@sailpoint/api-client 2.2.51 → 2.2.52

package/dist/roles/api.d.ts

@@ -490,10 +490,10 @@ export interface Entitlement {
     'requestable'?: boolean;
     /**
      *
-     * @type {EntitlementOwner}
+     * @type {EntitlementV2Owner}
      * @memberof Entitlement
      */
-    'owner'?: EntitlementOwner | null;
+    'owner'?: EntitlementV2Owner | null;
     /**
      * List of additional owner references beyond the primary owner. Each entry may be an identity (IDENTITY) or a governance group (GOVERNANCE_GROUP).
      * @type {Array<AdditionalOwnerRef>}
@@ -510,10 +510,10 @@ export interface Entitlement {
     } | null;
     /**
      *
-     * @type {EntitlementAccessModelMetadata}
+     * @type {EntitlementV2AccessModelMetadata}
      * @memberof Entitlement
      */
-    'accessModelMetadata'?: EntitlementAccessModelMetadata;
+    'accessModelMetadata'?: EntitlementV2AccessModelMetadata;
     /**
      * Time when the entitlement was created
      * @type {string}
@@ -554,47 +554,70 @@ export interface Entitlement {
     'directPermissions'?: Array<PermissionDTO>;
 }
 /**
- * Additional data to classify the entitlement
+ *
  * @export
- * @interface EntitlementAccessModelMetadata
+ * @interface EntitlementPrivilegeLevel
  */
-export interface EntitlementAccessModelMetadata {
+export interface EntitlementPrivilegeLevel {
     /**
-     *
-     * @type {Array<AccessModelMetadata>}
-     * @memberof EntitlementAccessModelMetadata
+     * Direct privilege level assigned to the entitlement
+     * @type {string}
+     * @memberof EntitlementPrivilegeLevel
      */
-    'attributes'?: Array<AccessModelMetadata>;
-}
-/**
- * The identity that owns the entitlement
- * @export
- * @interface EntitlementOwner
- */
-export interface EntitlementOwner {
+    'direct'?: EntitlementPrivilegeLevelDirectEnum;
     /**
-     * The identity ID
+     * User or process that set the privilege level
      * @type {string}
-     * @memberof EntitlementOwner
+     * @memberof EntitlementPrivilegeLevel
      */
-    'id'?: string;
+    'setBy'?: string;
     /**
-     * The type of object
+     * Method by which the privilege level was set
      * @type {string}
-     * @memberof EntitlementOwner
+     * @memberof EntitlementPrivilegeLevel
      */
-    'type'?: EntitlementOwnerTypeEnum;
+    'setByType'?: EntitlementPrivilegeLevelSetByTypeEnum | null;
     /**
-     * The display name of the identity
+     * Inherited privilege level on the entitlement, if any
      * @type {string}
-     * @memberof EntitlementOwner
+     * @memberof EntitlementPrivilegeLevel
      */
-    'name'?: string;
+    'inherited'?: EntitlementPrivilegeLevelInheritedEnum | null;
+    /**
+     * Effective privilege level assigned to the entitlement
+     * @type {string}
+     * @memberof EntitlementPrivilegeLevel
+     */
+    'effective'?: EntitlementPrivilegeLevelEffectiveEnum;
 }
-export declare const EntitlementOwnerTypeEnum: {
-    readonly Identity: "IDENTITY";
+export declare const EntitlementPrivilegeLevelDirectEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
 };
-export type EntitlementOwnerTypeEnum = typeof EntitlementOwnerTypeEnum[keyof typeof EntitlementOwnerTypeEnum];
+export type EntitlementPrivilegeLevelDirectEnum = typeof EntitlementPrivilegeLevelDirectEnum[keyof typeof EntitlementPrivilegeLevelDirectEnum];
+export declare const EntitlementPrivilegeLevelSetByTypeEnum: {
+    readonly Override: "OVERRIDE";
+    readonly CustomCriteria: "CUSTOM_CRITERIA";
+    readonly ConnectorCriteria: "CONNECTOR_CRITERIA";
+    readonly SingleLevelCriteria: "SINGLE_LEVEL_CRITERIA";
+};
+export type EntitlementPrivilegeLevelSetByTypeEnum = typeof EntitlementPrivilegeLevelSetByTypeEnum[keyof typeof EntitlementPrivilegeLevelSetByTypeEnum];
+export declare const EntitlementPrivilegeLevelInheritedEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
+};
+export type EntitlementPrivilegeLevelInheritedEnum = typeof EntitlementPrivilegeLevelInheritedEnum[keyof typeof EntitlementPrivilegeLevelInheritedEnum];
+export declare const EntitlementPrivilegeLevelEffectiveEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
+};
+export type EntitlementPrivilegeLevelEffectiveEnum = typeof EntitlementPrivilegeLevelEffectiveEnum[keyof typeof EntitlementPrivilegeLevelEffectiveEnum];
 /**
  * Entitlement including a specific set of access.
  * @export
@@ -649,6 +672,263 @@ export interface EntitlementSource {
      */
     'name'?: string;
 }
+/**
+ *
+ * @export
+ * @interface EntitlementV2
+ */
+export interface EntitlementV2 {
+    /**
+     * The entitlement id
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'id'?: string;
+    /**
+     * The entitlement name
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'name'?: string;
+    /**
+     * The entitlement attribute name
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'attribute'?: string;
+    /**
+     * The value of the entitlement
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'value'?: string;
+    /**
+     * The object type of the entitlement from the source schema
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'sourceSchemaObjectType'?: string;
+    /**
+     * The description of the entitlement
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'description'?: string | null;
+    /**
+     *
+     * @type {EntitlementV2PrivilegeLevel}
+     * @memberof EntitlementV2
+     */
+    'privilegeLevel'?: EntitlementV2PrivilegeLevel;
+    /**
+     * List of tags assigned to the entitlement
+     * @type {Array<string>}
+     * @memberof EntitlementV2
+     */
+    'tags'?: Array<string> | null;
+    /**
+     * True if the entitlement is cloud governed
+     * @type {boolean}
+     * @memberof EntitlementV2
+     */
+    'cloudGoverned'?: boolean;
+    /**
+     * True if the entitlement is able to be directly requested
+     * @type {boolean}
+     * @memberof EntitlementV2
+     */
+    'requestable'?: boolean;
+    /**
+     *
+     * @type {EntitlementV2Owner}
+     * @memberof EntitlementV2
+     */
+    'owner'?: EntitlementV2Owner | null;
+    /**
+     * A map of entitlement fields that have been manually updated. The key is the field name in UPPER_SNAKE_CASE format, and the value is true or false to indicate if the field has been updated.
