opal-security 3.1.1-beta.778ef29 → 3.1.1-beta.e5e99da

package/lib/graphql/graphql.d.ts

@@ -571,6 +571,7 @@ export type AccessLevelsFiltersInput = {
 };
 export declare enum AccessOption {
     All = "ALL",
+    Manageable = "MANAGEABLE",
     Mine = "MINE",
     Requestable = "REQUESTABLE",
     /** @deprecated no longer supported */
@@ -626,6 +627,7 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
     stoppedByUserId?: Maybe<Scalars["UserId"]["output"]>;
     stoppedDate?: Maybe<Scalars["Time"]["output"]>;
     timeZone: Scalars["String"]["output"];
+    updatedAt: Scalars["Time"]["output"];
     usersToReview: UserConnection;
 };
 export type AccessReviewUsersToReviewArgs = {
@@ -1477,7 +1479,11 @@ export type AccessReviewUsersResult = {
     accessReviewUsers: Array<AccessReviewUser>;
 };
 export type AccessReviewsInput = {
-    ongoingOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
+    /**
+     * status filter: by default, accessReviews will return ALL access reviews for
+     * the org, otherwise it will only return access reviews with the given status
+     */
+    status?: InputMaybe<AccessReviewStatus>;
 };
 export type AccessReviewsOutput = AccessReviewsResult;
 export type AccessReviewsResult = {
@@ -1499,6 +1505,11 @@ export declare enum AccessRuleStatus {
     Paused = "PAUSED",
     PausedByFailsafe = "PAUSED_BY_FAILSAFE"
 }
+export type AccessScope = {
+    createdAfter?: InputMaybe<Scalars["Time"]["input"]>;
+    expiresAfter?: InputMaybe<Scalars["Time"]["input"]>;
+    vulnerabilities?: InputMaybe<Array<RecommendationsSubscoreType>>;
+};
 export type AccessStats = {
     managerAccessCount?: Maybe<Scalars["Int"]["output"]>;
     teamAccessCount?: Maybe<Scalars["Int"]["output"]>;
@@ -3749,6 +3760,13 @@ export type DenyRequestResult = {
     __typename?: "DenyRequestResult";
     request: Request;
 };
+export type DirectRoleAssignmentsInput = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    scope: RoleAssignmentScope;
+    sortBy?: InputMaybe<RoleAssignmentsSortBy>;
+    source?: UiSource;
+};
 export type DismissGroupBindingSuggestionsInput = {
     ids: Array<Scalars["GroupBindingSuggestionId"]["input"]>;
 };
@@ -3833,6 +3851,15 @@ export type EntityIdTupleInput = {
     entityId: Scalars["UUID"]["input"];
     entityType: EntityType;
 };
+export type EntityScope = {
+    entityIDs?: InputMaybe<Array<Scalars["EntityId"]["input"]>>;
+    entitySubtypes?: InputMaybe<EntitySubtypes>;
+    entityTypes?: InputMaybe<Array<EntityType>>;
+};
+export type EntitySubtypes = {
+    groupTypes?: InputMaybe<Array<GroupType>>;
+    resourceTypes?: InputMaybe<Array<ResourceType>>;
+};
 export declare enum EntityType {
     AccessLevel = "ACCESS_LEVEL",
     AccessReview = "ACCESS_REVIEW",
@@ -4295,6 +4322,7 @@ export declare enum EventType {
     RoleAssignmentsDeleted = "ROLE_ASSIGNMENTS_DELETED",
     RoleAssignmentsUpdated = "ROLE_ASSIGNMENTS_UPDATED",
     SessionsCreatedForResources = "SESSIONS_CREATED_FOR_RESOURCES",
+    SoonToExpireNotification = "SOON_TO_EXPIRE_NOTIFICATION",
     ThirdPartyIntegrationCreated = "THIRD_PARTY_INTEGRATION_CREATED",
     ThirdPartyIntegrationDeleted = "THIRD_PARTY_INTEGRATION_DELETED",
     ToxicSetViolationsCreated = "TOXIC_SET_VIOLATIONS_CREATED",
@@ -4488,7 +4516,6 @@ export declare enum GeneralSettingType {
     AutoMergeUsersByEmail = "AUTO_MERGE_USERS_BY_EMAIL",
     DisableNonAdminLogins = "DISABLE_NON_ADMIN_LOGINS",
     GlobalRequesterRole = "GLOBAL_REQUESTER_ROLE",
-    LogRocketDisabled = "LOG_ROCKET_DISABLED",
     NestedGroups = "NESTED_GROUPS",
     RequireManagerCc = "REQUIRE_MANAGER_CC",
     RequireOpalMfaForLogins = "REQUIRE_OPAL_MFA_FOR_LOGINS",
@@ -5108,6 +5135,7 @@ export type GroupUser = {
     __typename?: "GroupUser";
     access?: Maybe<GroupUserAccess>;
     accessLevel?: Maybe<GroupAccessLevel>;
+    accessStats?: Maybe<AccessStats>;
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
@@ -5923,6 +5951,7 @@ export type Mutation = {
     createEventFilter: CreateEventFilterOutput;
     createEventStream: CreateEventStreamOutput;
     createFirstPartyToken: CreateFirstPartyTokenOutput;
+    /** @deprecated Use createItems instead. */
     createGroup: CreateGroupOutput;
     createGroupBindings: CreateGroupBindingsOutput;
     createIdpConnection: CreateIdpConnectionOutput;
@@ -6069,7 +6098,6 @@ export type Mutation = {
     updateResourceCustomAccessLevel: UpdateResourceCustomAccessLevelOutput;
     updateResourceUserReviewers: UpdateResourceUserReviewersOutput;
     updateResourceUsers: UpdateResourceUsersOutput;
-    updateResourceVisibilityGroups: UpdateResourceVisibilityGroupsOutput;
     /** @deprecated Use bulkUpdateItems instead. */
     updateResources: UpdateResourcesOutput;
     updateRoleAssignments: UpdateRoleAssignmentsOutput;
@@ -6566,9 +6594,6 @@ export type MutationUpdateResourceUserReviewersArgs = {
 export type MutationUpdateResourceUsersArgs = {
     input: UpdateResourceUsersInput;
 };
-export type MutationUpdateResourceVisibilityGroupsArgs = {
-    input: UpdateResourceVisibilityGroupsInput;
-};
 export type MutationUpdateResourcesArgs = {
     input: UpdateResourcesInput;
 };
@@ -7194,6 +7219,10 @@ export type PrincipalEdge = Edge & {
     cursor: Scalars["String"]["output"];
     node: Principal;
 };
+export type PrincipalScope = {
+    principalIDs?: InputMaybe<Array<Scalars["PrincipalId"]["input"]>>;
+    principalTypes?: InputMaybe<Array<EntityType>>;
+};
 export type PrincipalSearchOptions = {
     excludeUsersWithoutPosition: Scalars["Boolean"]["input"];
 };
@@ -7213,9 +7242,11 @@ export type PrincipalsResult = {
 };
 export type PropagationStatus = {
     __typename?: "PropagationStatus";
+    accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["output"];
+    entityId: Scalars["EntityId"]["output"];
     errorMessage?: Maybe<Scalars["String"]["output"]>;
     lastSynced: Scalars["Time"]["output"];
-    roleAssignmentId: Scalars["RoleAssignmentId"]["output"];
+    principalId: Scalars["EntityId"]["output"];
     statusCode: PropagationStatusCode;
     taskType: PropagationTaskType;
 };
@@ -7410,6 +7441,7 @@ export type Query = {
     countFilteredGroups: CountFilteredGroupsOutput;
     countFilteredResources: CountFilteredResourcesOutput;
     currentUserStats: CurrentUserStatsOutput;
+    directRoleAssignments: RoleAssignmentConnection;
     entitiesForRiskScoreRange: EntitiesForRiskScoreRangeResult;
     entityForRemediation: RecommendationsEntity;
     event: EventOutput;
@@ -7682,6 +7714,9 @@ export type QueryCountFilteredGroupsArgs = {
 export type QueryCountFilteredResourcesArgs = {
     input: CountFilteredResourcesInput;
 };
+export type QueryDirectRoleAssignmentsArgs = {
+    input?: InputMaybe<DirectRoleAssignmentsInput>;
+};
 export type QueryEntitiesForRiskScoreRangeArgs = {
     maxRiskScore: Scalars["Int"]["input"];
     minRiskScore: Scalars["Int"]["input"];
@@ -8450,7 +8485,7 @@ export type RequestDefaults = {
 export type RequestDefaultsInput = {
     requestedGroups: Array<RequestConfigurationGroupInput>;
     requestedResources: Array<RequestConfigurationResourceInput>;
-    targetUserId: Scalars["UserId"]["input"];
+    targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
 export type RequestDurationTooLargeError = Error & {
     __typename?: "RequestDurationTooLargeError";
