kb-cloud-client-typescript 2.4.0-alpha.94 → 2.4.0-alpha.96

package/dist/openapi/apis/shared-api.js

@@ -4621,6 +4621,68 @@ const SharedApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} accountName
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers]
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountPrivilegeOverview: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options = {}) => {
+            // verify required parameter 'engineName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'engineName', engineName);
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'clusterName', clusterName);
+            // verify required parameter 'accountName' is not null or undefined
+            (0, common_1.assertParamExists)('getAccountPrivilegeOverview', 'accountName', accountName);
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/overview`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          *
          * @summary Get alert config
@@ -7369,19 +7431,20 @@ const SharedApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
          * @param {string} accountName
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName
          * @param {string} objectName
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listAccountObjectPrivilegeColumns: async (engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options = {}) => {
+        listAccountObjectPrivilegeColumns: async (engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('listAccountObjectPrivilegeColumns', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -7424,6 +7487,9 @@ const SharedApiAxiosParamCreator = function (configuration) {
             if (objectName !== undefined) {
                 localVarQueryParameter['objectName'] = objectName;
             }
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -10207,21 +10273,558 @@ const SharedApiAxiosParamCreator = function (configuration) {
             // verify required parameter 'orgName' is not null or undefined
             (0, common_1.assertParamExists)('lockAccount', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'clusterName', clusterName);
-            // verify required parameter 'accountName' is not null or undefined
-            (0, common_1.assertParamExists)('lockAccount', 'accountName', accountName);
-            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/lock`
-                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+            (0, common_1.assertParamExists)('lockAccount', 'clusterName', clusterName);
+            // verify required parameter 'accountName' is not null or undefined
+            (0, common_1.assertParamExists)('lockAccount', 'accountName', accountName);
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/lock`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary Lock Elasticsearch account
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} username
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        lockElasticsearchSecurityUser: async (orgName, clusterName, username, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'clusterName', clusterName);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'username', username);
+            const localVarPath = `/api/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/{username}/lock`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary batch modify database tde status
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {DbTDERequest} [dbTDERequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        manageMssqlTDEDatabase: async (orgName, clusterName, dbTDERequest, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('manageMssqlTDEDatabase', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('manageMssqlTDEDatabase', 'clusterName', clusterName);
+            const localVarPath = `/api/v1/data/mssql/organizations/{orgName}/clusters/{clusterName}/tde`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(dbTDERequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary mark cluster to restore completed, usually used when manually repairing or recovering issues
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        markClusterRestoreCompleted: async (orgName, clusterName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('markClusterRestoreCompleted', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('markClusterRestoreCompleted', 'clusterName', clusterName);
+            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}/markClusterRestoreCompleted`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserPassword: async (orgName, clusterName, database, username, mongoRBACPasswordChange, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'username', username);
+            // verify required parameter 'mongoRBACPasswordChange' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserPassword', 'mongoRBACPasswordChange', mongoRBACPasswordChange);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/password`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PUT' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACPasswordChange, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserRoles: async (orgName, clusterName, database, username, mongoRBACBindingChange, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'username', username);
+            // verify required parameter 'mongoRBACBindingChange' is not null or undefined
+            (0, common_1.assertParamExists)('mongoChangeRBACUserRoles', 'mongoRBACBindingChange', mongoRBACBindingChange);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACBindingChange, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole: async (orgName, clusterName, mongoRBACRoleWrite, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACRoleWrite, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary CreateRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser: async (orgName, clusterName, mongoRBACUserCreate, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'mongoRBACUserCreate' is not null or undefined
+            (0, common_1.assertParamExists)('mongoCreateRBACUser', 'mongoRBACUserCreate', mongoRBACUserCreate);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACUserCreate, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary DeleteRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {string} expectedRevision
