kb-cloud-client-typescript 2.4.0-alpha.89 → 2.4.0-alpha.90

package/src/openapi/apis/shared-api.ts

@@ -276,6 +276,16 @@ import type { NodeList } from '../models';
 // @ts-ignore
 import type { NodeResourceStatsList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeCapabilities } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeChange } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeObjectList } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSnapshot } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSubjectType } from '../models';
+// @ts-ignore
 import type { OfflineInstanceList } from '../models';
 // @ts-ignore
 import type { OpsCustom } from '../models';
@@ -1048,6 +1058,80 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(body, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\"host\":\"%\"}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'body' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'body', body)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
             localVarHeaderParameter['Content-Type'] = 'application/json';
 
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -5644,17 +5728,29 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * 
-         * @summary Get alert config
-         * @param {string} orgName name of the Org
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getAlertConfig: async (orgName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAccountObjectPrivilegeCapabilities: async (engineName: string, orgName: string, clusterName: string, accountName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertConfig', 'orgName', orgName)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/config`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)));
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/capabilities`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5685,21 +5781,40 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * 
-         * @summary Get alert inhibit
-         * @param {string} orgName name of the Org
-         * @param {string} inhibitId inhibit id
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getAlertInhibit: async (orgName: string, inhibitId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertInhibit', 'orgName', orgName)
-            // verify required parameter 'inhibitId' is not null or undefined
-            assertParamExists('getAlertInhibit', 'inhibitId', inhibitId)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/inhibits/{inhibitId}`
+            assertParamExists('getAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'objectType', objectType)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"inhibitId"}}`, encodeURIComponent(String(inhibitId)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5718,49 +5833,41 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             // authentication DigestAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
 
-    
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
 
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * 
-         * @param {string} orgName name of the Org
-         * @param {string} alertName name of the alert
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getAlertRule: async (orgName: string, alertName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertRule', 'orgName', orgName)
-            // verify required parameter 'alertName' is not null or undefined
-            assertParamExists('getAlertRule', 'alertName', alertName)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/rules/{alertName}`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"alertName"}}`, encodeURIComponent(String(alertName)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
             }
 
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
+            if (objectName !== undefined) {
+                localVarQueryParameter['objectName'] = objectName;
+            }
 
-            // authentication BearerToken required
-            // http bearer authentication required
-            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+            if (objectId !== undefined) {
+                localVarQueryParameter['objectId'] = objectId;
+            }
 
-            // authentication DigestAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
 
 
     
@@ -5775,20 +5882,16 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get backup
+         * @summary Get alert config
          * @param {string} orgName name of the Org
-         * @param {string} backupId id of the Backup
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getBackup: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertConfig: async (orgName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackup', 'orgName', orgName)
-            // verify required parameter 'backupId' is not null or undefined
-            assertParamExists('getBackup', 'backupId', backupId)
-            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+            assertParamExists('getAlertConfig', 'orgName', orgName)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/config`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5820,20 +5923,20 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get backup log
+         * @summary Get alert inhibit
          * @param {string} orgName name of the Org
-         * @param {string} backupId id of the Backup
+         * @param {string} inhibitId inhibit id
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getBackupLog: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertInhibit: async (orgName: string, inhibitId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackupLog', 'orgName', orgName)
-            // verify required parameter 'backupId' is not null or undefined
-            assertParamExists('getBackupLog', 'backupId', backupId)
-            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}/logs`
+            assertParamExists('getAlertInhibit', 'orgName', orgName)
+            // verify required parameter 'inhibitId' is not null or undefined
+            assertParamExists('getAlertInhibit', 'inhibitId', inhibitId)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/inhibits/{inhibitId}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+                .replace(`{${"inhibitId"}}`, encodeURIComponent(String(inhibitId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5865,27 +5968,19 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary get backup method
-         * @param {string} orgName name of the org
-         * @param {string} engineName engine name
-         * @param {string} [clusterID] clusterID is required when you want to get the backup method of a existing cluster
-         * @param {boolean} [enablePITR] define whether to enable PITR (Point-In-Time Recovery). This setting is required when clusterId is not empty.
-         * @param {boolean} [withRebuildInstance] defined whether to search for rebuilding instance.
-         * @param {boolean} [withRestoreCluster] defined whether to search for restoring cluster.
-         * @param {boolean} [withHScale] defined whether to search for rebuilding instance.
-         * @param {string} [component] The component type is required when withRebuildInstance/withHScale is true.
-         * @param {string} [mode] The cluster mode, used to filter out unsupported backup methods.
+         * @param {string} orgName name of the Org
+         * @param {string} alertName name of the alert
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getBackupMethod: async (orgName: string, engineName: string, clusterID?: string, enablePITR?: boolean, withRebuildInstance?: boolean, withRestoreCluster?: boolean, withHScale?: boolean, component?: string, mode?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertRule: async (orgName: string, alertName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackupMethod', 'orgName', orgName)
-            // verify required parameter 'engineName' is not null or undefined
-            assertParamExists('getBackupMethod', 'engineName', engineName)
-            const localVarPath = `/api/v1/organizations/{orgName}/{engineName}/clusterBackupMethod`
+            assertParamExists('getAlertRule', 'orgName', orgName)
+            // verify required parameter 'alertName' is not null or undefined
+            assertParamExists('getAlertRule', 'alertName', alertName)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/rules/{alertName}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)));
+                .replace(`{${"alertName"}}`, encodeURIComponent(String(alertName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5904,34 +5999,6 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             // authentication DigestAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
-            if (clusterID !== undefined) {
-                localVarQueryParameter['clusterID'] = clusterID;
-            }
-
-            if (enablePITR !== undefined) {
-                localVarQueryParameter['enablePITR'] = enablePITR;
-            }
-
-            if (withRebuildInstance !== undefined) {
-                localVarQueryParameter['withRebuildInstance'] = withRebuildInstance;
-            }
-
-            if (withRestoreCluster !== undefined) {
-                localVarQueryParameter['withRestoreCluster'] = withRestoreCluster;
-            }
-
-            if (withHScale !== undefined) {
-                localVarQueryParameter['withHScale'] = withHScale;
-            }
-
-            if (component !== undefined) {
-                localVarQueryParameter['component'] = component;
-            }
-
-            if (mode !== undefined) {
-                localVarQueryParameter['mode'] = mode;
-            }
-
 
