinct from &#x60;0&#x60;. */
     sorters?: string;
     /** If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. */
     count?: boolean;
@@ -2084,7 +2100,7 @@ declare class MachineIdentitiesService extends BaseService {
     }): Observable<HttpEvent<MachineIdentityResponse>>;
     /**
      * Partial update of machine identity
-     * Use this API to selectively update machine identity details using a JSONPatch payload.  Patchable fields include **name**, **description**, **nativeIdentity**, **subtype**, **environment**, **attributes**, **owners**, **userEntitlements**, **manuallyEdited**, and **businessApplicationRefs** (when Business Applications is enabled for the tenant).   When Business Applications is enabled for the tenant, &#x60;/businessApplicationRefs&#x60; may be replaced with at most one MANUAL Business Application reference, or cleared with an empty array. Patching &#x60;/businessApplicationRefs&#x60; when Business Applications is not enabled returns &#x60;400&#x60;. Existing &#x60;AUTOMATIC&#x60; correlations cannot be overridden (&#x60;400&#x60; / &#x60;ILLEGAL_UPDATE_ATTEMPT&#x60;). Unknown BA id returns &#x60;404&#x60;.
+     * Use this API to selectively update machine identity details using a JSONPatch payload.  Patchable fields include **name**, **description**, **nativeIdentity**, **subtype**, **environment**, **attributes**, **owners**, **userEntitlements**, **manuallyEdited**, and **businessApplicationRefs** (when Business Applications is enabled for the tenant).   When Business Applications is enabled for the tenant, &#x60;/businessApplicationRefs&#x60; may be replaced with at most one MANUAL Business Application reference, or cleared with an empty array. Patching &#x60;/businessApplicationRefs&#x60; when Business Applications is not enabled returns &#x60;400&#x60;. Existing &#x60;AUTOMATIC&#x60; correlations cannot be overridden (&#x60;400&#x60; / &#x60;ILLEGAL_UPDATE_ATTEMPT&#x60;). Unknown BA id returns &#x60;404&#x60;.   &#x60;entroId&#x60;, &#x60;insights&#x60;, &#x60;sessionCount&#x60;, and &#x60;suspiciousSessionCount&#x60; are read-only. A patch that targets them is rejected with &#x60;400&#x60;; aggregation is the only writer. &#x60;entroRiskBand&#x60;, &#x60;agentSource&#x60;, and &#x60;integrationType&#x60; are not response fields.
      * @param requestParameters
      * @param observe set whether or not to return the data Observable as the body, response or events. defaults to returning the body.
      * @param reportProgress flag to report request and response progress.

package/types/sailpoint-angular-sdk.d.ts

@@ -51680,6 +51680,53 @@ interface CreateMachineAccountSubtypeV1Request {
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
+interface MachineAccountAllOfCompliance {
+    /**
+     * Framework control id.
+     */
+    id?: string | null;
+}
+
+/**
+ * Identity Security Cloud API - Machine Accounts
+ *
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Entro risk for this machine account. Present when Entro enrichment is enabled for the tenant. Null when no risk has been recorded. `score` stays null until a risk-engine projection exists. Read-only; written only by aggregation. This is separate from machine-identity SAF risk.
+ */
+interface MachineAccountAllOfRisk {
+    /**
+     * Risk score. Null for Entro-only severity.
+     */
+    score?: number | null;
+    /**
+     * Risk severity. A null stored severity can render as UNKNOWN when that behavior is enabled.
+     */
+    severity?: MachineAccountAllOfRiskSeverityEnum | null;
+}
+declare enum MachineAccountAllOfRiskSeverityEnum {
+    Unknown = "UNKNOWN",
+    Low = "LOW",
+    Medium = "MEDIUM",
+    High = "HIGH",
+    Critical = "CRITICAL"
+}
+
+/**
+ * Identity Security Cloud API - Machine Accounts
+ *
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
 interface MachineAccount {
     /**
      * System-generated unique ID of the Object
@@ -51769,6 +51816,19 @@ interface MachineAccount {
      * The source this machine account belongs to.
      */
     source: any | null;
+    risk?: MachineAccountAllOfRisk | null;
+    /**
+     * Entro permission level. Null when not enriched. Read-only; written only by aggregation.
+     */
+    readonly permissionLevel?: MachineAccountPermissionLevelEnum | null;
+    /**
+     * Entro compliance control ids. Null when absent; empty when Entro recorded no violations. A violations count is the length of this array. There is no `complianceViolationsCount` field, and `compliance` is not a list filter or sort field. Read-only; written only by aggregation.
+     */
+    readonly compliance?: Array<MachineAccountAllOfCompliance> | null;
+    /**
+     * When the machine account was last used, from Entro. Null when not enriched. Read-only; written only by aggregation.
+     */
+    readonly lastUsedAt?: string | null;
 }
 declare enum MachineAccountClassificationMethodEnum {
     Source = "SOURCE",
@@ -51776,6 +51836,12 @@ declare enum MachineAccountClassificationMethodEnum {
     Discovery = "DISCOVERY",
     Manual = "MANUAL"
 }
+declare enum MachineAccountPermissionLevelEnum {
+    Privileged = "PRIVILEGED",
+    Elevated = "ELEVATED",
+    Basic = "BASIC",
+    Unknown = "UNKNOWN"
+}
 