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole: async (orgName, clusterName, database, roleName, expectedRevision, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'roleName', roleName);
+            // verify required parameter 'expectedRevision' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACRole', 'expectedRevision', expectedRevision);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (expectedRevision !== undefined) {
+                localVarQueryParameter['expectedRevision'] = expectedRevision;
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary DeleteRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser: async (orgName, clusterName, database, username, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoDeleteRBACUser', 'username', username);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary GetRBACCapabilities
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities: async (orgName, clusterName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACCapabilities', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACCapabilities', 'clusterName', clusterName);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/capabilities`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary GetRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole: async (orgName, clusterName, database, roleName, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACRole', 'roleName', roleName);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication BearerToken required
+            // http bearer authentication required
+            await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            // authentication DigestAuth required
+            await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         *
+         * @summary GetRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACUser: async (orgName, clusterName, database, username, options = {}) => {
+            // verify required parameter 'orgName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'orgName', orgName);
+            // verify required parameter 'clusterName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'database', database);
+            // verify required parameter 'username' is not null or undefined
+            (0, common_1.assertParamExists)('mongoGetRBACUser', 'username', username);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users/{database}/{username}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
                 .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
-                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication BearerToken required
@@ -10239,31 +10842,28 @@ const SharedApiAxiosParamCreator = function (configuration) {
         },
         /**
          *
-         * @summary Lock Elasticsearch account
+         * @summary ListRBACRoles
          * @param {string} orgName
          * @param {string} clusterName
-         * @param {string} username
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        lockElasticsearchSecurityUser: async (orgName, clusterName, username, options = {}) => {
+        mongoListRBACRoles: async (orgName, clusterName, database, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoListRBACRoles', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'clusterName', clusterName);
-            // verify required parameter 'username' is not null or undefined
-            (0, common_1.assertParamExists)('lockElasticsearchSecurityUser', 'username', username);
-            const localVarPath = `/api/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/{username}/lock`
+            (0, common_1.assertParamExists)('mongoListRBACRoles', 'clusterName', clusterName);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
-                .replace(`{${"username"}}`, encodeURIComponent(String(username)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication BearerToken required
@@ -10271,6 +10871,9 @@ const SharedApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -10281,19 +10884,19 @@ const SharedApiAxiosParamCreator = function (configuration) {
         },
         /**
          *
-         * @summary batch modify database tde status
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {DbTDERequest} [dbTDERequest]
+         * @summary ListRBACUsers
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        manageMssqlTDEDatabase: async (orgName, clusterName, dbTDERequest, options = {}) => {
+        mongoListRBACUsers: async (orgName, clusterName, database, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('manageMssqlTDEDatabase', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoListRBACUsers', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('manageMssqlTDEDatabase', 'clusterName', clusterName);
-            const localVarPath = `/api/v1/data/mssql/organizations/{orgName}/clusters/{clusterName}/tde`
+            (0, common_1.assertParamExists)('mongoListRBACUsers', 'clusterName', clusterName);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/users`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
                 .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -10302,7 +10905,7 @@ const SharedApiAxiosParamCreator = function (configuration) {
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication BearerToken required
@@ -10310,11 +10913,12 @@ const SharedApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
-            localVarHeaderParameter['Content-Type'] = 'application/json';
+            if (database !== undefined) {
+                localVarQueryParameter['database'] = database;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(dbTDERequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
@@ -10322,27 +10926,38 @@ const SharedApiAxiosParamCreator = function (configuration) {
         },
         /**
          *
-         * @summary mark cluster to restore completed, usually used when manually repairing or recovering issues
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the KubeBlocks cluster
+         * @summary UpdateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        markClusterRestoreCompleted: async (orgName, clusterName, options = {}) => {
+        mongoUpdateRBACRole: async (orgName, clusterName, database, roleName, mongoRBACRoleWrite, options = {}) => {
             // verify required parameter 'orgName' is not null or undefined
-            (0, common_1.assertParamExists)('markClusterRestoreCompleted', 'orgName', orgName);