+     * @type {{ [key: string]: any; }}
+     * @memberof EntitlementV2
+     */
+    'manuallyUpdatedFields'?: {
+        [key: string]: any;
+    } | null;
+    /**
+     *
+     * @type {EntitlementV2AccessModelMetadata}
+     * @memberof EntitlementV2
+     */
+    'accessModelMetadata'?: EntitlementV2AccessModelMetadata;
+    /**
+     * Time when the entitlement was created
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'created'?: string;
+    /**
+     * Time when the entitlement was last modified
+     * @type {string}
+     * @memberof EntitlementV2
+     */
+    'modified'?: string;
+    /**
+     *
+     * @type {EntitlementV2Source}
+     * @memberof EntitlementV2
+     */
+    'source'?: EntitlementV2Source;
+    /**
+     * A map of free-form key-value pairs from the source system
+     * @type {{ [key: string]: any; }}
+     * @memberof EntitlementV2
+     */
+    'attributes'?: {
+        [key: string]: any;
+    };
+    /**
+     * List of IDs of segments, if any, to which this Entitlement is assigned.
+     * @type {Array<string>}
+     * @memberof EntitlementV2
+     */
+    'segments'?: Array<string> | null;
+    /**
+     *
+     * @type {Array<PermissionDTO>}
+     * @memberof EntitlementV2
+     */
+    'directPermissions'?: Array<PermissionDTO>;
+}
+/**
+ * Additional data to classify the entitlement
+ * @export
+ * @interface EntitlementV2AccessModelMetadata
+ */
+export interface EntitlementV2AccessModelMetadata {
+    /**
+     *
+     * @type {Array<AccessModelMetadata>}
+     * @memberof EntitlementV2AccessModelMetadata
+     */
+    'attributes'?: Array<AccessModelMetadata>;
+}
+/**
+ * The identity that owns the entitlement
+ * @export
+ * @interface EntitlementV2Owner
+ */
+export interface EntitlementV2Owner {
+    /**
+     * The identity ID
+     * @type {string}
+     * @memberof EntitlementV2Owner
+     */
+    'id'?: string;
+    /**
+     * The type of object
+     * @type {string}
+     * @memberof EntitlementV2Owner
+     */
+    'type'?: EntitlementV2OwnerTypeEnum;
+    /**
+     * The display name of the identity
+     * @type {string}
+     * @memberof EntitlementV2Owner
+     */
+    'name'?: string;
+}
+export declare const EntitlementV2OwnerTypeEnum: {
+    readonly Identity: "IDENTITY";
+};
+export type EntitlementV2OwnerTypeEnum = typeof EntitlementV2OwnerTypeEnum[keyof typeof EntitlementV2OwnerTypeEnum];
+/**
+ *
+ * @export
+ * @interface EntitlementV2PrivilegeLevel
+ */
+export interface EntitlementV2PrivilegeLevel {
+    /**
+     * Direct privilege level assigned to the entitlement
+     * @type {string}
+     * @memberof EntitlementV2PrivilegeLevel
+     */
+    'direct'?: EntitlementV2PrivilegeLevelDirectEnum;
+    /**
+     * User or process that set the privilege level
+     * @type {string}
+     * @memberof EntitlementV2PrivilegeLevel
+     */
+    'setBy'?: string;
+    /**
+     * Method by which the privilege level was set
+     * @type {string}
+     * @memberof EntitlementV2PrivilegeLevel
+     */
+    'setByType'?: EntitlementV2PrivilegeLevelSetByTypeEnum | null;
+    /**
+     * Inherited privilege level on the entitlement, if any
+     * @type {string}
+     * @memberof EntitlementV2PrivilegeLevel
+     */
+    'inherited'?: EntitlementV2PrivilegeLevelInheritedEnum | null;
+    /**
+     * Effective privilege level assigned to the entitlement
+     * @type {string}
+     * @memberof EntitlementV2PrivilegeLevel
+     */
+    'effective'?: EntitlementV2PrivilegeLevelEffectiveEnum;
+}
+export declare const EntitlementV2PrivilegeLevelDirectEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
+};
+export type EntitlementV2PrivilegeLevelDirectEnum = typeof EntitlementV2PrivilegeLevelDirectEnum[keyof typeof EntitlementV2PrivilegeLevelDirectEnum];
+export declare const EntitlementV2PrivilegeLevelSetByTypeEnum: {
+    readonly Override: "OVERRIDE";
+    readonly CustomCriteria: "CUSTOM_CRITERIA";
+    readonly ConnectorCriteria: "CONNECTOR_CRITERIA";
+    readonly SingleLevelCriteria: "SINGLE_LEVEL_CRITERIA";
+};
+export type EntitlementV2PrivilegeLevelSetByTypeEnum = typeof EntitlementV2PrivilegeLevelSetByTypeEnum[keyof typeof EntitlementV2PrivilegeLevelSetByTypeEnum];
+export declare const EntitlementV2PrivilegeLevelInheritedEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
+};
+export type EntitlementV2PrivilegeLevelInheritedEnum = typeof EntitlementV2PrivilegeLevelInheritedEnum[keyof typeof EntitlementV2PrivilegeLevelInheritedEnum];
+export declare const EntitlementV2PrivilegeLevelEffectiveEnum: {
+    readonly High: "HIGH";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly None: "NONE";
+};
+export type EntitlementV2PrivilegeLevelEffectiveEnum = typeof EntitlementV2PrivilegeLevelEffectiveEnum[keyof typeof EntitlementV2PrivilegeLevelEffectiveEnum];
+/**
+ *
+ * @export
+ * @interface EntitlementV2Source
+ */
+export interface EntitlementV2Source {
+    /**
+     * The source ID
+     * @type {string}
+     * @memberof EntitlementV2Source
+     */
+    'id'?: string;
+    /**
+     * The source type, will always be \"SOURCE\"
+     * @type {string}
+     * @memberof EntitlementV2Source
+     */
+    'type'?: string;
+    /**
+     * The source name
+     * @type {string}
+     * @memberof EntitlementV2Source
+     */
+    'name'?: string;
+}
 /**
  *
  * @export
@@ -748,26 +1028,26 @@ export type JsonPatchOperationValue = Array<ArrayInner> | boolean | number | obj
 /**
  *
  * @export
- * @interface ListRolesV1401Response
+ * @interface ListRolesV2401Response
  */
-export interface ListRolesV1401Response {
+export interface ListRolesV2401Response {
     /**
      * A message describing the error
      * @type {any}
-     * @memberof ListRolesV1401Response
+     * @memberof ListRolesV2401Response
      */
     'error'?: any;
 }
 /**
  *
  * @export
- * @interface ListRolesV1429Response
+ * @interface ListRolesV2429Response
  */
-export interface ListRolesV1429Response {
+export interface ListRolesV2429Response {
     /**
      * A message describing the error
      * @type {any}
-     * @memberof ListRolesV1429Response
+     * @memberof ListRolesV2429Response
      */
     'message'?: any;
 }
@@ -1609,77 +1889,265 @@ export interface RoleMetadataBulkUpdateByQueryRequestValuesInner {
     'attributeValue'?: Array<string>;
 }
 /**
- * Task result.
