kb-cloud-client-typescript 2.4.0-alpha.93 → 2.4.0-alpha.95

package/dist/adminapi/apis/account-api.js

@@ -1144,6 +1144,68 @@ const AccountApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} accountName
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers]
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountPrivilegeOverview: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options = {}) => {
+            // verify required parameter 'engineName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'engineName', engineName);
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'clusterName', clusterName);
+            // verify required parameter 'accountName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'accountName', accountName);
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/overview`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Get Hive accounts
          * @summary Get Hive accounts
@@ -1371,19 +1433,20 @@ const AccountApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
          * @param {string} accountName
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName
          * @param {string} objectName
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listAccountObjectPrivilegeColumns: async (engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options = {}) => {
+        listAccountObjectPrivilegeColumns: async (engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('listAccountObjectPrivilegeColumns', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -1426,6 +1489,9 @@ const AccountApiAxiosParamCreator = function (configuration) {
             if (objectName !== undefined) {
                 localVarQueryParameter['objectName'] = objectName;
             }
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -1677,7 +1743,545 @@ const AccountApiAxiosParamCreator = function (configuration) {
             (0, common_1.assertParamExists)('listRabbitAccounts', 'clusterName', clusterName);
             const localVarPath = `/admin/v1/data/rabbitmq/organizations/{orgName}/clusters/{clusterName}/accounts`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Lists SeaweedFS identities and access-key metadata without secret keys.
+         * @summary listSeaweedFSAccounts
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listSeaweedFSAccounts: async (orgName, clusterName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('listSeaweedFSAccounts', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('listSeaweedFSAccounts', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/seaweedfs/organizations/{orgName}/clusters/{clusterName}/accounts`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary listSeaweedFSPolicies
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listSeaweedFSPolicies: async (orgName, clusterName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('listSeaweedFSPolicies', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('listSeaweedFSPolicies', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/seaweedfs/organizations/{orgName}/clusters/{clusterName}/policies`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * list MinIO service account access keys
+         * @summary List MinIO access keys
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {string} [userName] MinIO user that owns the service accounts
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listServiceAccounts: async (engineName, orgName, clusterName, userName, options = {}) => {
+            // verify required parameter 'engineName' is not null or undefined
+            (0, common_1.assertParamExists)('listServiceAccounts', 'engineName', engineName);
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('listServiceAccounts', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('listServiceAccounts', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/access-keys`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (userName !== undefined) {
+                localVarQueryParameter['userName'] = userName;
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * lock an account in cluster
+         * @summary Lock cluster account
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {string} accountName name of the account
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        lockAccount: async (engineName, orgName, clusterName, accountName, options = {}) => {
+            // verify required parameter 'engineName' is not null or undefined
+            (0, common_1.assertParamExists)('lockAccount', 'engineName', engineName);
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('lockAccount', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('lockAccount', 'clusterName', clusterName);
+            // verify required parameter 'accountName' is not null or undefined
+            (0, common_1.assertParamExists)('lockAccount', 'accountName', accountName);
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/lock`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserPassword: async (orgName, clusterName, database, username, mongoRBACPasswordChange, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'username', username);
+            // verify required parameter 'mongoRBACPasswordChange' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'mongoRBACPasswordChange', mongoRBACPasswordChange);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/password`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PUT' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACPasswordChange, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserRoles: async (orgName, clusterName, database, username, mongoRBACBindingChange, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'username', username);
+            // verify required parameter 'mongoRBACBindingChange' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'mongoRBACBindingChange', mongoRBACBindingChange);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACBindingChange, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole: async (orgName, clusterName, mongoRBACRoleWrite, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACRoleWrite, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary CreateRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser: async (orgName, clusterName, mongoRBACUserCreate, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'mongoRBACUserCreate' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'mongoRBACUserCreate', mongoRBACUserCreate);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACUserCreate, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary DeleteRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {string} expectedRevision
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole: async (orgName, clusterName, database, roleName, expectedRevision, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'roleName', roleName);
+            // verify required parameter 'expectedRevision' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'expectedRevision', expectedRevision);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (expectedRevision !== undefined) {
+                localVarQueryParameter['expectedRevision'] = expectedRevision;
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary DeleteRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser: async (orgName, clusterName, database, username, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'username', username);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary GetRBACCapabilities
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities: async (orgName, clusterName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACCapabilities', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACCapabilities', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/capabilities`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary GetRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole: async (orgName, clusterName, database, roleName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'roleName', roleName);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -1701,21 +2305,29 @@ const AccountApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * Lists SeaweedFS identities and access-key metadata without secret keys.