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'orgName', orgName);
             // verify required parameter 'clusterName' is not null or undefined
-            (0, common_1.assertParamExists)('markClusterRestoreCompleted', 'clusterName', clusterName);
-            const localVarPath = `/api/v1/organizations/{orgName}/clusters/{clusterName}/markClusterRestoreCompleted`
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'clusterName', clusterName);
+            // verify required parameter 'database' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'database', database);
+            // verify required parameter 'roleName' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'roleName', roleName);
+            // verify required parameter 'mongoRBACRoleWrite' is not null or undefined
+            (0, common_1.assertParamExists)('mongoUpdateRBACRole', 'mongoRBACRoleWrite', mongoRBACRoleWrite);
+            const localVarPath = `/api/v1/data/mongodb/organizations/{orgName}/clusters/{clusterName}/rbac/roles/{database}/{roleName}`
                 .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
-                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)));
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"database"}}`, encodeURIComponent(String(database)))
+                .replace(`{${"roleName"}}`, encodeURIComponent(String(roleName)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PUT' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication BearerToken required
@@ -10350,9 +10965,11 @@ const SharedApiAxiosParamCreator = function (configuration) {
             await (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             // authentication DigestAuth required
             await (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(mongoRBACRoleWrite, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
@@ -10566,8 +11183,8 @@ const SharedApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -10575,10 +11192,12 @@ const SharedApiAxiosParamCreator = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        previewAccountPrivilegeReset: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options = {}) => {
+        previewAccountPrivilegeReset: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('previewAccountPrivilegeReset', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -10615,6 +11234,12 @@ const SharedApiAxiosParamCreator = function (configuration) {
             if (subjectQualifiers !== undefined) {
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -12434,8 +13059,8 @@ const SharedApiAxiosParamCreator = function (configuration) {
             };
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -12443,10 +13068,12 @@ const SharedApiAxiosParamCreator = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        resetAccountPrivileges: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options = {}) => {
+        resetAccountPrivileges: async (engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options = {}) => {
             // verify required parameter 'engineName' is not null or undefined
             (0, common_1.assertParamExists)('resetAccountPrivileges', 'engineName', engineName);
             // verify required parameter 'orgName' is not null or undefined
@@ -12483,6 +13110,12 @@ const SharedApiAxiosParamCreator = function (configuration) {
             if (subjectQualifiers !== undefined) {
                 localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
             }
+            if (databaseNames) {
+                localVarQueryParameter['databaseNames'] = databaseNames;
+            }
+            if (allDatabases !== undefined) {
+                localVarQueryParameter['allDatabases'] = allDatabases;
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -16797,6 +17430,27 @@ const SharedApiFp = function (configuration) {
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.getAccountObjectPrivileges']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {string} engineName
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} accountName
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers]
+         * @param {string} [databaseName] PostgreSQL database to inspect on demand. Omit for the global summary.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountPrivilegeOverview(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountPrivilegeOverview(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.getAccountPrivilegeOverview']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          *
          * @summary Get alert config
@@ -17806,21 +18460,22 @@ const SharedApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
          * @param {string} accountName
-         * @param {string} objectType Object type, either table or view
+         * @param {string} objectType Object type, table/view; PostgreSQL also supports materializedView/foreignTable
          * @param {string} databaseName
          * @param {string} objectName
+         * @param {string} [schemaName] Required for PostgreSQL; not accepted for MySQL
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options) {
+        async listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, schemaName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listAccountObjectPrivilegeColumns']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -18786,149 +19441,351 @@ const SharedApiFp = function (configuration) {
             var _a, _b, _c;
             const localVarAxiosArgs = await localVarAxiosParamCreator.listServiceVersion(environmentName, engineName, engineMode, engineVersion, component, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listServiceVersion']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listServiceVersion']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * list sessions in cluster
+         * @summary List cluster sessions
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the Cluster
+         * @param {boolean} [all] whether list all session includes sleep
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listSessions(engineName, orgName, clusterName, all, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listSessions(engineName, orgName, clusterName, all, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listSessions']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary list all session for the cluster