+ * Privilege level of the role. The effective level is the highest effective privilege level among the entitlements assigned directly to the role and the entitlements included in the role\'s access profiles.
  * @export
- * @interface TaskResultDto
+ * @interface RolePrivilegeLevel
  */
-export interface TaskResultDto {
-    /**
-     * Task result DTO type.
-     * @type {string}
-     * @memberof TaskResultDto
-     */
-    'type'?: TaskResultDtoTypeEnum;
-    /**
-     * Task result ID.
-     * @type {string}
-     * @memberof TaskResultDto
-     */
-    'id'?: string;
+export interface RolePrivilegeLevel {
     /**
-     * Task result display name.
+     * Effective privilege level of the role. **UNDETERMINED** means the privilege level could not be calculated for the role\'s entitlements.
      * @type {string}
-     * @memberof TaskResultDto
+     * @memberof RolePrivilegeLevel
      */
-    'name'?: string | null;
+    'effective'?: RolePrivilegeLevelEffectiveEnum;
 }
-export declare const TaskResultDtoTypeEnum: {
-    readonly TaskResult: "TASK_RESULT";
+export declare const RolePrivilegeLevelEffectiveEnum: {
+    readonly None: "NONE";
+    readonly Low: "LOW";
+    readonly Medium: "MEDIUM";
+    readonly High: "HIGH";
+    readonly Undetermined: "UNDETERMINED";
 };
-export type TaskResultDtoTypeEnum = typeof TaskResultDtoTypeEnum[keyof typeof TaskResultDtoTypeEnum];
+export type RolePrivilegeLevelEffectiveEnum = typeof RolePrivilegeLevelEffectiveEnum[keyof typeof RolePrivilegeLevelEffectiveEnum];
 /**
- * RolesApi - axios parameter creator
+ * A Role, including its effective privilege level.
  * @export
+ * @interface RoleV2
  */
-export declare const RolesApiAxiosParamCreator: (configuration?: Configuration) => {
+export interface RoleV2 {
     /**
-     * This API creates a role.  You must have a token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority to call this API.   In addition, a ROLE_SUBADMIN may not create a role including an access profile if that access profile is associated with a source the ROLE_SUBADMIN is not associated with themselves.   The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles. However, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.
-     * @summary Create a role
-     * @param {Role} role
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
+     * The id of the Role. This field must be left null when creating an Role, otherwise a 400 Bad Request error will result.
+     * @type {string}
+     * @memberof RoleV2
      */
-    createRoleV1: (role: Role, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    'id'?: string;
     /**
-     * This endpoint initiates a bulk deletion of one or more roles. When the request is successful, the endpoint returns the bulk delete\'s task result ID.  To follow the task, you can use [Get Task Status by ID](https://developer.sailpoint.com/docs/api/get-task-status-v-1), which will return the task result\'s status and information.  This endpoint can only bulk delete up to a limit of 50 roles per request.  A user with ROLE_SUBADMIN authority can only call this endpoint if all roles included in the request are associated with sources with management workgroups the ROLE_SUBADMIN is a member of.
-     * @summary Delete role(s)
-     * @param {RoleBulkDeleteRequest} roleBulkDeleteRequest
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
+     * The human-readable display name of the Role
+     * @type {string}
+     * @memberof RoleV2
      */
-    deleteBulkRolesV1: (roleBulkDeleteRequest: RoleBulkDeleteRequest, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    'name': string;
     /**
-     * This API initialize a request to remove a single Access Model Metadata from a role by attribute key and value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API.
-     * @summary Remove a metadata from role.
-     * @param {string} id The role\&#39;s id.
-     * @param {string} attributeKey Technical name of the Attribute.
-     * @param {string} attributeValue Technical name of the Attribute Value.
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
+     * Date the Role was created
+     * @type {string}
+     * @memberof RoleV2
      */
-    deleteMetadataFromRoleByKeyAndValueV1: (id: string, attributeKey: string, attributeValue: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    'created'?: string;
     /**
-     * This API deletes a Role by its ID.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
-     * @summary Delete a role
-     * @param {string} id ID of the Role
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
+     * Date the Role was last modified.
+     * @type {string}
+     * @memberof RoleV2
      */
-    deleteRoleV1: (id: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    'modified'?: string;
     /**
-     *  This API initial a request for one bulk update\'s status by bulk update Id returns the status of the bulk update process. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API.
-     * @summary Get bulk-update status by id
-     * @param {string} id The Id of the bulk update task.
+     * A human-readable description of the Role
+     * @type {string}
+     * @memberof RoleV2
+     */
+    'description'?: string | null;
+    /**
+     *
+     * @type {OwnerReference}
+     * @memberof RoleV2
+     */
+    'owner': OwnerReference | null;
+    /**
+     * List of additional owner references beyond the primary owner. Each entry may be an identity (IDENTITY) or a governance group (GOVERNANCE_GROUP).
