kb-cloud-client-typescript 2.4.0-alpha.94 → 2.4.0-alpha.95

package/src/openapi/apis/shared-api.ts

@@ -272,6 +272,20 @@ import type { MilvusRoleList } from '../models';
 // @ts-ignore
 import type { MilvusRoleRequest } from '../models';
 // @ts-ignore
+import type { MongoRBACBindingChange } from '../models';
+// @ts-ignore
+import type { MongoRBACCapabilities } from '../models';
+// @ts-ignore
+import type { MongoRBACPasswordChange } from '../models';
+// @ts-ignore
+import type { MongoRBACRole } from '../models';
+// @ts-ignore
+import type { MongoRBACRoleWrite } from '../models';
+// @ts-ignore
+import type { MongoRBACUser } from '../models';
+// @ts-ignore
+import type { MongoRBACUserCreate } from '../models';
+// @ts-ignore
 import type { NodeList } from '../models';
 // @ts-ignore
 import type { NodeResourceStatsList } from '../models';
@@ -280,6 +294,8 @@ import type { ObjectPrivilegeCapabilities } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeChange } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeEvidence } from '../models';
+// @ts-ignore
 import type { ObjectPrivilegeObjectList } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeResetStep } from '../models';
@@ -5883,62 +5899,33 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * 
-         * @summary Get alert config
-         * @param {string} orgName name of the Org
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getAlertConfig: async (orgName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertConfig', 'orgName', orgName)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/config`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication BearerToken required
-            // http bearer authentication required
-            await setBearerAuthToObject(localVarHeaderParameter, configuration)
-
-            // authentication DigestAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
-
-
-    
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * 
-         * @summary Get alert inhibit
-         * @param {string} orgName name of the Org
-         * @param {string} inhibitId inhibit id
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] 
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getAlertInhibit: async (orgName: string, inhibitId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAccountPrivilegeOverview: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountPrivilegeOverview', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertInhibit', 'orgName', orgName)
-            // verify required parameter 'inhibitId' is not null or undefined
-            assertParamExists('getAlertInhibit', 'inhibitId', inhibitId)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/inhibits/{inhibitId}`
+            assertParamExists('getAccountPrivilegeOverview', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountPrivilegeOverview', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountPrivilegeOverview', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/overview`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"inhibitId"}}`, encodeURIComponent(String(inhibitId)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -5957,94 +5944,21 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             // authentication DigestAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
-
-    
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * 
-         * @param {string} orgName name of the Org
-         * @param {string} alertName name of the alert
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getAlertRule: async (orgName: string, alertName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getAlertRule', 'orgName', orgName)
-            // verify required parameter 'alertName' is not null or undefined
-            assertParamExists('getAlertRule', 'alertName', alertName)
-            const localVarPath = `/api/v1/organizations/{orgName}/alerts/rules/{alertName}`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"alertName"}}`, encodeURIComponent(String(alertName)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
             }
 
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication BearerToken required
-            // http bearer authentication required
-            await setBearerAuthToObject(localVarHeaderParameter, configuration)
-
-            // authentication DigestAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
-
-
-    
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * 
-         * @summary Get backup
-         * @param {string} orgName name of the Org
-         * @param {string} backupId id of the Backup
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getBackup: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackup', 'orgName', orgName)
-            // verify required parameter 'backupId' is not null or undefined
-            assertParamExists('getBackup', 'backupId', backupId)
-            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
             }
 
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication BearerToken required
-            // http bearer authentication required
-            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
 
-            // authentication DigestAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
 
 
     