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the cluster
+         * @param {string} [all] whether list all session includes sleep
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async listSessionsOld(orgName, clusterName, all, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listSessionsOld(orgName, clusterName, all, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listSessionsOld']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * List task types
+         * @summary List task types
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listTaskTypes(options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listTaskTypes(options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listTaskTypes']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary list all tenants for the oceanbase cluster
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listTenants(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listTenants(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listTenants']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * list upgraded service version of the component
+         * @summary list upgraded service version of the component
+         * @param {string} clusterName Name of the cluster
+         * @param {string} orgName organization name
+         * @param {string} component component type
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listUpgradeableServiceVersion(clusterName, orgName, component, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listUpgradeableServiceVersion(clusterName, orgName, component, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listUpgradeableServiceVersion']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * lock an account in cluster
+         * @summary Lock cluster account
+         * @param {string} engineName name of the engine
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {string} accountName name of the account
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async lockAccount(engineName, orgName, clusterName, accountName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.lockAccount(engineName, orgName, clusterName, accountName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.lockAccount']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary Lock Elasticsearch account
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} username
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async lockElasticsearchSecurityUser(orgName, clusterName, username, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.lockElasticsearchSecurityUser(orgName, clusterName, username, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.lockElasticsearchSecurityUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary batch modify database tde status
+         * @param {string} orgName name of the organization
+         * @param {string} clusterName name of the cluster
+         * @param {DbTDERequest} [dbTDERequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async manageMssqlTDEDatabase(orgName, clusterName, dbTDERequest, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.manageMssqlTDEDatabase(orgName, clusterName, dbTDERequest, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.manageMssqlTDEDatabase']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary mark cluster to restore completed, usually used when manually repairing or recovering issues
+         * @param {string} orgName name of the Org
+         * @param {string} clusterName name of the KubeBlocks cluster
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async markClusterRestoreCompleted(orgName, clusterName, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.markClusterRestoreCompleted(orgName, clusterName, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.markClusterRestoreCompleted']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACPasswordChange} mongoRBACPasswordChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserPassword(orgName, clusterName, database, username, mongoRBACPasswordChange, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserPassword(orgName, clusterName, database, username, mongoRBACPasswordChange, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoChangeRBACUserPassword']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
+         * @param {MongoRBACBindingChange} mongoRBACBindingChange
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoChangeRBACUserRoles(orgName, clusterName, database, username, mongoRBACBindingChange, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoChangeRBACUserRoles(orgName, clusterName, database, username, mongoRBACBindingChange, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoChangeRBACUserRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mongoCreateRBACRole(orgName, clusterName, mongoRBACRoleWrite, options) {
+            var _a, _b, _c;
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACRole(orgName, clusterName, mongoRBACRoleWrite, options);
+            const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoCreateRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list sessions in cluster
-         * @summary List cluster sessions
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the Cluster
-         * @param {boolean} [all] whether list all session includes sleep
+         *
+         * @summary CreateRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {MongoRBACUserCreate} mongoRBACUserCreate
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listSessions(engineName, orgName, clusterName, all, options) {
+        async mongoCreateRBACUser(orgName, clusterName, mongoRBACUserCreate, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listSessions(engineName, orgName, clusterName, all, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoCreateRBACUser(orgName, clusterName, mongoRBACUserCreate, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listSessions']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoCreateRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary list all session for the cluster
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the cluster
-         * @param {string} [all] whether list all session includes sleep
+         * @summary DeleteRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {string} expectedRevision
          * @param {*} [options] Override http request option.