 /**
  * Identity Security Cloud API - Machine Accounts
@@ -52070,9 +52136,9 @@ interface ListMachineAccountsV1RequestParams {
     offset?: number;
     /** If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. */
     count?: boolean;
-    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **uuid**: *eq, in*  **description**: *eq, in, sw*  **machineIdentity.id**: *eq, in*  **machineIdentity.name**: *eq, in, sw*  **subtype.technicalName**: *eq, in, sw*  **subtype.displayName**: *eq, in, sw*  **accessType**: *eq, in, sw*  **environment**: *eq, in, sw*  **ownerIdentity**: *eq, in*  **ownerIdentity.id**: *eq, in*  **ownerIdentity.name**: *eq, in, sw*  **manuallyCorrelated**: *eq*  **enabled**: *eq*  **locked**: *eq*  **hasEntitlements**: *eq*  **attributes**: *eq*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **created**: *eq, gt, lt, ge, le*  **modified**: *eq, gt, lt, ge, le* */
+    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **uuid**: *eq, in*  **description**: *eq, in, sw*  **machineIdentity.id**: *eq, in*  **machineIdentity.name**: *eq, in, sw*  **subtype.technicalName**: *eq, in, sw*  **subtype.displayName**: *eq, in, sw*  **accessType**: *eq, in, sw*  **environment**: *eq, in, sw*  **ownerIdentity**: *eq, in*  **ownerIdentity.id**: *eq, in*  **ownerIdentity.name**: *eq, in, sw*  **manuallyCorrelated**: *eq*  **enabled**: *eq*  **locked**: *eq*  **hasEntitlements**: *eq*  **attributes**: *eq*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **created**: *eq, gt, lt, ge, le*  **modified**: *eq, gt, lt, ge, le*  **risk.severity**: *eq, in*  **permissionLevel**: *eq, in*  **lastUsedAt**: *gt, lt, ge, le*  &#x60;risk.severity&#x60;, &#x60;permissionLevel&#x60;, and &#x60;lastUsedAt&#x60; require Entro enrichment to be enabled for the tenant. When it is not, those filters return &#x60;400&#x60;. &#x60;compliance&#x60; and &#x60;complianceViolationsCount&#x60; are not filter fields. With unknown-severity enabled, a null stored severity matches &#x60;risk.severity eq \&quot;UNKNOWN\&quot;&#x60;. */
     filters?: string;
-    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, nativeIdentity, ownerIdentity, uuid, description, machineIdentity.id, machineIdentity.name, subtype.technicalName, subtype.displayName, accessType, environment, manuallyCorrelated, enabled, locked, hasEntitlements, ownerIdentity.id, ownerIdentity.name, attributes, source.id, source.name, created, modified** */
+    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, nativeIdentity, ownerIdentity, uuid, description, machineIdentity.id, machineIdentity.name, subtype.technicalName, subtype.displayName, accessType, environment, manuallyCorrelated, enabled, locked, hasEntitlements, ownerIdentity.id, ownerIdentity.name, attributes, source.id, source.name, created, modified, risk.severity, permissionLevel, lastUsedAt**  &#x60;risk.severity&#x60;, &#x60;permissionLevel&#x60;, and &#x60;lastUsedAt&#x60; require Entro enrichment to be enabled; otherwise those sorters return &#x60;400&#x60;. &#x60;risk.severity&#x60; sorts by rank (UNKNOWN, LOW, MEDIUM, HIGH, CRITICAL), not alphabetically. Null Entro values sort last. &#x60;compliance&#x60; is not sortable. */
     sorters?: string;
     /** Use this header to enable this experimental API. */
     xSailPointExperimental?: string;
@@ -52102,7 +52168,7 @@ interface UnlockMachineAccountV1RequestParams {
 interface UpdateMachineAccountV1RequestParams {
     /** Machine Account ID. */
     id: string;
-    /** A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard. The following fields are patchable:           * description           * ownerIdentity           * subType           * accessType           * environment           * attributes           * classificationMethod           * manuallyEdited           * nativeIdentity           * uuid           * source           * manuallyCorrelated           * enabled           * locked           * hasEntitlements           * connectorAttributes */
+    /** A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard. The following fields are patchable:           * description           * environment           * accessType           * attributes           * manuallyEdited           * ownerIdentity           * subtype           * machineIdentity           * owners  Non-dataset accounts may patch ownerIdentity, subtype, and machineIdentity. Dataset accounts may patch owners. When expanded ownership is enabled, non-dataset accounts may also patch owners, and dataset accounts may also patch ownerIdentity. &#x60;risk&#x60;, &#x60;permissionLevel&#x60;, &#x60;compliance&#x60;, and &#x60;lastUsedAt&#x60; are read-only. Do not patch them; aggregation is the only writer. A patch of other fields still succeeds when those values are present on the account. */
     requestBody: Array<object>;
     /** Use this header to enable this experimental API. */
     xSailPointExperimental?: string;
@@ -54182,6 +54248,22 @@ interface MachineidentityV2 {
      */
     readonly effectiveSanctionedStatus?: SanctionedStatus | null;
     risk?: MachineIdentityV2Risk;
+    /**
+     * Entro back-reference. Present when Entro enrichment is enabled for the tenant. Null means the identity is not Entro-correlated. Read-only; written only by aggregation. Not returned on older machine-identity versions.
+     */
+    readonly entroId?: string | null;
+    /**
+     * Entro insights. Null means not Entro-correlated; an empty array means enriched with no insights. Read-only; written only by aggregation. Filter matches a whole element, not a substring.
+     */
+    readonly insights?: Array<string> | null;
+    /**
+     * Entro session count. Null means not Entro-correlated and is not the same as 0. Read-only; written only by aggregation.
+     */
+    readonly sessionCount?: number | null;
+    /**
+     * Entro suspicious session count. Null means not Entro-correlated and is not the same as 0. Read-only; written only by aggregation.
+     */
+    readonly suspiciousSessionCount?: number | null;
 }
 
 /**
@@ -54442,9 +54524,9 @@ interface ListMachineIdentitiesV1RequestParams {
     offset?: number;
 }
 interface ListMachineIdentitiesV2RequestParams {
-    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **attributes**: *eq*  **manuallyEdited**: *eq*  **subtype**: *eq, in*  **owners.primaryIdentity.id**: *eq, in, sw*  **owners.primaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryIdentity.id**: *eq, in, sw*  **owners.secondaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryGovernanceGroup.id**: *eq, in*  **owners.secondaryGovernanceGroup.name**: *eq, in, isnull, pr*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, in, sw*  **risk.severity**: *eq, in*  **businessApplicationRefs.id**: *eq*  **effectiveSanctionedStatus**: *eq*  Business Application filters require Business Applications to be enabled for the tenant. Filter values are case-sensitive. When Business Applications is not enabled, these filters are not allowed and return &#x60;400&#x60;. */
+    /** Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, in, sw*  **nativeIdentity**: *eq, in, sw*  **attributes**: *eq*  **manuallyEdited**: *eq*  **subtype**: *eq, in*  **owners.primaryIdentity.id**: *eq, in, sw*  **owners.primaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryIdentity.id**: *eq, in, sw*  **owners.secondaryIdentity.name**: *eq, in, isnull, pr*  **owners.secondaryGovernanceGroup.id**: *eq, in*  **owners.secondaryGovernanceGroup.name**: *eq, in, isnull, pr*  **source.id**: *eq, in*  **source.name**: *eq, in, sw*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, in, sw*  **risk.severity**: *eq, in*  **businessApplicationRefs.id**: *eq*  **effectiveSanctionedStatus**: *eq*  **sessionCount**: *eq, gt, ge, lt, le, isnull*  **suspiciousSessionCount**: *eq, gt, ge, lt, le, isnull*  **entroId**: *eq*  **insights**: *eq*  Business Application filters require Business Applications to be enabled for the tenant. Filter values are case-sensitive. When Business Applications is not enabled, these filters are not allowed and return &#x60;400&#x60;.  &#x60;sessionCount&#x60;, &#x60;suspiciousSessionCount&#x60;, &#x60;entroId&#x60;, and &#x60;insights&#x60; require Entro enrichment to be enabled for the tenant. When it is not, those filters return &#x60;400&#x60;. &#x60;entroId&#x60; is an exact, case-sensitive match. &#x60;insights&#x60; matches one whole array element and does not match a substring. &#x60;sessionCount&#x60; and &#x60;suspiciousSessionCount&#x60; treat null as not enriched; &#x60;0&#x60; is a real count. */
     filters?: string;
-    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **nativeIdentity, name, owners.primaryIdentity.name, source.name, created, modified** */
+    /** Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **nativeIdentity, name, owners.primaryIdentity.name, source.name, created, modified, sessionCount, suspiciousSessionCount**  &#x60;entroId&#x60; and &#x60;insights&#x60; are not sortable. &#x60;sessionCount&#x60; and &#x60;suspiciousSessionCount&#x60; require Entro enrichment to be enabled; otherwise those sorters return &#x60;400&#x60;. Null counts sort as not enriched, distinct from &#x60;0&#x60;. */
     sorters?: string;
     /** If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. */
     count?: boolean;
@@ -54913,7 +54995,7 @@ declare class MachineIdentitiesService extends BaseService$U {
     }): Observable<HttpEvent<MachineIdentityResponse>>;
     /**
      * Partial update of machine identity
-     * Use this API to selectively update machine identity details using a JSONPatch payload.  Patchable fields include **name**, **description**, **nativeIdentity**, **subtype**, **environment**, **attributes**, **owners**, **userEntitlements**, **manuallyEdited**, and **businessApplicationRefs** (when Business Applications is enabled for the tenant).   When Business Applications is enabled for the tenant, &#x60;/businessApplicationRefs&#x60; may be replaced with at most one MANUAL Business Application reference, or cleared with an empty array. Patching &#x60;/businessApplicationRefs&#x60; when Business Applications is not enabled returns &#x60;400&#x60;. Existing &#x60;AUTOMATIC&#x60; correlations cannot be overridden (&#x60;400&#x60; / &#x60;ILLEGAL_UPDATE_ATTEMPT&#x60;). Unknown BA id returns &#x60;404&#x60;.
+     * Use this API to selectively update machine identity details using a JSONPatch payload.  Patchable fields include **name**, **description**, **nativeIdentity**, **subtype**, **environment**, **attributes**, **owners**, **userEntitlements**, **manuallyEdited**, and **businessApplicationRefs** (when Business Applications is enabled for the tenant).   When Business Applications is enabled for the tenant, &#x60;/businessApplicationRefs&#x60; may be replaced with at most one MANUAL Business Application reference, or cleared with an empty array. Patching &#x60;/businessApplicationRefs&#x60; when Business Applications is not enabled returns &#x60;400&#x60;. Existing &#x60;AUTOMATIC&#x60; correlations cannot be overridden (&#x60;400&#x60; / &#x60;ILLEGAL_UPDATE_ATTEMPT&#x60;). Unknown BA id returns &#x60;404&#x60;.   &#x60;entroId&#x60;, &#x60;insights&#x60;, &#x60;sessionCount&#x60;, and &#x60;suspiciousSessionCount&#x60; are read-only. A patch that targets them is rejected with &#x60;400&#x60;; aggregation is the only writer. &#x60;entroRiskBand&#x60;, &#x60;agentSource&#x60;, and &#x60;integrationType&#x60; are not response fields.
      * @param requestParameters
      * @param observe set whether or not to return the data Observable as the body, response or events. defaults to returning the body.
      * @param reportProgress flag to report request and response progress.