@@ -8464,6 +8499,12 @@ export type RequestFieldValueMissingError = Error & {
     requestTemplateID: Scalars["RequestTemplateId"]["output"];
     resourceIds?: Maybe<Array<Scalars["ResourceId"]["output"]>>;
 };
+export type RequestFilters = {
+    endDate?: InputMaybe<EndDateFilter>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+    showPendingOnly?: Scalars["Boolean"]["input"];
+    startDate?: InputMaybe<StartDateFilter>;
+};
 export type RequestInput = {
     id: Scalars["RequestId"]["input"];
 };
@@ -8655,11 +8696,10 @@ export type RequestedResourceInput = {
 };
 export type RequestsInput = {
     cursor?: InputMaybe<Scalars["String"]["input"]>;
+    filters?: RequestFilters;
     maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
     requestType?: InputMaybe<RequestType>;
-    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
-    showPendingOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
-    sortBy?: InputMaybe<RequestsSortBy>;
+    sortBy?: RequestsSortBy;
 };
 export type RequestsOutput = RequestsResult;
 export type RequestsResult = {
@@ -9397,6 +9437,12 @@ export type RoleAssignmentRiskFactor = {
     reason?: Maybe<Scalars["String"]["output"]>;
     riskFactor: RecommendationsSubscoreType;
 };
+export type RoleAssignmentScope = {
+    accessScope: AccessScope;
+    entityScope: EntityScope;
+    principalScope: PrincipalScope;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+};
 export type RoleAssignmentSearchScope = {
     entityScope?: InputMaybe<RoleAssignmentEntityScope>;
     entityTypeScope?: InputMaybe<RoleAssignmentEntityTypeScope>;
@@ -9440,7 +9486,8 @@ export declare enum RoleAssignmentsSortByField {
     FirstGrantedAt = "FIRST_GRANTED_AT",
     LastUsedAt = "LAST_USED_AT",
     PrincipalName = "PRINCIPAL_NAME",
-    Role = "ROLE"
+    Role = "ROLE",
+    VulnerabilityCount = "VULNERABILITY_COUNT"
 }
 export declare enum RolePermission {
     AssignReviewers = "ASSIGN_REVIEWERS",
@@ -9453,6 +9500,7 @@ export declare enum RolePermission {
     EditSyncSettings = "EDIT_SYNC_SETTINGS",
     EditTags = "EDIT_TAGS",
     Export = "EXPORT",
+    Import = "IMPORT",
     Read = "READ",
     ReadAssignments = "READ_ASSIGNMENTS",
     SendReminders = "SEND_REMINDERS",
@@ -9830,6 +9878,9 @@ export type StartAccessReviewStatsResult = {
     __typename?: "StartAccessReviewStatsResult";
     startAccessReviewStats?: Maybe<StartAccessReviewStats>;
 };
+export type StartDateFilter = {
+    date: Scalars["String"]["input"];
+};
 export type StartSyncInput = {
     accessReviewId?: InputMaybe<Scalars["AccessReviewId"]["input"]>;
     connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
@@ -10803,16 +10854,7 @@ export type UpdateResourceUsersOutput = ResourceNotFoundError | UpdateResourceUs
 export type UpdateResourceUsersResult = {
     __typename?: "UpdateResourceUsersResult";
     resourceUsers?: Maybe<Array<ResourceUser>>;
-};
-export type UpdateResourceVisibilityGroupsInput = {
-    resourceId: Scalars["ResourceId"]["input"];
-    visibility: Visibility;
-    visibilityGroupsIds: Array<Scalars["GroupId"]["input"]>;
-};
-export type UpdateResourceVisibilityGroupsOutput = ConfigurationVisibilityGroupNotFoundError | GroupNotFoundError | InvalidUpdateResourceVisibilityGroupError | ResourceNotFoundError | UpdateResourceVisibilityGroupsResult;
-export type UpdateResourceVisibilityGroupsResult = {
-    __typename?: "UpdateResourceVisibilityGroupsResult";
-    resource: Resource;
+    taskId?: Maybe<Scalars["PushTaskId"]["output"]>;
 };
 export type UpdateResourcesInput = {
     commonMetadata?: InputMaybe<CommonMetadataInput>;
@@ -11387,9 +11429,6 @@ export declare enum RequestDecisionLevel {
