kb-cloud-client-typescript 2.4.0-alpha.1 → 2.4.0-alpha.100

package/dist/openapi/apis/account-api.d.ts

@@ -14,24 +14,68 @@ import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
 import { type RequestArgs, BaseAPI } from '../base';
 import type { Account } from '../models';
 import type { AccountListItem } from '../models';
+import type { BindSeaweedFSPoliciesRequest } from '../models';
 import type { DmsServiceAccount } from '../models';
 import type { DmsServiceAccountCreateRequest } from '../models';
 import type { DmsServiceAccountUpdateRequest } from '../models';
+import type { ListSeaweedFSPolicies200Response } from '../models';
 import type { MilvusAccountPassword } from '../models';
 import type { MilvusAccountRoles } from '../models';
 import type { MilvusRole } from '../models';
+import type { MilvusRoleCreateRequest } from '../models';
 import type { MilvusRoleList } from '../models';
 import type { MilvusRoleRequest } from '../models';
+import type { MongoCollectionInfo } from '../models';
+import type { MongoRBACBindingChange } from '../models';
+import type { MongoRBACCapabilities } from '../models';
+import type { MongoRBACPasswordChange } from '../models';
+import type { MongoRBACRole } from '../models';
+import type { MongoRBACRoleWrite } from '../models';
+import type { MongoRBACUser } from '../models';
+import type { MongoRBACUserCreate } from '../models';
+import type { ObjectPrivilegeCapabilities } from '../models';
+import type { ObjectPrivilegeChange } from '../models';
+import type { ObjectPrivilegeEvidence } from '../models';
+import type { ObjectPrivilegeObjectList } from '../models';
+import type { ObjectPrivilegeResetStep } from '../models';
+import type { ObjectPrivilegeSnapshot } from '../models';
+import type { ObjectPrivilegeSubjectType } from '../models';
 import type { PrivilegeListItem } from '../models';
 import type { RbmqAccountRequest } from '../models';
 import type { RbmqAccountsList } from '../models';
+import type { RbmqPasswordUpdateRequest } from '../models';
 import type { RbmqPermission } from '../models';
-import type { RbmqUser } from '../models';
 /**
  * AccountApi - axios parameter creator
  * @export
  */
 export declare const AccountApiAxiosParamCreator: (configuration?: Configuration) => {
+    /**
+     * Replaces named policy bindings. An empty policies array removes all direct bindings. Existing credentials, legacy actions and other identity attributes are preserved.
+     * @summary bindSeaweedFSPolicies
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {BindSeaweedFSPoliciesRequest} bindSeaweedFSPoliciesRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    bindSeaweedFSPolicies: (orgName: string, clusterName: string, accountName: string, bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeChange} body
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -63,6 +107,16 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     createKafkaAccount: (orgName: string, clusterName: string, body: Account, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Create a Milvus native role and grant its initial privileges.
+     * @summary Create Milvus role
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {MilvusRoleCreateRequest} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createMilvusRole: (orgName: string, clusterName: string, body: MilvusRoleCreateRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * create an account in mongodb
      * @summary Create mongodb account
@@ -83,6 +137,27 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     createRabbitAccount: (orgName: string, clusterName: string, rbmqAccountRequest: RbmqAccountRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Creates a credential on the identity. Account.name must match accountName, role must be BASICUSER. Optional extra.accessKey and password select the access key and secret key; omitted or empty values are generated. The returned password is disclosed only in this response.
+     * @summary createSeaweedFSAccessKey
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {Account} account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccessKey: (orgName: string, clusterName: string, accountName: string, account: Account, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Creates a BASICUSER identity with named policies from extra.policies. Optional extra.accessKey and password select the credential; empty values are generated. The password is disclosed only in this response.
+     * @summary createSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {Account} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccount: (orgName: string, clusterName: string, body: Account, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * create a MinIO service account access key
      * @summary Create MinIO access key
@@ -165,6 +240,37 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     deleteRabbitAccount: (orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary deleteSeaweedFSAccessKey
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} accessKey
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccessKey: (orgName: string, clusterName: string, accountName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * delete an account in cluster
+     * @summary deleteSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {string} accountName name of the account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccount: (orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Deletes an unused named policy. Attached policies are rejected; no identities or groups are implicitly changed.
+     * @summary deleteSeaweedFSPolicy
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} policyName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSPolicy: (orgName: string, clusterName: string, policyName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * delete a MinIO service account access key
      * @summary Delete MinIO access key
@@ -176,6 +282,52 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     deleteServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities: (engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {string} [objectName]
+     * @param {string} [objectId]
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [catalogName]
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -207,6 +359,17 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     getRootAccountPassword: (engineName: string, orgName: string, clusterName: string, accountName: string, component?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * get root account password
+     * @summary getRootSeaweedFSAccountPassword
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} accountName name of the account
+     * @param {string} [component] name of the component
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRootSeaweedFSAccountPassword: (orgName: string, clusterName: string, accountName: string, component?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * get a MinIO service account access key
      * @summary Get MinIO access key
@@ -218,6 +381,38 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     getServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
+     * @param {string} databaseName
+     * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {number} [offset]
+     * @param {number} [limit]
+     * @param {string} [catalogName]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -264,6 +459,24 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     listRabbitAccounts: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists SeaweedFS identities and access-key metadata without secret keys.
+     * @summary listSeaweedFSAccounts
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSAccounts: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary listSeaweedFSPolicies
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSPolicies: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * list MinIO service account access keys
      * @summary List MinIO access keys
@@ -287,16 +500,200 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      */
     lockAccount: (engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Create or update a Milvus native role and replace its privilege grants.
-     * @summary Put Milvus role
-     * @param {string} orgName name of the Org
-     * @param {string} clusterName name of the Cluster
-     * @param {string} roleName name of the Milvus role
-     * @param {MilvusRoleRequest} body
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword: (orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles: (orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole: (orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser: (orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists existing collections, views and time-series collections in a database using the cluster management connection. Returns metadata, not document contents.
+     * @summary List MongoDB cluster database objects
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListClusterCollections: (orgName: string, clusterName: string, database: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists existing database names using the cluster management connection. Does not require a personal Workbench datasource.
+     * @summary List MongoDB cluster databases
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListClusterDatabases: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles: (orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {boolean} [allDatabases] List accounts from all authentication databases. Overrides database; returns role memberships without effective privileges. Use the user detail endpoint for privileges. Requires viewUser and viewRole on the relevant databases.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers: (orgName: string, clusterName: string, database?: string, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} policyName
+     * @param {{ [key: string]: any; }} requestBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putSeaweedFSPolicy: (orgName: string, clusterName: string, policyName: string, requestBody: {
+        [key: string]: any;
+    }, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putMilvusRole: (orgName: string, clusterName: string, roleName: string, body: MilvusRoleRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -376,6 +773,17 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     updateMilvusAccountRoles: (orgName: string, clusterName: string, accountName: string, body: MilvusAccountRoles, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Update an existing Milvus native role by replacing its privilege grants.
+     * @summary Update Milvus role
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} roleName name of the Milvus role
+     * @param {MilvusRoleRequest} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMilvusRole: (orgName: string, clusterName: string, roleName: string, body: MilvusRoleRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      *
      * @summary update mssql account compatible with windows account
@@ -392,11 +800,11 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @param {string} orgName name of the Org
      * @param {string} clusterName name of the Cluster
      * @param {string} accountName name of the Account
-     * @param {RbmqUser} rbmqUser
+     * @param {RbmqPasswordUpdateRequest} rbmqPasswordUpdateRequest
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateRabbitAccountPassword: (orgName: string, clusterName: string, accountName: string, rbmqUser: RbmqUser, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    updateRabbitAccountPassword: (orgName: string, clusterName: string, accountName: string, rbmqPasswordUpdateRequest: RbmqPasswordUpdateRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Update a RabbitMQ account privileges
      * @summary Update RabbitMQ account privileges
@@ -408,6 +816,28 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     updateRabbitAccountPrivileges: (orgName: string, clusterName: string, accountName: string, rbmqPermission: RbmqPermission, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Resets the secret for extra.accessKey. Account.name must match accountName. extra.accessKey is required. The returned password is disclosed only in this response.
+     * @summary updateSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {string} accountName name of the account
+     * @param {Account} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccount: (orgName: string, clusterName: string, accountName: string, body: Account, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Unsupported for SeaweedFS. Use the named policy binding API instead.
+     * @summary updateSeaweedFSAccountPrivileges
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} accountName name of the account
+     * @param {Array<PrivilegeListItem>} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccountPrivileges: (orgName: string, clusterName: string, accountName: string, body: Array<PrivilegeListItem>, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * update a MinIO service account access key
      * @summary Update MinIO access key
@@ -426,6 +856,32 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
  * @export
  */
 export declare const AccountApiFp: (configuration?: Configuration) => {
+    /**
+     * Replaces named policy bindings. An empty policies array removes all direct bindings. Existing credentials, legacy actions and other identity attributes are preserved.