-         * @deprecated
          * @throws {RequiredError}
          */
-        async listSessionsOld(orgName, clusterName, all, options) {
+        async mongoDeleteRBACRole(orgName, clusterName, database, roleName, expectedRevision, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listSessionsOld(orgName, clusterName, all, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACRole(orgName, clusterName, database, roleName, expectedRevision, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listSessionsOld']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoDeleteRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * List task types
-         * @summary List task types
+         *
+         * @summary DeleteRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listTaskTypes(options) {
+        async mongoDeleteRBACUser(orgName, clusterName, database, username, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listTaskTypes(options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoDeleteRBACUser(orgName, clusterName, database, username, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listTaskTypes']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoDeleteRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary list all tenants for the oceanbase cluster
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the cluster
+         * @summary GetRBACCapabilities
+         * @param {string} orgName
+         * @param {string} clusterName
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listTenants(orgName, clusterName, options) {
+        async mongoGetRBACCapabilities(orgName, clusterName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listTenants(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACCapabilities(orgName, clusterName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listTenants']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoGetRBACCapabilities']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * list upgraded service version of the component
-         * @summary list upgraded service version of the component
-         * @param {string} clusterName Name of the cluster
-         * @param {string} orgName organization name
-         * @param {string} component component type
+         *
+         * @summary GetRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listUpgradeableServiceVersion(clusterName, orgName, component, options) {
+        async mongoGetRBACRole(orgName, clusterName, database, roleName, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.listUpgradeableServiceVersion(clusterName, orgName, component, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACRole(orgName, clusterName, database, roleName, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.listUpgradeableServiceVersion']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoGetRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * lock an account in cluster
-         * @summary Lock cluster account
-         * @param {string} engineName name of the engine
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {string} accountName name of the account
+         *
+         * @summary GetRBACUser
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} username
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async lockAccount(engineName, orgName, clusterName, accountName, options) {
+        async mongoGetRBACUser(orgName, clusterName, database, username, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.lockAccount(engineName, orgName, clusterName, accountName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoGetRBACUser(orgName, clusterName, database, username, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.lockAccount']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoGetRBACUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary Lock Elasticsearch account
+         * @summary ListRBACRoles
          * @param {string} orgName
          * @param {string} clusterName
-         * @param {string} username
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async lockElasticsearchSecurityUser(orgName, clusterName, username, options) {
+        async mongoListRBACRoles(orgName, clusterName, database, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.lockElasticsearchSecurityUser(orgName, clusterName, username, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACRoles(orgName, clusterName, database, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.lockElasticsearchSecurityUser']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoListRBACRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary batch modify database tde status
-         * @param {string} orgName name of the organization
-         * @param {string} clusterName name of the cluster
-         * @param {DbTDERequest} [dbTDERequest]
+         * @summary ListRBACUsers
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} [database]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async manageMssqlTDEDatabase(orgName, clusterName, dbTDERequest, options) {
+        async mongoListRBACUsers(orgName, clusterName, database, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.manageMssqlTDEDatabase(orgName, clusterName, dbTDERequest, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoListRBACUsers(orgName, clusterName, database, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.manageMssqlTDEDatabase']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoListRBACUsers']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
          *
-         * @summary mark cluster to restore completed, usually used when manually repairing or recovering issues
-         * @param {string} orgName name of the Org
-         * @param {string} clusterName name of the KubeBlocks cluster
+         * @summary UpdateRBACRole
+         * @param {string} orgName
+         * @param {string} clusterName
+         * @param {string} database
+         * @param {string} roleName
+         * @param {MongoRBACRoleWrite} mongoRBACRoleWrite
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async markClusterRestoreCompleted(orgName, clusterName, options) {
+        async mongoUpdateRBACRole(orgName, clusterName, database, roleName, mongoRBACRoleWrite, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.markClusterRestoreCompleted(orgName, clusterName, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mongoUpdateRBACRole(orgName, clusterName, database, roleName, mongoRBACRoleWrite, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.markClusterRestoreCompleted']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+            const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.mongoUpdateRBACRole']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
@@ -19010,8 +19867,8 @@ const SharedApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -19019,12 +19876,14 @@ const SharedApiFp = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options) {
+        async previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.previewAccountPrivilegeReset']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -19618,8 +20477,8 @@ const SharedApiFp = function (configuration) {
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {string} engineName
          * @param {string} orgName
          * @param {string} clusterName
@@ -19627,12 +20486,14 @@ const SharedApiFp = function (configuration) {
          * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
          * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
          * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {Array<string>} [databaseNames] PostgreSQL only; exact selected database names as repeated parameters. Mutually exclusive with allDatabases.