+     * @type {Array<AdditionalOwnerRef>}
+     * @memberof RoleV2
+     */
+    'additionalOwners'?: Array<AdditionalOwnerRef> | null;
+    /**
+     *
+     * @type {Array<AccessProfileRef>}
+     * @memberof RoleV2
+     */
+    'accessProfiles'?: Array<AccessProfileRef> | null;
+    /**
+     *
+     * @type {Array<EntitlementRef>}
+     * @memberof RoleV2
+     */
+    'entitlements'?: Array<EntitlementRef>;
+    /**
+     *
+     * @type {RoleMembershipSelector}
+     * @memberof RoleV2
+     */
+    'membership'?: RoleMembershipSelector | null;
+    /**
+     * This field is not directly modifiable and is generally expected to be *null*. In very rare instances, some Roles may have been created using membership selection criteria that are no longer fully supported. While these Roles will still work, they should be migrated to STANDARD or IDENTITY_LIST selection criteria. This field exists for informational purposes as an aid to such migration.
+     * @type {{ [key: string]: any; }}
+     * @memberof RoleV2
+     */
+    'legacyMembershipInfo'?: {
+        [key: string]: any;
+    } | null;
+    /**
+     * Whether the Role is enabled or not.
+     * @type {boolean}
+     * @memberof RoleV2
+     */
+    'enabled'?: boolean;
+    /**
+     * Whether the Role can be the target of access requests.
+     * @type {boolean}
+     * @memberof RoleV2
+     */
+    'requestable'?: boolean;
+    /**
+     *
+     * @type {RequestabilityForRole}
+     * @memberof RoleV2
+     */
+    'accessRequestConfig'?: RequestabilityForRole;
+    /**
+     *
+     * @type {RevocabilityForRole}
+     * @memberof RoleV2
+     */
+    'revocationRequestConfig'?: RevocabilityForRole;
+    /**
+     * List of IDs of segments, if any, to which this Role is assigned.
+     * @type {Array<string>}
+     * @memberof RoleV2
+     */
+    'segments'?: Array<string> | null;
+    /**
+     * Whether the Role is dimensional.
+     * @type {boolean}
+     * @memberof RoleV2
+     */
+    'dimensional'?: boolean | null;
+    /**
+     * List of references to dimensions to which this Role is assigned. This field is only relevant if the Role is dimensional.
+     * @type {Array<DimensionRef>}
+     * @memberof RoleV2
+     */
+    'dimensionRefs'?: Array<DimensionRef> | null;
+    /**
+     *
+     * @type {AttributeDTOList}
+     * @memberof RoleV2
+     */
+    'accessModelMetadata'?: AttributeDTOList;
+    /**
+     *
+     * @type {RolePrivilegeLevel}
+     * @memberof RoleV2
+     */
+    'privilegeLevel'?: RolePrivilegeLevel | null;
+}
+/**
+ * Request body for filtering roles by metadata and filter expression, including privilegeLevel.effective.
+ * @export
+ * @interface Rolelistfilterdtov2
+ */
+export interface Rolelistfilterdtov2 {
+    /**
+     * Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **type**: *eq, in*  **owner.id**: *eq, in*  **additionalOwners.id**: *eq, in*  **requestable**: *eq*  **dimensional**: *eq*  **source.id**: *eq, in*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, sw, co*  **accessProfile.id**: *eq, in*  **accessProfile.name**: *eq, sw, co*  **privilegeLevel.effective**: *eq, in*  Supported composite operators are *and, or*
+     * @type {string}
+     * @memberof Rolelistfilterdtov2
+     */
+    'filters'?: string;
+    /**
+     *
+     * @type {Array<Rolelistfilterdtov2AmmKeyValuesInner>}
+     * @memberof Rolelistfilterdtov2
+     */
+    'ammKeyValues'?: Array<Rolelistfilterdtov2AmmKeyValuesInner>;
+}
+/**
+ *
+ * @export
+ * @interface Rolelistfilterdtov2AmmKeyValuesInner
+ */
+export interface Rolelistfilterdtov2AmmKeyValuesInner {
+    /**
+     * attribute key of a metadata. A blank value is rejected with a 400 error.
+     * @type {string}
+     * @memberof Rolelistfilterdtov2AmmKeyValuesInner
+     */
+    'attribute': string;
+    /**
+     * A list of attribute key names to filter roles. If the values is empty, will only filter by attribute key.
+     * @type {Array<string>}
+     * @memberof Rolelistfilterdtov2AmmKeyValuesInner
+     */
+    'values'?: Array<string>;
+}
+/**
+ * Task result.
+ * @export
+ * @interface TaskResultDto
+ */
+export interface TaskResultDto {
+    /**
+     * Task result DTO type.
+     * @type {string}
+     * @memberof TaskResultDto
+     */
+    'type'?: TaskResultDtoTypeEnum;
+    /**
+     * Task result ID.
+     * @type {string}
+     * @memberof TaskResultDto
+     */
+    'id'?: string;
+    /**
+     * Task result display name.
+     * @type {string}
+     * @memberof TaskResultDto
+     */
+    'name'?: string | null;
+}
+export declare const TaskResultDtoTypeEnum: {
+    readonly TaskResult: "TASK_RESULT";
+};
+export type TaskResultDtoTypeEnum = typeof TaskResultDtoTypeEnum[keyof typeof TaskResultDtoTypeEnum];
+/**
+ * RolesApi - axios parameter creator
+ * @export
+ */
+export declare const RolesApiAxiosParamCreator: (configuration?: Configuration) => {
+    /**
+     * This API creates a role.  You must have a token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority to call this API.   In addition, a ROLE_SUBADMIN may not create a role including an access profile if that access profile is associated with a source the ROLE_SUBADMIN is not associated with themselves.   The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles. However, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.
+     * @summary Create a role
+     * @param {Role} role
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    createRoleV1: (role: Role, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This endpoint initiates a bulk deletion of one or more roles. When the request is successful, the endpoint returns the bulk delete\'s task result ID.  To follow the task, you can use [Get Task Status by ID](https://developer.sailpoint.com/docs/api/get-task-status-v-1), which will return the task result\'s status and information.  This endpoint can only bulk delete up to a limit of 50 roles per request.  A user with ROLE_SUBADMIN authority can only call this endpoint if all roles included in the request are associated with sources with management workgroups the ROLE_SUBADMIN is a member of.