@@ -6059,20 +5973,16 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get backup log
+         * @summary Get alert config
          * @param {string} orgName name of the Org
-         * @param {string} backupId id of the Backup
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getBackupLog: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertConfig: async (orgName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackupLog', 'orgName', orgName)
-            // verify required parameter 'backupId' is not null or undefined
-            assertParamExists('getBackupLog', 'backupId', backupId)
-            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}/logs`
-                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+            assertParamExists('getAlertConfig', 'orgName', orgName)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/config`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -6104,27 +6014,20 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary get backup method
-         * @param {string} orgName name of the org
-         * @param {string} engineName engine name
-         * @param {string} [clusterID] clusterID is required when you want to get the backup method of a existing cluster
-         * @param {boolean} [enablePITR] define whether to enable PITR (Point-In-Time Recovery). This setting is required when clusterId is not empty.
-         * @param {boolean} [withRebuildInstance] defined whether to search for rebuilding instance.
-         * @param {boolean} [withRestoreCluster] defined whether to search for restoring cluster.
-         * @param {boolean} [withHScale] defined whether to search for rebuilding instance.
-         * @param {string} [component] The component type is required when withRebuildInstance/withHScale is true.
-         * @param {string} [mode] The cluster mode, used to filter out unsupported backup methods.
+         * @summary Get alert inhibit
+         * @param {string} orgName name of the Org
+         * @param {string} inhibitId inhibit id
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getBackupMethod: async (orgName: string, engineName: string, clusterID?: string, enablePITR?: boolean, withRebuildInstance?: boolean, withRestoreCluster?: boolean, withHScale?: boolean, component?: string, mode?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertInhibit: async (orgName: string, inhibitId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getBackupMethod', 'orgName', orgName)
-            // verify required parameter 'engineName' is not null or undefined
-            assertParamExists('getBackupMethod', 'engineName', engineName)
-            const localVarPath = `/api/v1/organizations/{orgName}/{engineName}/clusterBackupMethod`
+            assertParamExists('getAlertInhibit', 'orgName', orgName)
+            // verify required parameter 'inhibitId' is not null or undefined
+            assertParamExists('getAlertInhibit', 'inhibitId', inhibitId)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/inhibits/{inhibitId}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)));
+                .replace(`{${"inhibitId"}}`, encodeURIComponent(String(inhibitId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -6143,34 +6046,6 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             // authentication DigestAuth required
             await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
 
-            if (clusterID !== undefined) {
-                localVarQueryParameter['clusterID'] = clusterID;
-            }
-
-            if (enablePITR !== undefined) {
-                localVarQueryParameter['enablePITR'] = enablePITR;
-            }
-
-            if (withRebuildInstance !== undefined) {
-                localVarQueryParameter['withRebuildInstance'] = withRebuildInstance;
-            }
-
-            if (withRestoreCluster !== undefined) {
-                localVarQueryParameter['withRestoreCluster'] = withRestoreCluster;
-            }
-
-            if (withHScale !== undefined) {
-                localVarQueryParameter['withHScale'] = withHScale;
-            }
-
-            if (component !== undefined) {
-                localVarQueryParameter['component'] = component;
-            }
-
-            if (mode !== undefined) {
-                localVarQueryParameter['mode'] = mode;
-            }
-
 