+         * @param {boolean} [allDatabases] PostgreSQL whole-account reset requires explicit true; otherwise databaseNames must be nonempty. Selected scope preserves global memberships/attributes and privileges outside those databases.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options) {
+        async resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options) {
             var _a, _b, _c;
-            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, databaseNames, allDatabases, options);
             const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
             const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['SharedApi.resetAccountPrivileges']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
             return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -21591,6 +22452,16 @@ const SharedApiFactory = function (configuration, basePath, axios) {
         getAccountObjectPrivileges(requestParameters, options) {
             return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+         * @summary Read native account privilege summary or selected database evidence
+         * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountPrivilegeOverview(requestParameters, options) {
+            return localVarFp.getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(axios, basePath));
+        },
         /**
          *
          * @summary Get alert config
@@ -22190,14 +23061,14 @@ const SharedApiFactory = function (configuration, basePath, axios) {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
         /**
-         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
          * @summary List exact column names for account object privileges
          * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         listAccountObjectPrivilegeColumns(requestParameters, options) {
-            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(axios, basePath));
+            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(axios, basePath));
         },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
@@ -22887,6 +23758,126 @@ const SharedApiFactory = function (configuration, basePath, axios) {
         markClusterRestoreCompleted(requestParameters, options) {
             return localVarFp.markClusterRestoreCompleted(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(axios, basePath));
         },
+        /**
+         *
+         * @summary ChangeRBACUserPassword
+         * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserPassword(requestParameters, options) {
+            return localVarFp.mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ChangeRBACUserRoles
+         * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoChangeRBACUserRoles(requestParameters, options) {
+            return localVarFp.mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary CreateRBACRole
+         * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACRole(requestParameters, options) {
+            return localVarFp.mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary CreateRBACUser
+         * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoCreateRBACUser(requestParameters, options) {
+            return localVarFp.mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary DeleteRBACRole
+         * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACRole(requestParameters, options) {
+            return localVarFp.mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary DeleteRBACUser
+         * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoDeleteRBACUser(requestParameters, options) {
+            return localVarFp.mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACCapabilities
+         * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACCapabilities(requestParameters, options) {
+            return localVarFp.mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACRole
+         * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACRole(requestParameters, options) {
+            return localVarFp.mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary GetRBACUser
+         * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoGetRBACUser(requestParameters, options) {
+            return localVarFp.mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ListRBACRoles
+         * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACRoles(requestParameters, options) {
+            return localVarFp.mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary ListRBACUsers
+         * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoListRBACUsers(requestParameters, options) {
+            return localVarFp.mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary UpdateRBACRole
+         * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mongoUpdateRBACRole(requestParameters, options) {
+            return localVarFp.mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(axios, basePath));
+        },
         /**
          * partially update the specified apikey
          * @summary Update apikey information
@@ -22938,14 +23929,14 @@ const SharedApiFactory = function (configuration, basePath, axios) {
             return localVarFp.patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Preview clearing all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Preview clearing explicit account privileges
          * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         previewAccountPrivilegeReset(requestParameters, options) {
-            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          *
@@ -23227,14 +24218,14 @@ const SharedApiFactory = function (configuration, basePath, axios) {
             return localVarFp.reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
         /**
-         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-         * @summary Clear all MySQL account privileges
+         * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+         * @summary Clear explicit account privileges
          * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
         resetAccountPrivileges(requestParameters, options) {
-            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(axios, basePath));
         },
         /**
          *
@@ -24904,6 +25895,17 @@ class SharedApi extends base_1.BaseAPI {
     getAccountObjectPrivileges(requestParameters, options) {
         return (0, exports.SharedApiFp)(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Without databaseName, returns role attributes, memberships, database access summaries and shared ACLs without connecting to other databases. PostgreSQL databaseName reads schema, object, ownership and PUBLIC evidence from that database only. Failed reads return an error, never an empty grant list. SQL is read-only evidence, not an exhaustive effective-access decision.
