opal-security 3.2.2 → 3.2.3

package/lib/graphql/graphql.d.ts

@@ -162,6 +162,10 @@ export type Scalars = {
         input: string;
         output: string;
     };
+    ExternalEventId: {
+        input: any;
+        output: any;
+    };
     FirstPartyTokenId: {
         input: string;
         output: string;
@@ -246,6 +250,10 @@ export type Scalars = {
         input: string;
         output: string;
     };
+    RemoteEventId: {
+        input: any;
+        output: any;
+    };
     RemoteGroupId: {
         input: string;
         output: string;
@@ -266,6 +274,10 @@ export type Scalars = {
         input: string;
         output: string;
     };
+    RequestReviewerDelegationId: {
+        input: any;
+        output: any;
+    };
     RequestTemplateCustomFieldId: {
         input: string;
         output: string;
@@ -502,11 +514,12 @@ export type Access = {
      * This access might be direct or indirect.
      */
     latestExpiringAccessPoint: AccessPoint;
-    principalId: Scalars["PrincipalId"]["output"];
+    principalId: Scalars["EntityId"]["output"];
     principalType: EntityType;
 };
 export declare enum AccessChangeType {
     ConvertedToJit = "CONVERTED_TO_JIT",
+    Extended = "EXTENDED",
     Other = "OTHER",
     Revoked = "REVOKED"
 }
@@ -514,6 +527,7 @@ export type AccessEntity = {
     accessStats?: Maybe<AccessStats>;
     associatedItems: AssociatedItemConnection;
     id: Scalars["UUID"]["output"];
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
     /** totalGroupAccessCount: total number of groups with access to the entity (direct or indirect) */
     totalGroupAccessCount: Scalars["Int"]["output"];
     /** totalNHIAccessCount: total number of non-human identities with access to the entity (direct or indirect) */
@@ -587,7 +601,7 @@ export type AccessPoint = {
     entityType: EntityType;
     eventId: Scalars["EventId"]["output"];
     expiration?: Maybe<Scalars["Time"]["output"]>;
-    principalId: Scalars["PrincipalId"]["output"];
+    principalId: Scalars["EntityId"]["output"];
     principalName: Scalars["String"]["output"];
     principalType: EntityType;
     supportTicket?: Maybe<SupportTicket>;
@@ -612,6 +626,7 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
     itemsToReviewStats?: Maybe<OngoingAccessReviewTabStats>;
     lastReminderAt?: Maybe<Scalars["Time"]["output"]>;
     name: Scalars["String"]["output"];
+    permissionSources: PermissionSourceConnection;
     reminderIncludeManager: Scalars["Boolean"]["output"];
     reminderSchedule: Array<Scalars["Int"]["output"]>;
     reminderTimeOfDay: Scalars["Time"]["output"];
@@ -630,10 +645,17 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
     updatedAt: Scalars["Time"]["output"];
     usersToReview: UserConnection;
 };
+export type AccessReviewPermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type AccessReviewUsersToReviewArgs = {
     after?: InputMaybe<Scalars["String"]["input"]>;
     filters?: AccessReviewUserFilters;
     first?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy: UsersSortBy;
 };
 export declare enum AccessReviewAction {
     Accept = "ACCEPT",
@@ -692,7 +714,6 @@ export type AccessReviewConnection = {
     connectionUsers?: Maybe<Array<AccessReviewConnectionUser>>;
     createdAt: Scalars["Time"]["output"];
     currentUserReviewerStatus?: Maybe<AccessReviewConnectionReviewerStatus>;
-    eventId?: Maybe<Scalars["EventId"]["output"]>;
     id: Scalars["AccessReviewConnectionId"]["output"];
     numConnectionUsers: Scalars["Int"]["output"];
     reviewerUsers: Array<ReviewerUser>;
@@ -791,7 +812,6 @@ export type AccessReviewGroup = {
     canEditReviewers: Scalars["Boolean"]["output"];
     createdAt: Scalars["Time"]["output"];
     currentUserReviewerStatus?: Maybe<AccessReviewGroupReviewerStatus>;