     
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -5945,24 +6012,20 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get the grants (privileges) of a ClickHouse role
-         * @param {string} orgName 
-         * @param {string} clusterName 
-         * @param {string} roleName 
+         * @summary Get backup
+         * @param {string} orgName name of the Org
+         * @param {string} backupId id of the Backup
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getClickhouseRoleGrants: async (orgName: string, clusterName: string, roleName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getBackup: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'orgName', orgName)
-            // verify required parameter 'clusterName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'clusterName', clusterName)
-            // verify required parameter 'roleName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'roleName', roleName)
-            const localVarPath = `/api/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}`
+            assertParamExists('getBackup', 'orgName', orgName)
+            // verify required parameter 'backupId' is not null or undefined
+            assertParamExists('getBackup', 'backupId', backupId)
+            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
-                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5994,20 +6057,194 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get cluster details
+         * @summary Get backup log
          * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {string} backupId id of the Backup
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getCluster: async (orgName: string, clusterName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getBackupLog: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getCluster', 'orgName', orgName)
-            // verify required parameter 'clusterName' is not null or undefined
-            assertParamExists('getCluster', 'clusterName', clusterName)
-            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+            assertParamExists('getBackupLog', 'orgName', orgName)
+            // verify required parameter 'backupId' is not null or undefined
+            assertParamExists('getBackupLog', 'backupId', backupId)
+            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}/logs`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary get backup method
+         * @param {string} orgName name of the org
+         * @param {string} engineName engine name
+         * @param {string} [clusterID] clusterID is required when you want to get the backup method of a existing cluster
+         * @param {boolean} [enablePITR] define whether to enable PITR (Point-In-Time Recovery). This setting is required when clusterId is not empty.
+         * @param {boolean} [withRebuildInstance] defined whether to search for rebuilding instance.
+         * @param {boolean} [withRestoreCluster] defined whether to search for restoring cluster.
+         * @param {boolean} [withHScale] defined whether to search for rebuilding instance.
+         * @param {string} [component] The component type is required when withRebuildInstance/withHScale is true.
+         * @param {string} [mode] The cluster mode, used to filter out unsupported backup methods.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getBackupMethod: async (orgName: string, engineName: string, clusterID?: string, enablePITR?: boolean, withRebuildInstance?: boolean, withRestoreCluster?: boolean, withHScale?: boolean, component?: string, mode?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getBackupMethod', 'orgName', orgName)
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getBackupMethod', 'engineName', engineName)
+            const localVarPath = `/api/v1/organizations/{orgName}/{engineName}/clusterBackupMethod`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (clusterID !== undefined) {
+                localVarQueryParameter['clusterID'] = clusterID;
+            }
+
+            if (enablePITR !== undefined) {
+                localVarQueryParameter['enablePITR'] = enablePITR;
+            }
+
+            if (withRebuildInstance !== undefined) {
+                localVarQueryParameter['withRebuildInstance'] = withRebuildInstance;
+            }
+
+            if (withRestoreCluster !== undefined) {
+                localVarQueryParameter['withRestoreCluster'] = withRestoreCluster;
+            }
+
+            if (withHScale !== undefined) {
+                localVarQueryParameter['withHScale'] = withHScale;
+            }
+
+            if (component !== undefined) {
+                localVarQueryParameter['component'] = component;
+            }
+
+            if (mode !== undefined) {
+                localVarQueryParameter['mode'] = mode;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Get the grants (privileges) of a ClickHouse role
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} roleName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getClickhouseRoleGrants: async (orgName: string, clusterName: string, roleName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'clusterName', clusterName)
+            // verify required parameter 'roleName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'roleName', roleName)
+            const localVarPath = `/api/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Get cluster details
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getCluster: async (orgName: string, clusterName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getCluster', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getCluster', 'clusterName', clusterName)
+            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -8880,6 +9117,91 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'objectType', objectType)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/objects`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
+            if (offset !== undefined) {
+                localVarQueryParameter['offset'] = offset;
+            }
+
+            if (limit !== undefined) {
+                localVarQueryParameter['limit'] = limit;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -17958,6 +18280,26 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.buildBackupObj']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async changeAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.changeAccountObjectPrivileges(engineName, orgName, clusterName, accountName, body, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.changeAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Change Elasticsearch account password
@@ -19303,6 +19645,47 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.generateDemoData']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivilegeCapabilities(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeCapabilities>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivilegeCapabilities(engineName, orgName, clusterName, accountName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountObjectPrivilegeCapabilities']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivileges(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, objectName, objectId, subjectType, host, catalogName, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Get alert config
@@ -20251,6 +20634,28 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.killSession']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccountObjectPrivilegeObjects(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeObjectList>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeObjects(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, offset, limit, catalogName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.listAccountObjectPrivilegeObjects']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -22904,6 +23309,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         buildBackupObj(requestParameters: SharedApiBuildBackupObjRequest, options?: RawAxiosRequestConfig): AxiosPromise<Backup> {
             return localVarFp.buildBackupObj(requestParameters.orgName, requestParameters.environmentName, requestParameters.engineName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Change Elasticsearch account password
@@ -23765,6 +24180,26 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         generateDemoData(requestParameters: SharedApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities> {
+            return localVarFp.getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot> {
+            return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Get alert config
@@ -24363,6 +24798,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList> {
+            return localVarFp.listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(axios, basePath));
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -26048,6 +26493,16 @@ export interface SharedApiInterface {
      */
     buildBackupObj(requestParameters: SharedApiBuildBackupObjRequest, options?: RawAxiosRequestConfig): AxiosPromise<Backup>;
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * 
      * @summary Change Elasticsearch account password
@@ -26909,6 +27364,26 @@ export interface SharedApiInterface {
      */
     generateDemoData(requestParameters: SharedApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+
     /**
      * 
      * @summary Get alert config
@@ -27507,6 +27982,16 @@ export interface SharedApiInterface {
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -29564,6 +30049,69 @@ export interface SharedApiBuildBackupObjRequest {
     readonly body: BuildBackupObjRequest
 }
 