     Admin = "ADMIN",
     Regular = "REGULAR"
 }
-export type StartDateFilter = {
-    date: Scalars["String"]["input"];
-};
 export type UpdateScopedRoleAssignmentsInput = {
     newDurationInMinutes?: InputMaybe<NullableInt>;
     scope?: InputMaybe<RoleAssignmentSearchScope>;
@@ -11440,6 +11479,51 @@ export type GetGroupQuery = {
         };
     };
 };
+export type GetRequestQueryVariables = Exact<{
+    id: Scalars["RequestId"]["input"];
+}>;
+export type GetRequestQuery = {
+    __typename?: "Query";
+    request: {
+        __typename: "RequestNotFoundError";
+        message: string;
+    } | {
+        __typename: "RequestResult";
+        request: {
+            __typename?: "Request";
+            id: string;
+            status: RequestStatus;
+            durationInMinutes?: number | null;
+            reason: string;
+            requestedResources: Array<{
+                __typename?: "RequestedResource";
+                resource?: {
+                    __typename?: "Resource";
+                    displayName: string;
+                    id: string;
+                } | null;
+                accessLevel: {
+                    __typename?: "ResourceAccessLevel";
+                    accessLevelName: string;
+                    accessLevelRemoteId: string;
+                };
+            }>;
+            requestedGroups: Array<{
+                __typename?: "RequestedGroup";
+                group?: {
+                    __typename?: "Group";
+                    id: string;
+                    name: string;
+                } | null;
+                accessLevel?: {
+                    __typename?: "GroupAccessLevel";
+                    accessLevelName: string;
+                    accessLevelRemoteId: string;
+                } | null;
+            }>;
+        };
+    };
+};
 export type CheckAuthSessionQueryQueryVariables = Exact<{
     [key: string]: never;
 }>;
@@ -11534,8 +11618,31 @@ export type ResourceAccessLevelsQuery = {
         message: string;
     };
 };
+export type RequestDefaultsQueryVariables = Exact<{
+    requestedResources: Array<RequestConfigurationResourceInput> | RequestConfigurationResourceInput;
+    requestedGroups: Array<RequestConfigurationGroupInput> | RequestConfigurationGroupInput;
+}>;
+export type RequestDefaultsQuery = {
+    __typename?: "Query";
+    requestDefaults: {
+        __typename?: "RequestDefaults";
+        recommendedDurationInMinutes?: number | null;
+        defaultDurationInMinutes: number;
+        maxDurationInMinutes?: number | null;
+        requireSupportTicket: boolean;
+        reasonOptional: boolean;
+        requesterIsAdmin: boolean;
+        durationOptions: Array<{
+            __typename?: "DurationOption";
+            durationInMinutes: number;
+            label: string;
+        }>;
+    };
+};
 export declare const GetGroupDocument: DocumentNode<GetGroupQuery, GetGroupQueryVariables>;
+export declare const GetRequestDocument: DocumentNode<GetRequestQuery, GetRequestQueryVariables>;
 export declare const CheckAuthSessionQueryDocument: DocumentNode<CheckAuthSessionQueryQuery, CheckAuthSessionQueryQueryVariables>;
 export declare const GetRequestableAppsQueryDocument: DocumentNode<GetRequestableAppsQueryQuery, GetRequestableAppsQueryQueryVariables>;
 export declare const PaginatedEntityDropdownDocument: DocumentNode<PaginatedEntityDropdownQuery, PaginatedEntityDropdownQueryVariables>;
 export declare const ResourceAccessLevelsDocument: DocumentNode<ResourceAccessLevelsQuery, ResourceAccessLevelsQueryVariables>;
+export declare const RequestDefaultsDocument: DocumentNode<RequestDefaultsQuery, RequestDefaultsQueryVariables>;