-         * @summary listSeaweedFSAccounts
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
+         *
+         * @summary GetRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listSeaweedFSAccounts: async (orgName, clusterName, options = {}) => {
+        mongoGetRBACUser: async (orgName, clusterName, database, username, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('listSeaweedFSAccounts', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('listSeaweedFSAccounts', 'clusterName', clusterName);
-            const localVarPath = `/admin/v1/data/seaweedfs/organizations/{orgName}/clusters/{clusterName}/accounts`
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'username', username);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -1740,18 +2352,19 @@ const AccountApiAxiosParamCreator = function (configuration) {
         },
         /**
          *
-         * @summary listSeaweedFSPolicies
+         * @summary ListRBACRoles
          * @param {string} orgName
          * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listSeaweedFSPolicies: async (orgName, clusterName, options = {}) => {
+        mongoListRBACRoles: async (orgName, clusterName, database, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('listSeaweedFSPolicies', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoListRBACRoles', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('listSeaweedFSPolicies', 'clusterName', clusterName);
-            const localVarPath = `/admin/v1/data/seaweedfs/organizations/{orgName}/clusters/{clusterName}/policies`
+            (0, common_1.assertParamExists)('mongoListRBACRoles', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
                 .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -1768,6 +2381,9 @@ const AccountApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -1777,24 +2393,20 @@ const AccountApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * list MinIO service account access keys
-         * @summary List MinIO access keys
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {string} [userName] MinIO user that owns the service accounts
+         *
+         * @summary ListRBACUsers
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listServiceAccounts: async (engineName, orgName, clusterName, userName, options = {}) => {
-            // verify required parameter 'engineName' is not null or undefined
-            (0, common_1.assertParamExists)('listServiceAccounts', 'engineName', engineName);
+        mongoListRBACUsers: async (orgName, clusterName, database, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('listServiceAccounts', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoListRBACUsers', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('listServiceAccounts', 'clusterName', clusterName);
-            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/access-keys`
-                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+            (0, common_1.assertParamExists)('mongoListRBACUsers', 'clusterName', clusterName);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
                 .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -1811,8 +2423,8 @@ const AccountApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
-            if (userName !== undefined) {
-                localVarQueryParameter['userName'] = userName;
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
             }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
@@ -1823,36 +2435,39 @@ const AccountApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * lock an account in cluster
-         * @summary Lock cluster account
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {string} accountName name of the account
+         *
+         * @summary UpdateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        lockAccount: async (engineName, orgName, clusterName, accountName, options = {}) => {
-            // verify required parameter 'engineName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'engineName', engineName);
+        mongoUpdateRBACRole: async (orgName, clusterName, database, roleName, mongoRBACRoleWrite, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'clusterName', clusterName);
-            // verify required parameter 'accountName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'accountName', accountName);
-            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/lock`
-                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'roleName', roleName);
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite);
+            const localVarPath = `/admin/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
                 .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
-                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PUT' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication BearerToken required
@@ -1860,17 +2475,19 @@ const AccountApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACRoleWrite, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -1878,10 +2495,12 @@ const AccountApiAxiosParamCreator = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        previewAccountPrivilegeReset: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options = {}) => {
+        previewAccountPrivilegeReset: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('previewAccountPrivilegeReset', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -1918,6 +2537,12 @@ const AccountApiAxiosParamCreator = function (configuration) {
             if (subjectQualifiers !== undefined) {
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -1974,8 +2599,8 @@ const AccountApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -1983,10 +2608,12 @@ const AccountApiAxiosParamCreator = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        resetAccountPrivileges: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options = {}) => {
+        resetAccountPrivileges: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('resetAccountPrivileges', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -2023,6 +2650,12 @@ const AccountApiAxiosParamCreator = function (configuration) {
             if (subjectQualifiers !== undefined) {
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -3111,6 +3744,27 @@ const AccountApiFp = function (configuration) {
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.getAccountObjectPrivileges']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} accountName
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers]
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountPrivilegeOverview(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountPrivilegeOverview(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.getAccountPrivilegeOverview']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Get Hive accounts
          * @summary Get Hive accounts
@@ -3195,21 +3849,22 @@ const AccountApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
          * @param {string} accountName
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName
          * @param {string} objectName
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options) {
+        async listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listAccountObjectPrivilegeColumns']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -3238,148 +3893,350 @@ const AccountApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list accounts in cluster
-         * @summary List cluster accounts
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
+         * list accounts in cluster
+         * @summary List cluster accounts
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccounts(engineName, orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccounts(engineName, orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * list accounts in cluster
+         * @summary List cluster accounts
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the Cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listKafkaAccounts(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listKafkaAccounts(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listKafkaAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * List Milvus native roles and their privilege grants.
+         * @summary List Milvus roles
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the Cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listMilvusRoles(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listMilvusRoles(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listMilvusRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * list accounts in mongodb
+         * @summary List mongodb accounts
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the Cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listMongoDBAccounts(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listMongoDBAccounts(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listMongoDBAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * List all RabbitMQ accounts
+         * @summary List RabbitMQ accounts
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the Cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listRabbitAccounts(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listRabbitAccounts(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listRabbitAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Lists SeaweedFS identities and access-key metadata without secret keys.