     
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -6184,24 +6059,19 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get the grants (privileges) of a ClickHouse role
-         * @param {string} orgName 
-         * @param {string} clusterName 
-         * @param {string} roleName 
+         * @param {string} orgName name of the Org
+         * @param {string} alertName name of the alert
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getClickhouseRoleGrants: async (orgName: string, clusterName: string, roleName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getAlertRule: async (orgName: string, alertName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'orgName', orgName)
-            // verify required parameter 'clusterName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'clusterName', clusterName)
-            // verify required parameter 'roleName' is not null or undefined
-            assertParamExists('getClickhouseRoleGrants', 'roleName', roleName)
-            const localVarPath = `/api/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}`
+            assertParamExists('getAlertRule', 'orgName', orgName)
+            // verify required parameter 'alertName' is not null or undefined
+            assertParamExists('getAlertRule', 'alertName', alertName)
+            const localVarPath = `/api/v1/organizations/{orgName}/alerts/rules/{alertName}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
-                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+                .replace(`{${"alertName"}}`, encodeURIComponent(String(alertName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -6233,20 +6103,239 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
         },
         /**
          * 
-         * @summary Get cluster details
+         * @summary Get backup
          * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {string} backupId id of the Backup
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        getCluster: async (orgName: string, clusterName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getBackup: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('getCluster', 'orgName', orgName)
-            // verify required parameter 'clusterName' is not null or undefined
-            assertParamExists('getCluster', 'clusterName', clusterName)
-            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+            assertParamExists('getBackup', 'orgName', orgName)
+            // verify required parameter 'backupId' is not null or undefined
+            assertParamExists('getBackup', 'backupId', backupId)
+            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Get backup log
+         * @param {string} orgName name of the Org
+         * @param {string} backupId id of the Backup
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getBackupLog: async (orgName: string, backupId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getBackupLog', 'orgName', orgName)
+            // verify required parameter 'backupId' is not null or undefined
+            assertParamExists('getBackupLog', 'backupId', backupId)
+            const localVarPath = `/api/v1/organizations/{orgName}/backups/{backupId}/logs`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"backupId"}}`, encodeURIComponent(String(backupId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary get backup method
+         * @param {string} orgName name of the org
+         * @param {string} engineName engine name
+         * @param {string} [clusterID] clusterID is required when you want to get the backup method of a existing cluster
+         * @param {boolean} [enablePITR] define whether to enable PITR (Point-In-Time Recovery). This setting is required when clusterId is not empty.
+         * @param {boolean} [withRebuildInstance] defined whether to search for rebuilding instance.
+         * @param {boolean} [withRestoreCluster] defined whether to search for restoring cluster.
+         * @param {boolean} [withHScale] defined whether to search for rebuilding instance.
+         * @param {string} [component] The component type is required when withRebuildInstance/withHScale is true.
+         * @param {string} [mode] The cluster mode, used to filter out unsupported backup methods.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getBackupMethod: async (orgName: string, engineName: string, clusterID?: string, enablePITR?: boolean, withRebuildInstance?: boolean, withRestoreCluster?: boolean, withHScale?: boolean, component?: string, mode?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getBackupMethod', 'orgName', orgName)
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getBackupMethod', 'engineName', engineName)
+            const localVarPath = `/api/v1/organizations/{orgName}/{engineName}/clusterBackupMethod`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (clusterID !== undefined) {
+                localVarQueryParameter['clusterID'] = clusterID;
+            }
+
+            if (enablePITR !== undefined) {
+                localVarQueryParameter['enablePITR'] = enablePITR;
+            }
+
+            if (withRebuildInstance !== undefined) {
+                localVarQueryParameter['withRebuildInstance'] = withRebuildInstance;
+            }
+
+            if (withRestoreCluster !== undefined) {
+                localVarQueryParameter['withRestoreCluster'] = withRestoreCluster;
+            }
+
+            if (withHScale !== undefined) {
+                localVarQueryParameter['withHScale'] = withHScale;
+            }
+
+            if (component !== undefined) {
+                localVarQueryParameter['component'] = component;
+            }
+
+            if (mode !== undefined) {
+                localVarQueryParameter['mode'] = mode;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Get the grants (privileges) of a ClickHouse role
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} roleName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getClickhouseRoleGrants: async (orgName: string, clusterName: string, roleName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'clusterName', clusterName)
+            // verify required parameter 'roleName' is not null or undefined
+            assertParamExists('getClickhouseRoleGrants', 'roleName', roleName)
+            const localVarPath = `/api/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Get cluster details
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getCluster: async (orgName: string, clusterName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getCluster', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getCluster', 'clusterName', clusterName)
+            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -9129,19 +9218,20 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
          * @param {string} accountName 
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName 
          * @param {string} objectName 
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listAccountObjectPrivilegeColumns: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        listAccountObjectPrivilegeColumns: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'engineName' is not null or undefined
             assertParamExists('listAccountObjectPrivilegeColumns', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
@@ -9191,6 +9281,10 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 localVarQueryParameter['objectName'] = objectName;
             }
 
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
 
     
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -12675,20 +12769,32 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * partially update the specified apikey
-         * @summary Update apikey information
-         * @param {string} keyName Name of the apikey
-         * @param {ApikeyCreate} body 
+         * 
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        patchAPIkey: async (keyName: string, body: ApikeyCreate, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'keyName' is not null or undefined
-            assertParamExists('patchAPIkey', 'keyName', keyName)
-            // verify required parameter 'body' is not null or undefined
-            assertParamExists('patchAPIkey', 'body', body)
-            const localVarPath = `/api/v1/user/apikey/{keyName}`
-                .replace(`{${"keyName"}}`, encodeURIComponent(String(keyName)));
+        mongoChangeRBACUserPassword: async (orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoChangeRBACUserPassword', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoChangeRBACUserPassword', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoChangeRBACUserPassword', 'database', database)
+            // verify required parameter 'username' is not null or undefined
+            assertParamExists('mongoChangeRBACUserPassword', 'username', username)
+            // verify required parameter 'mongoRBACPasswordChange' is not null or undefined
+            assertParamExists('mongoChangeRBACUserPassword', 'mongoRBACPasswordChange', mongoRBACPasswordChange)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/password`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -12696,7 +12802,7 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 baseOptions = configuration.baseOptions;
             }
 
