kb-cloud-client-typescript 2.4.0-alpha.94 → 2.4.0-alpha.96

package/dist/adminapi/apis/shared-api.d.ts

@@ -141,10 +141,18 @@ import type { MilvusRole } from '../models';
 import type { MilvusRoleCreateRequest } from '../models';
 import type { MilvusRoleList } from '../models';
 import type { MilvusRoleRequest } from '../models';
+import type { MongoRBACBindingChange } from '../models';
+import type { MongoRBACCapabilities } from '../models';
+import type { MongoRBACPasswordChange } from '../models';
+import type { MongoRBACRole } from '../models';
+import type { MongoRBACRoleWrite } from '../models';
+import type { MongoRBACUser } from '../models';
+import type { MongoRBACUserCreate } from '../models';
 import type { NodeList } from '../models';
 import type { NodeResourceStatsList } from '../models';
 import type { ObjectPrivilegeCapabilities } from '../models';
 import type { ObjectPrivilegeChange } from '../models';
+import type { ObjectPrivilegeEvidence } from '../models';
 import type { ObjectPrivilegeObjectList } from '../models';
 import type { ObjectPrivilegeResetStep } from '../models';
 import type { ObjectPrivilegeSnapshot } from '../models';
@@ -1274,6 +1282,21 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      *
      * @summary Get backup
@@ -1917,19 +1940,20 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      */
     killSession: (engineName: string, orgName: string, clusterName: string, session: string, keep?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
      * @param {string} accountName
-     * @param {string} objectType Object type, either table or view
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @param {string} databaseName
      * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -2683,6 +2707,136 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      * @throws {RequiredError}
      */
     markClusterRestoreCompleted: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword: (orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles: (orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole: (orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser: (orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities: (orgName: string, clusterName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser: (orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles: (orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers: (orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole: (orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -2732,8 +2886,8 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      */
     patchOrgParameter: (orgName: string, parameterName: string, orgParameter: OrgParameter, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -2741,10 +2895,12 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      *
      * @summary Produce message to topic
@@ -3168,8 +3324,8 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      */
     reconfigureCluster: (orgName: string, clusterName: string, body: ReconfigureCreate, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -3177,10 +3333,12 @@ export declare const SharedApiAxiosParamCreator: (configuration?: Configuration)
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      *
      * @summary Reset consumer offset of topic
@@ -4813,6 +4971,21 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers]
+     * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeEvidence>>>;
     /**
      *
      * @summary Get backup
@@ -5458,19 +5631,20 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      */
     killSession(engineName: string, orgName: string, clusterName: string, session: string, keep?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
      * @param {string} accountName
-     * @param {string} objectType Object type, either table or view
+     * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @param {string} databaseName
      * @param {string} objectName
+     * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
+    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, schemaName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -6230,6 +6404,136 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     markClusterRestoreCompleted(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserPassword(orgName: string, clusterName: string, database: string, username: string, mongoRBACPasswordChange: MongoRBACPasswordChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {MongoRBACBindingChange} mongoRBACBindingChange
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoChangeRBACUserRoles(orgName: string, clusterName: string, database: string, username: string, mongoRBACBindingChange: MongoRBACBindingChange, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACRole(orgName: string, clusterName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {MongoRBACUserCreate} mongoRBACUserCreate
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoCreateRBACUser(orgName: string, clusterName: string, mongoRBACUserCreate: MongoRBACUserCreate, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {string} expectedRevision
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACRole(orgName: string, clusterName: string, database: string, roleName: string, expectedRevision: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoDeleteRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACCapabilities(orgName: string, clusterName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACCapabilities>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACRole(orgName: string, clusterName: string, database: string, roleName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACRole>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} username
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoGetRBACUser(orgName: string, clusterName: string, database: string, username: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MongoRBACUser>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACRoles(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACRole>>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} [database]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoListRBACUsers(orgName: string, clusterName: string, database?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<MongoRBACUser>>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} database
+     * @param {string} roleName
+     * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mongoUpdateRBACRole(orgName: string, clusterName: string, database: string, roleName: string, mongoRBACRoleWrite: MongoRBACRoleWrite, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -6279,8 +6583,8 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      */
     patchOrgParameter(orgName: string, parameterName: string, orgParameter: OrgParameter, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgParameter>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -6288,10 +6592,12 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
+    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
     /**
      *
      * @summary Produce message to topic
@@ -6715,8 +7021,8 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      */
     reconfigureCluster(orgName: string, clusterName: string, body: ReconfigureCreate, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OpsRequestName>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {string} engineName
      * @param {string} orgName
      * @param {string} clusterName
@@ -6724,10 +7030,12 @@ export declare const SharedApiFp: (configuration?: Configuration) => {
      * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
      * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
      * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, databaseNames?: Array<string>, allDatabases?: boolean, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      *
      * @summary Reset consumer offset of topic
@@ -8098,6 +8406,14 @@ export declare const SharedApiFactory: (configuration?: Configuration, basePath?