+/**
+ * Request parameters for changeAccountObjectPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiChangeAccountObjectPrivilegesRequest
+ */
+export interface SharedApiChangeAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {ObjectPrivilegeChange}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly body: ObjectPrivilegeChange
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for changeElasticsearchSecurityUserPassword operation in SharedApi.
  * @export
@@ -32350,6 +32898,139 @@ export interface SharedApiGenerateDemoDataRequest {
     readonly accountName: string
 }
 
+/**
+ * Request parameters for getAccountObjectPrivilegeCapabilities operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountObjectPrivilegeCapabilitiesRequest
+ */
+export interface SharedApiGetAccountObjectPrivilegeCapabilitiesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly accountName: string
+}
+
+/**
+ * Request parameters for getAccountObjectPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountObjectPrivilegesRequest
+ */
+export interface SharedApiGetAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectId?: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly catalogName?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for getAlertConfig operation in SharedApi.
  * @export
@@ -34380,6 +35061,83 @@ export interface SharedApiKillSessionRequest {
     readonly keep?: boolean
 }
 
+/**
+ * Request parameters for listAccountObjectPrivilegeObjects operation in SharedApi.
+ * @export
+ * @interface SharedApiListAccountObjectPrivilegeObjectsRequest
+ */
+export interface SharedApiListAccountObjectPrivilegeObjectsRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {number}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly offset?: number
+
+    /**
+     * 
+     * @type {number}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly limit?: number
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly catalogName?: string
+}
+
 /**
  * Request parameters for listAccounts operation in SharedApi.
  * @export
@@ -40095,6 +40853,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).buildBackupObj(requestParameters.orgName, requestParameters.environmentName, requestParameters.engineName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Change Elasticsearch account password
@@ -41128,6 +41898,30 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Get alert config
@@ -41846,6 +42640,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts