mcp-google-multi 5.4.1-alpha.2 → 6.0.0-alpha.2

package/dist/tools/generated/cloudidentity.js

@@ -3,6 +3,18 @@ import { z } from 'zod';
 import { coerceJson } from '../_coerce.js';
 import { accountField, registerGeneratedTool } from './_shared.js';
 export function registerCloudidentityGeneratedTools(registry) {
+    // Interned method scope sets (shared across tools; see scope-observability).
+    const S_cloudidentity_v1 = [
+        ["https://www.googleapis.com/auth/cloud-identity.devices"],
+        ["https://www.googleapis.com/auth/cloud-identity.devices", "https://www.googleapis.com/auth/cloud-identity.devices.readonly"],
+        ["https://www.googleapis.com/auth/cloud-identity.devices.lookup"],
+        ["https://www.googleapis.com/auth/cloud-identity.groups", "https://www.googleapis.com/auth/cloud-platform"],
+        ["https://www.googleapis.com/auth/cloud-identity.groups", "https://www.googleapis.com/auth/cloud-identity.groups.readonly", "https://www.googleapis.com/auth/cloud-platform"],
+        ["https://www.googleapis.com/auth/cloud-identity.inboundsso", "https://www.googleapis.com/auth/cloud-platform"],
+        ["https://www.googleapis.com/auth/cloud-identity.inboundsso", "https://www.googleapis.com/auth/cloud-identity.inboundsso.readonly", "https://www.googleapis.com/auth/cloud-platform"],
+        ["https://www.googleapis.com/auth/cloud-identity.policies"],
+        ["https://www.googleapis.com/auth/cloud-identity.policies", "https://www.googleapis.com/auth/cloud-identity.policies.readonly"],
+    ];
     registerGeneratedTool(registry, {
         name: "cloudidentity_customers_userinvitations_cancel",
         cud: "create",
@@ -78,7 +90,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_cancel_wipe",
         cud: "create",
         description: "Cancels an unfinished device wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being",
-        method: { id: "cloudidentity.devices.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -92,7 +104,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_create",
         cud: "create",
         description: "Creates a device. Only company-owned device may be created. **Note**: This method is available only to customers who have one of the following SKUs: Enterprise",
-        method: { id: "cloudidentity.devices.create", httpMethod: "POST", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.devices.create", httpMethod: "POST", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -106,7 +118,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_delete",
         cud: "delete",
         description: "Deletes the specified device.",
-        method: { id: "cloudidentity.devices.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -120,7 +132,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_approve",
         cud: "create",
         description: "Approves device to access user data.",
-        method: { id: "cloudidentity.devices.deviceUsers.approve", httpMethod: "POST", path: "v1/{+name}:approve", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.approve", httpMethod: "POST", path: "v1/{+name}:approve", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -134,7 +146,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_block",
         cud: "create",
         description: "Blocks device from accessing user data",
-        method: { id: "cloudidentity.devices.deviceUsers.block", httpMethod: "POST", path: "v1/{+name}:block", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.block", httpMethod: "POST", path: "v1/{+name}:block", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -148,7 +160,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_cancel_wipe",
         cud: "create",
         description: "Cancels an unfinished user account wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device",
-        method: { id: "cloudidentity.devices.deviceUsers.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.cancelWipe", httpMethod: "POST", path: "v1/{+name}:cancelWipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -162,7 +174,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_client_states_get",
         cud: "read",
         description: "Gets the client state for the device user",
-        method: { id: "cloudidentity.devices.deviceUsers.clientStates.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -176,7 +188,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_client_states_list",
         cud: "read",
         description: "Lists the client states for the given search query.",
-        method: { id: "cloudidentity.devices.deviceUsers.clientStates.list", httpMethod: "GET", path: "v1/{+parent}/clientStates", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.list", httpMethod: "GET", path: "v1/{+parent}/clientStates", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -193,7 +205,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_client_states_patch",
         cud: "update",
         description: "Updates the client state for the device user **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enter",
-        method: { id: "cloudidentity.devices.deviceUsers.clientStates.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.clientStates.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -209,7 +221,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_delete",
         cud: "delete",
         description: "Deletes the specified DeviceUser. This also revokes the user's access to device data.",
-        method: { id: "cloudidentity.devices.deviceUsers.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -223,7 +235,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_get",
         cud: "read",
         description: "Retrieves the specified DeviceUser",
-        method: { id: "cloudidentity.devices.deviceUsers.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -237,7 +249,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_list",
         cud: "read",
         description: "Lists/Searches DeviceUsers.",
-        method: { id: "cloudidentity.devices.deviceUsers.list", httpMethod: "GET", path: "v1/{+parent}/deviceUsers", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.devices.deviceUsers.list", httpMethod: "GET", path: "v1/{+parent}/deviceUsers", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -255,7 +267,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_lookup",
         cud: "read",
         description: "Looks up resource names of the DeviceUsers associated with the caller's credentials, as well as the properties provided in the request. This method must be call",
-        method: { id: "cloudidentity.devices.deviceUsers.lookup", httpMethod: "GET", path: "v1/{+parent}:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.devices.deviceUsers.lookup", httpMethod: "GET", path: "v1/{+parent}:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[2] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "androidId", "api": "androidId", "location": "query" }, { "field": "iosDeviceId", "api": "iosDeviceId", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "partner", "api": "partner", "location": "query" }, { "field": "rawResourceId", "api": "rawResourceId", "location": "query" }, { "field": "userId", "api": "userId", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -275,7 +287,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_device_users_wipe",
         cud: "create",
         description: "Wipes the user's account on a device. Other data on the device that is not associated with the user's work account is not affected. For example, if a Gmail app",
-        method: { id: "cloudidentity.devices.deviceUsers.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.deviceUsers.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -289,7 +301,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_get",
         cud: "read",
         description: "Retrieves the specified device.",
-        method: { id: "cloudidentity.devices.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "customer", "api": "customer", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -303,7 +315,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_list",
         cud: "read",
         description: "Lists/Searches devices.",
-        method: { id: "cloudidentity.devices.list", httpMethod: "GET", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.devices.list", httpMethod: "GET", path: "v1/devices", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[1] },
         params: [{ "field": "customer", "api": "customer", "location": "query" }, { "field": "filter", "api": "filter", "location": "query" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -321,7 +333,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_devices_wipe",
         cud: "create",
         description: "Wipes all data on the specified device.",
-        method: { id: "cloudidentity.devices.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.devices.wipe", httpMethod: "POST", path: "v1/{+name}:wipe", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[0] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -335,7 +347,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_create",
         cud: "create",
         description: "Creates a Group.",
-        method: { id: "cloudidentity.groups.create", httpMethod: "POST", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.groups.create", httpMethod: "POST", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "initialGroupConfig", "api": "initialGroupConfig", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -349,7 +361,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_delete",
         cud: "delete",
         description: "Deletes a `Group`.",
-        method: { id: "cloudidentity.groups.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -362,7 +374,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_get",
         cud: "read",
         description: "Retrieves a `Group`.",
-        method: { id: "cloudidentity.groups.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -375,7 +387,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_get_security_settings",
         cud: "read",
         description: "Get Security Settings",
-        method: { id: "cloudidentity.groups.getSecuritySettings", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.getSecuritySettings", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "readMask", "api": "readMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -389,7 +401,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_list",
         cud: "read",
         description: "Lists the `Group` resources under a customer or namespace.",
-        method: { id: "cloudidentity.groups.list", httpMethod: "GET", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.groups.list", httpMethod: "GET", path: "v1/groups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "parent", "api": "parent", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -405,7 +417,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_lookup",
         cud: "read",
         description: "Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Group` by its `EntityKey`.",
-        method: { id: "cloudidentity.groups.lookup", httpMethod: "GET", path: "v1/groups:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.groups.lookup", httpMethod: "GET", path: "v1/groups:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "groupKey.id", "api": "groupKey.id", "location": "query" }, { "field": "groupKey.namespace", "api": "groupKey.namespace", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -419,7 +431,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_check_transitive_membership",
         cud: "read",
         description: "Check a potential member for membership in a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enter",
-        method: { id: "cloudidentity.groups.memberships.checkTransitiveMembership", httpMethod: "GET", path: "v1/{+parent}/memberships:checkTransitiveMembership", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.checkTransitiveMembership", httpMethod: "GET", path: "v1/{+parent}/memberships:checkTransitiveMembership", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -433,7 +445,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_create",
         cud: "create",
         description: "Creates a `Membership`.",
-        method: { id: "cloudidentity.groups.memberships.create", httpMethod: "POST", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.create", httpMethod: "POST", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -447,7 +459,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_delete",
         cud: "delete",
         description: "Deletes a `Membership`.",
-        method: { id: "cloudidentity.groups.memberships.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.memberships.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -460,7 +472,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_get",
         cud: "read",
         description: "Retrieves a `Membership`.",
-        method: { id: "cloudidentity.groups.memberships.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.memberships.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -473,7 +485,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_get_membership_graph",
         cud: "read",
         description: "Get a membership graph of just a member or both a member and a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterpri",
-        method: { id: "cloudidentity.groups.memberships.getMembershipGraph", httpMethod: "GET", path: "v1/{+parent}/memberships:getMembershipGraph", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.getMembershipGraph", httpMethod: "GET", path: "v1/{+parent}/memberships:getMembershipGraph", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -487,7 +499,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_list",
         cud: "read",
         description: "Lists the `Membership`s within a `Group`.",
-        method: { id: "cloudidentity.groups.memberships.list", httpMethod: "GET", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.list", httpMethod: "GET", path: "v1/{+parent}/memberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -503,7 +515,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_lookup",
         cud: "read",
         description: "Looks up the [resource name](https://cloud.google.com/apis/design/resource_names) of a `Membership` by its `EntityKey`.",
-        method: { id: "cloudidentity.groups.memberships.lookup", httpMethod: "GET", path: "v1/{+parent}/memberships:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.lookup", httpMethod: "GET", path: "v1/{+parent}/memberships:lookup", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "memberKey.id", "api": "memberKey.id", "location": "query" }, { "field": "memberKey.namespace", "api": "memberKey.namespace", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -518,7 +530,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_modify_membership_roles",
         cud: "update",
         description: "Modifies the `MembershipRole`s of a `Membership`.",
-        method: { id: "cloudidentity.groups.memberships.modifyMembershipRoles", httpMethod: "POST", path: "v1/{+name}:modifyMembershipRoles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.memberships.modifyMembershipRoles", httpMethod: "POST", path: "v1/{+name}:modifyMembershipRoles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -532,7 +544,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_search_direct_groups",
         cud: "read",
         description: "Searches direct groups of a member. Groups for which the actor does not have the permission to view memberships are silently filtered out.",
-        method: { id: "cloudidentity.groups.memberships.searchDirectGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchDirectGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.searchDirectGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchDirectGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "orderBy", "api": "orderBy", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -549,7 +561,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_search_transitive_groups",
         cud: "read",
         description: "Search transitive groups of a member. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Educ",
-        method: { id: "cloudidentity.groups.memberships.searchTransitiveGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.searchTransitiveGroups", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveGroups", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -565,7 +577,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_memberships_search_transitive_memberships",
         cud: "read",
         description: "Search transitive memberships of a group. **Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for",
-        method: { id: "cloudidentity.groups.memberships.searchTransitiveMemberships", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveMemberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.groups.memberships.searchTransitiveMemberships", httpMethod: "GET", path: "v1/{+parent}/memberships:searchTransitiveMemberships", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -580,7 +592,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_patch",
         cud: "update",
         description: "Updates a `Group`.",
-        method: { id: "cloudidentity.groups.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -595,7 +607,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_search",
         cud: "read",
         description: "Searches for `Group` resources matching a specified query.",
-        method: { id: "cloudidentity.groups.search", httpMethod: "GET", path: "v1/groups:search", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.groups.search", httpMethod: "GET", path: "v1/groups:search", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[4] },
         params: [{ "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "query", "api": "query", "location": "query" }, { "field": "view", "api": "view", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -611,7 +623,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_groups_update_security_settings",
         cud: "update",
         description: "Update Security Settings",
-        method: { id: "cloudidentity.groups.updateSecuritySettings", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.groups.updateSecuritySettings", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[3] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -626,7 +638,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_oidc_sso_profiles_create",
         cud: "create",
         description: "Creates an InboundOidcSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/",
-        method: { id: "cloudidentity.inboundOidcSsoProfiles.create", httpMethod: "POST", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.create", httpMethod: "POST", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -639,7 +651,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_oidc_sso_profiles_delete",
         cud: "delete",
         description: "Deletes an InboundOidcSsoProfile.",
-        method: { id: "cloudidentity.inboundOidcSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -652,7 +664,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_oidc_sso_profiles_get",
         cud: "read",
         description: "Gets an InboundOidcSsoProfile.",
-        method: { id: "cloudidentity.inboundOidcSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -665,7 +677,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_oidc_sso_profiles_list",
         cud: "read",
         description: "Lists InboundOidcSsoProfile objects for a Google enterprise customer.",
-        method: { id: "cloudidentity.inboundOidcSsoProfiles.list", httpMethod: "GET", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.list", httpMethod: "GET", path: "v1/inboundOidcSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -680,7 +692,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_oidc_sso_profiles_patch",
         cud: "update",
         description: "Updates an InboundOidcSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448",
-        method: { id: "cloudidentity.inboundOidcSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundOidcSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -695,7 +707,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_create",
         cud: "create",
         description: "Creates an InboundSamlSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.create", httpMethod: "POST", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.create", httpMethod: "POST", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -708,7 +720,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_delete",
         cud: "delete",
         description: "Deletes an InboundSamlSsoProfile.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -721,7 +733,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_get",
         cud: "read",
         description: "Gets an InboundSamlSsoProfile.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -734,7 +746,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_add",
         cud: "create",