+         * @summary listSeaweedFSAccounts
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listSeaweedFSAccounts(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listSeaweedFSAccounts(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listSeaweedFSAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary listSeaweedFSPolicies
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listSeaweedFSPolicies(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listSeaweedFSPolicies(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listSeaweedFSPolicies']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * list MinIO service account access keys
+         * @summary List MinIO access keys
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {string} [userName] MinIO user that owns the service accounts
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listServiceAccounts(engineName, orgName, clusterName, userName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listServiceAccounts(engineName, orgName, clusterName, userName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listServiceAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * lock an account in cluster
+         * @summary Lock cluster account
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {string} accountName name of the account
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async lockAccount(engineName, orgName, clusterName, accountName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.lockAccount(engineName, orgName, clusterName, accountName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.lockAccount']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserPassword(orgName, clusterName, database, username, mongoRBACPasswordChange, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserPassword(orgName, clusterName, database, username, mongoRBACPasswordChange, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoChangeRBACUserPassword']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserRoles(orgName, clusterName, database, username, mongoRBACBindingChange, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserRoles(orgName, clusterName, database, username, mongoRBACBindingChange, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoChangeRBACUserRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoCreateRBACRole(orgName, clusterName, mongoRBACRoleWrite, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACRole(orgName, clusterName, mongoRBACRoleWrite, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoCreateRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary CreateRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listAccounts(engineName, orgName, clusterName, options) {
+        async mongoCreateRBACUser(orgName, clusterName, mongoRBACUserCreate, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccounts(engineName, orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACUser(orgName, clusterName, mongoRBACUserCreate, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoCreateRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list accounts in cluster
-         * @summary List cluster accounts
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the Cluster
+         *
+         * @summary DeleteRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {string} expectedRevision
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listKafkaAccounts(orgName, clusterName, options) {
+        async mongoDeleteRBACRole(orgName, clusterName, database, roleName, expectedRevision, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listKafkaAccounts(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACRole(orgName, clusterName, database, roleName, expectedRevision, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listKafkaAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoDeleteRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * List Milvus native roles and their privilege grants.
-         * @summary List Milvus roles
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the Cluster
+         *
+         * @summary DeleteRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listMilvusRoles(orgName, clusterName, options) {
+        async mongoDeleteRBACUser(orgName, clusterName, database, username, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listMilvusRoles(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACUser(orgName, clusterName, database, username, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listMilvusRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoDeleteRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list accounts in mongodb
-         * @summary List mongodb accounts
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the Cluster
+         *
+         * @summary GetRBACCapabilities
+         * @param {string} orgName
+         * @param {string} clusterName
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listMongoDBAccounts(orgName, clusterName, options) {
+        async mongoGetRBACCapabilities(orgName, clusterName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listMongoDBAccounts(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACCapabilities(orgName, clusterName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listMongoDBAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoGetRBACCapabilities']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * List all RabbitMQ accounts
-         * @summary List RabbitMQ accounts
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the Cluster
+         *
+         * @summary GetRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listRabbitAccounts(orgName, clusterName, options) {
+        async mongoGetRBACRole(orgName, clusterName, database, roleName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listRabbitAccounts(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACRole(orgName, clusterName, database, roleName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listRabbitAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoGetRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Lists SeaweedFS identities and access-key metadata without secret keys.