      * @throws {RequiredError}
      */
     getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
     /**
      *
      * @summary Get backup
@@ -8572,7 +8888,7 @@ export declare const SharedApiFactory: (configuration?: Configuration, basePath?
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -9190,104 +9506,200 @@ export declare const SharedApiFactory: (configuration?: Configuration, basePath?
      */
     markClusterRestoreCompleted(requestParameters: SharedApiMarkClusterRestoreCompletedRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * partially update the specified apikey
-     * @summary Update apikey information
-     * @param {SharedApiPatchAPIkeyRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    patchAPIkey(requestParameters: SharedApiPatchAPIkeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<Apikey>;
+    mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Update the specified Cluster
-     * @summary Update cluster specified fields
-     * @param {SharedApiPatchClusterRequest} requestParameters Request parameters.
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    patchCluster(requestParameters: SharedApiPatchClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<Cluster>;
+    mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * partially update the specified Org
-     * @summary Update organization
-     * @param {SharedApiPatchOrgRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    patchOrg(requestParameters: SharedApiPatchOrgRequest, options?: RawAxiosRequestConfig): AxiosPromise<Org>;
+    mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Only authenticated organization admins can update the member\'s role
-     * @summary Update member role
-     * @param {SharedApiPatchOrgMemberRequest} requestParameters Request parameters.
+     *
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    patchOrgMember(requestParameters: SharedApiPatchOrgMemberRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgMember>;
+    mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Update a parameter of an organization
-     * @summary Update a parameter of an organization
-     * @param {SharedApiPatchOrgParameterRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
+    mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
-     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     *
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+    mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      *
-     * @summary Produce message to topic
-     * @param {SharedApiProduceKafkaTopicMessageRequest} requestParameters Request parameters.
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    produceKafkaTopicMessage(requestParameters: SharedApiProduceKafkaTopicMessageRequest, options?: RawAxiosRequestConfig): AxiosPromise<number>;
+    mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
     /**
      *
-     * @summary Promote cluster intance to primary
-     * @param {SharedApiPromoteClusterRequest} requestParameters Request parameters.
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    promoteCluster(requestParameters: SharedApiPromoteClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
+    mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
     /**
      *
-     * @summary Create or update Elasticsearch security role
-     * @param {SharedApiPutElasticsearchSecurityRoleRequest} requestParameters Request parameters.
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putElasticsearchSecurityRole(requestParameters: SharedApiPutElasticsearchSecurityRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
     /**
      *
-     * @summary Create or update Elasticsearch security role mapping
-     * @param {SharedApiPutElasticsearchSecurityRoleMappingRequest} requestParameters Request parameters.
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putElasticsearchSecurityRoleMapping(requestParameters: SharedApiPutElasticsearchSecurityRoleMappingRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
     /**
      *
-     * @summary Create or update Elasticsearch security user
-     * @param {SharedApiPutElasticsearchSecurityUserRequest} requestParameters Request parameters.
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putElasticsearchSecurityUser(requestParameters: SharedApiPutElasticsearchSecurityUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
     /**
-     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
-     * @summary putSeaweedFSPolicy
-     * @param {SharedApiPutSeaweedFSPolicyRequest} requestParameters Request parameters.
+     *
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    putSeaweedFSPolicy(requestParameters: SharedApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     *
-     * @summary create a SQL query
+     * partially update the specified apikey
+     * @summary Update apikey information
+     * @param {SharedApiPatchAPIkeyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    patchAPIkey(requestParameters: SharedApiPatchAPIkeyRequest, options?: RawAxiosRequestConfig): AxiosPromise<Apikey>;
+    /**
+     * Update the specified Cluster
+     * @summary Update cluster specified fields
+     * @param {SharedApiPatchClusterRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    patchCluster(requestParameters: SharedApiPatchClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<Cluster>;
+    /**
+     * partially update the specified Org
+     * @summary Update organization
+     * @param {SharedApiPatchOrgRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    patchOrg(requestParameters: SharedApiPatchOrgRequest, options?: RawAxiosRequestConfig): AxiosPromise<Org>;
+    /**
+     * Only authenticated organization admins can update the member\'s role
+     * @summary Update member role
+     * @param {SharedApiPatchOrgMemberRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    patchOrgMember(requestParameters: SharedApiPatchOrgMemberRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgMember>;
+    /**
+     * Update a parameter of an organization
+     * @summary Update a parameter of an organization
+     * @param {SharedApiPatchOrgParameterRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
+    /**
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+    /**
+     *
+     * @summary Produce message to topic
+     * @param {SharedApiProduceKafkaTopicMessageRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    produceKafkaTopicMessage(requestParameters: SharedApiProduceKafkaTopicMessageRequest, options?: RawAxiosRequestConfig): AxiosPromise<number>;
+    /**
+     *
+     * @summary Promote cluster intance to primary
+     * @param {SharedApiPromoteClusterRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    promoteCluster(requestParameters: SharedApiPromoteClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
+    /**
+     *
+     * @summary Create or update Elasticsearch security role
+     * @param {SharedApiPutElasticsearchSecurityRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putElasticsearchSecurityRole(requestParameters: SharedApiPutElasticsearchSecurityRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary Create or update Elasticsearch security role mapping
+     * @param {SharedApiPutElasticsearchSecurityRoleMappingRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putElasticsearchSecurityRoleMapping(requestParameters: SharedApiPutElasticsearchSecurityRoleMappingRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary Create or update Elasticsearch security user
+     * @param {SharedApiPutElasticsearchSecurityUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putElasticsearchSecurityUser(requestParameters: SharedApiPutElasticsearchSecurityUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
+     * @summary putSeaweedFSPolicy
+     * @param {SharedApiPutSeaweedFSPolicyRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    putSeaweedFSPolicy(requestParameters: SharedApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary create a SQL query
      * @param {SharedApiQueryRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -9461,8 +9873,8 @@ export declare const SharedApiFactory: (configuration?: Configuration, basePath?
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -10787,6 +11199,15 @@ export interface SharedApiInterface {
      * @memberof SharedApiInterface
      */
     getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeEvidence>>;
     /**
      *
      * @summary Get backup
@@ -11320,7 +11741,7 @@ export interface SharedApiInterface {
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -12014,6 +12435,114 @@ export interface SharedApiInterface {
      * @memberof SharedApiInterface
      */
     markClusterRestoreCompleted(requestParameters: SharedApiMarkClusterRestoreCompletedRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACCapabilities>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACRole>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): AxiosPromise<MongoRBACUser>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACRole>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<MongoRBACUser>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -12060,8 +12589,8 @@ export interface SharedApiInterface {
      */
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -12320,8 +12849,8 @@ export interface SharedApiInterface {
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -15643,6 +16172,61 @@ export interface SharedApiGetAccountObjectPrivilegesRequest {
      */
     readonly subjectQualifiers?: string;
 }
+/**
+ * Request parameters for getAccountPrivilegeOverview operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountPrivilegeOverviewRequest
+ */
+export interface SharedApiGetAccountPrivilegeOverviewRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly host?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL database to inspect on demand. Omit for the global summary.
+     * @type {string}
+     * @memberof SharedApiGetAccountPrivilegeOverview
+     */
+    readonly databaseName?: string;
+}
 /**
  * Request parameters for getBackup operation in SharedApi.
  * @export
@@ -17467,7 +18051,7 @@ export interface SharedApiListAccountObjectPrivilegeColumnsRequest {
      */
     readonly accountName: string;
     /**
-     * Object type, either table or view
+     * Object type, table/view; PostgreSQL also supports materializedView/foreignTable
      * @type {string}
      * @memberof SharedApiListAccountObjectPrivilegeColumns
      */
@@ -17484,6 +18068,12 @@ export interface SharedApiListAccountObjectPrivilegeColumnsRequest {
      * @memberof SharedApiListAccountObjectPrivilegeColumns
      */
     readonly objectName: string;
+    /**
+     * Required for PostgreSQL; not accepted for MySQL
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly schemaName?: string;
 }
 /**
  * Request parameters for listAccountObjectPrivilegeObjects operation in SharedApi.
@@ -19303,55 +19893,415 @@ export interface SharedApiMarkClusterRestoreCompletedRequest {
     readonly clusterName: string;
 }
 /**
- * Request parameters for patchAPIkey operation in SharedApi.
+ * Request parameters for mongoChangeRBACUserPassword operation in SharedApi.
