opal-security 3.1.0 → 3.1.1-beta.4a79f20

package/lib/graphql/graphql.d.ts

@@ -571,6 +571,7 @@ export type AccessLevelsFiltersInput = {
 };
 export declare enum AccessOption {
     All = "ALL",
+    Manageable = "MANAGEABLE",
     Mine = "MINE",
     Requestable = "REQUESTABLE",
     /** @deprecated no longer supported */
@@ -626,6 +627,7 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
     stoppedByUserId?: Maybe<Scalars["UserId"]["output"]>;
     stoppedDate?: Maybe<Scalars["Time"]["output"]>;
     timeZone: Scalars["String"]["output"];
+    updatedAt: Scalars["Time"]["output"];
     usersToReview: UserConnection;
 };
 export type AccessReviewUsersToReviewArgs = {
@@ -1477,7 +1479,11 @@ export type AccessReviewUsersResult = {
     accessReviewUsers: Array<AccessReviewUser>;
 };
 export type AccessReviewsInput = {
-    ongoingOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
+    /**
+     * status filter: by default, accessReviews will return ALL access reviews for
+     * the org, otherwise it will only return access reviews with the given status
+     */
+    status?: InputMaybe<AccessReviewStatus>;
 };
 export type AccessReviewsOutput = AccessReviewsResult;
 export type AccessReviewsResult = {
@@ -1499,6 +1505,11 @@ export declare enum AccessRuleStatus {
     Paused = "PAUSED",
     PausedByFailsafe = "PAUSED_BY_FAILSAFE"
 }
+export type AccessScope = {
+    createdAfter?: InputMaybe<Scalars["Time"]["input"]>;
+    expiresAfter?: InputMaybe<Scalars["Time"]["input"]>;
+    vulnerabilities?: InputMaybe<Array<RecommendationsSubscoreType>>;
+};
 export type AccessStats = {
     managerAccessCount?: Maybe<Scalars["Int"]["output"]>;
     teamAccessCount?: Maybe<Scalars["Int"]["output"]>;
@@ -1801,6 +1812,7 @@ export type App = {
 export type AppItemTypesArgs = {
     access: AccessOption;
     ancestorResourceId?: InputMaybe<NullableResourceId>;
+    excludeComputedGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
     parentResourceId?: InputMaybe<NullableResourceId>;
 };
 export type AppItemsArgs = {
@@ -1894,6 +1906,7 @@ export type AppItemsInput = {
     access: AccessOption;
     ancestorResourceId?: InputMaybe<NullableResourceId>;
     cursor?: InputMaybe<Scalars["String"]["input"]>;
+    excludeComputedGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
     groupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
     hasV3?: InputMaybe<Scalars["Boolean"]["input"]>;
     includeGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
@@ -2538,14 +2551,14 @@ export type CertIsTooLargeError = Error & {
     __typename?: "CertIsTooLargeError";
     message: Scalars["String"]["output"];
 };
-export type ClearResourceUserPropagationStatusInput = {
+export type ClearPropagationStatusInput = {
     accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["input"];
-    resourceId: Scalars["ResourceId"]["input"];
-    userId: Scalars["UserId"]["input"];
+    entityId: Scalars["EntityId"]["input"];
+    principalId: Scalars["PrincipalId"]["input"];
 };
-export type ClearResourceUserPropagationStatusOutput = ClearResourceUserPropagationStatusResult;
-export type ClearResourceUserPropagationStatusResult = {
-    __typename?: "ClearResourceUserPropagationStatusResult";
+export type ClearPropagationStatusOutput = ClearPropagationStatusResult;
+export type ClearPropagationStatusResult = {
+    __typename?: "ClearPropagationStatusResult";
     success: Scalars["Boolean"]["output"];
 };
 export type ClosedRequestMetricsResult = {
@@ -3259,7 +3272,7 @@ export type CreateRequestInput = {
     targetGroupId?: InputMaybe<Scalars["GroupId"]["input"]>;
     targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
-export type CreateRequestOutput = BulkRequestTooLargeError | CreateRequestResult | GroupNestingNotAllowedError | ItemCannotBeRequestedError | LinkedGroupNotRequestableError | MfaInvalidError | NoManagerSetForRequestingUserError | NoReviewersSetForGroupError | NoReviewersSetForOwnerError | NoReviewersSetForResourceError | RequestDurationTooLargeError | RequestFieldValueMissingError | RequestReasonMissingError | RequestRequiresUserAuthTokenForConnectionError | TargetUserHasNestedAccessError | UserCannotRequestAccessForTargetGroupError;
+export type CreateRequestOutput = BulkRequestTooLargeError | CreateRequestResult | GroupNestingNotAllowedError | ItemCannotBeRequestedError | LinkedGroupNotRequestableError | MfaInvalidError | NoManagerSetForRequestingUserError | NoReviewersSetForGroupError | NoReviewersSetForOwnerError | NoReviewersSetForResourceError | RequestDurationTooLargeError | RequestFieldValueMissingError | RequestReasonBelowMinLengthError | RequestReasonMissingError | RequestRequiresUserAuthTokenForConnectionError | TargetUserHasNestedAccessError | UserCannotRequestAccessForTargetGroupError;
 export type CreateRequestProposalInput = {
     adminOwnerId: Scalars["OwnerId"]["input"];
     connectionId: Scalars["ConnectionId"]["input"];
@@ -3749,6 +3762,13 @@ export type DenyRequestResult = {
     __typename?: "DenyRequestResult";
     request: Request;
 };
+export type DirectRoleAssignmentsInput = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    scope: RoleAssignmentScope;
+    sortBy?: InputMaybe<RoleAssignmentsSortBy>;
+    source?: UiSource;
+};
 export type DismissGroupBindingSuggestionsInput = {
     ids: Array<Scalars["GroupBindingSuggestionId"]["input"]>;
 };
@@ -3833,6 +3853,15 @@ export type EntityIdTupleInput = {
     entityId: Scalars["UUID"]["input"];
     entityType: EntityType;
 };
+export type EntityScope = {
+    entityIDs?: InputMaybe<Array<Scalars["EntityId"]["input"]>>;
+    entitySubtypes?: InputMaybe<EntitySubtypes>;
+    entityTypes?: InputMaybe<Array<EntityType>>;
+};
+export type EntitySubtypes = {
+    groupTypes?: InputMaybe<Array<GroupType>>;
+    resourceTypes?: InputMaybe<Array<ResourceType>>;
+};
 export declare enum EntityType {
     AccessLevel = "ACCESS_LEVEL",
     AccessReview = "ACCESS_REVIEW",
@@ -4295,6 +4324,7 @@ export declare enum EventType {
     RoleAssignmentsDeleted = "ROLE_ASSIGNMENTS_DELETED",
     RoleAssignmentsUpdated = "ROLE_ASSIGNMENTS_UPDATED",
     SessionsCreatedForResources = "SESSIONS_CREATED_FOR_RESOURCES",
+    SoonToExpireNotification = "SOON_TO_EXPIRE_NOTIFICATION",
     ThirdPartyIntegrationCreated = "THIRD_PARTY_INTEGRATION_CREATED",
     ThirdPartyIntegrationDeleted = "THIRD_PARTY_INTEGRATION_DELETED",
     ToxicSetViolationsCreated = "TOXIC_SET_VIOLATIONS_CREATED",
@@ -4367,6 +4397,10 @@ export type FilterInput = {
     tagFilter?: InputMaybe<TagFilterInput>;
     usersFilter?: InputMaybe<UsersFilterInput>;
 };
+export declare enum FilterRule {
+    MatchAll = "MATCH_ALL",
+    MatchAny = "MATCH_ANY"
+}
 export type FilteredConnectionsInput = {
     filters?: InputMaybe<FiltersInput>;
 };
@@ -4488,7 +4522,6 @@ export declare enum GeneralSettingType {
     AutoMergeUsersByEmail = "AUTO_MERGE_USERS_BY_EMAIL",
     DisableNonAdminLogins = "DISABLE_NON_ADMIN_LOGINS",
     GlobalRequesterRole = "GLOBAL_REQUESTER_ROLE",
-    LogRocketDisabled = "LOG_ROCKET_DISABLED",
     NestedGroups = "NESTED_GROUPS",
     RequireManagerCc = "REQUIRE_MANAGER_CC",
     RequireOpalMfaForLogins = "REQUIRE_OPAL_MFA_FOR_LOGINS",
@@ -4805,7 +4838,7 @@ export type GroupGroup = {
     id: Scalars["GroupGroupId"]["output"];
     memberGroup?: Maybe<Group>;
     memberGroupId: Scalars["GroupId"]["output"];
-    propagationStatus?: Maybe<GroupGroupPropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     quickAccess?: Maybe<GroupGroupQuickAccess>;
 };
 export type GroupGroupAccess = {
@@ -4856,18 +4889,6 @@ export type GroupGroupNotFound = Error & {
     __typename?: "GroupGroupNotFound";
     message: Scalars["String"]["output"];
 };
-export type GroupGroupPropagationStatus = {
-    __typename?: "GroupGroupPropagationStatus";
-    errorMessage?: Maybe<Scalars["String"]["output"]>;
-    groupGroupId: Scalars["GroupGroupId"]["output"];
-    lastSynced: Scalars["Time"]["output"];
-    statusCode: PropagationStatusCode;
-    taskType: PropagationTaskType;
-};
-export type GroupGroupPushTaskResult = {
-    __typename?: "GroupGroupPushTaskResult";
-    propStatuses: Array<GroupGroupPropagationStatus>;
-};
 export type GroupGroupQuickAccess = {
     __typename?: "GroupGroupQuickAccess";
     expiration?: Maybe<Scalars["Time"]["output"]>;
@@ -4924,16 +4945,6 @@ export type GroupOnCallSchedulesResult = {
     groupOnCallSchedules: Array<GroupOnCallSchedule>;
 };
 export type GroupOutput = GroupNotFoundError | GroupResult;
-export type GroupPropagationStatus = {
-    __typename?: "GroupPropagationStatus";
-    errorMessage?: Maybe<Scalars["String"]["output"]>;
-    groupId: Scalars["GroupId"]["output"];
-    lastSynced: Scalars["Time"]["output"];
-    statusCode: PropagationStatusCode;
-    taskType: PropagationTaskType;
-    ticketPropagation?: Maybe<GroupUserTicketPropagation>;
-    userId: Scalars["UserId"]["output"];
-};
 export type GroupRequestConfigurationOutput = {
     __typename?: "GroupRequestConfigurationOutput";
     accessLevelRemoteId?: Maybe<Scalars["AccessLevelRemoteId"]["output"]>;
@@ -4956,7 +4967,7 @@ export type GroupResource = {
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
-    propagationStatus?: Maybe<GroupResourcePropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     resource?: Maybe<Resource>;
     resourceId: Scalars["ResourceId"]["output"];
     source: GroupResourceSource;
@@ -5012,20 +5023,6 @@ export type GroupResourceEdge = {
     metadata?: Maybe<EdgeMetadata>;
     resourceId: Scalars["ResourceId"]["output"];
 };
-export type GroupResourcePropagationStatus = {
-    __typename?: "GroupResourcePropagationStatus";
-    accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["output"];
-    errorMessage?: Maybe<Scalars["String"]["output"]>;
-    groupId: Scalars["GroupId"]["output"];
-    lastSynced: Scalars["Time"]["output"];
-    resourceId: Scalars["ResourceId"]["output"];
-    statusCode: PropagationStatusCode;
-    taskType: PropagationTaskType;
-};
-export type GroupResourcePushTaskResult = {
-    __typename?: "GroupResourcePushTaskResult";
-    propStatuses: Array<GroupResourcePropagationStatus>;
-};
 export declare enum GroupResourceSource {
     /** GroupResource that's inherited from another remote resource */
     Inherited = "INHERITED",
@@ -5096,7 +5093,7 @@ export type GroupTypesFilterInput = {
 };
 export type GroupTypesWithCountsInput = {
     connectionIds?: InputMaybe<Array<Scalars["ConnectionId"]["input"]>>;
-    includeHiddenGroupTypes?: InputMaybe<Scalars["Boolean"]["input"]>;
+    excludeComputedGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
     query?: InputMaybe<Scalars["String"]["input"]>;
 };
 export type GroupTypesWithCountsOutput = GroupTypesWithCountsResult;
@@ -5108,10 +5105,11 @@ export type GroupUser = {
     __typename?: "GroupUser";
     access?: Maybe<GroupUserAccess>;
     accessLevel?: Maybe<GroupAccessLevel>;
+    accessStats?: Maybe<AccessStats>;
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
-    propagationStatus?: Maybe<GroupPropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     provisionSource: ProvisionSource;
     source: GroupUserSource;
     user?: Maybe<User>;
@@ -5177,10 +5175,6 @@ export type GroupUserInsights = {
     attributeCounts: Array<Maybe<AttributeCounts>>;
     numGroupUsersWithUsage: Scalars["Int"]["output"];
 };
-export type GroupUserPushTaskResult = {
-    __typename?: "GroupUserPushTaskResult";
-    propStatuses: Array<GroupPropagationStatus>;
-};
 export declare enum GroupUserSortByField {
     AccessLevelName = "ACCESS_LEVEL_NAME",
     ExpiresAt = "EXPIRES_AT",
@@ -5200,14 +5194,11 @@ export declare enum GroupUserSource {
     /** Regular GroupUser that's imported from a nested group. */
     RegularNested = "REGULAR_NESTED"
 }
-export type GroupUserTicketPropagation = {
-    __typename?: "GroupUserTicketPropagation";
-    resourceTickets: Array<ResourceTicketPropagation>;
-};
 export type GroupsInput = {
     connectionIds?: InputMaybe<Array<Scalars["ConnectionId"]["input"]>>;
     connectionType?: InputMaybe<ConnectionType>;
     cursor?: InputMaybe<Scalars["String"]["input"]>;
+    excludeComputedGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
     groupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
     groupType?: InputMaybe<GroupType>;
     leaderOfGroupsOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
@@ -5910,7 +5901,7 @@ export type Mutation = {
     bulkImportRemoteItems: BulkImportRemoteItemsOutput;
     bulkUpdateItems: BulkUpdateItemsOutput;
     cancelRequest: CancelRequestOutput;
-    clearResourceUserPropagationStatus: ClearResourceUserPropagationStatusOutput;
+    clearPropagationStatus: ClearPropagationStatusOutput;
     cliTokenExchange: CliTokenExchangeOutput;
     confirmEndSystemRevocation: ConfirmEndSystemRevocationOutput;
     createAuthProviderApplication: CreateAuthProviderApplicationOutput;
@@ -5923,6 +5914,7 @@ export type Mutation = {
     createEventFilter: CreateEventFilterOutput;
     createEventStream: CreateEventStreamOutput;
     createFirstPartyToken: CreateFirstPartyTokenOutput;
+    /** @deprecated Use createItems instead. */
     createGroup: CreateGroupOutput;
     createGroupBindings: CreateGroupBindingsOutput;
     createIdpConnection: CreateIdpConnectionOutput;
@@ -6069,7 +6061,6 @@ export type Mutation = {
     updateResourceCustomAccessLevel: UpdateResourceCustomAccessLevelOutput;
     updateResourceUserReviewers: UpdateResourceUserReviewersOutput;
     updateResourceUsers: UpdateResourceUsersOutput;