+     * @summary Delete role(s)
+     * @param {RoleBulkDeleteRequest} roleBulkDeleteRequest
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteBulkRolesV1: (roleBulkDeleteRequest: RoleBulkDeleteRequest, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This API initialize a request to remove a single Access Model Metadata from a role by attribute key and value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API.
+     * @summary Remove a metadata from role.
+     * @param {string} id The role\&#39;s id.
+     * @param {string} attributeKey Technical name of the Attribute.
+     * @param {string} attributeValue Technical name of the Attribute Value.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteMetadataFromRoleByKeyAndValueV1: (id: string, attributeKey: string, attributeValue: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This API deletes a Role by its ID.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
+     * @summary Delete a role
+     * @param {string} id ID of the Role
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteRoleV1: (id: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *  This API initial a request for one bulk update\'s status by bulk update Id returns the status of the bulk update process. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API.
+     * @summary Get bulk-update status by id
+     * @param {string} id The Id of the bulk update task.
      * @param {*} [axiosOptions] Override http request option.
      * @throws {RequiredError}
      */
@@ -1717,6 +2185,24 @@ export declare const RolesApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     getRoleEntitlementsV1: (id: string, limit?: number, offset?: number, count?: boolean, filters?: string, sorters?: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Get a list of entitlements assigned directly to a specified Role. Each entitlement includes its privilege level in `privilegeLevel`, with the direct, inherited, and effective levels.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary List role\'s entitlements
+     * @param {string} id Containing role\&#39;s ID.
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {number} [limit] Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [filters] Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **attribute**: *eq, sw, co*  **value**: *eq, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **privilegeLevel.effective**: *eq, in*
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, attribute, value, created, modified, privilegeLevel.effective**  The default sort is **created**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, filters entitlements to those assigned to the segment(s) with the specified IDs. Can\&#39;t be used with *segmented-for-identity*.
+     * @param {string} [segmentedForIdentity] If present, filters entitlements to those in the segments visible to the specified identity. The value must be the calling identity\&#39;s ID or the special value **me**. Can\&#39;t be used with *for-segment-ids*.
+     * @param {boolean} [includeUnsegmented] Whether the response list should contain unsegmented entitlements. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleEntitlementsV2: (id: string, xSailPointExperimental?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, filters?: string, sorters?: string, forSegmentIds?: string, segmentedForIdentity?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * This API returns a Role by its ID. A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
      * @summary Get a role
@@ -1725,6 +2211,15 @@ export declare const RolesApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     getRoleV1: (id: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This API returns a Role by its ID. The response includes the Role\'s effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
+     * @summary Get a role
+     * @param {string} id ID of the Role
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleV2: (id: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * This API returns a list of Roles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
      * @summary List roles
@@ -1740,6 +2235,23 @@ export declare const RolesApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     listRolesV1: (forSubadmin?: string, limit?: number, offset?: number, count?: boolean, filters?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This API returns a list of Roles. Each Role includes its effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000. Use cursor pagination to page beyond 10,000 results.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
+     * @summary List roles
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {string} [forSubadmin] If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @param {number} [limit] Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [filters] Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **type**: *eq, in*  **owner.id**: *eq, in*  **additionalOwners.id**: *eq, in*  **requestable**: *eq*  **dimensional**: *eq*  **source.id**: *eq, in*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, sw, co*  **accessProfile.id**: *eq, in*  **accessProfile.name**: *eq, sw, co*  **privilegeLevel.effective**: *eq, in*  Supported composite operators are *and, or*
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @param {boolean} [includeUnsegmented] Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    listRolesV2: (xSailPointExperimental?: string, forSubadmin?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, filters?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * This API updates an existing role using [JSON Patch](https://tools.ietf.org/html/rfc6902) syntax.  The following fields are patchable:  * name * description * enabled * owner * additionalOwners * accessProfiles * entitlements * membership * requestable * accessRequestConfig * revokeRequestConfig * segments * accessModelMetadata    A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all access profiles included in the role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.  The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles, however, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.  When you use this API to modify a role\'s membership identities, you can only modify up to a limit of 500 membership identities at a time.
      * @summary Patch a specified role
@@ -1764,6 +2276,23 @@ export declare const RolesApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     searchRolesByFilterV1: (forSubadmin?: string, limit?: number, offset?: number, count?: boolean, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, roleListFilterDTO?: RoleListFilterDTO, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * This API returns a list of Roles filtered by Access Model Metadata and by filter expression. Filtering is supported by filter expression, by metadata attribute key and values, or by both together. Each Role includes its effective privilege level in `privilegeLevel.effective`.  The `filters` expression in the request body supports the same fields and operators as the `filters` query parameter of [List roles](#operation/listRolesV2), including **privilegeLevel.effective**: *eq, in*.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same request body and `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary Filter roles by metadata
+     * @param {Rolelistfilterdtov2} rolelistfilterdtov2
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {string} [forSubadmin] If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @param {number} [limit] Max number of results to return See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same request body and &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @param {boolean} [includeUnsegmented] Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    searchRolesByFilterV2: (rolelistfilterdtov2: Rolelistfilterdtov2, xSailPointExperimental?: string, forSubadmin?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * This API initialize a request to add a single Access Model Metadata to a role by attribute key and attribute value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API. The maximum number of attributes in one role is 25. Custom metadata update, including ADD and REPLACE need suit licensed.
      * @summary Add a metadata to role.
@@ -1879,6 +2408,24 @@ export declare const RolesApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getRoleEntitlementsV1(id: string, limit?: number, offset?: number, count?: boolean, filters?: string, sorters?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<Entitlement>>>;
+    /**
+     * Get a list of entitlements assigned directly to a specified Role. Each entitlement includes its privilege level in `privilegeLevel`, with the direct, inherited, and effective levels.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary List role\'s entitlements
+     * @param {string} id Containing role\&#39;s ID.
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {number} [limit] Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [filters] Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **attribute**: *eq, sw, co*  **value**: *eq, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **privilegeLevel.effective**: *eq, in*
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, attribute, value, created, modified, privilegeLevel.effective**  The default sort is **created**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, filters entitlements to those assigned to the segment(s) with the specified IDs. Can\&#39;t be used with *segmented-for-identity*.