+     * @summary Read native account privilege summary or selected database evidence
+     * @param {SharedApiGetAccountPrivilegeOverviewRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    getAccountPrivilegeOverview(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).getAccountPrivilegeOverview(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseName, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      *
      * @summary Get alert config
@@ -25563,7 +26565,7 @@ class SharedApi extends base_1.BaseAPI {
         return (0, exports.SharedApiFp)(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * Read MySQL or PostgreSQL relation column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
      * @summary List exact column names for account object privileges
      * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
@@ -25571,7 +26573,7 @@ class SharedApi extends base_1.BaseAPI {
      * @memberof SharedApi
      */
     listAccountObjectPrivilegeColumns(requestParameters, options) {
-        return (0, exports.SharedApiFp)(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.SharedApiFp)(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, requestParameters.schemaName, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
@@ -26330,6 +27332,138 @@ class SharedApi extends base_1.BaseAPI {
     markClusterRestoreCompleted(requestParameters, options) {
         return (0, exports.SharedApiFp)(this.configuration).markClusterRestoreCompleted(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     *
+     * @summary ChangeRBACUserPassword
+     * @param {SharedApiMongoChangeRBACUserPasswordRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoChangeRBACUserPassword(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoChangeRBACUserPassword(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACPasswordChange, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ChangeRBACUserRoles
+     * @param {SharedApiMongoChangeRBACUserRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoChangeRBACUserRoles(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoChangeRBACUserRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, requestParameters.mongoRBACBindingChange, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary CreateRBACRole
+     * @param {SharedApiMongoCreateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoCreateRBACRole(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoCreateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary CreateRBACUser
+     * @param {SharedApiMongoCreateRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoCreateRBACUser(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoCreateRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.mongoRBACUserCreate, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary DeleteRBACRole
+     * @param {SharedApiMongoDeleteRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoDeleteRBACRole(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoDeleteRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.expectedRevision, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary DeleteRBACUser
+     * @param {SharedApiMongoDeleteRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoDeleteRBACUser(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoDeleteRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACCapabilities
+     * @param {SharedApiMongoGetRBACCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACCapabilities(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoGetRBACCapabilities(requestParameters.orgName, requestParameters.clusterName, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACRole
+     * @param {SharedApiMongoGetRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACRole(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoGetRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary GetRBACUser
+     * @param {SharedApiMongoGetRBACUserRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoGetRBACUser(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoGetRBACUser(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.username, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ListRBACRoles
+     * @param {SharedApiMongoListRBACRolesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoListRBACRoles(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoListRBACRoles(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary ListRBACUsers
+     * @param {SharedApiMongoListRBACUsersRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoListRBACUsers(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoListRBACUsers(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary UpdateRBACRole
+     * @param {SharedApiMongoUpdateRBACRoleRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    mongoUpdateRBACRole(requestParameters, options) {
+        return (0, exports.SharedApiFp)(this.configuration).mongoUpdateRBACRole(requestParameters.orgName, requestParameters.clusterName, requestParameters.database, requestParameters.roleName, requestParameters.mongoRBACRoleWrite, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * partially update the specified apikey
      * @summary Update apikey information
@@ -26386,15 +27520,15 @@ class SharedApi extends base_1.BaseAPI {
         return (0, exports.SharedApiFp)(this.configuration).patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Preview clearing all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Preview clearing explicit account privileges
      * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof SharedApi
      */
     previewAccountPrivilegeReset(requestParameters, options) {
-        return (0, exports.SharedApiFp)(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.SharedApiFp)(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      *
@@ -26704,15 +27838,15 @@ class SharedApi extends base_1.BaseAPI {
         return (0, exports.SharedApiFp)(this.configuration).reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
-     * @summary Clear all MySQL account privileges
+     * MySQL clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections. PostgreSQL requires selected databaseNames or explicit allDatabases=true. Selected scope clears direct database/local/default ACLs only. It preserves global memberships, role attributes and privileges in other databases. Whole-account scope additionally clears memberships and elevated attributes. PUBLIC access remains. Object ownership prevents reset; RESTRICT protects dependent grants. Each database is transactional, but cross-database reset is not atomic. No objects are dropped or reassigned.
+     * @summary Clear explicit account privileges
      * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof SharedApi
      */
     resetAccountPrivileges(requestParameters, options) {
-        return (0, exports.SharedApiFp)(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+        return (0, exports.SharedApiFp)(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, requestParameters.databaseNames, requestParameters.allDatabases, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      *