+     * @summary bindSeaweedFSPolicies
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {BindSeaweedFSPoliciesRequest} bindSeaweedFSPoliciesRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    bindSeaweedFSPolicies(orgName: string, clusterName: string, accountName: string, bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeChange} body
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -457,6 +913,16 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     createKafkaAccount(orgName: string, clusterName: string, body: Account, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Account>>;
+    /**
+     * Create a Milvus native role and grant its initial privileges.
+     * @summary Create Milvus role
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {MilvusRoleCreateRequest} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createMilvusRole(orgName: string, clusterName: string, body: MilvusRoleCreateRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MilvusRole>>;
     /**
      * create an account in mongodb
      * @summary Create mongodb account
@@ -477,6 +943,27 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     createRabbitAccount(orgName: string, clusterName: string, rbmqAccountRequest: RbmqAccountRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Creates a credential on the identity. Account.name must match accountName, role must be BASICUSER. Optional extra.accessKey and password select the access key and secret key; omitted or empty values are generated. The returned password is disclosed only in this response.
+     * @summary createSeaweedFSAccessKey
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {Account} account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccessKey(orgName: string, clusterName: string, accountName: string, account: Account, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Account>>;
+    /**
+     * Creates a BASICUSER identity with named policies from extra.policies. Optional extra.accessKey and password select the credential; empty values are generated. The password is disclosed only in this response.
+     * @summary createSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {Account} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccount(orgName: string, clusterName: string, body: Account, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Account>>;
     /**
      * create a MinIO service account access key
      * @summary Create MinIO access key
@@ -559,6 +1046,37 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     deleteRabbitAccount(orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary deleteSeaweedFSAccessKey
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} accessKey
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccessKey(orgName: string, clusterName: string, accountName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * delete an account in cluster
+     * @summary deleteSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {string} accountName name of the account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccount(orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Deletes an unused named policy. Attached policies are rejected; no identities or groups are implicitly changed.
+     * @summary deleteSeaweedFSPolicy
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} policyName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSPolicy(orgName: string, clusterName: string, policyName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * delete a MinIO service account access key
      * @summary Delete MinIO access key
@@ -570,6 +1088,52 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     deleteServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeCapabilities>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {string} [objectName]
+     * @param {string} [objectId]
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [catalogName]
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeEvidence>>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -601,6 +1165,17 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getRootAccountPassword(engineName: string, orgName: string, clusterName: string, accountName: string, component?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<string>>;
+    /**
+     * get root account password
+     * @summary getRootSeaweedFSAccountPassword
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} accountName name of the account
+     * @param {string} [component] name of the component
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRootSeaweedFSAccountPassword(orgName: string, clusterName: string, accountName: string, component?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<string>>;
     /**
      * get a MinIO service account access key
      * @summary Get MinIO access key
@@ -613,17 +1188,49 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      */
     getServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DmsServiceAccount>>;
     /**
-     * list accounts in cluster
-     * @summary List cluster accounts
-     * @param {string} engineName name of the engine
-     * @param {string} orgName name of the organization
-     * @param {string} clusterName name of the cluster
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
+     * @param {string} databaseName
+     * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    listAccounts(engineName: string, orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccountListItem>>>;
+    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
     /**
-     * list accounts in cluster
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {number} [offset]
+     * @param {number} [limit]
+     * @param {string} [catalogName]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeObjectList>>;
+    /**
+     * list accounts in cluster
+     * @summary List cluster accounts
+     * @param {string} engineName name of the engine
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccounts(engineName: string, orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccountListItem>>>;
+    /**
+     * list accounts in cluster
      * @summary List cluster accounts
      * @param {string} orgName name of the Org
      * @param {string} clusterName name of the Cluster
@@ -658,6 +1265,24 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     listRabbitAccounts(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RbmqAccountsList>>;
+    /**
+     * Lists SeaweedFS identities and access-key metadata without secret keys.
+     * @summary listSeaweedFSAccounts
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSAccounts(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccountListItem>>>;
+    /**
+     *
+     * @summary listSeaweedFSPolicies
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSPolicies(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListSeaweedFSPolicies200Response>>;
     /**
      * list MinIO service account access keys
      * @summary List MinIO access keys
@@ -681,16 +1306,200 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      */
     lockAccount(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
-     * Create or update a Milvus native role and replace its privilege grants.
-     * @summary Put Milvus role
-     * @param {string} orgName name of the Org
-     * @param {string} clusterName name of the Cluster
-     * @param {string} roleName name of the Milvus role
-     * @param {MilvusRoleRequest} body
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword(orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles(orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole(orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser(orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole(orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACCapabilities>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole(orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACRole>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACUser>>;
+    /**
+     * Lists existing collections, views and time-series collections in a database using the cluster management connection. Returns metadata, not document contents.
+     * @summary List MongoDB cluster database objects
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListClusterCollections(orgName: string, clusterName: string, database: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoCollectionInfo>>>;
+    /**
+     * Lists existing database names using the cluster management connection. Does not require a personal Workbench datasource.
+     * @summary List MongoDB cluster databases
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListClusterDatabases(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACRole>>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {boolean} [allDatabases] List accounts from all authentication databases. Overrides database; returns role memberships without effective privileges. Use the user detail endpoint for privileges. Requires viewUser and viewRole on the relevant databases.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers(orgName: string, clusterName: string, database?: string, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACUser>>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole(orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} policyName
+     * @param {{ [key: string]: any; }} requestBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putSeaweedFSPolicy(orgName: string, clusterName: string, policyName: string, requestBody: {
+        [key: string]: any;
+    }, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putMilvusRole(orgName: string, clusterName: string, roleName: string, body: MilvusRoleRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MilvusRole>>;
+    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -770,6 +1579,17 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     updateMilvusAccountRoles(orgName: string, clusterName: string, accountName: string, body: MilvusAccountRoles, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Update an existing Milvus native role by replacing its privilege grants.
+     * @summary Update Milvus role
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} roleName name of the Milvus role
+     * @param {MilvusRoleRequest} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMilvusRole(orgName: string, clusterName: string, roleName: string, body: MilvusRoleRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MilvusRole>>;
     /**
      *
      * @summary update mssql account compatible with windows account
@@ -786,11 +1606,11 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @param {string} orgName name of the Org
      * @param {string} clusterName name of the Cluster
      * @param {string} accountName name of the Account
-     * @param {RbmqUser} rbmqUser
+     * @param {RbmqPasswordUpdateRequest} rbmqPasswordUpdateRequest
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateRabbitAccountPassword(orgName: string, clusterName: string, accountName: string, rbmqUser: RbmqUser, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    updateRabbitAccountPassword(orgName: string, clusterName: string, accountName: string, rbmqPasswordUpdateRequest: RbmqPasswordUpdateRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * Update a RabbitMQ account privileges
      * @summary Update RabbitMQ account privileges
@@ -802,6 +1622,28 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     updateRabbitAccountPrivileges(orgName: string, clusterName: string, accountName: string, rbmqPermission: RbmqPermission, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Resets the secret for extra.accessKey. Account.name must match accountName. extra.accessKey is required. The returned password is disclosed only in this response.
+     * @summary updateSeaweedFSAccount
+     * @param {string} orgName name of the organization
+     * @param {string} clusterName name of the cluster
+     * @param {string} accountName name of the account
+     * @param {Account} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccount(orgName: string, clusterName: string, accountName: string, body: Account, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Account>>;
+    /**
+     * Unsupported for SeaweedFS. Use the named policy binding API instead.
+     * @summary updateSeaweedFSAccountPrivileges
+     * @param {string} orgName name of the Org
+     * @param {string} clusterName name of the Cluster
+     * @param {string} accountName name of the account
+     * @param {Array<PrivilegeListItem>} body
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccountPrivileges(orgName: string, clusterName: string, accountName: string, body: Array<PrivilegeListItem>, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * update a MinIO service account access key
      * @summary Update MinIO access key
@@ -820,6 +1662,22 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
  * @export
  */
 export declare const AccountApiFactory: (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) => {
+    /**
+     * Replaces named policy bindings. An empty policies array removes all direct bindings. Existing credentials, legacy actions and other identity attributes are preserved.
+     * @summary bindSeaweedFSPolicies
+     * @param {AccountApiBindSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -844,6 +1702,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     createKafkaAccount(requestParameters: AccountApiCreateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Create a Milvus native role and grant its initial privileges.
+     * @summary Create Milvus role
+     * @param {AccountApiCreateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createMilvusRole(requestParameters: AccountApiCreateMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
     /**
      * create an account in mongodb
      * @summary Create mongodb account
@@ -860,6 +1726,22 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     createRabbitAccount(requestParameters: AccountApiCreateRabbitAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Creates a credential on the identity. Account.name must match accountName, role must be BASICUSER. Optional extra.accessKey and password select the access key and secret key; omitted or empty values are generated. The returned password is disclosed only in this response.
+     * @summary createSeaweedFSAccessKey
+     * @param {AccountApiCreateSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccessKey(requestParameters: AccountApiCreateSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Creates a BASICUSER identity with named policies from extra.policies. Optional extra.accessKey and password select the credential; empty values are generated. The password is disclosed only in this response.
+     * @summary createSeaweedFSAccount
+     * @param {AccountApiCreateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    createSeaweedFSAccount(requestParameters: AccountApiCreateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
     /**
      * create a MinIO service account access key
      * @summary Create MinIO access key
@@ -924,6 +1806,30 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     deleteRabbitAccount(requestParameters: AccountApiDeleteRabbitAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary deleteSeaweedFSAccessKey
+     * @param {AccountApiDeleteSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccessKey(requestParameters: AccountApiDeleteSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * delete an account in cluster
+     * @summary deleteSeaweedFSAccount
+     * @param {AccountApiDeleteSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSAccount(requestParameters: AccountApiDeleteSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Deletes an unused named policy. Attached policies are rejected; no identities or groups are implicitly changed.
+     * @summary deleteSeaweedFSPolicy
+     * @param {AccountApiDeleteSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    deleteSeaweedFSPolicy(requestParameters: AccountApiDeleteSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * delete a MinIO service account access key
      * @summary Delete MinIO access key
@@ -932,6 +1838,30 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -956,6 +1886,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     getRootAccountPassword(requestParameters: AccountApiGetRootAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<string>;
+    /**
+     * get root account password
+     * @summary getRootSeaweedFSAccountPassword
+     * @param {AccountApiGetRootSeaweedFSAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRootSeaweedFSAccountPassword(requestParameters: AccountApiGetRootSeaweedFSAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<string>;
     /**
      * get a MinIO service account access key
      * @summary Get MinIO access key
@@ -964,6 +1902,22 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1004,6 +1958,22 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     listRabbitAccounts(requestParameters: AccountApiListRabbitAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<RbmqAccountsList>;
+    /**
+     * Lists SeaweedFS identities and access-key metadata without secret keys.
+     * @summary listSeaweedFSAccounts
+     * @param {AccountApiListSeaweedFSAccountsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSAccounts(requestParameters: AccountApiListSeaweedFSAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<AccountListItem>>;
+    /**
+     *
+     * @summary listSeaweedFSPolicies
+     * @param {AccountApiListSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listSeaweedFSPolicies(requestParameters: AccountApiListSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ListSeaweedFSPolicies200Response>;
     /**
      * list MinIO service account access keys
      * @summary List MinIO access keys
@@ -1021,108 +1991,278 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Create or update a Milvus native role and replace its privilege grants.
-     * @summary Put Milvus role
-     * @param {AccountApiPutMilvusRoleRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putMilvusRole(requestParameters: AccountApiPutMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * unlock an account in cluster
-     * @summary Unlock cluster account
-     * @param {AccountApiUnlockAccountRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    unlockAccount(requestParameters: AccountApiUnlockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an account in cluster
-     * @summary update cluster account
-     * @param {AccountApiUpdateAccountRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateAccount(requestParameters: AccountApiUpdateAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update account privileges for rdbms engine
-     * @summary update account privileges
-     * @param {AccountApiUpdateAccountPrivilegesRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateAccountPrivileges(requestParameters: AccountApiUpdateAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an hive account in cluster
-     * @summary update hive account
-     * @param {AccountApiUpdateHiveAccountRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateHiveAccount(requestParameters: AccountApiUpdateHiveAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an account in cluster
-     * @summary update cluster account
-     * @param {AccountApiUpdateKafkaAccountRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateKafkaAccount(requestParameters: AccountApiUpdateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Update a Milvus account password.
-     * @summary Update Milvus account password
-     * @param {AccountApiUpdateMilvusAccountPasswordRequest} requestParameters Request parameters.
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateMilvusAccountPassword(requestParameters: AccountApiUpdateMilvusAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
     /**
-     * Replace a Milvus account\'s role assignments.
-     * @summary Update Milvus account roles
-     * @param {AccountApiUpdateMilvusAccountRolesRequest} requestParameters Request parameters.
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateMilvusAccountRoles(requestParameters: AccountApiUpdateMilvusAccountRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
     /**
      *
-     * @summary update mssql account compatible with windows account
-     * @param {AccountApiUpdateMssqlAccountRequest} requestParameters Request parameters.
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateMssqlAccount(requestParameters: AccountApiUpdateMssqlAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
     /**
-     * Update a RabbitMQ account password
-     * @summary Update RabbitMQ account password
-     * @param {AccountApiUpdateRabbitAccountPasswordRequest} requestParameters Request parameters.
+     * Lists existing collections, views and time-series collections in a database using the cluster management connection. Returns metadata, not document contents.
+     * @summary List MongoDB cluster database objects
+     * @param {AccountApiMongoListClusterCollectionsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateRabbitAccountPassword(requestParameters: AccountApiUpdateRabbitAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoListClusterCollections(requestParameters: AccountApiMongoListClusterCollectionsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoCollectionInfo>>;
     /**
-     * Update a RabbitMQ account privileges
-     * @summary Update RabbitMQ account privileges
-     * @param {AccountApiUpdateRabbitAccountPrivilegesRequest} requestParameters Request parameters.
+     * Lists existing database names using the cluster management connection. Does not require a personal Workbench datasource.
+     * @summary List MongoDB cluster databases
+     * @param {AccountApiMongoListClusterDatabasesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateRabbitAccountPrivileges(requestParameters: AccountApiUpdateRabbitAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoListClusterDatabases(requestParameters: AccountApiMongoListClusterDatabasesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
     /**
-     * update a MinIO service account access key
-     * @summary Update MinIO access key
-     * @param {AccountApiUpdateServiceAccountRequest} requestParameters Request parameters.
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    updateServiceAccount(requestParameters: AccountApiUpdateServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
-};
-/**
- * AccountApi - interface
- * @export
- * @interface AccountApi
- */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {AccountApiPutSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * unlock an account in cluster
+     * @summary Unlock cluster account
+     * @param {AccountApiUnlockAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    unlockAccount(requestParameters: AccountApiUnlockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an account in cluster
+     * @summary update cluster account
+     * @param {AccountApiUpdateAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateAccount(requestParameters: AccountApiUpdateAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update account privileges for rdbms engine
+     * @summary update account privileges
+     * @param {AccountApiUpdateAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateAccountPrivileges(requestParameters: AccountApiUpdateAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an hive account in cluster
+     * @summary update hive account
+     * @param {AccountApiUpdateHiveAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateHiveAccount(requestParameters: AccountApiUpdateHiveAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an account in cluster
+     * @summary update cluster account
+     * @param {AccountApiUpdateKafkaAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateKafkaAccount(requestParameters: AccountApiUpdateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Update a Milvus account password.
+     * @summary Update Milvus account password
+     * @param {AccountApiUpdateMilvusAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMilvusAccountPassword(requestParameters: AccountApiUpdateMilvusAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Replace a Milvus account\'s role assignments.
+     * @summary Update Milvus account roles
+     * @param {AccountApiUpdateMilvusAccountRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMilvusAccountRoles(requestParameters: AccountApiUpdateMilvusAccountRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update an existing Milvus native role by replacing its privilege grants.
+     * @summary Update Milvus role
+     * @param {AccountApiUpdateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMilvusRole(requestParameters: AccountApiUpdateMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
+    /**
+     *
+     * @summary update mssql account compatible with windows account
+     * @param {AccountApiUpdateMssqlAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateMssqlAccount(requestParameters: AccountApiUpdateMssqlAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update a RabbitMQ account password
+     * @summary Update RabbitMQ account password
+     * @param {AccountApiUpdateRabbitAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateRabbitAccountPassword(requestParameters: AccountApiUpdateRabbitAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update a RabbitMQ account privileges
+     * @summary Update RabbitMQ account privileges
+     * @param {AccountApiUpdateRabbitAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateRabbitAccountPrivileges(requestParameters: AccountApiUpdateRabbitAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Resets the secret for extra.accessKey. Account.name must match accountName. extra.accessKey is required. The returned password is disclosed only in this response.
+     * @summary updateSeaweedFSAccount
+     * @param {AccountApiUpdateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccount(requestParameters: AccountApiUpdateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Unsupported for SeaweedFS. Use the named policy binding API instead.
+     * @summary updateSeaweedFSAccountPrivileges
+     * @param {AccountApiUpdateSeaweedFSAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateSeaweedFSAccountPrivileges(requestParameters: AccountApiUpdateSeaweedFSAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update a MinIO service account access key
+     * @summary Update MinIO access key
+     * @param {AccountApiUpdateServiceAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    updateServiceAccount(requestParameters: AccountApiUpdateServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+};
+/**
+ * AccountApi - interface
+ * @export
+ * @interface AccountApi
+ */
 export interface AccountApiInterface {
+    /**
+     * Replaces named policy bindings. An empty policies array removes all direct bindings. Existing credentials, legacy actions and other identity attributes are preserved.
+     * @summary bindSeaweedFSPolicies
+     * @param {AccountApiBindSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -1150,6 +2290,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     createKafkaAccount(requestParameters: AccountApiCreateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Create a Milvus native role and grant its initial privileges.
+     * @summary Create Milvus role
+     * @param {AccountApiCreateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    createMilvusRole(requestParameters: AccountApiCreateMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
     /**
      * create an account in mongodb
      * @summary Create mongodb account
@@ -1168,6 +2317,24 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     createRabbitAccount(requestParameters: AccountApiCreateRabbitAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Creates a credential on the identity. Account.name must match accountName, role must be BASICUSER. Optional extra.accessKey and password select the access key and secret key; omitted or empty values are generated. The returned password is disclosed only in this response.
+     * @summary createSeaweedFSAccessKey
+     * @param {AccountApiCreateSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    createSeaweedFSAccessKey(requestParameters: AccountApiCreateSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Creates a BASICUSER identity with named policies from extra.policies. Optional extra.accessKey and password select the credential; empty values are generated. The password is disclosed only in this response.
+     * @summary createSeaweedFSAccount
+     * @param {AccountApiCreateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    createSeaweedFSAccount(requestParameters: AccountApiCreateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
     /**
      * create a MinIO service account access key
      * @summary Create MinIO access key
@@ -1240,6 +2407,33 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     deleteRabbitAccount(requestParameters: AccountApiDeleteRabbitAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary deleteSeaweedFSAccessKey
+     * @param {AccountApiDeleteSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    deleteSeaweedFSAccessKey(requestParameters: AccountApiDeleteSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * delete an account in cluster
+     * @summary deleteSeaweedFSAccount
+     * @param {AccountApiDeleteSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    deleteSeaweedFSAccount(requestParameters: AccountApiDeleteSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Deletes an unused named policy. Attached policies are rejected; no identities or groups are implicitly changed.
+     * @summary deleteSeaweedFSPolicy
+     * @param {AccountApiDeleteSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    deleteSeaweedFSPolicy(requestParameters: AccountApiDeleteSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * delete a MinIO service account access key
      * @summary Delete MinIO access key
@@ -1249,6 +2443,33 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -1276,6 +2497,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     getRootAccountPassword(requestParameters: AccountApiGetRootAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<string>;
+    /**
+     * get root account password
+     * @summary getRootSeaweedFSAccountPassword
+     * @param {AccountApiGetRootSeaweedFSAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getRootSeaweedFSAccountPassword(requestParameters: AccountApiGetRootSeaweedFSAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<string>;
     /**
      * get a MinIO service account access key
      * @summary Get MinIO access key
@@ -1285,6 +2515,24 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1330,6 +2578,24 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     listRabbitAccounts(requestParameters: AccountApiListRabbitAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<RbmqAccountsList>;
+    /**
+     * Lists SeaweedFS identities and access-key metadata without secret keys.
+     * @summary listSeaweedFSAccounts
+     * @param {AccountApiListSeaweedFSAccountsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listSeaweedFSAccounts(requestParameters: AccountApiListSeaweedFSAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<AccountListItem>>;
+    /**
+     *
+     * @summary listSeaweedFSPolicies
+     * @param {AccountApiListSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listSeaweedFSPolicies(requestParameters: AccountApiListSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ListSeaweedFSPolicies200Response>;
     /**
      * list MinIO service account access keys
      * @summary List MinIO access keys
@@ -1349,97 +2615,250 @@ export interface AccountApiInterface {
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Create or update a Milvus native role and replace its privilege grants.
-     * @summary Put Milvus role
-     * @param {AccountApiPutMilvusRoleRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    putMilvusRole(requestParameters: AccountApiPutMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * unlock an account in cluster
-     * @summary Unlock cluster account
-     * @param {AccountApiUnlockAccountRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    unlockAccount(requestParameters: AccountApiUnlockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an account in cluster
-     * @summary update cluster account
-     * @param {AccountApiUpdateAccountRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateAccount(requestParameters: AccountApiUpdateAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update account privileges for rdbms engine
-     * @summary update account privileges
-     * @param {AccountApiUpdateAccountPrivilegesRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateAccountPrivileges(requestParameters: AccountApiUpdateAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an hive account in cluster
-     * @summary update hive account
-     * @param {AccountApiUpdateHiveAccountRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateHiveAccount(requestParameters: AccountApiUpdateHiveAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * update an account in cluster
-     * @summary update cluster account
-     * @param {AccountApiUpdateKafkaAccountRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateKafkaAccount(requestParameters: AccountApiUpdateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Update a Milvus account password.
-     * @summary Update Milvus account password
-     * @param {AccountApiUpdateMilvusAccountPasswordRequest} requestParameters Request parameters.
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateMilvusAccountPassword(requestParameters: AccountApiUpdateMilvusAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
     /**
-     * Replace a Milvus account\'s role assignments.
-     * @summary Update Milvus account roles
-     * @param {AccountApiUpdateMilvusAccountRolesRequest} requestParameters Request parameters.
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateMilvusAccountRoles(requestParameters: AccountApiUpdateMilvusAccountRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
     /**
      *
-     * @summary update mssql account compatible with windows account
-     * @param {AccountApiUpdateMssqlAccountRequest} requestParameters Request parameters.
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateMssqlAccount(requestParameters: AccountApiUpdateMssqlAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
     /**
-     * Update a RabbitMQ account password
-     * @summary Update RabbitMQ account password
-     * @param {AccountApiUpdateRabbitAccountPasswordRequest} requestParameters Request parameters.
+     * Lists existing collections, views and time-series collections in a database using the cluster management connection. Returns metadata, not document contents.
+     * @summary List MongoDB cluster database objects
+     * @param {AccountApiMongoListClusterCollectionsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    updateRabbitAccountPassword(requestParameters: AccountApiUpdateRabbitAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoListClusterCollections(requestParameters: AccountApiMongoListClusterCollectionsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoCollectionInfo>>;
     /**
-     * Update a RabbitMQ account privileges
+     * Lists existing database names using the cluster management connection. Does not require a personal Workbench datasource.
+     * @summary List MongoDB cluster databases
+     * @param {AccountApiMongoListClusterDatabasesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoListClusterDatabases(requestParameters: AccountApiMongoListClusterDatabasesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {AccountApiPutSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * unlock an account in cluster
+     * @summary Unlock cluster account
+     * @param {AccountApiUnlockAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    unlockAccount(requestParameters: AccountApiUnlockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an account in cluster
+     * @summary update cluster account
+     * @param {AccountApiUpdateAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateAccount(requestParameters: AccountApiUpdateAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update account privileges for rdbms engine
+     * @summary update account privileges
+     * @param {AccountApiUpdateAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateAccountPrivileges(requestParameters: AccountApiUpdateAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an hive account in cluster
+     * @summary update hive account
+     * @param {AccountApiUpdateHiveAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateHiveAccount(requestParameters: AccountApiUpdateHiveAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * update an account in cluster
+     * @summary update cluster account
+     * @param {AccountApiUpdateKafkaAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateKafkaAccount(requestParameters: AccountApiUpdateKafkaAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Update a Milvus account password.
+     * @summary Update Milvus account password
+     * @param {AccountApiUpdateMilvusAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateMilvusAccountPassword(requestParameters: AccountApiUpdateMilvusAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Replace a Milvus account\'s role assignments.
+     * @summary Update Milvus account roles
+     * @param {AccountApiUpdateMilvusAccountRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateMilvusAccountRoles(requestParameters: AccountApiUpdateMilvusAccountRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update an existing Milvus native role by replacing its privilege grants.
+     * @summary Update Milvus role
+     * @param {AccountApiUpdateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateMilvusRole(requestParameters: AccountApiUpdateMilvusRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MilvusRole>;
+    /**
+     *
+     * @summary update mssql account compatible with windows account
+     * @param {AccountApiUpdateMssqlAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateMssqlAccount(requestParameters: AccountApiUpdateMssqlAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update a RabbitMQ account password
+     * @summary Update RabbitMQ account password
+     * @param {AccountApiUpdateRabbitAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateRabbitAccountPassword(requestParameters: AccountApiUpdateRabbitAccountPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Update a RabbitMQ account privileges
      * @summary Update RabbitMQ account privileges
      * @param {AccountApiUpdateRabbitAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -1447,6 +2866,24 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     updateRabbitAccountPrivileges(requestParameters: AccountApiUpdateRabbitAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Resets the secret for extra.accessKey. Account.name must match accountName. extra.accessKey is required. The returned password is disclosed only in this response.
+     * @summary updateSeaweedFSAccount
+     * @param {AccountApiUpdateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateSeaweedFSAccount(requestParameters: AccountApiUpdateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<Account>;
+    /**
+     * Unsupported for SeaweedFS. Use the named policy binding API instead.
+     * @summary updateSeaweedFSAccountPrivileges
+     * @param {AccountApiUpdateSeaweedFSAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    updateSeaweedFSAccountPrivileges(requestParameters: AccountApiUpdateSeaweedFSAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * update a MinIO service account access key
      * @summary Update MinIO access key
@@ -1457,6 +2894,92 @@ export interface AccountApiInterface {
      */
     updateServiceAccount(requestParameters: AccountApiUpdateServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
 }
+/**
+ * Request parameters for bindSeaweedFSPolicies operation in AccountApi.
+ * @export
+ * @interface AccountApiBindSeaweedFSPoliciesRequest
+ */
+export interface AccountApiBindSeaweedFSPoliciesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiBindSeaweedFSPolicies
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiBindSeaweedFSPolicies
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiBindSeaweedFSPolicies
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {BindSeaweedFSPoliciesRequest}
+     * @memberof AccountApiBindSeaweedFSPolicies
+     */
+    readonly bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest;
+}
+/**
+ * Request parameters for changeAccountObjectPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiChangeAccountObjectPrivilegesRequest
+ */
+export interface AccountApiChangeAccountObjectPrivilegesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {ObjectPrivilegeChange}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly body: ObjectPrivilegeChange;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly host?: string;
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string;
+}
 /**
  * Request parameters for createAccount operation in AccountApi.
  * @export
@@ -1538,6 +3061,31 @@ export interface AccountApiCreateKafkaAccountRequest {
      */
     readonly body: Account;
 }
+/**
+ * Request parameters for createMilvusRole operation in AccountApi.
+ * @export
+ * @interface AccountApiCreateMilvusRoleRequest
+ */
+export interface AccountApiCreateMilvusRoleRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiCreateMilvusRole
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiCreateMilvusRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MilvusRoleCreateRequest}
+     * @memberof AccountApiCreateMilvusRole
+     */
+    readonly body: MilvusRoleCreateRequest;
+}
 /**
  * Request parameters for createMongoDBAccount operation in AccountApi.
  * @export
@@ -1588,6 +3136,62 @@ export interface AccountApiCreateRabbitAccountRequest {
      */
     readonly rbmqAccountRequest: RbmqAccountRequest;
 }
+/**
+ * Request parameters for createSeaweedFSAccessKey operation in AccountApi.
+ * @export
+ * @interface AccountApiCreateSeaweedFSAccessKeyRequest
+ */
+export interface AccountApiCreateSeaweedFSAccessKeyRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiCreateSeaweedFSAccessKey
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiCreateSeaweedFSAccessKey
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiCreateSeaweedFSAccessKey
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {Account}
+     * @memberof AccountApiCreateSeaweedFSAccessKey
+     */
+    readonly account: Account;
+}
+/**
+ * Request parameters for createSeaweedFSAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiCreateSeaweedFSAccountRequest
+ */
+export interface AccountApiCreateSeaweedFSAccountRequest {
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiCreateSeaweedFSAccount
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiCreateSeaweedFSAccount
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {Account}
+     * @memberof AccountApiCreateSeaweedFSAccount
+     */
+    readonly body: Account;
+}
 /**
  * Request parameters for createServiceAccount operation in AccountApi.
  * @export
@@ -1801,13 +3405,94 @@ export interface AccountApiDeleteRabbitAccountRequest {
     readonly accountName: string;
 }
 /**
- * Request parameters for deleteServiceAccount operation in AccountApi.
+ * Request parameters for deleteSeaweedFSAccessKey operation in AccountApi.
  * @export
- * @interface AccountApiDeleteServiceAccountRequest
+ * @interface AccountApiDeleteSeaweedFSAccessKeyRequest
  */
-export interface AccountApiDeleteServiceAccountRequest {
+export interface AccountApiDeleteSeaweedFSAccessKeyRequest {
     /**
-     * name of the engine
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccessKey
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccessKey
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccessKey
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccessKey
+     */
+    readonly accessKey: string;
+}
+/**
+ * Request parameters for deleteSeaweedFSAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiDeleteSeaweedFSAccountRequest
+ */
+export interface AccountApiDeleteSeaweedFSAccountRequest {
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccount
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccount
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSAccount
+     */
+    readonly accountName: string;
+}
+/**
+ * Request parameters for deleteSeaweedFSPolicy operation in AccountApi.
+ * @export
+ * @interface AccountApiDeleteSeaweedFSPolicyRequest
+ */
+export interface AccountApiDeleteSeaweedFSPolicyRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSPolicy
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSPolicy
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiDeleteSeaweedFSPolicy
+     */
+    readonly policyName: string;
+}
+/**
+ * Request parameters for deleteServiceAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiDeleteServiceAccountRequest
+ */
+export interface AccountApiDeleteServiceAccountRequest {
+    /**
+     * name of the engine
      * @type {string}
      * @memberof AccountApiDeleteServiceAccount
      */
@@ -1817,325 +3502,1221 @@ export interface AccountApiDeleteServiceAccountRequest {
      * @type {string}
      * @memberof AccountApiDeleteServiceAccount
      */
-    readonly orgName: string;
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiDeleteServiceAccount
+     */
+    readonly clusterName: string;
+    /**
+     * MinIO access key
+     * @type {string}
+     * @memberof AccountApiDeleteServiceAccount
+     */
+    readonly accessKey: string;
+}
+/**
+ * Request parameters for getAccountObjectPrivilegeCapabilities operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountObjectPrivilegeCapabilitiesRequest
+ */
+export interface AccountApiGetAccountObjectPrivilegeCapabilitiesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly accountName: string;
+}
+/**
+ * Request parameters for getAccountObjectPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountObjectPrivilegesRequest
+ */
+export interface AccountApiGetAccountObjectPrivilegesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly databaseName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly schemaName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectId?: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly host?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly catalogName?: string;
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string;
+}
+/**
+ * Request parameters for getAccountPrivilegeOverview operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountPrivilegeOverviewRequest
+ */
+export interface AccountApiGetAccountPrivilegeOverviewRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly host?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly databaseName?: string;
+}
+/**
+ * Request parameters for getHiveAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiGetHiveAccountsRequest
+ */
+export interface AccountApiGetHiveAccountsRequest {
+    /**
+     * The name of organization
+     * @type {string}
+     * @memberof AccountApiGetHiveAccounts
+     */
+    readonly orgName: string;
+    /**
+     * The name of cluster
+     * @type {string}
+     * @memberof AccountApiGetHiveAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for getMilvusRole operation in AccountApi.
+ * @export
+ * @interface AccountApiGetMilvusRoleRequest
+ */
+export interface AccountApiGetMilvusRoleRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiGetMilvusRole
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiGetMilvusRole
+     */
+    readonly clusterName: string;
+    /**
+     * name of the Milvus role
+     * @type {string}
+     * @memberof AccountApiGetMilvusRole
+     */
+    readonly roleName: string;
+}
+/**
+ * Request parameters for getRootAccountPassword operation in AccountApi.
+ * @export
+ * @interface AccountApiGetRootAccountPasswordRequest
+ */
+export interface AccountApiGetRootAccountPasswordRequest {
+    /**
+     * name of the engine
+     * @type {string}
+     * @memberof AccountApiGetRootAccountPassword
+     */
+    readonly engineName: string;
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiGetRootAccountPassword
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiGetRootAccountPassword
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiGetRootAccountPassword
+     */
+    readonly accountName: string;
+    /**
+     * name of the component
+     * @type {string}
+     * @memberof AccountApiGetRootAccountPassword
+     */
+    readonly component?: string;
+}
+/**
+ * Request parameters for getRootSeaweedFSAccountPassword operation in AccountApi.
+ * @export
+ * @interface AccountApiGetRootSeaweedFSAccountPasswordRequest
+ */
+export interface AccountApiGetRootSeaweedFSAccountPasswordRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiGetRootSeaweedFSAccountPassword
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiGetRootSeaweedFSAccountPassword
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiGetRootSeaweedFSAccountPassword
+     */
+    readonly accountName: string;
+    /**
+     * name of the component
+     * @type {string}
+     * @memberof AccountApiGetRootSeaweedFSAccountPassword
+     */
+    readonly component?: string;
+}
+/**
+ * Request parameters for getServiceAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiGetServiceAccountRequest
+ */
+export interface AccountApiGetServiceAccountRequest {
+    /**
+     * name of the engine
+     * @type {string}
+     * @memberof AccountApiGetServiceAccount
+     */
+    readonly engineName: string;
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiGetServiceAccount
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiGetServiceAccount
+     */
+    readonly clusterName: string;
+    /**
+     * MinIO access key
+     * @type {string}
+     * @memberof AccountApiGetServiceAccount
+     */
+    readonly accessKey: string;
+}
+/**
+ * Request parameters for listAccountObjectPrivilegeColumns operation in AccountApi.
+ * @export
+ * @interface AccountApiListAccountObjectPrivilegeColumnsRequest
+ */
+export interface AccountApiListAccountObjectPrivilegeColumnsRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly accountName: string;
+    /**
+     * Object type, table/view; PostgreSQL also supports materializedView/foreignTable
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly databaseName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectName: string;
+    /**
+     * Required for PostgreSQL; not accepted for MySQL
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly schemaName?: string;
+}
+/**
+ * Request parameters for listAccountObjectPrivilegeObjects operation in AccountApi.
+ * @export
+ * @interface AccountApiListAccountObjectPrivilegeObjectsRequest
+ */
+export interface AccountApiListAccountObjectPrivilegeObjectsRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly databaseName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly schemaName?: string;
+    /**
+     *
+     * @type {number}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly offset?: number;
+    /**
+     *
+     * @type {number}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly limit?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly catalogName?: string;
+}
+/**
+ * Request parameters for listAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListAccountsRequest
+ */
+export interface AccountApiListAccountsRequest {
+    /**
+     * name of the engine
+     * @type {string}
+     * @memberof AccountApiListAccounts
+     */
+    readonly engineName: string;
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiListAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiListAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listKafkaAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListKafkaAccountsRequest
+ */
+export interface AccountApiListKafkaAccountsRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiListKafkaAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiListKafkaAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listMilvusRoles operation in AccountApi.