-    updateResourceVisibilityGroups: UpdateResourceVisibilityGroupsOutput;
     /** @deprecated Use bulkUpdateItems instead. */
     updateResources: UpdateResourcesOutput;
     updateRoleAssignments: UpdateRoleAssignmentsOutput;
@@ -6137,8 +6128,8 @@ export type MutationBulkUpdateItemsArgs = {
 export type MutationCancelRequestArgs = {
     input: CancelRequestInput;
 };
-export type MutationClearResourceUserPropagationStatusArgs = {
-    input: ClearResourceUserPropagationStatusInput;
+export type MutationClearPropagationStatusArgs = {
+    input: ClearPropagationStatusInput;
 };
 export type MutationCliTokenExchangeArgs = {
     input: CliTokenExchangeInput;
@@ -6566,9 +6557,6 @@ export type MutationUpdateResourceUserReviewersArgs = {
 export type MutationUpdateResourceUsersArgs = {
     input: UpdateResourceUsersInput;
 };
-export type MutationUpdateResourceVisibilityGroupsArgs = {
-    input: UpdateResourceVisibilityGroupsInput;
-};
 export type MutationUpdateResourcesArgs = {
     input: UpdateResourcesInput;
 };
@@ -6924,6 +6912,7 @@ export type OrganizationSettings = {
     isRemoteReadOnly?: Maybe<Scalars["Boolean"]["output"]>;
     maxGroupDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
     maxResourceDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
+    reasonMinWordCount?: Maybe<Scalars["Int"]["output"]>;
     roleCreationReviewerOwner?: Maybe<Owner>;
     roleCreationReviewerOwnerId?: Maybe<Scalars["OwnerId"]["output"]>;
     syncErrorHandlerOwnerId?: Maybe<Scalars["OwnerId"]["output"]>;
@@ -7194,6 +7183,10 @@ export type PrincipalEdge = Edge & {
     cursor: Scalars["String"]["output"];
     node: Principal;
 };
+export type PrincipalScope = {
+    principalIDs?: InputMaybe<Array<Scalars["PrincipalId"]["input"]>>;
+    principalTypes?: InputMaybe<Array<EntityType>>;
+};
 export type PrincipalSearchOptions = {
     excludeUsersWithoutPosition: Scalars["Boolean"]["input"];
 };
@@ -7213,11 +7206,14 @@ export type PrincipalsResult = {
 };
 export type PropagationStatus = {
     __typename?: "PropagationStatus";
+    accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["output"];
+    entityId: Scalars["EntityId"]["output"];
     errorMessage?: Maybe<Scalars["String"]["output"]>;
     lastSynced: Scalars["Time"]["output"];
-    roleAssignmentId: Scalars["RoleAssignmentId"]["output"];
+    principalId: Scalars["EntityId"]["output"];
     statusCode: PropagationStatusCode;
     taskType: PropagationTaskType;
+    ticketPropagationMetadata?: Maybe<TicketPropagationMetadata>;
 };
 export declare enum PropagationStatusCode {
     ErrDryRunModeEnabled = "ERR_DRY_RUN_MODE_ENABLED",
@@ -7260,15 +7256,16 @@ export declare enum PropagationTaskType {
     ResourcesDeleteUsers = "RESOURCES_DELETE_USERS",
     ResourcesUpdateUsers = "RESOURCES_UPDATE_USERS"
 }
+export type PropagationTicket = {
+    __typename?: "PropagationTicket";
+    entityId: Scalars["EntityId"]["output"];
+    ticket?: Maybe<SupportTicket>;
+    ticketId: Scalars["SupportTicketId"]["output"];
+};
 export type PropagationTicketConnectionMetadata = {
     __typename?: "PropagationTicketConnectionMetadata";
     ticketProvider?: Maybe<TicketProvider>;
 };
-export type PropagationTicketMetadata = {
-    __typename?: "PropagationTicketMetadata";
-    ticket?: Maybe<SupportTicket>;
-    ticketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
-};
 export type PropagationTicketOwnerMetadata = {
     __typename?: "PropagationTicketOwnerMetadata";
     owner?: Maybe<Owner>;
@@ -7330,7 +7327,7 @@ export type PushTaskComplete = {
     result: PushTaskCompleteResult;
     taskType: PropagationTaskType;
 };
-export type PushTaskCompleteResult = ConnectionUserPushTaskResult | GroupGroupPushTaskResult | GroupResourcePushTaskResult | GroupUserPushTaskResult | ResourceUserPushTaskResult | RoleAssignmentPushTaskResult;
+export type PushTaskCompleteResult = ConnectionUserPushTaskResult | RoleAssignmentPushTaskResult;
 export type PushTaskInput = {
     id: Scalars["PushTaskId"]["input"];
 };
@@ -7361,7 +7358,7 @@ export type Query = {
     accessReviewConnectionUsers: AccessReviewConnectionUsersOutput;
     accessReviewConnections: AccessReviewConnectionsOutput;
     accessReviewGroup: AccessReviewGroupOutput;
-    accessReviewGroupResourceAssignments: AccessReviewGroupItemAssignmentsResult;
+    accessReviewGroupItemAssignments: AccessReviewGroupItemAssignmentsResult;
     accessReviewGroupUsers: AccessReviewGroupUsersOutput;
     accessReviewGroups: AccessReviewGroupsOutput;