-            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...options};
             const localVarHeaderParameter = {} as any;
             const localVarQueryParameter = {} as any;
 
@@ -12714,7 +12820,7 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(body, localVarRequestOptions, configuration)
+            localVarRequestOptions.data = serializeDataIfNeeded(mongoRBACPasswordChange, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -12722,24 +12828,655 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * Update the specified Cluster
-         * @summary Update cluster specified fields
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the KubeBlocks cluster
-         * @param {ClusterUpdate} body 
+         * 
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange 
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        patchCluster: async (orgName: string, clusterName: string, body: ClusterUpdate, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        mongoChangeRBACUserRoles: async (orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'orgName' is not null or undefined
-            assertParamExists('patchCluster', 'orgName', orgName)
+            assertParamExists('mongoChangeRBACUserRoles', 'orgName', orgName)
             // verify required parameter 'clusterName' is not null or undefined
-            assertParamExists('patchCluster', 'clusterName', clusterName)
-            // verify required parameter 'body' is not null or undefined
-            assertParamExists('patchCluster', 'body', body)
-            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+            assertParamExists('mongoChangeRBACUserRoles', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoChangeRBACUserRoles', 'database', database)
+            // verify required parameter 'username' is not null or undefined
+            assertParamExists('mongoChangeRBACUserRoles', 'username', username)
+            // verify required parameter 'mongoRBACBindingChange' is not null or undefined
+            assertParamExists('mongoChangeRBACUserRoles', 'mongoRBACBindingChange', mongoRBACBindingChange)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/roles`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(mongoRBACBindingChange, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary CreateRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole: async (orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoCreateRBACRole', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoCreateRBACRole', 'clusterName', clusterName)
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            assertParamExists('mongoCreateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(mongoRBACRoleWrite, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary CreateRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser: async (orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoCreateRBACUser', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoCreateRBACUser', 'clusterName', clusterName)
+            // verify required parameter 'mongoRBACUserCreate' is not null or undefined
+            assertParamExists('mongoCreateRBACUser', 'mongoRBACUserCreate', mongoRBACUserCreate)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(mongoRBACUserCreate, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary DeleteRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {string} expectedRevision 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole: async (orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoDeleteRBACRole', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoDeleteRBACRole', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoDeleteRBACRole', 'database', database)
+            // verify required parameter 'roleName' is not null or undefined
+            assertParamExists('mongoDeleteRBACRole', 'roleName', roleName)
+            // verify required parameter 'expectedRevision' is not null or undefined
+            assertParamExists('mongoDeleteRBACRole', 'expectedRevision', expectedRevision)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (expectedRevision !== undefined) {
+                localVarQueryParameter['expectedRevision'] = expectedRevision;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary DeleteRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser: async (orgName: string, clusterName: string, database: string, username: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoDeleteRBACUser', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoDeleteRBACUser', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoDeleteRBACUser', 'database', database)
+            // verify required parameter 'username' is not null or undefined
+            assertParamExists('mongoDeleteRBACUser', 'username', username)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary GetRBACCapabilities
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities: async (orgName: string, clusterName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoGetRBACCapabilities', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoGetRBACCapabilities', 'clusterName', clusterName)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/capabilities`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary GetRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole: async (orgName: string, clusterName: string, database: string, roleName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoGetRBACRole', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoGetRBACRole', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoGetRBACRole', 'database', database)
+            // verify required parameter 'roleName' is not null or undefined
+            assertParamExists('mongoGetRBACRole', 'roleName', roleName)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary GetRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACUser: async (orgName: string, clusterName: string, database: string, username: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoGetRBACUser', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoGetRBACUser', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoGetRBACUser', 'database', database)
+            // verify required parameter 'username' is not null or undefined
+            assertParamExists('mongoGetRBACUser', 'username', username)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ListRBACRoles
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} [database] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACRoles: async (orgName: string, clusterName: string, database?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoListRBACRoles', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoListRBACRoles', 'clusterName', clusterName)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ListRBACUsers
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} [database] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACUsers: async (orgName: string, clusterName: string, database?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoListRBACUsers', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoListRBACUsers', 'clusterName', clusterName)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary UpdateRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoUpdateRBACRole: async (orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('mongoUpdateRBACRole', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('mongoUpdateRBACRole', 'clusterName', clusterName)
+            // verify required parameter 'database' is not null or undefined
+            assertParamExists('mongoUpdateRBACRole', 'database', database)
+            // verify required parameter 'roleName' is not null or undefined
+            assertParamExists('mongoUpdateRBACRole', 'roleName', roleName)
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            assertParamExists('mongoUpdateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite)
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(mongoRBACRoleWrite, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * partially update the specified apikey
+         * @summary Update apikey information
+         * @param {string} keyName Name of the apikey
+         * @param {ApikeyCreate} body 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        patchAPIkey: async (keyName: string, body: ApikeyCreate, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'keyName' is not null or undefined
+            assertParamExists('patchAPIkey', 'keyName', keyName)
+            // verify required parameter 'body' is not null or undefined
+            assertParamExists('patchAPIkey', 'body', body)
+            const localVarPath = `/api/v1/user/apikey/{keyName}`
+                .replace(`{${"keyName"}}`, encodeURIComponent(String(keyName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(body, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Update the specified Cluster
+         * @summary Update cluster specified fields
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {ClusterUpdate} body 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        patchCluster: async (orgName: string, clusterName: string, body: ClusterUpdate, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('patchCluster', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('patchCluster', 'clusterName', clusterName)
+            // verify required parameter 'body' is not null or undefined
+            assertParamExists('patchCluster', 'body', body)
+            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
             let baseOptions;
@@ -12922,8 +13659,8 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
@@ -12931,10 +13668,12 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'engineName' is not null or undefined
             assertParamExists('previewAccountPrivilegeReset', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
@@ -12978,6 +13717,14 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
 