-         * @summary listSeaweedFSAccounts
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
+         *
+         * @summary GetRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listSeaweedFSAccounts(orgName, clusterName, options) {
+        async mongoGetRBACUser(orgName, clusterName, database, username, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listSeaweedFSAccounts(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACUser(orgName, clusterName, database, username, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listSeaweedFSAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoGetRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary listSeaweedFSPolicies
+         * @summary ListRBACRoles
          * @param {string} orgName
          * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listSeaweedFSPolicies(orgName, clusterName, options) {
+        async mongoListRBACRoles(orgName, clusterName, database, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listSeaweedFSPolicies(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACRoles(orgName, clusterName, database, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listSeaweedFSPolicies']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoListRBACRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list MinIO service account access keys
-         * @summary List MinIO access keys
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {string} [userName] MinIO user that owns the service accounts
+         *
+         * @summary ListRBACUsers
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listServiceAccounts(engineName, orgName, clusterName, userName, options) {
+        async mongoListRBACUsers(orgName, clusterName, database, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listServiceAccounts(engineName, orgName, clusterName, userName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACUsers(orgName, clusterName, database, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.listServiceAccounts']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoListRBACUsers']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * lock an account in cluster
-         * @summary Lock cluster account
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {string} accountName name of the account
+         *
+         * @summary UpdateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async lockAccount(engineName, orgName, clusterName, accountName, options) {
+        async mongoUpdateRBACRole(orgName, clusterName, database, roleName, mongoRBACRoleWrite, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.lockAccount(engineName, orgName, clusterName, accountName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoUpdateRBACRole(orgName, clusterName, database, roleName, mongoRBACRoleWrite, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.lockAccount']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.mongoUpdateRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -3387,12 +4244,14 @@ const AccountApiFp = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options) {
+        async previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.previewAccountPrivilegeReset']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -3415,8 +4274,8 @@ const AccountApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -3424,12 +4283,14 @@ const AccountApiFp = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options) {
+        async resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['AccountApi.resetAccountPrivileges']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -3924,6 +4785,16 @@ const AccountApiFactory = function (configuration, basePath, axios) {
         getAccountObjectPrivileges(requestParameters, options) {
             return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountPrivilegeOverview(requestParameters, options) {
+            return localVarFp.getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(axios, basePath));
+        },
         /**
          * Get Hive accounts
          * @summary Get Hive accounts
@@ -3975,14 +4846,14 @@ const AccountApiFactory = function (configuration, basePath, axios) {
             return localVarFp.getServiceAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accessKey, options).then((request) => request(axios, basePath));
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         listAccountObjectPrivilegeColumns(requestParameters, options) {
-            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(axios, basePath));
+            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(axios, basePath));
         },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
@@ -4085,14 +4956,134 @@ const AccountApiFactory = function (configuration, basePath, axios) {
             return localVarFp.lockAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserPassword(requestParameters, options) {
+            return localVarFp.mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserRoles(requestParameters, options) {
+            return localVarFp.mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole(requestParameters, options) {
+            return localVarFp.mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary CreateRBACUser
+         * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser(requestParameters, options) {
+            return localVarFp.mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary DeleteRBACRole
+         * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole(requestParameters, options) {
+            return localVarFp.mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary DeleteRBACUser
+         * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser(requestParameters, options) {
+            return localVarFp.mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACCapabilities
+         * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities(requestParameters, options) {
+            return localVarFp.mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACRole
+         * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole(requestParameters, options) {
+            return localVarFp.mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACUser
+         * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACUser(requestParameters, options) {
+            return localVarFp.mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ListRBACRoles
+         * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACRoles(requestParameters, options) {
+            return localVarFp.mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ListRBACUsers
+         * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACUsers(requestParameters, options) {
+            return localVarFp.mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary UpdateRBACRole
+         * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoUpdateRBACRole(requestParameters, options) {
+            return localVarFp.mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         previewAccountPrivilegeReset(requestParameters, options) {
-            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
@@ -4105,14 +5096,14 @@ const AccountApiFactory = function (configuration, basePath, axios) {
             return localVarFp.putSeaweedFSPolicy(requestParameters.orgName, requestParameters.clusterName, requestParameters.policyName, requestParameters.requestBody, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         resetAccountPrivileges(requestParameters, options) {
-            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          * unlock an account in cluster
@@ -4528,6 +5519,17 @@ class AccountApi extends base_1.BaseAPI {
     getAccountObjectPrivileges(requestParameters, options) {
         return (0, exports.AccountApiFp)(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountPrivilegeOverview(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -4584,7 +5586,7 @@ class AccountApi extends base_1.BaseAPI {
         return (0, exports.AccountApiFp)(this.configuration).getServiceAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accessKey, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -4592,7 +5594,7 @@ class AccountApi extends base_1.BaseAPI {
      * @memberof AccountApi
      */
     listAccountObjectPrivilegeColumns(requestParameters, options) {
-        return (0, exports.AccountApiFp)(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.AccountApiFp)(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
@@ -4705,15 +5707,147 @@ class AccountApi extends base_1.BaseAPI {
         return (0, exports.AccountApiFp)(this.configuration).lockAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserPassword(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserRoles(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACRole(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACUser(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACRole(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACUser(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACCapabilities(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACRole(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACUser(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACRoles(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACUsers(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoUpdateRBACRole(requestParameters, options) {
+        return (0, exports.AccountApiFp)(this.configuration).mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApi
      */
     previewAccountPrivilegeReset(requestParameters, options) {
-        return (0, exports.AccountApiFp)(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.AccountApiFp)(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
@@ -4727,15 +5861,15 @@ class AccountApi extends base_1.BaseAPI {
         return (0, exports.AccountApiFp)(this.configuration).putSeaweedFSPolicy(requestParameters.orgName, requestParameters.clusterName, requestParameters.policyName, requestParameters.requestBody, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApi
      */
     resetAccountPrivileges(requestParameters, options) {
-        return (0, exports.AccountApiFp)(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.AccountApiFp)(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * unlock an account in cluster