+ * @export
+ * @interface AccountApiListMilvusRolesRequest
+ */
+export interface AccountApiListMilvusRolesRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiListMilvusRoles
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiListMilvusRoles
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listMongoDBAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListMongoDBAccountsRequest
+ */
+export interface AccountApiListMongoDBAccountsRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiListMongoDBAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiListMongoDBAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listRabbitAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListRabbitAccountsRequest
+ */
+export interface AccountApiListRabbitAccountsRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiListRabbitAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiListRabbitAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listSeaweedFSAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListSeaweedFSAccountsRequest
+ */
+export interface AccountApiListSeaweedFSAccountsRequest {
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiListSeaweedFSAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiListSeaweedFSAccounts
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listSeaweedFSPolicies operation in AccountApi.
+ * @export
+ * @interface AccountApiListSeaweedFSPoliciesRequest
+ */
+export interface AccountApiListSeaweedFSPoliciesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListSeaweedFSPolicies
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListSeaweedFSPolicies
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for listServiceAccounts operation in AccountApi.
+ * @export
+ * @interface AccountApiListServiceAccountsRequest
+ */
+export interface AccountApiListServiceAccountsRequest {
+    /**
+     * name of the engine
+     * @type {string}
+     * @memberof AccountApiListServiceAccounts
+     */
+    readonly engineName: string;
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiListServiceAccounts
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiListServiceAccounts
+     */
+    readonly clusterName: string;
+    /**
+     * MinIO user that owns the service accounts
+     * @type {string}
+     * @memberof AccountApiListServiceAccounts
+     */
+    readonly userName?: string;
+}
+/**
+ * Request parameters for lockAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiLockAccountRequest
+ */
+export interface AccountApiLockAccountRequest {
+    /**
+     * name of the engine
+     * @type {string}
+     * @memberof AccountApiLockAccount
+     */
+    readonly engineName: string;
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiLockAccount
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiLockAccount
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiLockAccount
+     */
+    readonly accountName: string;
+}
+/**
+ * Request parameters for mongoChangeRBACUserPassword operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoChangeRBACUserPasswordRequest
+ */
+export interface AccountApiMongoChangeRBACUserPasswordRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly username: string;
+    /**
+     *
+     * @type {MongoRBACPasswordChange}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly mongoRBACPasswordChange: MongoRBACPasswordChange;
+}
+/**
+ * Request parameters for mongoChangeRBACUserRoles operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoChangeRBACUserRolesRequest
+ */
+export interface AccountApiMongoChangeRBACUserRolesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly username: string;
+    /**
+     *
+     * @type {MongoRBACBindingChange}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly mongoRBACBindingChange: MongoRBACBindingChange;
+}
+/**
+ * Request parameters for mongoCreateRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoCreateRBACRoleRequest
+ */
+export interface AccountApiMongoCreateRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
+}
+/**
+ * Request parameters for mongoCreateRBACUser operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoCreateRBACUserRequest
+ */
+export interface AccountApiMongoCreateRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACUserCreate}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly mongoRBACUserCreate: MongoRBACUserCreate;
+}
+/**
+ * Request parameters for mongoDeleteRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoDeleteRBACRoleRequest
+ */
+export interface AccountApiMongoDeleteRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly roleName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly expectedRevision: string;
+}
+/**
+ * Request parameters for mongoDeleteRBACUser operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoDeleteRBACUserRequest
+ */
+export interface AccountApiMongoDeleteRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly clusterName: string;
     /**
-     * name of the cluster
+     *
      * @type {string}
-     * @memberof AccountApiDeleteServiceAccount
+     * @memberof AccountApiMongoDeleteRBACUser
      */
-    readonly clusterName: string;
+    readonly database: string;
     /**
-     * MinIO access key
+     *
      * @type {string}
-     * @memberof AccountApiDeleteServiceAccount
+     * @memberof AccountApiMongoDeleteRBACUser
      */
-    readonly accessKey: string;
+    readonly username: string;
 }
 /**
- * Request parameters for getHiveAccounts operation in AccountApi.
+ * Request parameters for mongoGetRBACCapabilities operation in AccountApi.
  * @export
- * @interface AccountApiGetHiveAccountsRequest
+ * @interface AccountApiMongoGetRBACCapabilitiesRequest
  */
-export interface AccountApiGetHiveAccountsRequest {
+export interface AccountApiMongoGetRBACCapabilitiesRequest {
     /**
-     * The name of organization
+     *
      * @type {string}
-     * @memberof AccountApiGetHiveAccounts
+     * @memberof AccountApiMongoGetRBACCapabilities
      */
     readonly orgName: string;
     /**
-     * The name of cluster
+     *
      * @type {string}
-     * @memberof AccountApiGetHiveAccounts
+     * @memberof AccountApiMongoGetRBACCapabilities
      */
     readonly clusterName: string;
 }
 /**
- * Request parameters for getMilvusRole operation in AccountApi.
+ * Request parameters for mongoGetRBACRole operation in AccountApi.
  * @export
- * @interface AccountApiGetMilvusRoleRequest
+ * @interface AccountApiMongoGetRBACRoleRequest
  */
-export interface AccountApiGetMilvusRoleRequest {
+export interface AccountApiMongoGetRBACRoleRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiGetMilvusRole
+     * @memberof AccountApiMongoGetRBACRole
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiGetMilvusRole
+     * @memberof AccountApiMongoGetRBACRole
      */
     readonly clusterName: string;
     /**
-     * name of the Milvus role
+     *
      * @type {string}
-     * @memberof AccountApiGetMilvusRole
+     * @memberof AccountApiMongoGetRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACRole
      */
     readonly roleName: string;
 }
 /**
- * Request parameters for getRootAccountPassword operation in AccountApi.
+ * Request parameters for mongoGetRBACUser operation in AccountApi.
  * @export
- * @interface AccountApiGetRootAccountPasswordRequest
+ * @interface AccountApiMongoGetRBACUserRequest
  */
-export interface AccountApiGetRootAccountPasswordRequest {
-    /**
-     * name of the engine
-     * @type {string}
-     * @memberof AccountApiGetRootAccountPassword
-     */
-    readonly engineName: string;
+export interface AccountApiMongoGetRBACUserRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiGetRootAccountPassword
+     * @memberof AccountApiMongoGetRBACUser
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiGetRootAccountPassword
+     * @memberof AccountApiMongoGetRBACUser
      */
     readonly clusterName: string;
     /**
-     * name of the account
+     *
      * @type {string}
-     * @memberof AccountApiGetRootAccountPassword
+     * @memberof AccountApiMongoGetRBACUser
      */
-    readonly accountName: string;
+    readonly database: string;
     /**
-     * name of the component
+     *
      * @type {string}
-     * @memberof AccountApiGetRootAccountPassword
+     * @memberof AccountApiMongoGetRBACUser
      */
-    readonly component?: string;
+    readonly username: string;
 }
 /**
- * Request parameters for getServiceAccount operation in AccountApi.
+ * Request parameters for mongoListClusterCollections operation in AccountApi.
  * @export
- * @interface AccountApiGetServiceAccountRequest
+ * @interface AccountApiMongoListClusterCollectionsRequest
  */
-export interface AccountApiGetServiceAccountRequest {
-    /**
-     * name of the engine
-     * @type {string}
-     * @memberof AccountApiGetServiceAccount
-     */
-    readonly engineName: string;
+export interface AccountApiMongoListClusterCollectionsRequest {
     /**
-     * name of the organization
+     *
      * @type {string}
-     * @memberof AccountApiGetServiceAccount
+     * @memberof AccountApiMongoListClusterCollections
      */
     readonly orgName: string;
     /**
-     * name of the cluster
+     *
      * @type {string}
-     * @memberof AccountApiGetServiceAccount
+     * @memberof AccountApiMongoListClusterCollections
      */
     readonly clusterName: string;
     /**
-     * MinIO access key
+     *
      * @type {string}
-     * @memberof AccountApiGetServiceAccount
+     * @memberof AccountApiMongoListClusterCollections
      */
-    readonly accessKey: string;
+    readonly database: string;
 }
 /**
- * Request parameters for listAccounts operation in AccountApi.
+ * Request parameters for mongoListClusterDatabases operation in AccountApi.
  * @export
- * @interface AccountApiListAccountsRequest
+ * @interface AccountApiMongoListClusterDatabasesRequest
  */
-export interface AccountApiListAccountsRequest {
+export interface AccountApiMongoListClusterDatabasesRequest {
     /**
-     * name of the engine
-     * @type {string}
-     * @memberof AccountApiListAccounts
-     */
-    readonly engineName: string;
-    /**
-     * name of the organization
+     *
      * @type {string}
-     * @memberof AccountApiListAccounts
+     * @memberof AccountApiMongoListClusterDatabases
      */
     readonly orgName: string;
     /**
-     * name of the cluster
+     *
      * @type {string}
-     * @memberof AccountApiListAccounts
+     * @memberof AccountApiMongoListClusterDatabases
      */
     readonly clusterName: string;
 }
 /**
- * Request parameters for listKafkaAccounts operation in AccountApi.