     accessReviewItems: AccessReviewItemsResult;
@@ -7410,6 +7407,7 @@ export type Query = {
     countFilteredGroups: CountFilteredGroupsOutput;
     countFilteredResources: CountFilteredResourcesOutput;
     currentUserStats: CurrentUserStatsOutput;
+    directRoleAssignments: RoleAssignmentConnection;
     entitiesForRiskScoreRange: EntitiesForRiskScoreRangeResult;
     entityForRemediation: RecommendationsEntity;
     event: EventOutput;
@@ -7537,7 +7535,7 @@ export type QueryAccessReviewConnectionsArgs = {
 export type QueryAccessReviewGroupArgs = {
     input: AccessReviewGroupInput;
 };
-export type QueryAccessReviewGroupResourceAssignmentsArgs = {
+export type QueryAccessReviewGroupItemAssignmentsArgs = {
     after?: InputMaybe<Scalars["String"]["input"]>;
     before?: InputMaybe<Scalars["String"]["input"]>;
     filters?: InputMaybe<AccessReviewGroupItemAssignmentFilters>;
@@ -7682,6 +7680,9 @@ export type QueryCountFilteredGroupsArgs = {
 export type QueryCountFilteredResourcesArgs = {
     input: CountFilteredResourcesInput;
 };
+export type QueryDirectRoleAssignmentsArgs = {
+    input?: InputMaybe<DirectRoleAssignmentsInput>;
+};
 export type QueryEntitiesForRiskScoreRangeArgs = {
     maxRiskScore: Scalars["Int"]["input"];
     minRiskScore: Scalars["Int"]["input"];
@@ -7936,6 +7937,10 @@ export type ReadUiNotificationsResult = {
     __typename?: "ReadUINotificationsResult";
     success: Scalars["Boolean"]["output"];
 };
+export type ReasonMinWordCountInvalidError = Error & {
+    __typename?: "ReasonMinWordCountInvalidError";
+    message: Scalars["String"]["output"];
+};
 export type RecommendationsBulkSuggestion = Edge & {
     __typename?: "RecommendationsBulkSuggestion";
     cursor: Scalars["String"]["output"];
@@ -8004,6 +8009,7 @@ export declare enum RecommendationsMetricType {
     DailyIrregularUserAccess = "DAILY_IRREGULAR_USER_ACCESS",
     DailyOutsideUserAccess = "DAILY_OUTSIDE_USER_ACCESS",
     DailyPerpetualUserAccess = "DAILY_PERPETUAL_USER_ACCESS",
+    DailyUnusedNhiAccess = "DAILY_UNUSED_NHI_ACCESS",
     DailyUnusedUserAccess = "DAILY_UNUSED_USER_ACCESS",
     EntitiesWithCriticalRiskScore = "ENTITIES_WITH_CRITICAL_RISK_SCORE",
     EntitiesWithHighRiskScore = "ENTITIES_WITH_HIGH_RISK_SCORE",
@@ -8450,7 +8456,7 @@ export type RequestDefaults = {
 export type RequestDefaultsInput = {
     requestedGroups: Array<RequestConfigurationGroupInput>;
     requestedResources: Array<RequestConfigurationResourceInput>;
-    targetUserId: Scalars["UserId"]["input"];
+    targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
 export type RequestDurationTooLargeError = Error & {
     __typename?: "RequestDurationTooLargeError";
@@ -8464,6 +8470,12 @@ export type RequestFieldValueMissingError = Error & {
     requestTemplateID: Scalars["RequestTemplateId"]["output"];
     resourceIds?: Maybe<Array<Scalars["ResourceId"]["output"]>>;
 };
+export type RequestFilters = {
+    endDate?: InputMaybe<EndDateFilter>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+    showPendingOnly?: Scalars["Boolean"]["input"];
+    startDate?: InputMaybe<StartDateFilter>;
+};
 export type RequestInput = {
     id: Scalars["RequestId"]["input"];
 };
@@ -8504,6 +8516,10 @@ export type RequestNotFoundError = Error & {
     message: Scalars["String"]["output"];
 };
 export type RequestOutput = RequestNotFoundError | RequestResult;
+export type RequestReasonBelowMinLengthError = Error & {
+    __typename?: "RequestReasonBelowMinLengthError";
+    message: Scalars["String"]["output"];
+};
 export type RequestReasonMissingError = Error & {
     __typename?: "RequestReasonMissingError";
     groupIds?: Maybe<Array<Scalars["GroupId"]["output"]>>;
@@ -8634,7 +8650,7 @@ export type RequestedGroup = {
     accessLevel?: Maybe<GroupAccessLevel>;
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
-    propagationStatus?: Maybe<GroupPropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     targetUserAccess?: Maybe<UserGroupAccess>;
 };
 export type RequestedGroupInput = {
@@ -8644,7 +8660,7 @@ export type RequestedGroupInput = {
 export type RequestedResource = {
     __typename?: "RequestedResource";
     accessLevel: ResourceAccessLevel;
-    propagationStatus?: Maybe<ResourcePropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     resource?: Maybe<Resource>;
     resourceId: Scalars["ResourceId"]["output"];
     targetUserAccess?: Maybe<UserResourceAccess>;
@@ -8655,11 +8671,10 @@ export type RequestedResourceInput = {
 };