-    eventId?: Maybe<Scalars["EventId"]["output"]>;
     group?: Maybe<Group>;
     groupGroups?: Maybe<Array<AccessReviewGroupGroup>>;
     groupId: Scalars["GroupId"]["output"];
@@ -817,7 +837,6 @@ export type AccessReviewGroupGroup = {
     containingGroup: Group;
     containingGroupId: Scalars["GroupId"]["output"];
     createdAt: Scalars["Time"]["output"];
-    eventId: Scalars["EventId"]["output"];
     expiration?: Maybe<Scalars["Time"]["output"]>;
     groupGroupAccess?: Maybe<GroupResourceAccess>;
     groupResourceAccess?: Maybe<GroupResourceAccess>;
@@ -843,7 +862,7 @@ export type AccessReviewGroupItemAssignment = Node & {
     groupName: Scalars["String"]["output"];
     groupType: GroupType;
     id: Scalars["UUID"]["output"];
-    item: Node;
+    item: AccessEntity;
     itemId: Scalars["UUID"]["output"];
     itemKind: AccessReviewGroupItemKind;
     itemName: Scalars["String"]["output"];
@@ -856,6 +875,7 @@ export type AccessReviewGroupItemAssignmentFilters = {
     accessReviewId: Scalars["AccessReviewId"]["input"];
     adminOwnerId?: InputMaybe<Scalars["OwnerId"]["input"]>;
     assignedStatus?: InputMaybe<AccessReviewAssignedStatus>;
+    canAssignReviewers?: InputMaybe<Scalars["Boolean"]["input"]>;
     connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
     groupId?: InputMaybe<Scalars["GroupId"]["input"]>;
     itemType?: InputMaybe<Scalars["String"]["input"]>;
@@ -889,7 +909,7 @@ export type AccessReviewGroupOutput = AccessReviewGroupNotFoundError | AccessRev
 export type AccessReviewGroupProposedChange = {
     __typename?: "AccessReviewGroupProposedChange";
     currentReviewer: ReviewerUser;
-    group: GroupSmall;
+    group: Group;
     proposedReviewer: ReviewerUser;
     user: UserSmall;
 };
@@ -902,7 +922,6 @@ export type AccessReviewGroupResource = {
     /** This is nullable because this access review may not always include this resource. */
     accessReviewResourceId?: Maybe<Scalars["AccessReviewResourceId"]["output"]>;
     createdAt: Scalars["Time"]["output"];
-    eventId: Scalars["EventId"]["output"];
     expiration?: Maybe<Scalars["Time"]["output"]>;
     groupId: Scalars["GroupId"]["output"];
     groupResourceAccess?: Maybe<GroupResourceAccess>;
@@ -912,6 +931,7 @@ export type AccessReviewGroupResource = {
     resource?: Maybe<Resource>;
     resourceId: Scalars["ResourceId"]["output"];
     reviewerUsers?: Maybe<Array<ReviewerUser>>;
+    roleAssignment?: Maybe<RoleAssignment>;
     statusAndOutcome: AccessReviewItemStatusAndOutcome;
     updatedAt: Scalars["Time"]["output"];
 };
@@ -940,7 +960,6 @@ export type AccessReviewGroupUser = {
     accessReviewGroupId: Scalars["AccessReviewGroupId"]["output"];
     createdAt: Scalars["Time"]["output"];
     errorMessage?: Maybe<Scalars["String"]["output"]>;
-    eventId: Scalars["EventId"]["output"];
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     groupUser?: Maybe<GroupUser>;
@@ -949,6 +968,7 @@ export type AccessReviewGroupUser = {
     lastSynced?: Maybe<Scalars["Time"]["output"]>;
     requestId?: Maybe<Scalars["RequestId"]["output"]>;
     reviewerUsers?: Maybe<Array<ReviewerUser>>;
+    roleAssignment?: Maybe<RoleAssignment>;
     statusAndOutcome: AccessReviewItemStatusAndOutcome;
     statusCode?: Maybe<PropagationStatusCode>;
     taskType?: Maybe<PropagationTaskType>;
@@ -963,7 +983,7 @@ export type AccessReviewGroupUserWarning = {
     accessReviewGroupUserId: Scalars["AccessReviewGroupUserId"]["output"];
     accessReviewGroupUserReviewerId: Scalars["AccessReviewGroupUserReviewerId"]["output"];
     accessReviewUserWarningType: AccessReviewUserWarningType;
-    group?: Maybe<GroupSmall>;
+    group?: Maybe<Group>;
     reviewer?: Maybe<User>;
     reviewerId?: Maybe<Scalars["UserId"]["output"]>;
