kb-cloud-client-typescript 2.4.0-alpha.94 → 2.4.0-alpha.95

package/dist/adminapi/apis/account-api.d.ts

@@ -25,8 +25,16 @@ import type { MilvusRole } from '../models';
 import type { MilvusRoleCreateRequest } from '../models';
 import type { MilvusRoleList } from '../models';
 import type { MilvusRoleRequest } from '../models';
+import type { MongoRBACBindingChange } from '../models';
+import type { MongoRBACCapabilities } from '../models';
+import type { MongoRBACPasswordChange } from '../models';
+import type { MongoRBACRole } from '../models';
+import type { MongoRBACRoleWrite } from '../models';
+import type { MongoRBACUser } from '../models';
+import type { MongoRBACUserCreate } from '../models';
 import type { ObjectPrivilegeCapabilities } from '../models';
 import type { ObjectPrivilegeChange } from '../models';
+import type { ObjectPrivilegeEvidence } from '../models';
 import type { ObjectPrivilegeObjectList } from '../models';
 import type { ObjectPrivilegeResetStep } from '../models';
 import type { ObjectPrivilegeSnapshot } from '../models';
@@ -304,6 +312,21 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -358,19 +381,20 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      */
     getServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
      * @param {string} accountName
-     * @param {string} objectType Object type, either table or view
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @param {string} databaseName
      * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -475,8 +499,138 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      */
     lockAccount: (engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword: (orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles: (orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole: (orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser: (orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles: (orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers: (orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -484,10 +638,12 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -502,8 +658,8 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
         [key: string]: any;
     }, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -511,10 +667,12 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -940,6 +1098,21 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeEvidence>>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -994,19 +1167,20 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      */
     getServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DmsServiceAccount>>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
      * @param {string} accountName
-     * @param {string} objectType Object type, either table or view
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @param {string} databaseName
      * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
+    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -1111,8 +1285,138 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      */
     lockAccount(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword(orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles(orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole(orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser(orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole(orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACCapabilities>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole(orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACRole>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACUser>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACRole>>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACUser>>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole(orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -1120,10 +1424,12 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
+    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -1138,8 +1444,8 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
         [key: string]: any;
     }, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -1147,10 +1453,12 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -1505,6 +1813,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -1546,7 +1862,7 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -1634,8 +1950,104 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -1650,8 +2062,8 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -1993,14 +2405,23 @@ export interface AccountApiInterface {
      */
     getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
     /**
-     * Get Hive accounts
-     * @summary Get Hive accounts
-     * @param {AccountApiGetHiveAccountsRequest} requestParameters Request parameters.
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof AccountApiInterface
      */
-    getHiveAccounts(requestParameters: AccountApiGetHiveAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<AccountListItem>>;
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
+    /**
+     * Get Hive accounts
+     * @summary Get Hive accounts
+     * @param {AccountApiGetHiveAccountsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getHiveAccounts(requestParameters: AccountApiGetHiveAccountsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<AccountListItem>>;
     /**
      * Get a Milvus native role and its privilege grants.
      * @summary Get Milvus role
@@ -2038,7 +2459,7 @@ export interface AccountApiInterface {
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -2137,8 +2558,116 @@ export interface AccountApiInterface {
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -2155,8 +2684,8 @@ export interface AccountApiInterface {
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -3028,6 +3557,61 @@ export interface AccountApiGetAccountObjectPrivilegesRequest {
      */
     readonly subjectQualifiers?: string;
 }
+/**
+ * Request parameters for getAccountPrivilegeOverview operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountPrivilegeOverviewRequest
+ */
+export interface AccountApiGetAccountPrivilegeOverviewRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly host?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @type {string}
+     * @memberof AccountApiGetAccountPrivilegeOverview
+     */
+    readonly databaseName?: string;
+}
 /**
  * Request parameters for getHiveAccounts operation in AccountApi.
  * @export
@@ -3202,7 +3786,7 @@ export interface AccountApiListAccountObjectPrivilegeColumnsRequest {
      */
     readonly accountName: string;
     /**
-     * Object type, either table or view
+     * Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @type {string}
      * @memberof AccountApiListAccountObjectPrivilegeColumns
      */
@@ -3219,6 +3803,12 @@ export interface AccountApiListAccountObjectPrivilegeColumnsRequest {
      * @memberof AccountApiListAccountObjectPrivilegeColumns
      */
     readonly objectName: string;
+    /**
+     * Required for PostgreSQL; not accepted for MySQL
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly schemaName?: string;
 }
 /**
  * Request parameters for listAccountObjectPrivilegeObjects operation in AccountApi.