 export type RequestsInput = {
     cursor?: InputMaybe<Scalars["String"]["input"]>;
+    filters?: RequestFilters;
     maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
     requestType?: InputMaybe<RequestType>;
-    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
-    showPendingOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
-    sortBy?: InputMaybe<RequestsSortBy>;
+    sortBy?: RequestsSortBy;
 };
 export type RequestsOutput = RequestsResult;
 export type RequestsResult = {
@@ -8906,17 +8921,6 @@ export type ResourceNotFoundError = Error & {
     message: Scalars["String"]["output"];
 };
 export type ResourceOutput = ResourceNotFoundError | ResourceResult;
-export type ResourcePropagationStatus = {
-    __typename?: "ResourcePropagationStatus";
-    accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["output"];
-    errorMessage?: Maybe<Scalars["String"]["output"]>;
-    lastSynced: Scalars["Time"]["output"];
-    metadata?: Maybe<ResourceUserPropagationMetadata>;
-    resourceId: Scalars["ResourceId"]["output"];
-    statusCode: PropagationStatusCode;
-    taskType: PropagationTaskType;
-    userId: Scalars["UserId"]["output"];
-};
 export type ResourceProposal = {
     __typename?: "ResourceProposal";
     adminOwnerId: Scalars["OwnerId"]["output"];
@@ -8996,12 +9000,6 @@ export type ResourceTagsResult = {
     __typename?: "ResourceTagsResult";
     resourceTags: Array<ResourceTag>;
 };
-export type ResourceTicketPropagation = {
-    __typename?: "ResourceTicketPropagation";
-    resourceId: Scalars["ResourceId"]["output"];
-    ticket?: Maybe<SupportTicket>;
-    ticketId: Scalars["SupportTicketId"]["output"];
-};
 export declare enum ResourceType {
     AwsAccount = "AWS_ACCOUNT",
     AwsEc2Instance = "AWS_EC2_INSTANCE",
@@ -9039,6 +9037,7 @@ export declare enum ResourceType {
     GcpOrganization = "GCP_ORGANIZATION",
     GcpProject = "GCP_PROJECT",
     GcpServiceAccount = "GCP_SERVICE_ACCOUNT",
+    GitHubOrgRole = "GIT_HUB_ORG_ROLE",
     GitHubRepo = "GIT_HUB_REPO",
     GitLabProject = "GIT_LAB_PROJECT",
     GoogleWorkspaceRole = "GOOGLE_WORKSPACE_ROLE",
@@ -9106,7 +9105,7 @@ export type ResourceUser = {
     accessStats?: Maybe<AccessStats>;
     id: Scalars["UUID"]["output"];
     mostRecentSessionEnded?: Maybe<Scalars["Time"]["output"]>;
-    propagationStatus?: Maybe<ResourcePropagationStatus>;
+    propagationStatus?: Maybe<PropagationStatus>;
     provisionSource: ProvisionSource;
     resource?: Maybe<Resource>;
     resourceId: Scalars["ResourceId"]["output"];
@@ -9172,11 +9171,6 @@ export type ResourceUserFiltersInput = {
     resourceTypes?: InputMaybe<Array<ResourceType>>;
     userFullName?: InputMaybe<Scalars["String"]["input"]>;
 };
-export type ResourceUserPropagationMetadata = PropagationTicketMetadata;
-export type ResourceUserPushTaskResult = {
-    __typename?: "ResourceUserPushTaskResult";
-    propStatuses: Array<ResourcePropagationStatus>;
-};
 export declare enum ResourceUserSortByField {
     AccessLevelName = "ACCESS_LEVEL_NAME",
     ExpiresAt = "EXPIRES_AT",
@@ -9397,6 +9391,12 @@ export type RoleAssignmentRiskFactor = {
     reason?: Maybe<Scalars["String"]["output"]>;
     riskFactor: RecommendationsSubscoreType;
 };
+export type RoleAssignmentScope = {
+    accessScope: AccessScope;
+    entityScope: EntityScope;
+    filterRule?: InputMaybe<FilterRule>;
+    principalScope: PrincipalScope;
+};
 export type RoleAssignmentSearchScope = {
     entityScope?: InputMaybe<RoleAssignmentEntityScope>;
     entityTypeScope?: InputMaybe<RoleAssignmentEntityTypeScope>;
@@ -9440,7 +9440,8 @@ export declare enum RoleAssignmentsSortByField {
     FirstGrantedAt = "FIRST_GRANTED_AT",
     LastUsedAt = "LAST_USED_AT",
     PrincipalName = "PRINCIPAL_NAME",
-    Role = "ROLE"
+    Role = "ROLE",
+    VulnerabilityCount = "VULNERABILITY_COUNT"
 }
 export declare enum RolePermission {
     AssignReviewers = "ASSIGN_REVIEWERS",
@@ -9453,6 +9454,7 @@ export declare enum RolePermission {
     EditSyncSettings = "EDIT_SYNC_SETTINGS",
     EditTags = "EDIT_TAGS",
     Export = "EXPORT",
+    Import = "IMPORT",
     Read = "READ",
     ReadAssignments = "READ_ASSIGNMENTS",
     SendReminders = "SEND_REMINDERS",
@@ -9830,6 +9832,9 @@ export type StartAccessReviewStatsResult = {
     __typename?: "StartAccessReviewStatsResult";
     startAccessReviewStats?: Maybe<StartAccessReviewStats>;
 };
+export type StartDateFilter = {
+    date: Scalars["String"]["input"];
+};
 export type StartSyncInput = {