         description: "Adds an IdpCredential. Up to 2 credentials are allowed. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.add", httpMethod: "POST", path: "v1/{+parent}/idpCredentials:add", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.add", httpMethod: "POST", path: "v1/{+parent}/idpCredentials:add", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -748,7 +760,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_delete",
         cud: "delete",
         description: "Deletes an IdpCredential.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -761,7 +773,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_get",
         cud: "read",
         description: "Gets an IdpCredential.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -774,7 +786,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_idp_credentials_list",
         cud: "read",
         description: "Returns a list of IdpCredentials in an InboundSamlSsoProfile.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.list", httpMethod: "GET", path: "v1/{+parent}/idpCredentials", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.idpCredentials.list", httpMethod: "GET", path: "v1/{+parent}/idpCredentials", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["parent"], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "parent", "api": "parent", "location": "path" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -789,7 +801,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_list",
         cud: "read",
         description: "Lists InboundSamlSsoProfiles for a customer.",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.list", httpMethod: "GET", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.list", httpMethod: "GET", path: "v1/inboundSamlSsoProfiles", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -804,7 +816,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_saml_sso_profiles_patch",
         cud: "update",
         description: "Updates an InboundSamlSsoProfile. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448",
-        method: { id: "cloudidentity.inboundSamlSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSamlSsoProfiles.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -819,7 +831,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_sso_assignments_create",
         cud: "create",
         description: "Creates an InboundSsoAssignment for users and devices in a `Customer` under a given `Group` or `OrgUnit`.",
-        method: { id: "cloudidentity.inboundSsoAssignments.create", httpMethod: "POST", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundSsoAssignments.create", httpMethod: "POST", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -832,7 +844,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_sso_assignments_delete",
         cud: "delete",
         description: "Deletes an InboundSsoAssignment. To disable SSO, Create (or Update) an assignment that has `sso_mode` == `SSO_OFF`.",
-        method: { id: "cloudidentity.inboundSsoAssignments.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSsoAssignments.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -845,7 +857,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_sso_assignments_get",
         cud: "read",
         description: "Gets an InboundSsoAssignment.",
-        method: { id: "cloudidentity.inboundSsoAssignments.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSsoAssignments.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -858,7 +870,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_sso_assignments_list",
         cud: "read",
         description: "Lists the InboundSsoAssignments for a `Customer`.",
-        method: { id: "cloudidentity.inboundSsoAssignments.list", httpMethod: "GET", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.inboundSsoAssignments.list", httpMethod: "GET", path: "v1/inboundSsoAssignments", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[6] },
         params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -873,7 +885,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_inbound_sso_assignments_patch",
         cud: "update",
         description: "Updates an InboundSsoAssignment. The body of this request is the `inbound_sso_assignment` field and the `update_mask` is relative to that. For example: a PATCH",
-        method: { id: "cloudidentity.inboundSsoAssignments.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.inboundSsoAssignments.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[5] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "updateMask", "api": "updateMask", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -888,7 +900,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_policies_create",
         cud: "create",
         description: "Create a policy.",
-        method: { id: "cloudidentity.policies.create", httpMethod: "POST", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.policies.create", httpMethod: "POST", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[7] },
         params: [{ "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {
@@ -901,7 +913,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_policies_delete",
         cud: "delete",
         description: "Delete a policy.",
-        method: { id: "cloudidentity.policies.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.policies.delete", httpMethod: "DELETE", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[7] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -914,7 +926,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_policies_get",
         cud: "read",
         description: "Get a policy.",
-        method: { id: "cloudidentity.policies.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.policies.get", httpMethod: "GET", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[8] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -927,7 +939,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_policies_list",
         cud: "read",
         description: "List policies.",
-        method: { id: "cloudidentity.policies.list", httpMethod: "GET", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [] },
+        method: { id: "cloudidentity.policies.list", httpMethod: "GET", path: "v1/policies", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: [], scopes: S_cloudidentity_v1[8] },
         params: [{ "field": "filter", "api": "filter", "location": "query" }, { "field": "pageSize", "api": "pageSize", "location": "query" }, { "field": "pageToken", "api": "pageToken", "location": "query" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: false,
         shape: {
@@ -942,7 +954,7 @@ export function registerCloudidentityGeneratedTools(registry) {
         name: "cloudidentity_policies_patch",
         cud: "update",
         description: "Update a policy.",
-        method: { id: "cloudidentity.policies.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"] },
+        method: { id: "cloudidentity.policies.patch", httpMethod: "PATCH", path: "v1/{+name}", baseUrl: "https://cloudidentity.googleapis.com/", requiredParams: ["name"], scopes: S_cloudidentity_v1[7] },
         params: [{ "field": "name", "api": "name", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
         hasBody: true,
         shape: {