@snokam/mcp-api 0.194.0 → 0.195.0

package/specs/production/employees.json

@@ -1227,6 +1227,1031 @@
           }
         }
       }
+    },
+    "/v1.0/protected/directory/users/{objectId}/groups/{groupId}": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Add the directory user to a security group",
+        "description": "Returns changed: false when the user already was a member.",
+        "operationId": "AddDirectoryUserToGroup",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "groupId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DirectoryOperationResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/directoryOperationResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      },
+      "delete": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Remove the directory user from a security group",
+        "description": "Returns changed: false when the user was not a member.",
+        "operationId": "RemoveDirectoryUserFromGroup",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "groupId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DirectoryOperationResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/directoryOperationResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{objectId}/app-roles": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Assign an app-role on a service principal to the directory user",
+        "description": "Returns changed: false when the assignment already existed.",
+        "operationId": "AssignDirectoryAppRole",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/appRoleAssignmentRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "Payload of DirectoryOperationResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/directoryOperationResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      },
+      "get": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Map the directory user's app-role assignments by service principal",
+        "description": "Returns { servicePrincipalObjectId: appRoleId } for every Enterprise App the user is assigned to.",
+        "operationId": "ListDirectoryUserAppRoles",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of Dictionary of String",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "string"
+                  }
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{objectId}/app-roles/{servicePrincipalObjectId}": {
+      "delete": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Remove the directory user's app-role assignment(s) on a service principal",
+        "operationId": "RemoveDirectoryAppRole",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "servicePrincipalObjectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DirectoryOperationResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/directoryOperationResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/service-principals/{servicePrincipalObjectId}/app-roles": {
+      "get": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "List a service principal's enabled app-roles",
+        "operationId": "ListDirectoryAppRoles",
+        "parameters": [
+          {
+            "name": "servicePrincipalObjectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of Array of SystemRoleOption",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/systemRoleOption"
+                  }
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{objectId}/licenses/{skuId}": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Assign a license SKU to the directory user",
+        "operationId": "AssignDirectoryLicense",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skuId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "No description",
+            "x-ms-summary": "Assigned"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      },
+      "delete": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Revoke a license SKU from the directory user",
+        "operationId": "RevokeDirectoryLicense",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skuId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "No description",
+            "x-ms-summary": "Revoked"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/licenses/{skuId}": {
+      "get": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Get seat availability for a license SKU",
+        "operationId": "GetDirectoryLicenseAvailability",
+        "parameters": [
+          {
+            "name": "skuId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of LicenseAvailability",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/licenseAvailability"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          },
+          "404": {
+            "description": "No description",
+            "x-ms-summary": "SKU unknown"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/licenses/primary": {
+      "get": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Auto-select the tenant's primary productivity license SKU",
+        "description": "Returns skuId: null when no productivity SKU has a free seat.",
+        "operationId": "ResolvePrimaryDirectoryLicense",
+        "responses": {
+          "200": {
+            "description": "Payload of LicenseSkuRef",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/licenseSkuRef"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/systems/batch": {
+      "post": {
+        "tags": [
+          "EmployeeSystems"
+        ],
+        "summary": "Bulk list per-employee system access for a set of UPNs",
+        "description": "Resolves every UPN's third-party system seats in one roundtrip — fans out the Graph calls server-side.",
+        "operationId": "ListEmployeeSystemAccessBatch",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/listEmployeeSystemAccessBatchRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "Payload of Array of EmployeeSystemAccessRow",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/employeeSystemAccessRow"
+                  }
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/systems/{upn}": {