+     * @param {string} [segmentedForIdentity] If present, filters entitlements to those in the segments visible to the specified identity. The value must be the calling identity\&#39;s ID or the special value **me**. Can\&#39;t be used with *for-segment-ids*.
+     * @param {boolean} [includeUnsegmented] Whether the response list should contain unsegmented entitlements. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleEntitlementsV2(id: string, xSailPointExperimental?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, filters?: string, sorters?: string, forSegmentIds?: string, segmentedForIdentity?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<EntitlementV2>>>;
     /**
      * This API returns a Role by its ID. A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
      * @summary Get a role
@@ -1887,6 +2434,15 @@ export declare const RolesApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getRoleV1(id: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Role>>;
+    /**
+     * This API returns a Role by its ID. The response includes the Role\'s effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
+     * @summary Get a role
+     * @param {string} id ID of the Role
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleV2(id: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RoleV2>>;
     /**
      * This API returns a list of Roles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
      * @summary List roles
@@ -1902,6 +2458,23 @@ export declare const RolesApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     listRolesV1(forSubadmin?: string, limit?: number, offset?: number, count?: boolean, filters?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<Role>>>;
+    /**
+     * This API returns a list of Roles. Each Role includes its effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000. Use cursor pagination to page beyond 10,000 results.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
+     * @summary List roles
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {string} [forSubadmin] If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @param {number} [limit] Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [filters] Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **type**: *eq, in*  **owner.id**: *eq, in*  **additionalOwners.id**: *eq, in*  **requestable**: *eq*  **dimensional**: *eq*  **source.id**: *eq, in*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, sw, co*  **accessProfile.id**: *eq, in*  **accessProfile.name**: *eq, sw, co*  **privilegeLevel.effective**: *eq, in*  Supported composite operators are *and, or*
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @param {boolean} [includeUnsegmented] Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    listRolesV2(xSailPointExperimental?: string, forSubadmin?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, filters?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<RoleV2>>>;
     /**
      * This API updates an existing role using [JSON Patch](https://tools.ietf.org/html/rfc6902) syntax.  The following fields are patchable:  * name * description * enabled * owner * additionalOwners * accessProfiles * entitlements * membership * requestable * accessRequestConfig * revokeRequestConfig * segments * accessModelMetadata    A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all access profiles included in the role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.  The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles, however, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.  When you use this API to modify a role\'s membership identities, you can only modify up to a limit of 500 membership identities at a time.
      * @summary Patch a specified role
@@ -1926,6 +2499,23 @@ export declare const RolesApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     searchRolesByFilterV1(forSubadmin?: string, limit?: number, offset?: number, count?: boolean, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, roleListFilterDTO?: RoleListFilterDTO, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<Role>>>;
+    /**
+     * This API returns a list of Roles filtered by Access Model Metadata and by filter expression. Filtering is supported by filter expression, by metadata attribute key and values, or by both together. Each Role includes its effective privilege level in `privilegeLevel.effective`.  The `filters` expression in the request body supports the same fields and operators as the `filters` query parameter of [List roles](#operation/listRolesV2), including **privilegeLevel.effective**: *eq, in*.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same request body and `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary Filter roles by metadata
+     * @param {Rolelistfilterdtov2} rolelistfilterdtov2
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+     * @param {string} [forSubadmin] If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @param {number} [limit] Max number of results to return See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @param {string} [cursor] Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same request body and &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @param {string} [sorters] Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @param {string} [forSegmentIds] If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @param {boolean} [includeUnsegmented] Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    searchRolesByFilterV2(rolelistfilterdtov2: Rolelistfilterdtov2, xSailPointExperimental?: string, forSubadmin?: string, limit?: number, offset?: number, count?: boolean, cursor?: string, sorters?: string, forSegmentIds?: string, includeUnsegmented?: boolean, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<RoleV2>>>;
     /**
      * This API initialize a request to add a single Access Model Metadata to a role by attribute key and attribute value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API. The maximum number of attributes in one role is 25. Custom metadata update, including ADD and REPLACE need suit licensed.
      * @summary Add a metadata to role.
@@ -2029,6 +2619,14 @@ export declare const RolesApiFactory: (configuration?: Configuration, basePath?:
      * @throws {RequiredError}
      */
     getRoleEntitlementsV1(requestParameters: RolesApiGetRoleEntitlementsV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<Entitlement>>;
+    /**
+     * Get a list of entitlements assigned directly to a specified Role. Each entitlement includes its privilege level in `privilegeLevel`, with the direct, inherited, and effective levels.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary List role\'s entitlements
+     * @param {RolesApiGetRoleEntitlementsV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleEntitlementsV2(requestParameters: RolesApiGetRoleEntitlementsV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<EntitlementV2>>;
     /**
      * This API returns a Role by its ID. A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
      * @summary Get a role
@@ -2037,6 +2635,14 @@ export declare const RolesApiFactory: (configuration?: Configuration, basePath?:
      * @throws {RequiredError}
      */
     getRoleV1(requestParameters: RolesApiGetRoleV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Role>;
+    /**
+     * This API returns a Role by its ID. The response includes the Role\'s effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
+     * @summary Get a role
+     * @param {RolesApiGetRoleV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRoleV2(requestParameters: RolesApiGetRoleV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<RoleV2>;
     /**
      * This API returns a list of Roles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
      * @summary List roles
@@ -2045,6 +2651,14 @@ export declare const RolesApiFactory: (configuration?: Configuration, basePath?:
      * @throws {RequiredError}
      */
     listRolesV1(requestParameters?: RolesApiListRolesV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<Role>>;
+    /**
+     * This API returns a list of Roles. Each Role includes its effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000. Use cursor pagination to page beyond 10,000 results.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
+     * @summary List roles
+     * @param {RolesApiListRolesV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    listRolesV2(requestParameters?: RolesApiListRolesV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<RoleV2>>;
     /**
      * This API updates an existing role using [JSON Patch](https://tools.ietf.org/html/rfc6902) syntax.  The following fields are patchable:  * name * description * enabled * owner * additionalOwners * accessProfiles * entitlements * membership * requestable * accessRequestConfig * revokeRequestConfig * segments * accessModelMetadata    A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all access profiles included in the role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.  The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles, however, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.  When you use this API to modify a role\'s membership identities, you can only modify up to a limit of 500 membership identities at a time.