  * @export
- * @interface SharedApiPatchAPIkeyRequest
+ * @interface SharedApiMongoChangeRBACUserPasswordRequest
  */
-export interface SharedApiPatchAPIkeyRequest {
+export interface SharedApiMongoChangeRBACUserPasswordRequest {
     /**
-     * Name of the apikey
+     *
      * @type {string}
-     * @memberof SharedApiPatchAPIkey
+     * @memberof SharedApiMongoChangeRBACUserPassword
      */
-    readonly keyName: string;
+    readonly orgName: string;
     /**
      *
-     * @type {ApikeyCreate}
-     * @memberof SharedApiPatchAPIkey
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserPassword
      */
-    readonly body: ApikeyCreate;
-}
-/**
- * Request parameters for patchCluster operation in SharedApi.
- * @export
- * @interface SharedApiPatchClusterRequest
- */
-export interface SharedApiPatchClusterRequest {
+    readonly clusterName: string;
     /**
-     * name of the Org
+     *
      * @type {string}
-     * @memberof SharedApiPatchCluster
+     * @memberof SharedApiMongoChangeRBACUserPassword
      */
-    readonly orgName: string;
+    readonly database: string;
     /**
-     * name of the KubeBlocks cluster
+     *
      * @type {string}
-     * @memberof SharedApiPatchCluster
+     * @memberof SharedApiMongoChangeRBACUserPassword
      */
-    readonly clusterName: string;
+    readonly username: string;
     /**
      *
-     * @type {ClusterUpdate}
-     * @memberof SharedApiPatchCluster
+     * @type {MongoRBACPasswordChange}
+     * @memberof SharedApiMongoChangeRBACUserPassword
      */
-    readonly body: ClusterUpdate;
+    readonly mongoRBACPasswordChange: MongoRBACPasswordChange;
 }
 /**
- * Request parameters for patchOrg operation in SharedApi.
+ * Request parameters for mongoChangeRBACUserRoles operation in SharedApi.
  * @export
- * @interface SharedApiPatchOrgRequest
+ * @interface SharedApiMongoChangeRBACUserRolesRequest
  */
-export interface SharedApiPatchOrgRequest {
+export interface SharedApiMongoChangeRBACUserRolesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly username: string;
+    /**
+     *
+     * @type {MongoRBACBindingChange}
+     * @memberof SharedApiMongoChangeRBACUserRoles
+     */
+    readonly mongoRBACBindingChange: MongoRBACBindingChange;
+}
+/**
+ * Request parameters for mongoCreateRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoCreateRBACRoleRequest
+ */
+export interface SharedApiMongoCreateRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof SharedApiMongoCreateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
+}
+/**
+ * Request parameters for mongoCreateRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoCreateRBACUserRequest
+ */
+export interface SharedApiMongoCreateRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {MongoRBACUserCreate}
+     * @memberof SharedApiMongoCreateRBACUser
+     */
+    readonly mongoRBACUserCreate: MongoRBACUserCreate;
+}
+/**
+ * Request parameters for mongoDeleteRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoDeleteRBACRoleRequest
+ */
+export interface SharedApiMongoDeleteRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly roleName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACRole
+     */
+    readonly expectedRevision: string;
+}
+/**
+ * Request parameters for mongoDeleteRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoDeleteRBACUserRequest
+ */
+export interface SharedApiMongoDeleteRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoDeleteRBACUser
+     */
+    readonly username: string;
+}
+/**
+ * Request parameters for mongoGetRBACCapabilities operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACCapabilitiesRequest
+ */
+export interface SharedApiMongoGetRBACCapabilitiesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACCapabilities
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACCapabilities
+     */
+    readonly clusterName: string;
+}
+/**
+ * Request parameters for mongoGetRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACRoleRequest
+ */
+export interface SharedApiMongoGetRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACRole
+     */
+    readonly roleName: string;
+}
+/**
+ * Request parameters for mongoGetRBACUser operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoGetRBACUserRequest
+ */
+export interface SharedApiMongoGetRBACUserRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoGetRBACUser
+     */
+    readonly username: string;
+}
+/**
+ * Request parameters for mongoListRBACRoles operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoListRBACRolesRequest
+ */
+export interface SharedApiMongoListRBACRolesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACRoles
+     */
+    readonly database?: string;
+}
+/**
+ * Request parameters for mongoListRBACUsers operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoListRBACUsersRequest
+ */
+export interface SharedApiMongoListRBACUsersRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoListRBACUsers
+     */
+    readonly database?: string;
+}
+/**
+ * Request parameters for mongoUpdateRBACRole operation in SharedApi.
+ * @export
+ * @interface SharedApiMongoUpdateRBACRoleRequest
+ */
+export interface SharedApiMongoUpdateRBACRoleRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly database: string;
+    /**
+     *
+     * @type {string}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly roleName: string;
+    /**
+     *
+     * @type {MongoRBACRoleWrite}
+     * @memberof SharedApiMongoUpdateRBACRole
+     */
+    readonly mongoRBACRoleWrite: MongoRBACRoleWrite;
+}
+/**
+ * Request parameters for patchAPIkey operation in SharedApi.