+      "get": {
+        "tags": [
+          "EmployeeSystems"
+        ],
+        "summary": "List an employee's third-party system access",
+        "description": "Per registered system (e.g. Salesforce): whether the employee has a seat, which app-role backs it, and the selectable roles.",
+        "operationId": "ListEmployeeSystemAccess",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "x-ms-summary": "Employee UPN (work email)"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of Array of EmployeeSystemAccess",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/employeeSystemAccess"
+                  }
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          },
+          "404": {
+            "description": "No description",
+            "x-ms-summary": "Employee not found in the directory"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/systems/{upn}/{systemKey}": {
+      "post": {
+        "tags": [
+          "EmployeeSystems"
+        ],
+        "summary": "Grant the employee a seat in a third-party system",
+        "description": "Assigns the backing app-role on the system's Enterprise App. SCIM/provisioning then creates the account automatically.",
+        "operationId": "AssignEmployeeSystem",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "systemKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "x-ms-summary": "Stable system key (e.g. \"salesforce\")"
+          },
+          {
+            "name": "roleId",
+            "in": "query",
+            "schema": {
+              "type": "string"
+            },
+            "x-ms-summary": "App-role id to assign; falls back to the tenant's default role when omitted. Assigning a different role than the current one replaces the assignment."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of EmployeeSystemAccess",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/employeeSystemAccess"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          },
+          "404": {
+            "description": "No description",
+            "x-ms-summary": "Unknown system or employee"
+          },
+          "501": {
+            "description": "No description",
+            "x-ms-summary": "System not configured in this environment"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      },
+      "delete": {
+        "tags": [
+          "EmployeeSystems"
+        ],
+        "summary": "Revoke the employee's seat in a third-party system",
+        "description": "Removes the backing app-role assignment. SCIM/provisioning deactivates the account on the next sync.",
+        "operationId": "RevokeEmployeeSystem",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "systemKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of EmployeeSystemAccess",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/employeeSystemAccess"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          },
+          "404": {
+            "description": "No description",
+            "x-ms-summary": "Unknown system or employee"
+          },
+          "501": {
+            "description": "No description",
+            "x-ms-summary": "System not configured in this environment"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Create (or adopt) a directory user",
+        "description": "Creates the Entra user, or patches an existing one with the supplied fields. Returns the temporary password only on fresh creation.",
+        "operationId": "CreateDirectoryUser",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/createUserInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "Payload of CreateUserResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/createUserResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{objectId}": {
+      "patch": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Patch a directory user from candidate fields",
+        "operationId": "PatchDirectoryUser",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/createUserInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "204": {
+            "description": "No description",
+            "x-ms-summary": "Patched"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{objectId}/photo": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Upload a profile photo to the directory user",
+        "description": "Fetches the image from the supplied URL and PUTs it as the user's Entra profile photo.",
+        "operationId": "UploadDirectoryUserPhoto",
+        "parameters": [
+          {
+            "name": "objectId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/uploadPhotoRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "Payload of UploadPhotoResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/uploadPhotoResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/by-upn/{upn}": {
+      "get": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Resolve a UPN to the directory user's object id",
+        "description": "Returns userObjectId: null when no directory user exists for the UPN.",
+        "operationId": "GetDirectoryUserByUpn",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DirectoryUserRef",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/directoryUserRef"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{upn}/disable": {
+      "post": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Disable the directory user (offboarding)",
+        "operationId": "DisableDirectoryUser",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DisableUserResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/disableUserResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
+    },
+    "/v1.0/protected/directory/users/{upn}": {
+      "delete": {
+        "tags": [
+          "Directory"
+        ],
+        "summary": "Delete the directory user (recoverable in Entra for 30 days)",
+        "operationId": "DeleteDirectoryUser",
+        "parameters": [
+          {