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
+
 
     
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -15161,8 +15908,8 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
@@ -15170,10 +15917,12 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'engineName' is not null or undefined
             assertParamExists('resetAccountPrivileges', 'engineName', engineName)
             // verify required parameter 'orgName' is not null or undefined
@@ -15217,6 +15966,14 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
 
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
+
 
     
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -19898,6 +20655,26 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] 
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountPrivilegeOverview(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeEvidence>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountPrivilegeOverview(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountPrivilegeOverview']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Get alert config
@@ -20847,20 +21624,21 @@ export const SharedApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
          * @param {string} accountName 
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName 
          * @param {string} objectName 
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options);
+        async listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['SharedApi.listAccountObjectPrivilegeColumns']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -21902,6 +22680,196 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.markClusterRestoreCompleted']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * 
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserPassword(orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserPassword(orgName, clusterName, database, username, mongoRBACPasswordChange, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoChangeRBACUserPassword']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserRoles(orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserRoles(orgName, clusterName, database, username, mongoRBACBindingChange, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoChangeRBACUserRoles']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary CreateRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoCreateRBACRole(orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACRole(orgName, clusterName, mongoRBACRoleWrite, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoCreateRBACRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary CreateRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoCreateRBACUser(orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACUser(orgName, clusterName, mongoRBACUserCreate, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoCreateRBACUser']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary DeleteRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {string} expectedRevision 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoDeleteRBACRole(orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACRole(orgName, clusterName, database, roleName, expectedRevision, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoDeleteRBACRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary DeleteRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoDeleteRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACUser(orgName, clusterName, database, username, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoDeleteRBACUser']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary GetRBACCapabilities
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoGetRBACCapabilities(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACCapabilities>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACCapabilities(orgName, clusterName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoGetRBACCapabilities']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary GetRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoGetRBACRole(orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACRole>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACRole(orgName, clusterName, database, roleName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoGetRBACRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary GetRBACUser
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} username 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoGetRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACUser>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACUser(orgName, clusterName, database, username, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoGetRBACUser']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ListRBACRoles
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} [database] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoListRBACRoles(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACRole>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACRoles(orgName, clusterName, database, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoListRBACRoles']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ListRBACUsers
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} [database] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoListRBACUsers(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACUser>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACUsers(orgName, clusterName, database, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoListRBACUsers']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary UpdateRBACRole
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} database 
+         * @param {string} roleName 
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoUpdateRBACRole(orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoUpdateRBACRole(orgName, clusterName, database, roleName, mongoRBACRoleWrite, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.mongoUpdateRBACRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * partially update the specified apikey
          * @summary Update apikey information
@@ -21976,8 +22944,8 @@ export const SharedApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
@@ -21985,11 +22953,13 @@ export const SharedApiFp = function(configuration?: Configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['SharedApi.previewAccountPrivilegeReset']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -22555,8 +23525,8 @@ export const SharedApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName 
          * @param {string} orgName 
          * @param {string} clusterName 
@@ -22564,11 +23534,13 @@ export const SharedApiFp = function(configuration?: Configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['SharedApi.resetAccountPrivileges']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -24469,6 +25441,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot> {
             return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>> {
+            return localVarFp.getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Get alert config
@@ -25068,14 +26050,14 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         listAccountObjectPrivilegeColumns(requestParameters: SharedApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>> {
-            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(axios, basePath));
+            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(axios, basePath));
         },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
@@ -25765,6 +26747,126 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         markClusterRestoreCompleted(requestParameters: SharedApiMarkClusterRestoreCompletedRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.markClusterRestoreCompleted(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(axios, basePath));
         },
+        /**
+         * 
+         * @summary ChangeRBACUserPassword
+         * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ChangeRBACUserRoles
+         * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary CreateRBACRole
+         * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary CreateRBACUser
+         * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary DeleteRBACRole
+         * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary DeleteRBACUser
+         * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary GetRBACCapabilities
+         * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities> {
+            return localVarFp.mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary GetRBACRole
+         * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole> {
+            return localVarFp.mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary GetRBACUser
+         * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser> {
+            return localVarFp.mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ListRBACRoles
+         * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>> {
+            return localVarFp.mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ListRBACUsers
+         * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>> {
+            return localVarFp.mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary UpdateRBACRole
+         * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
         /**
          * partially update the specified apikey
          * @summary Update apikey information
@@ -25816,14 +26918,14 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
             return localVarFp.patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>> {
-            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          * 
@@ -26105,14 +27207,14 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
             return localVarFp.reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
-            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          * 
@@ -27683,6 +28785,16 @@ export interface SharedApiInterface {
      */
     getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
 