+ * Request parameters for mongoListRBACRoles operation in AccountApi.
  * @export
- * @interface AccountApiListKafkaAccountsRequest
+ * @interface AccountApiMongoListRBACRolesRequest
  */
-export interface AccountApiListKafkaAccountsRequest {
+export interface AccountApiMongoListRBACRolesRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiListKafkaAccounts
+     * @memberof AccountApiMongoListRBACRoles
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiListKafkaAccounts
+     * @memberof AccountApiMongoListRBACRoles
      */
     readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACRoles
+     */
+    readonly database?: string;
 }
 /**
- * Request parameters for listMilvusRoles operation in AccountApi.
+ * Request parameters for mongoListRBACUsers operation in AccountApi.
  * @export
- * @interface AccountApiListMilvusRolesRequest
+ * @interface AccountApiMongoListRBACUsersRequest
  */
-export interface AccountApiListMilvusRolesRequest {
+export interface AccountApiMongoListRBACUsersRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiListMilvusRoles
+     * @memberof AccountApiMongoListRBACUsers
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiListMilvusRoles
+     * @memberof AccountApiMongoListRBACUsers
      */
     readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACUsers
+     */
+    readonly database?: string;
+    /**
+     * List accounts from all authentication databases. Overrides database; returns role memberships without effective privileges. Use the user detail endpoint for privileges. Requires viewUser and viewRole on the relevant databases.
+     * @type {boolean}
+     * @memberof AccountApiMongoListRBACUsers
+     */
+    readonly allDatabases?: boolean;
 }
 /**
- * Request parameters for listMongoDBAccounts operation in AccountApi.
+ * Request parameters for mongoUpdateRBACRole operation in AccountApi.
  * @export
- * @interface AccountApiListMongoDBAccountsRequest
+ * @interface AccountApiMongoUpdateRBACRoleRequest
  */
-export interface AccountApiListMongoDBAccountsRequest {
+export interface AccountApiMongoUpdateRBACRoleRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiListMongoDBAccounts
+     * @memberof AccountApiMongoUpdateRBACRole
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiListMongoDBAccounts
+     * @memberof AccountApiMongoUpdateRBACRole
      */
     readonly clusterName: string;
-}
-/**
- * Request parameters for listRabbitAccounts operation in AccountApi.
- * @export
- * @interface AccountApiListRabbitAccountsRequest
- */
-export interface AccountApiListRabbitAccountsRequest {
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof AccountApiListRabbitAccounts
+     * @memberof AccountApiMongoUpdateRBACRole
      */
-    readonly orgName: string;
+    readonly database: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiListRabbitAccounts
+     * @memberof AccountApiMongoUpdateRBACRole
      */
-    readonly clusterName: string;
+    readonly roleName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
 }
 /**
- * Request parameters for listServiceAccounts operation in AccountApi.
+ * Request parameters for previewAccountPrivilegeReset operation in AccountApi.
  * @export
- * @interface AccountApiListServiceAccountsRequest
+ * @interface AccountApiPreviewAccountPrivilegeResetRequest
  */
-export interface AccountApiListServiceAccountsRequest {
+export interface AccountApiPreviewAccountPrivilegeResetRequest {
     /**
-     * name of the engine
+     *
      * @type {string}
-     * @memberof AccountApiListServiceAccounts
+     * @memberof AccountApiPreviewAccountPrivilegeReset
      */
     readonly engineName: string;
     /**
-     * name of the organization
+     *
      * @type {string}
-     * @memberof AccountApiListServiceAccounts
+     * @memberof AccountApiPreviewAccountPrivilegeReset
      */
     readonly orgName: string;
     /**
-     * name of the cluster
+     *
      * @type {string}
-     * @memberof AccountApiListServiceAccounts
+     * @memberof AccountApiPreviewAccountPrivilegeReset
      */
     readonly clusterName: string;
     /**
-     * MinIO user that owns the service accounts
+     *
      * @type {string}
-     * @memberof AccountApiListServiceAccounts
+     * @memberof AccountApiPreviewAccountPrivilegeReset
      */
-    readonly userName?: string;
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string;
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly allDatabases?: boolean;
 }
 /**
- * Request parameters for lockAccount operation in AccountApi.
+ * Request parameters for putSeaweedFSPolicy operation in AccountApi.
  * @export
- * @interface AccountApiLockAccountRequest
+ * @interface AccountApiPutSeaweedFSPolicyRequest
  */
-export interface AccountApiLockAccountRequest {
-    /**
-     * name of the engine
-     * @type {string}
-     * @memberof AccountApiLockAccount
-     */
-    readonly engineName: string;
+export interface AccountApiPutSeaweedFSPolicyRequest {
     /**
-     * name of the organization
+     *
      * @type {string}
-     * @memberof AccountApiLockAccount
+     * @memberof AccountApiPutSeaweedFSPolicy
      */
     readonly orgName: string;
     /**
-     * name of the cluster
+     *
      * @type {string}
-     * @memberof AccountApiLockAccount
+     * @memberof AccountApiPutSeaweedFSPolicy
      */
     readonly clusterName: string;
     /**
-     * name of the account
+     *
      * @type {string}
-     * @memberof AccountApiLockAccount
+     * @memberof AccountApiPutSeaweedFSPolicy
      */
-    readonly accountName: string;
+    readonly policyName: string;
+    /**
+     *
+     * @type {{ [key: string]: any; }}
+     * @memberof AccountApiPutSeaweedFSPolicy
+     */
+    readonly requestBody: {
+        [key: string]: any;
+    };
 }
 /**
- * Request parameters for putMilvusRole operation in AccountApi.
+ * Request parameters for resetAccountPrivileges operation in AccountApi.
  * @export
- * @interface AccountApiPutMilvusRoleRequest
+ * @interface AccountApiResetAccountPrivilegesRequest
  */
-export interface AccountApiPutMilvusRoleRequest {
+export interface AccountApiResetAccountPrivilegesRequest {
     /**
-     * name of the Org
+     *
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
      * @type {string}
-     * @memberof AccountApiPutMilvusRole
+     * @memberof AccountApiResetAccountPrivileges
      */
     readonly orgName: string;
     /**
-     * name of the Cluster
+     *
      * @type {string}
-     * @memberof AccountApiPutMilvusRole
+     * @memberof AccountApiResetAccountPrivileges
      */
     readonly clusterName: string;
     /**
-     * name of the Milvus role
+     *
      * @type {string}
-     * @memberof AccountApiPutMilvusRole
+     * @memberof AccountApiResetAccountPrivileges
      */
-    readonly roleName: string;
+    readonly accountName: string;
     /**
-     *
-     * @type {MilvusRoleRequest}
-     * @memberof AccountApiPutMilvusRole
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiResetAccountPrivileges
      */
-    readonly body: MilvusRoleRequest;
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly host?: string;
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly allDatabases?: boolean;
 }
 /**
  * Request parameters for unlockAccount operation in AccountApi.
@@ -2333,38 +4914,69 @@ export interface AccountApiUpdateMilvusAccountPasswordRequest {
      * @type {MilvusAccountPassword}
      * @memberof AccountApiUpdateMilvusAccountPassword
      */
-    readonly body: MilvusAccountPassword;
+    readonly body: MilvusAccountPassword;
+}
+/**
+ * Request parameters for updateMilvusAccountRoles operation in AccountApi.
+ * @export
+ * @interface AccountApiUpdateMilvusAccountRolesRequest
+ */
+export interface AccountApiUpdateMilvusAccountRolesRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiUpdateMilvusAccountRoles
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiUpdateMilvusAccountRoles
+     */
+    readonly clusterName: string;
+    /**
+     * name of the Account
+     * @type {string}
+     * @memberof AccountApiUpdateMilvusAccountRoles
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {MilvusAccountRoles}
+     * @memberof AccountApiUpdateMilvusAccountRoles
+     */
+    readonly body: MilvusAccountRoles;
 }
 /**
- * Request parameters for updateMilvusAccountRoles operation in AccountApi.
+ * Request parameters for updateMilvusRole operation in AccountApi.
  * @export
- * @interface AccountApiUpdateMilvusAccountRolesRequest
+ * @interface AccountApiUpdateMilvusRoleRequest
  */
-export interface AccountApiUpdateMilvusAccountRolesRequest {
+export interface AccountApiUpdateMilvusRoleRequest {
     /**
      * name of the Org
      * @type {string}
-     * @memberof AccountApiUpdateMilvusAccountRoles
+     * @memberof AccountApiUpdateMilvusRole
      */
     readonly orgName: string;
     /**
      * name of the Cluster
      * @type {string}
-     * @memberof AccountApiUpdateMilvusAccountRoles
+     * @memberof AccountApiUpdateMilvusRole
      */
     readonly clusterName: string;
     /**
-     * name of the Account
+     * name of the Milvus role
      * @type {string}
-     * @memberof AccountApiUpdateMilvusAccountRoles
+     * @memberof AccountApiUpdateMilvusRole
      */
-    readonly accountName: string;
+    readonly roleName: string;
     /**
      *
-     * @type {MilvusAccountRoles}
-     * @memberof AccountApiUpdateMilvusAccountRoles
+     * @type {MilvusRoleRequest}
+     * @memberof AccountApiUpdateMilvusRole
      */
-    readonly body: MilvusAccountRoles;
+    readonly body: MilvusRoleRequest;
 }
 /**
  * Request parameters for updateMssqlAccount operation in AccountApi.