+            "name": "upn",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Payload of DisableUserResult",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/disableUserResult"
+                }
+              }
+            },
+            "x-ms-summary": "Success"
+          },
+          "401": {
+            "description": "No description",
+            "x-ms-summary": "Unauthorized"
+          }
+        },
+        "security": [
+          {
+            "Implicit": [
+              "api://bb21a8d0-366b-4a95-aa59-dbbf708322d1/.default"
+            ]
+          },
+          {
+            "ApiKey": []
+          }
+        ]
+      }
     }
   },
   "components": {
@@ -1244,6 +2269,17 @@
           }
         }
       },
+      "appRoleAssignmentRequest": {
+        "type": "object",
+        "properties": {
+          "servicePrincipalObjectId": {
+            "type": "string"
+          },
+          "appRoleId": {
+            "type": "string"
+          }
+        }
+      },
       "commissionTierReference": {
         "type": "object",
         "properties": {
@@ -1610,6 +2646,94 @@
           }
         }
       },
+      "createUserInput": {
+        "type": "object",
+        "properties": {
+          "userPrincipalName": {
+            "type": "string"
+          },
+          "displayName": {
+            "type": "string"
+          },
+          "givenName": {
+            "type": "string"
+          },
+          "surname": {
+            "type": "string"
+          },
+          "jobTitle": {
+            "type": "string"
+          },
+          "mobilePhone": {
+            "type": "string"
+          },
+          "streetAddress": {
+            "type": "string"
+          },
+          "city": {
+            "type": "string"
+          },
+          "postalCode": {
+            "type": "string"
+          },
+          "country": {
+            "type": "string"
+          },
+          "sanityId": {
+            "type": "string"
+          }
+        }
+      },
+      "createUserResult": {
+        "type": "object",
+        "properties": {
+          "alreadyExisted": {
+            "type": "boolean"
+          },
+          "userObjectId": {
+            "type": "string"
+          },
+          "userPrincipalName": {
+            "type": "string"
+          },
+          "temporaryPassword": {
+            "type": "string"
+          }
+        }
+      },
+      "directoryOperationResult": {
+        "type": "object",
+        "properties": {
+          "changed": {
+            "type": "boolean"
+          }
+        }
+      },
+      "directoryUserRef": {
+        "type": "object",
+        "properties": {
+          "userObjectId": {
+            "type": "string"
+          }
+        }
+      },
+      "disableUserResult": {
+        "type": "object",
+        "properties": {
+          "found": {
+            "type": "boolean"
+          },
+          "wasAlreadyDisabled": {
+            "type": "boolean"
+          },
+          "userObjectId": {
+            "type": "string"
+          },
+          "userPrincipalName": {
+            "type": "string"
+          }
+        }
+      },
       "employeeReference": {
         "type": "object",
         "properties": {
@@ -1628,6 +2752,49 @@
           }
         }
       },
+      "employeeSystemAccess": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string"
+          },
+          "label": {
+            "type": "string"
+          },
+          "assigned": {
+            "type": "boolean"
+          },
+          "kind": {
+            "type": "string"
+          },
+          "notImplemented": {
+            "type": "boolean"
+          },
+          "assignedRoleId": {
+            "type": "string"
+          },
+          "availableRoles": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/systemRoleOption"
+            }
+          }
+        }
+      },
+      "employeeSystemAccessRow": {
+        "type": "object",
+        "properties": {
+          "upn": {
+            "type": "string"
+          },
+          "systems": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/employeeSystemAccess"
+            }
+          }
+        }
+      },
       "feedback": {
         "type": "object",
         "properties": {
@@ -1783,6 +2950,51 @@
           }
         }
       },
+      "licenseAvailability": {
+        "type": "object",
+        "properties": {
+          "skuId": {
+            "type": "string"
+          },
+          "skuPartNumber": {
+            "type": "string"
+          },
+          "enabled": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "consumed": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "available": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "isConfigured": {
+            "type": "boolean"
+          }
+        }
+      },
+      "licenseSkuRef": {
+        "type": "object",
+        "properties": {
+          "skuId": {
+            "type": "string"
+          }
+        }
+      },
+      "listEmployeeSystemAccessBatchRequest": {
+        "type": "object",
+        "properties": {
+          "upns": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
       "pageEmployeeOrderInner": {
         "type": "object",
         "properties": {
@@ -3311,6 +4523,17 @@
           }
         }
       },
+      "systemRoleOption": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "label": {
+            "type": "string"
+          }
+        }
+      },
       "tag": {
         "type": "object",
         "properties": {
@@ -3364,6 +4587,23 @@
             "nullable": true
           }
         }
+      },
+      "uploadPhotoRequest": {
+        "type": "object",
+        "properties": {
+          "imageUrl": {
+            "type": "string"
+          }
+        }
+      },
+      "uploadPhotoResult": {
+        "type": "object",
+        "properties": {
+          "bytes": {
+            "type": "integer",
+            "format": "int64"
+          }
+        }
       }
     },
     "securitySchemes": {