+ * @export
+ * @interface SharedApiPatchAPIkeyRequest
+ */
+export interface SharedApiPatchAPIkeyRequest {
+    /**
+     * Name of the apikey
+     * @type {string}
+     * @memberof SharedApiPatchAPIkey
+     */
+    readonly keyName: string;
+    /**
+     *
+     * @type {ApikeyCreate}
+     * @memberof SharedApiPatchAPIkey
+     */
+    readonly body: ApikeyCreate;
+}
+/**
+ * Request parameters for patchCluster operation in SharedApi.
+ * @export
+ * @interface SharedApiPatchClusterRequest
+ */
+export interface SharedApiPatchClusterRequest {
+    /**
+     * name of the Org
+     * @type {string}
+     * @memberof SharedApiPatchCluster
+     */
+    readonly orgName: string;
+    /**
+     * name of the KubeBlocks cluster
+     * @type {string}
+     * @memberof SharedApiPatchCluster
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {ClusterUpdate}
+     * @memberof SharedApiPatchCluster
+     */
+    readonly body: ClusterUpdate;
+}
+/**
+ * Request parameters for patchOrg operation in SharedApi.
+ * @export
+ * @interface SharedApiPatchOrgRequest
+ */
+export interface SharedApiPatchOrgRequest {
     /**
      * name of the Org
      * @type {string}
@@ -19463,6 +20413,18 @@ export interface SharedApiPreviewAccountPrivilegeResetRequest {
      * @memberof SharedApiPreviewAccountPrivilegeReset
      */
     readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly allDatabases?: boolean;
 }
 /**
  * Request parameters for produceKafkaTopicMessage operation in SharedApi.
@@ -21047,6 +22009,18 @@ export interface SharedApiResetAccountPrivilegesRequest {
      * @memberof SharedApiResetAccountPrivileges
      */
     readonly subjectQualifiers?: string;
+    /**
+     * PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+     * @type {Array<string>}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly databaseNames?: Array<string>;
+    /**
+     * PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
+     * @type {boolean}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly allDatabases?: boolean;
 }
 /**
  * Request parameters for resetKafkaTopicConsumerOffset operation in SharedApi.
@@ -23527,6 +24501,15 @@ export declare class SharedApi extends BaseAPI implements SharedApiInterface {
      * @memberof SharedApi
      */
     getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeSnapshot, any, {}>>;
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    getAccountPrivilegeOverview(requestParameters: SharedApiGetAccountPrivilegeOverviewRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeEvidence[], any, {}>>;
     /**
      *
      * @summary Get backup
@@ -24060,7 +25043,7 @@ export declare class SharedApi extends BaseAPI implements SharedApiInterface {
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -24754,6 +25737,114 @@ export declare class SharedApi extends BaseAPI implements SharedApiInterface {
      * @memberof SharedApi
      */
     markClusterRestoreCompleted(requestParameters: SharedApiMarkClusterRestoreCompletedRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoChangeRBACUserPassword(requestParameters: SharedApiMongoChangeRBACUserPasswordRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoChangeRBACUserRoles(requestParameters: SharedApiMongoChangeRBACUserRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoCreateRBACRole(requestParameters: SharedApiMongoCreateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoCreateRBACUser(requestParameters: SharedApiMongoCreateRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoDeleteRBACRole(requestParameters: SharedApiMongoDeleteRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoDeleteRBACUser(requestParameters: SharedApiMongoDeleteRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACCapabilities(requestParameters: SharedApiMongoGetRBACCapabilitiesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACCapabilities, any, {}>>;
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACRole(requestParameters: SharedApiMongoGetRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole, any, {}>>;
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACUser(requestParameters: SharedApiMongoGetRBACUserRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser, any, {}>>;
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoListRBACRoles(requestParameters: SharedApiMongoListRBACRolesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACRole[], any, {}>>;
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoListRBACUsers(requestParameters: SharedApiMongoListRBACUsersRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<MongoRBACUser[], any, {}>>;
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoUpdateRBACRole(requestParameters: SharedApiMongoUpdateRBACRoleRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -24800,8 +25891,8 @@ export declare class SharedApi extends BaseAPI implements SharedApiInterface {
      */
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<OrgParameter, any, {}>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -25060,8 +26151,8 @@ export declare class SharedApi extends BaseAPI implements SharedApiInterface {
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<OpsRequestName, any, {}>>;
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}