package/ui_metadata/README.md

@@ -1,4 +1,4 @@
-# @sailpoint/angular-sdk@0.0.19
+# @sailpoint/angular-sdk@0.0.21
 
 Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.
 
@@ -24,7 +24,7 @@ Navigate to the folder of your consuming project and run one of next commands.
 _published:_
 
 ```console
-npm install @sailpoint/angular-sdk@0.0.19 --save
+npm install @sailpoint/angular-sdk@0.0.21 --save
 ```
 
 _without publishing (not recommended):_

package/work_items/README.md

@@ -1,4 +1,4 @@
-# @sailpoint/angular-sdk@0.0.19
+# @sailpoint/angular-sdk@0.0.21
 
 Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.
 
@@ -24,7 +24,7 @@ Navigate to the folder of your consuming project and run one of next commands.
 _published:_
 
 ```console
-npm install @sailpoint/angular-sdk@0.0.19 --save
+npm install @sailpoint/angular-sdk@0.0.21 --save
 ```
 
 _without publishing (not recommended):_

package/work_reassignment/README.md

@@ -1,4 +1,4 @@
-# @sailpoint/angular-sdk@0.0.19
+# @sailpoint/angular-sdk@0.0.21
 
 Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.
 
@@ -24,7 +24,7 @@ Navigate to the folder of your consuming project and run one of next commands.
 _published:_
 
 ```console
-npm install @sailpoint/angular-sdk@0.0.19 --save
+npm install @sailpoint/angular-sdk@0.0.21 --save
 ```
 
 _without publishing (not recommended):_

package/workflows/README.md

@@ -1,4 +1,4 @@
-# @sailpoint/angular-sdk@0.0.19
+# @sailpoint/angular-sdk@0.0.21
 
 Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.
 
@@ -24,7 +24,7 @@ Navigate to the folder of your consuming project and run one of next commands.
 _published:_
 
 ```console
-npm install @sailpoint/angular-sdk@0.0.19 --save
+npm install @sailpoint/angular-sdk@0.0.21 --save
 ```
 
 _without publishing (not recommended):_