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
+
     /**
      * 
      * @summary Get alert config
@@ -28282,7 +29394,7 @@ export interface SharedApiInterface {
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -28979,6 +30091,126 @@ export interface SharedApiInterface {
      */
     markClusterRestoreCompleted(requestParameters: SharedApiMarkClusterRestoreCompletedRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * 
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
+    /**
+     * 
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
+
+    /**
+     * 
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
+
+    /**
+     * 
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
+
+    /**
+     * 
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+
+    /**
+     * 
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+
+    /**
+     * 
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -29030,8 +30262,8 @@ export interface SharedApiInterface {
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
 
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -29319,8 +30551,8 @@ export interface SharedApiInterface {
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
 
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -33360,6 +34592,69 @@ export interface SharedApiGetAccountObjectPrivilegesRequest {
     readonly subjectQualifiers?: string
 }
 
+/**
+ * Request parameters for getAccountPrivilegeOverview operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountPrivilegeOverviewRequest
+ */
+export interface SharedApiGetAccountPrivilegeOverviewRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly host?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly subjectQualifiers?: string
+
+    /**
+     * PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly databaseName?: string
+}
+
 /**
  * Request parameters for getAlertConfig operation in SharedApi.
  * @export
@@ -35425,7 +36720,7 @@ export interface SharedApiListAccountObjectPrivilegeColumnsRequest {
     readonly accountName: string
 
     /**
-     * Object type, either table or view
+     * Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @type {string}
      * @memberof SharedApiListAccountObjectPrivilegeColumns
      */
@@ -35444,6 +36739,13 @@ export interface SharedApiListAccountObjectPrivilegeColumnsRequest {
      * @memberof SharedApiListAccountObjectPrivilegeColumns
      */
     readonly objectName: string
+
+    /**
+     * Required for PostgreSQL; not accepted for MySQL
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly schemaName?: string
 }
 
 /**
@@ -37364,6 +38666,412 @@ export interface SharedApiMarkClusterRestoreCompletedRequest {
     readonly clusterName: string
 }
 
+/**
+ * Request parameters for mongoChangeRBACUserPassword operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoChangeRBACUserPasswordRequest
+ */
+export interface SharedApiMongoChangeRBACUserPasswordRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserPassword
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserPassword
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserPassword
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserPassword
+     */
+    readonly username: string
+
+    /**
+     * 
+     * @type {MongoRBACPasswordChange}
+     * @memberof SharedApiMongoChangeRBACUserPassword
+     */
+    readonly mongoRBACPasswordChange: MongoRBACPasswordChange
+}
+
+/**
+ * Request parameters for mongoChangeRBACUserRoles operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoChangeRBACUserRolesRequest
+ */
+export interface SharedApiMongoChangeRBACUserRolesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly username: string
+
+    /**
+     * 
+     * @type {MongoRBACBindingChange}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly mongoRBACBindingChange: MongoRBACBindingChange
+}
+
+/**
+ * Request parameters for mongoCreateRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoCreateRBACRoleRequest
+ */
+export interface SharedApiMongoCreateRBACRoleRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {MongoRBACRoleWrite}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite
+}
+
+/**
+ * Request parameters for mongoCreateRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoCreateRBACUserRequest
+ */
+export interface SharedApiMongoCreateRBACUserRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {MongoRBACUserCreate}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly mongoRBACUserCreate: MongoRBACUserCreate
+}
+
+/**
+ * Request parameters for mongoDeleteRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoDeleteRBACRoleRequest
+ */
+export interface SharedApiMongoDeleteRBACRoleRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly roleName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly expectedRevision: string
+}
+
+/**
+ * Request parameters for mongoDeleteRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoDeleteRBACUserRequest
+ */
+export interface SharedApiMongoDeleteRBACUserRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly username: string
+}
+
+/**
+ * Request parameters for mongoGetRBACCapabilities operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACCapabilitiesRequest
+ */
+export interface SharedApiMongoGetRBACCapabilitiesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACCapabilities
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACCapabilities
+     */
+    readonly clusterName: string
+}
+
+/**
+ * Request parameters for mongoGetRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACRoleRequest
+ */
+export interface SharedApiMongoGetRBACRoleRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly roleName: string
+}
+
+/**
+ * Request parameters for mongoGetRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACUserRequest
+ */
+export interface SharedApiMongoGetRBACUserRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly username: string
+}
+
+/**
+ * Request parameters for mongoListRBACRoles operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoListRBACRolesRequest
+ */
+export interface SharedApiMongoListRBACRolesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly database?: string
+}
+
+/**
+ * Request parameters for mongoListRBACUsers operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoListRBACUsersRequest
+ */
+export interface SharedApiMongoListRBACUsersRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly database?: string
+}
+
+/**
+ * Request parameters for mongoUpdateRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoUpdateRBACRoleRequest
+ */
+export interface SharedApiMongoUpdateRBACRoleRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly database: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly roleName: string
+
+    /**
+     * 
+     * @type {MongoRBACRoleWrite}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite
+}
+
 /**
  * Request parameters for patchAPIkey operation in SharedApi.
  * @export
@@ -37544,6 +39252,20 @@ export interface SharedApiPreviewAccountPrivilegeResetRequest {
      * @memberof SharedApiPreviewAccountPrivilegeReset
      */
     readonly subjectQualifiers?: string
+
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly databaseNames?: Array<string>
+
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly allDatabases?: boolean
 }
 
 /**
@@ -39357,6 +41079,20 @@ export interface SharedApiResetAccountPrivilegesRequest {
      * @memberof SharedApiResetAccountPrivileges
      */
     readonly subjectQualifiers?: string
+
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly databaseNames?: Array<string>
+
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly allDatabases?: boolean
 }
 
 /**
@@ -42419,6 +44155,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Get alert config
@@ -43138,7 +44886,7 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
     }
 
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -43146,7 +44894,7 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
      * @memberof SharedApi
      */
     public listAccountObjectPrivilegeColumns(requestParameters: SharedApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig) {
-        return SharedApiFp(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(this.axios, this.basePath));
+        return SharedApiFp(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**
@@ -43975,6 +45723,150 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).markClusterRestoreCompleted(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * 
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -44036,15 +45928,15 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
     }
 
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof SharedApi
      */
     public previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig) {
-        return SharedApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return SharedApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**
@@ -44383,15 +46275,15 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
     }
 
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof SharedApi
      */
     public resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig) {
-        return SharedApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return SharedApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
 
     /**