      * @summary Patch a specified role
@@ -2061,6 +2675,14 @@ export declare const RolesApiFactory: (configuration?: Configuration, basePath?:
      * @throws {RequiredError}
      */
     searchRolesByFilterV1(requestParameters?: RolesApiSearchRolesByFilterV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<Role>>;
+    /**
+     * This API returns a list of Roles filtered by Access Model Metadata and by filter expression. Filtering is supported by filter expression, by metadata attribute key and values, or by both together. Each Role includes its effective privilege level in `privilegeLevel.effective`.  The `filters` expression in the request body supports the same fields and operators as the `filters` query parameter of [List roles](#operation/listRolesV2), including **privilegeLevel.effective**: *eq, in*.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same request body and `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary Filter roles by metadata
+     * @param {RolesApiSearchRolesByFilterV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     */
+    searchRolesByFilterV2(requestParameters: RolesApiSearchRolesByFilterV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<RoleV2>>;
     /**
      * This API initialize a request to add a single Access Model Metadata to a role by attribute key and attribute value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API. The maximum number of attributes in one role is 25. Custom metadata update, including ADD and REPLACE need suit licensed.
      * @summary Add a metadata to role.
@@ -2257,6 +2879,79 @@ export interface RolesApiGetRoleEntitlementsV1Request {
      */
     readonly sorters?: string;
 }
+/**
+ * Request parameters for getRoleEntitlementsV2 operation in RolesApi.
+ * @export
+ * @interface RolesApiGetRoleEntitlementsV2Request
+ */
+export interface RolesApiGetRoleEntitlementsV2Request {
+    /**
+     * Containing role\&#39;s ID.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly id: string;
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly xSailPointExperimental?: string;
+    /**
+     * Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly limit?: number;
+    /**
+     * Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly offset?: number;
+    /**
+     * If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {boolean}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly count?: boolean;
+    /**
+     * Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly cursor?: string;
+    /**
+     * Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **attribute**: *eq, sw, co*  **value**: *eq, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **privilegeLevel.effective**: *eq, in*
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly filters?: string;
+    /**
+     * Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, attribute, value, created, modified, privilegeLevel.effective**  The default sort is **created**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly sorters?: string;
+    /**
+     * If present and not empty, filters entitlements to those assigned to the segment(s) with the specified IDs. Can\&#39;t be used with *segmented-for-identity*.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly forSegmentIds?: string;
+    /**
+     * If present, filters entitlements to those in the segments visible to the specified identity. The value must be the calling identity\&#39;s ID or the special value **me**. Can\&#39;t be used with *for-segment-ids*.
+     * @type {string}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly segmentedForIdentity?: string;
+    /**
+     * Whether the response list should contain unsegmented entitlements. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @type {boolean}
+     * @memberof RolesApiGetRoleEntitlementsV2
+     */
+    readonly includeUnsegmented?: boolean;
+}
 /**
  * Request parameters for getRoleV1 operation in RolesApi.
  * @export
@@ -2270,6 +2965,25 @@ export interface RolesApiGetRoleV1Request {
      */
     readonly id: string;
 }
+/**
+ * Request parameters for getRoleV2 operation in RolesApi.
+ * @export
+ * @interface RolesApiGetRoleV2Request
+ */
+export interface RolesApiGetRoleV2Request {
+    /**
+     * ID of the Role
+     * @type {string}
+     * @memberof RolesApiGetRoleV2
+     */
+    readonly id: string;
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof RolesApiGetRoleV2
+     */
+    readonly xSailPointExperimental?: string;
+}
 /**
  * Request parameters for listRolesV1 operation in RolesApi.
  * @export
@@ -2325,6 +3039,73 @@ export interface RolesApiListRolesV1Request {
      */
     readonly includeUnsegmented?: boolean;
 }
+/**
+ * Request parameters for listRolesV2 operation in RolesApi.
+ * @export
+ * @interface RolesApiListRolesV2Request
+ */
+export interface RolesApiListRolesV2Request {
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly xSailPointExperimental?: string;
+    /**
+     * If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly forSubadmin?: string;
+    /**
+     * Max number of results to return. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly limit?: number;
+    /**
+     * Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly offset?: number;
+    /**
+     * If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {boolean}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly count?: boolean;
+    /**
+     * Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly cursor?: string;
+    /**
+     * Filter results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in*  **name**: *eq, in, sw, co*  **created**: *gt, lt, ge, le*  **modified**: *gt, lt, ge, le*  **type**: *eq, in*  **owner.id**: *eq, in*  **additionalOwners.id**: *eq, in*  **requestable**: *eq*  **dimensional**: *eq*  **source.id**: *eq, in*  **entitlement.id**: *eq, in*  **entitlement.name**: *eq, sw, co*  **accessProfile.id**: *eq, in*  **accessProfile.name**: *eq, sw, co*  **privilegeLevel.effective**: *eq, in*  Supported composite operators are *and, or*
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly filters?: string;
+    /**
+     * Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly sorters?: string;
+    /**
+     * If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @type {string}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly forSegmentIds?: string;
+    /**
+     * Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @type {boolean}
+     * @memberof RolesApiListRolesV2
+     */
+    readonly includeUnsegmented?: boolean;
+}
 /**
  * Request parameters for patchRoleV1 operation in RolesApi.
  * @export
@@ -2399,6 +3180,73 @@ export interface RolesApiSearchRolesByFilterV1Request {
      */
     readonly roleListFilterDTO?: RoleListFilterDTO;
 }
+/**
+ * Request parameters for searchRolesByFilterV2 operation in RolesApi.
+ * @export
+ * @interface RolesApiSearchRolesByFilterV2Request
+ */
+export interface RolesApiSearchRolesByFilterV2Request {
+    /**
+     *
+     * @type {Rolelistfilterdtov2}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly rolelistfilterdtov2: Rolelistfilterdtov2;
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly xSailPointExperimental?: string;
+    /**
+     * If provided, filters the returned list according to what is visible to the indicated ROLE_SUBADMIN Identity. The value of the parameter is either an Identity ID, or the special value **me**, which is shorthand for the calling Identity\&#39;s ID. A 400 Bad Request error is returned if the **for-subadmin** parameter is specified for an Identity that is not a subadmin.