     accessReviewId?: InputMaybe<Scalars["AccessReviewId"]["input"]>;
     connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
@@ -10332,6 +10337,10 @@ export type TicketPropagationInput = {
     onRevocation: Scalars["Boolean"]["input"];
     ticketProvider?: InputMaybe<TicketProviderInput>;
 };
+export type TicketPropagationMetadata = {
+    __typename?: "TicketPropagationMetadata";
+    tickets: Array<PropagationTicket>;
+};
 export type TicketProvider = {
     __typename?: "TicketProvider";
     ticketProjectId: Scalars["TicketProjectId"]["output"];
@@ -10732,12 +10741,13 @@ export type UpdateOrganizationSettingsInput = {
     isRemoteReadOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
     maxGroupDurationInMinutes?: InputMaybe<NullableInt>;
     maxResourceDurationInMinutes?: InputMaybe<NullableInt>;
+    reasonMinWordCount?: InputMaybe<NullableInt>;
     roleCreationReviewerOwnerId?: InputMaybe<NullableOwnerId>;
     settings?: InputMaybe<Array<GeneralSettingType>>;
     syncErrorHandlerOwnerId?: InputMaybe<NullableOwnerId>;
     unusedAccessThresholdInDays?: InputMaybe<Scalars["Int"]["input"]>;
 };
-export type UpdateOrganizationSettingsOutput = AccessExpiringNotificationsInvalidError | AccessRequestEscalationPeriodInvalidError | AuthSessionExpirationInvalidError | CustomerSupportSettingsInvalid | OidcIssuerNotValidError | OrgMaxGroupDurationInvalidError | OrgMaxResourceDurationInvalidError | OrganizationSettingsNotFoundError | UpdateOrganizationSettingsResult;
+export type UpdateOrganizationSettingsOutput = AccessExpiringNotificationsInvalidError | AccessRequestEscalationPeriodInvalidError | AuthSessionExpirationInvalidError | CustomerSupportSettingsInvalid | OidcIssuerNotValidError | OrgMaxGroupDurationInvalidError | OrgMaxResourceDurationInvalidError | OrganizationSettingsNotFoundError | ReasonMinWordCountInvalidError | UpdateOrganizationSettingsResult;
 export type UpdateOrganizationSettingsResult = {
     __typename?: "UpdateOrganizationSettingsResult";
     settings: OrganizationSettings;
@@ -10803,16 +10813,7 @@ export type UpdateResourceUsersOutput = ResourceNotFoundError | UpdateResourceUs
 export type UpdateResourceUsersResult = {
     __typename?: "UpdateResourceUsersResult";
     resourceUsers?: Maybe<Array<ResourceUser>>;
-};
-export type UpdateResourceVisibilityGroupsInput = {
-    resourceId: Scalars["ResourceId"]["input"];
-    visibility: Visibility;
-    visibilityGroupsIds: Array<Scalars["GroupId"]["input"]>;
-};
-export type UpdateResourceVisibilityGroupsOutput = ConfigurationVisibilityGroupNotFoundError | GroupNotFoundError | InvalidUpdateResourceVisibilityGroupError | ResourceNotFoundError | UpdateResourceVisibilityGroupsResult;
-export type UpdateResourceVisibilityGroupsResult = {
-    __typename?: "UpdateResourceVisibilityGroupsResult";
-    resource: Resource;
+    taskId?: Maybe<Scalars["PushTaskId"]["output"]>;
 };
 export type UpdateResourcesInput = {
     commonMetadata?: InputMaybe<CommonMetadataInput>;
@@ -11387,9 +11388,6 @@ export declare enum RequestDecisionLevel {
     Admin = "ADMIN",
     Regular = "REGULAR"
 }
-export type StartDateFilter = {
-    date: Scalars["String"]["input"];
-};
 export type UpdateScopedRoleAssignmentsInput = {
     newDurationInMinutes?: InputMaybe<NullableInt>;
     scope?: InputMaybe<RoleAssignmentSearchScope>;
@@ -11440,6 +11438,102 @@ export type GetGroupQuery = {
         };
     };
 };
+export type GetRequestQueryVariables = Exact<{
+    id: Scalars["RequestId"]["input"];
+}>;
+export type GetRequestQuery = {
+    __typename?: "Query";
+    request: {
+        __typename: "RequestNotFoundError";
+        message: string;
+    } | {
+        __typename: "RequestResult";
+        request: {
+            __typename?: "Request";
+            id: string;
+            createdAt: string;
+            status: RequestStatus;
+            durationInMinutes?: number | null;
+            reason: string;
+            requester?: {
+                __typename?: "User";
+                displayName: string;
+            } | null;
+            targetUser?: {
+                __typename?: "User";
+                displayName: string;
+            } | null;
+            requestedResources: Array<{
+                __typename?: "RequestedResource";
+                resource?: {
+                    __typename?: "Resource";
+                    displayName: string;
+                    id: string;
+                } | null;
+                accessLevel: {
+                    __typename?: "ResourceAccessLevel";