@@ -3488,6 +4078,366 @@ export interface AccountApiLockAccountRequest {
      */
     readonly accountName: string;
 }
+/**
+ * Request parameters for mongoChangeRBACUserPassword operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoChangeRBACUserPasswordRequest
+ */
+export interface AccountApiMongoChangeRBACUserPasswordRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly username: string;
+    /**
+     *
+     * @type {MongoRBACPasswordChange}
+     * @memberof AccountApiMongoChangeRBACUserPassword
+     */
+    readonly mongoRBACPasswordChange: MongoRBACPasswordChange;
+}
+/**
+ * Request parameters for mongoChangeRBACUserRoles operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoChangeRBACUserRolesRequest
+ */
+export interface AccountApiMongoChangeRBACUserRolesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly username: string;
+    /**
+     *
+     * @type {MongoRBACBindingChange}
+     * @memberof AccountApiMongoChangeRBACUserRoles
+     */
+    readonly mongoRBACBindingChange: MongoRBACBindingChange;
+}
+/**
+ * Request parameters for mongoCreateRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoCreateRBACRoleRequest
+ */
+export interface AccountApiMongoCreateRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof AccountApiMongoCreateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
+}
+/**
+ * Request parameters for mongoCreateRBACUser operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoCreateRBACUserRequest
+ */
+export interface AccountApiMongoCreateRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACUserCreate}
+     * @memberof AccountApiMongoCreateRBACUser
+     */
+    readonly mongoRBACUserCreate: MongoRBACUserCreate;
+}
+/**
+ * Request parameters for mongoDeleteRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoDeleteRBACRoleRequest
+ */
+export interface AccountApiMongoDeleteRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly roleName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACRole
+     */
+    readonly expectedRevision: string;
+}
+/**
+ * Request parameters for mongoDeleteRBACUser operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoDeleteRBACUserRequest
+ */
+export interface AccountApiMongoDeleteRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoDeleteRBACUser
+     */
+    readonly username: string;
+}
+/**
+ * Request parameters for mongoGetRBACCapabilities operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoGetRBACCapabilitiesRequest
+ */
+export interface AccountApiMongoGetRBACCapabilitiesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACCapabilities
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACCapabilities
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for mongoGetRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoGetRBACRoleRequest
+ */
+export interface AccountApiMongoGetRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACRole
+     */
+    readonly roleName: string;
+}
+/**
+ * Request parameters for mongoGetRBACUser operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoGetRBACUserRequest
+ */
+export interface AccountApiMongoGetRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACUser
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoGetRBACUser
+     */
+    readonly username: string;
+}
+/**
+ * Request parameters for mongoListRBACRoles operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoListRBACRolesRequest
+ */
+export interface AccountApiMongoListRBACRolesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACRoles
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACRoles
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACRoles
+     */
+    readonly database?: string;
+}
+/**
+ * Request parameters for mongoListRBACUsers operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoListRBACUsersRequest
+ */
+export interface AccountApiMongoListRBACUsersRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACUsers
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACUsers
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoListRBACUsers
+     */
+    readonly database?: string;
+}
+/**
+ * Request parameters for mongoUpdateRBACRole operation in AccountApi.
+ * @export
+ * @interface AccountApiMongoUpdateRBACRoleRequest
+ */
+export interface AccountApiMongoUpdateRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly roleName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof AccountApiMongoUpdateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
+}
 /**
  * Request parameters for previewAccountPrivilegeReset operation in AccountApi.
  * @export
@@ -3536,6 +4486,18 @@ export interface AccountApiPreviewAccountPrivilegeResetRequest {
      * @memberof AccountApiPreviewAccountPrivilegeReset
      */
     readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly allDatabases?: boolean;
 }
 /**
  * Request parameters for putSeaweedFSPolicy operation in AccountApi.
@@ -3618,6 +4580,18 @@ export interface AccountApiResetAccountPrivilegesRequest {
      * @memberof AccountApiResetAccountPrivileges
      */
     readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly allDatabases?: boolean;
 }
 /**
  * Request parameters for unlockAccount operation in AccountApi.
@@ -4288,6 +5262,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeSnapshot, any, {}>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {AccountApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountPrivilegeOverview(requestParameters: AccountApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeEvidence[], any, {}>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -4334,7 +5317,7 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<DmsServiceAccount, any, {}>>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -4433,8 +5416,116 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {AccountApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserPassword(requestParameters: AccountApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {AccountApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoChangeRBACUserRoles(requestParameters: AccountApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {AccountApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACRole(requestParameters: AccountApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {AccountApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoCreateRBACUser(requestParameters: AccountApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {AccountApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACRole(requestParameters: AccountApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {AccountApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoDeleteRBACUser(requestParameters: AccountApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {AccountApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACCapabilities(requestParameters: AccountApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACCapabilities, any, {}>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {AccountApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACRole(requestParameters: AccountApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole, any, {}>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {AccountApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoGetRBACUser(requestParameters: AccountApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser, any, {}>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {AccountApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACRoles(requestParameters: AccountApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole[], any, {}>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {AccountApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoListRBACUsers(requestParameters: AccountApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser[], any, {}>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {AccountApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    mongoUpdateRBACRole(requestParameters: AccountApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -4451,8 +5542,8 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}