+     * @type {string}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly forSubadmin?: string;
+    /**
+     * Max number of results to return See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly limit?: number;
+    /**
+     * Offset into the full result set. Usually specified with *limit* to paginate through the results. Must be 0 or omitted when *cursor* is specified. See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly offset?: number;
+    /**
+     * If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters) for more information.
+     * @type {boolean}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly count?: boolean;
+    /**
+     * Opaque cursor returned in the &#x60;x-next-cursor&#x60; response header of the previous page. Pass it with the same request body and &#x60;sorters&#x60; to get the next page of results. Can\&#39;t be used with an *offset* greater than 0.
+     * @type {string}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly cursor?: string;
+    /**
+     * Sort results using the standard syntax described in [API Standard Collection Parameters](https://developer.sailpoint.com/docs/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **id, name, created, modified, privilegeLevel.effective**  The default sort is **name**. **id** is always added as the final sort field so that cursor pagination is stable.
+     * @type {string}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly sorters?: string;
+    /**
+     * If present and not empty, additionally filters Roles to those which are assigned to the Segment(s) with the specified IDs.  If segmentation is currently unavailable, specifying this parameter results in an error.
+     * @type {string}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly forSegmentIds?: string;
+    /**
+     * Whether or not the response list should contain unsegmented Roles. If *for-segment-ids* is absent or empty, specifying *include-unsegmented* as false results in an error.
+     * @type {boolean}
+     * @memberof RolesApiSearchRolesByFilterV2
+     */
+    readonly includeUnsegmented?: boolean;
+}
 /**
  * Request parameters for updateAttributeKeyAndValueToRoleV1 operation in RolesApi.
  * @export
@@ -2541,6 +3389,15 @@ export declare class RolesApi extends BaseAPI {
      * @memberof RolesApi
      */
     getRoleEntitlementsV1(requestParameters: RolesApiGetRoleEntitlementsV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Entitlement[], any>>;
+    /**
+     * Get a list of entitlements assigned directly to a specified Role. Each entitlement includes its privilege level in `privilegeLevel`, with the direct, inherited, and effective levels.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary List role\'s entitlements
+     * @param {RolesApiGetRoleEntitlementsV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RolesApi
+     */
+    getRoleEntitlementsV2(requestParameters: RolesApiGetRoleEntitlementsV2Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<EntitlementV2[], any>>;
     /**
      * This API returns a Role by its ID. A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
      * @summary Get a role
@@ -2550,6 +3407,15 @@ export declare class RolesApi extends BaseAPI {
      * @memberof RolesApi
      */
     getRoleV1(requestParameters: RolesApiGetRoleV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Role, any>>;
+    /**
+     * This API returns a Role by its ID. The response includes the Role\'s effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all Access Profiles included in the Role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.
+     * @summary Get a role
+     * @param {RolesApiGetRoleV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RolesApi
+     */
+    getRoleV2(requestParameters: RolesApiGetRoleV2Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<RoleV2, any>>;
     /**
      * This API returns a list of Roles.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
      * @summary List roles
@@ -2559,6 +3425,15 @@ export declare class RolesApi extends BaseAPI {
      * @memberof RolesApi
      */
     listRolesV1(requestParameters?: RolesApiListRolesV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Role[], any>>;
+    /**
+     * This API returns a list of Roles. Each Role includes its effective privilege level in `privilegeLevel.effective`, which is the highest effective privilege level among the entitlements assigned directly to the Role and the entitlements included in the Role\'s access profiles.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000. Use cursor pagination to page beyond 10,000 results.  A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API.
+     * @summary List roles
+     * @param {RolesApiListRolesV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RolesApi
+     */
+    listRolesV2(requestParameters?: RolesApiListRolesV2Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<RoleV2[], any>>;
     /**
      * This API updates an existing role using [JSON Patch](https://tools.ietf.org/html/rfc6902) syntax.  The following fields are patchable:  * name * description * enabled * owner * additionalOwners * accessProfiles * entitlements * membership * requestable * accessRequestConfig * revokeRequestConfig * segments * accessModelMetadata    A token with API, ORG_ADMIN, ROLE_ADMIN, or ROLE_SUBADMIN authority is required to call this API. In addition, a token with ROLE_SUBADMIN authority may only call this API if all access profiles included in the role are associated to Sources with management workgroups of which the ROLE_SUBADMIN is a member.  The maximum supported length for the description field is 2000 characters. Longer descriptions will be preserved for existing roles, however, any new roles as well as any updates to existing descriptions will be limited to 2000 characters.  When you use this API to modify a role\'s membership identities, you can only modify up to a limit of 500 membership identities at a time.
      * @summary Patch a specified role
@@ -2577,6 +3452,15 @@ export declare class RolesApi extends BaseAPI {
      * @memberof RolesApi
      */
     searchRolesByFilterV1(requestParameters?: RolesApiSearchRolesByFilterV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Role[], any>>;
+    /**
+     * This API returns a list of Roles filtered by Access Model Metadata and by filter expression. Filtering is supported by filter expression, by metadata attribute key and values, or by both together. Each Role includes its effective privilege level in `privilegeLevel.effective`.  The `filters` expression in the request body supports the same fields and operators as the `filters` query parameter of [List roles](#operation/listRolesV2), including **privilegeLevel.effective**: *eq, in*.  Use either offset pagination (`offset` and `limit`) or cursor pagination (`cursor` and `limit`). When more results are available, the `x-next-cursor` response header contains the cursor for the next page. Send that value in the `cursor` query parameter, with the same request body and `sorters`, to get the next page. You can\'t use `cursor` together with an `offset` greater than 0, and `offset` plus `limit` can\'t be greater than 10,000.
+     * @summary Filter roles by metadata
+     * @param {RolesApiSearchRolesByFilterV2Request} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RolesApi
+     */
+    searchRolesByFilterV2(requestParameters: RolesApiSearchRolesByFilterV2Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<RoleV2[], any>>;
     /**
      * This API initialize a request to add a single Access Model Metadata to a role by attribute key and attribute value. A token with ORG_ADMIN, ROLE_ADMIN ROLE_SUBADMIN authority is required to call this API. The maximum number of attributes in one role is 25. Custom metadata update, including ADD and REPLACE need suit licensed.
      * @summary Add a metadata to role.