@@ -2417,10 +5029,10 @@ export interface AccountApiUpdateRabbitAccountPasswordRequest {
     readonly accountName: string;
     /**
      *
-     * @type {RbmqUser}
+     * @type {RbmqPasswordUpdateRequest}
      * @memberof AccountApiUpdateRabbitAccountPassword
      */
-    readonly rbmqUser: RbmqUser;
+    readonly rbmqPasswordUpdateRequest: RbmqPasswordUpdateRequest;
 }
 /**
  * Request parameters for updateRabbitAccountPrivileges operation in AccountApi.
@@ -2453,6 +5065,68 @@ export interface AccountApiUpdateRabbitAccountPrivilegesRequest {
      */
     readonly rbmqPermission: RbmqPermission;
 }
+/**
+ * Request parameters for updateSeaweedFSAccount operation in AccountApi.
+ * @export
+ * @interface AccountApiUpdateSeaweedFSAccountRequest
+ */
+export interface AccountApiUpdateSeaweedFSAccountRequest {
+    /**
+     * name of the organization
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccount
+     */
+    readonly orgName: string;
+    /**
+     * name of the cluster
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccount
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccount
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {Account}
+     * @memberof AccountApiUpdateSeaweedFSAccount
+     */
+    readonly body: Account;
+}
+/**
+ * Request parameters for updateSeaweedFSAccountPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiUpdateSeaweedFSAccountPrivilegesRequest
+ */
+export interface AccountApiUpdateSeaweedFSAccountPrivilegesRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccountPrivileges
+     */
+    readonly orgName: string;
+    /**
+     * name of the Cluster
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccountPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     * name of the account
+     * @type {string}
+     * @memberof AccountApiUpdateSeaweedFSAccountPrivileges
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {Array<PrivilegeListItem>}
+     * @memberof AccountApiUpdateSeaweedFSAccountPrivileges
+     */
+    readonly body: Array<PrivilegeListItem>;
+}
 /**
  * Request parameters for updateServiceAccount operation in AccountApi.
  * @export
@@ -2497,6 +5171,24 @@ export interface AccountApiUpdateServiceAccountRequest {
  * @extends {BaseAPI}
  */
 export declare class AccountApi extends BaseAPI implements AccountApiInterface {
+    /**
+     * Replaces named policy bindings. An empty policies array removes all direct bindings. Existing credentials, legacy actions and other identity attributes are preserved.
+     * @summary bindSeaweedFSPolicies
+     * @param {AccountApiBindSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -2524,6 +5216,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     createKafkaAccount(requestParameters: AccountApiCreateKafkaAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Account, any, {}>>;
+    /**
+     * Create a Milvus native role and grant its initial privileges.
+     * @summary Create Milvus role
+     * @param {AccountApiCreateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    createMilvusRole(requestParameters: AccountApiCreateMilvusRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MilvusRole, any, {}>>;
     /**
      * create an account in mongodb
      * @summary Create mongodb account
@@ -2542,6 +5243,24 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     createRabbitAccount(requestParameters: AccountApiCreateRabbitAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Creates a credential on the identity. Account.name must match accountName, role must be BASICUSER. Optional extra.accessKey and password select the access key and secret key; omitted or empty values are generated. The returned password is disclosed only in this response.
+     * @summary createSeaweedFSAccessKey
+     * @param {AccountApiCreateSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    createSeaweedFSAccessKey(requestParameters: AccountApiCreateSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Account, any, {}>>;
+    /**
+     * Creates a BASICUSER identity with named policies from extra.policies. Optional extra.accessKey and password select the credential; empty values are generated. The password is disclosed only in this response.
+     * @summary createSeaweedFSAccount
+     * @param {AccountApiCreateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    createSeaweedFSAccount(requestParameters: AccountApiCreateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Account, any, {}>>;
     /**
      * create a MinIO service account access key
      * @summary Create MinIO access key
@@ -2614,6 +5333,33 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     deleteRabbitAccount(requestParameters: AccountApiDeleteRabbitAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary deleteSeaweedFSAccessKey
+     * @param {AccountApiDeleteSeaweedFSAccessKeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    deleteSeaweedFSAccessKey(requestParameters: AccountApiDeleteSeaweedFSAccessKeyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * delete an account in cluster
+     * @summary deleteSeaweedFSAccount
+     * @param {AccountApiDeleteSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    deleteSeaweedFSAccount(requestParameters: AccountApiDeleteSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Deletes an unused named policy. Attached policies are rejected; no identities or groups are implicitly changed.
+     * @summary deleteSeaweedFSPolicy
+     * @param {AccountApiDeleteSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    deleteSeaweedFSPolicy(requestParameters: AccountApiDeleteSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * delete a MinIO service account access key
      * @summary Delete MinIO access key
@@ -2623,6 +5369,33 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeCapabilities, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeSnapshot, any, {}>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeEvidence[], any, {}>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -2650,6 +5423,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     getRootAccountPassword(requestParameters: AccountApiGetRootAccountPasswordRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<string, any, {}>>;
+    /**
+     * get root account password
+     * @summary getRootSeaweedFSAccountPassword
+     * @param {AccountApiGetRootSeaweedFSAccountPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getRootSeaweedFSAccountPassword(requestParameters: AccountApiGetRootSeaweedFSAccountPasswordRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<string, any, {}>>;
     /**
      * get a MinIO service account access key
      * @summary Get MinIO access key
@@ -2659,6 +5441,24 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<DmsServiceAccount, any, {}>>;
+    /**
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<string[], any, {}>>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeObjectList, any, {}>>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -2704,6 +5504,24 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     listRabbitAccounts(requestParameters: AccountApiListRabbitAccountsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<RbmqAccountsList, any, {}>>;
+    /**
+     * Lists SeaweedFS identities and access-key metadata without secret keys.
+     * @summary listSeaweedFSAccounts
+     * @param {AccountApiListSeaweedFSAccountsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listSeaweedFSAccounts(requestParameters: AccountApiListSeaweedFSAccountsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<AccountListItem[], any, {}>>;
+    /**
+     *
+     * @summary listSeaweedFSPolicies
+     * @param {AccountApiListSeaweedFSPoliciesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listSeaweedFSPolicies(requestParameters: AccountApiListSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ListSeaweedFSPolicies200Response, any, {}>>;
     /**
      * list MinIO service account access keys
      * @summary List MinIO access keys
@@ -2723,14 +5541,158 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
-     * Create or update a Milvus native role and replace its privilege grants.
-     * @summary Put Milvus role
-     * @param {AccountApiPutMilvusRoleRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACCapabilities, any, {}>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole, any, {}>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser, any, {}>>;
+    /**
+     * Lists existing collections, views and time-series collections in a database using the cluster management connection. Returns metadata, not document contents.
+     * @summary List MongoDB cluster database objects
+     * @param {AccountApiMongoListClusterCollectionsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListClusterCollections(requestParameters: AccountApiMongoListClusterCollectionsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoCollectionInfo[], any, {}>>;
+    /**
+     * Lists existing database names using the cluster management connection. Does not require a personal Workbench datasource.
+     * @summary List MongoDB cluster databases
+     * @param {AccountApiMongoListClusterDatabasesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListClusterDatabases(requestParameters: AccountApiMongoListClusterDatabasesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<string[], any, {}>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole[], any, {}>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser[], any, {}>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeResetStep[], any, {}>>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {AccountApiPutSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApi
      */
-    putMilvusRole(requestParameters: AccountApiPutMilvusRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MilvusRole, any, {}>>;
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -2794,6 +5756,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     updateMilvusAccountRoles(requestParameters: AccountApiUpdateMilvusAccountRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Update an existing Milvus native role by replacing its privilege grants.
+     * @summary Update Milvus role
+     * @param {AccountApiUpdateMilvusRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    updateMilvusRole(requestParameters: AccountApiUpdateMilvusRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MilvusRole, any, {}>>;
     /**
      *
      * @summary update mssql account compatible with windows account
@@ -2821,6 +5792,24 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     updateRabbitAccountPrivileges(requestParameters: AccountApiUpdateRabbitAccountPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Resets the secret for extra.accessKey. Account.name must match accountName. extra.accessKey is required. The returned password is disclosed only in this response.
+     * @summary updateSeaweedFSAccount
+     * @param {AccountApiUpdateSeaweedFSAccountRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    updateSeaweedFSAccount(requestParameters: AccountApiUpdateSeaweedFSAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<Account, any, {}>>;
+    /**
+     * Unsupported for SeaweedFS. Use the named policy binding API instead.
+     * @summary updateSeaweedFSAccountPrivileges
+     * @param {AccountApiUpdateSeaweedFSAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    updateSeaweedFSAccountPrivileges(requestParameters: AccountApiUpdateSeaweedFSAccountPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * update a MinIO service account access key
      * @summary Update MinIO access key