+                    accessLevelName: string;
+                    accessLevelRemoteId: string;
+                };
+            }>;
+            requestedGroups: Array<{
+                __typename?: "RequestedGroup";
+                group?: {
+                    __typename?: "Group";
+                    id: string;
+                    name: string;
+                } | null;
+                accessLevel?: {
+                    __typename?: "GroupAccessLevel";
+                    accessLevelName: string;
+                    accessLevelRemoteId: string;
+                } | null;
+            }>;
+        };
+    };
+};
+export type GetRequestsQueryVariables = Exact<{
+    pageSize?: InputMaybe<Scalars["Int"]["input"]>;
+    showPendingOnly: Scalars["Boolean"]["input"];
+}>;
+export type GetRequestsQuery = {
+    __typename?: "Query";
+    requests: {
+        __typename: "RequestsResult";
+        requestType?: RequestType | null;
+        requests: Array<{
+            __typename?: "Request";
+            createdAt: string;
+            id: string;
+            reason: string;
+            status: RequestStatus;
+            requester?: {
+                __typename?: "User";
+                displayName: string;
+            } | null;
+            targetUser?: {
+                __typename?: "User";
+                displayName: string;
+            } | null;
+            requestedResources: Array<{
+                __typename?: "RequestedResource";
+                resource?: {
+                    __typename?: "Resource";
+                    displayName: string;
+                    id: string;
+                } | null;
+            }>;
+            requestedGroups: Array<{
+                __typename?: "RequestedGroup";
+                group?: {
+                    __typename?: "Group";
+                    name: string;
+                    id: string;
+                } | null;
+            }>;
+        }>;
+    };
+};
 export type CheckAuthSessionQueryQueryVariables = Exact<{
     [key: string]: never;
 }>;
@@ -11514,9 +11608,52 @@ export type PaginatedEntityDropdownQuery = {
         };
     } | {
         __typename: "AppNotFoundError";
+        message: string;
+    };
+};
+export type ResourceAccessLevelsQueryVariables = Exact<{
+    resourceId: Scalars["ResourceId"]["input"];
+}>;
+export type ResourceAccessLevelsQuery = {
+    __typename?: "Query";
+    accessLevels: {
+        __typename: "ResourceAccessLevelsResult";
+        accessLevels: Array<{
+            __typename: "ResourceAccessLevel";
+            accessLevelName: string;
+            accessLevelRemoteId: string;
+        }>;
+    } | {
+        __typename: "ResourceNotFoundError";
+        message: string;
+    };
+};
+export type RequestDefaultsQueryVariables = Exact<{
+    requestedResources: Array<RequestConfigurationResourceInput> | RequestConfigurationResourceInput;
+    requestedGroups: Array<RequestConfigurationGroupInput> | RequestConfigurationGroupInput;
+}>;
+export type RequestDefaultsQuery = {
+    __typename?: "Query";
+    requestDefaults: {
+        __typename?: "RequestDefaults";
+        recommendedDurationInMinutes?: number | null;
+        defaultDurationInMinutes: number;
+        maxDurationInMinutes?: number | null;
+        requireSupportTicket: boolean;
+        reasonOptional: boolean;
+        requesterIsAdmin: boolean;
+        durationOptions: Array<{
+            __typename?: "DurationOption";
+            durationInMinutes: number;
+            label: string;
+        }>;
     };
 };
 export declare const GetGroupDocument: DocumentNode<GetGroupQuery, GetGroupQueryVariables>;
+export declare const GetRequestDocument: DocumentNode<GetRequestQuery, GetRequestQueryVariables>;
+export declare const GetRequestsDocument: DocumentNode<GetRequestsQuery, GetRequestsQueryVariables>;
 export declare const CheckAuthSessionQueryDocument: DocumentNode<CheckAuthSessionQueryQuery, CheckAuthSessionQueryQueryVariables>;
 export declare const GetRequestableAppsQueryDocument: DocumentNode<GetRequestableAppsQueryQuery, GetRequestableAppsQueryQueryVariables>;
 export declare const PaginatedEntityDropdownDocument: DocumentNode<PaginatedEntityDropdownQuery, PaginatedEntityDropdownQueryVariables>;
+export declare const ResourceAccessLevelsDocument: DocumentNode<ResourceAccessLevelsQuery, ResourceAccessLevelsQueryVariables>;
+export declare const RequestDefaultsDocument: DocumentNode<RequestDefaultsQuery, RequestDefaultsQueryVariables>;