     user?: Maybe<User>;
@@ -996,13 +1016,22 @@ export type AccessReviewItemConnection = PageConnection & {
     __typename?: "AccessReviewItemConnection";
     edges: Array<AccessReviewItemEdge>;
     pageInfo: PageInfo;
+    reviewedGroupCount: Scalars["Int"]["output"];
+    reviewedResourceCount: Scalars["Int"]["output"];
     totalCount: Scalars["Int"]["output"];
+    totalGroupCount: Scalars["Int"]["output"];
+    totalResourceCount: Scalars["Int"]["output"];
 };
 export type AccessReviewItemEdge = Edge & {
     __typename?: "AccessReviewItemEdge";
+    accessLevel: IAccessLevel;
     cursor: Scalars["String"]["output"];
     edgeId: AccessReviewEdgeId;
     node: AccessibleItem;
+    roleAssignment?: Maybe<RoleAssignment>;
+    updatedAccessLevel?: Maybe<IAccessLevel>;
+    updatedResource?: Maybe<Resource>;
+    updatedResourceId?: Maybe<Scalars["ResourceId"]["output"]>;
     userNote?: Maybe<Scalars["String"]["output"]>;
     userStatus: ReviewerUserStatus;
 };
@@ -1058,6 +1087,14 @@ export type AccessReviewNotStoppedError = Error & {
     message: Scalars["String"]["output"];
 };
 export type AccessReviewOutput = AccessReviewNotFoundError | AccessReviewResult;
+export type AccessReviewPreviewSortBy = {
+    direction?: InputMaybe<SortDirection>;
+    field?: InputMaybe<AccessReviewPreviewSortByField>;
+};
+export declare enum AccessReviewPreviewSortByField {
+    EntityName = "ENTITY_NAME",
+    ReviewCount = "REVIEW_COUNT"
+}
 export type AccessReviewProposedChange = AccessReviewGroupProposedChange | AccessReviewResourceProposedChange;
 export type AccessReviewProposedChangeInput = {
     accessReviewId: Scalars["AccessReviewId"]["input"];
@@ -1076,7 +1113,6 @@ export type AccessReviewResource = {
     canEditReviewers: Scalars["Boolean"]["output"];
     createdAt: Scalars["Time"]["output"];
     currentUserReviewerStatus?: Maybe<AccessReviewResourceReviewerStatus>;
-    eventId?: Maybe<Scalars["EventId"]["output"]>;
     id: Scalars["AccessReviewResourceId"]["output"];
     isResourceDeleted: Scalars["Boolean"]["output"];
     numResourceUsers: Scalars["Int"]["output"];
@@ -1101,7 +1137,7 @@ export type AccessReviewResourcePrincipalAssignment = Node & {
     __typename?: "AccessReviewResourcePrincipalAssignment";
     accessLevelName?: Maybe<Scalars["AccessLevelName"]["output"]>;
     accessLevelRemoteId?: Maybe<Scalars["AccessLevelRemoteId"]["output"]>;
-    entity: Node;
+    entity: AccessEntity;
     entityId: Scalars["EntityId"]["output"];
     entityItemType: Scalars["String"]["output"];
     entityName: Scalars["String"]["output"];
@@ -1124,6 +1160,7 @@ export type AccessReviewResourcePrincipalAssignmentsFilters = {
     accessReviewId: Scalars["AccessReviewId"]["input"];
     adminOwnerId?: InputMaybe<Scalars["OwnerId"]["input"]>;
     assignedStatus?: InputMaybe<AccessReviewAssignedStatus>;
+    canAssignReviewers?: InputMaybe<Scalars["Boolean"]["input"]>;
     outcome?: InputMaybe<AccessReviewItemOutcome>;
     resourcePrincipalID?: InputMaybe<Scalars["ResourceId"]["input"]>;
     reviewerId?: InputMaybe<Scalars["UserId"]["input"]>;
@@ -1152,7 +1189,6 @@ export type AccessReviewResourceResource = {
     accessReviewResourceEntityId?: Maybe<Scalars["AccessReviewResourceId"]["output"]>;
     accessReviewResourcePrincipalId?: Maybe<Scalars["AccessReviewResourceId"]["output"]>;
     createdAt: Scalars["Time"]["output"];
-    eventId?: Maybe<Scalars["EventId"]["output"]>;
     id: Scalars["AccessReviewRoleAssignmentId"]["output"];
     isResourceEntityDeleted: Scalars["Boolean"]["output"];
     isResourcePrincipalDeleted: Scalars["Boolean"]["output"];
@@ -1185,7 +1221,6 @@ export type AccessReviewResourceUser = {
     accessReviewResourceId: Scalars["AccessReviewResourceId"]["output"];
     createdAt: Scalars["Time"]["output"];
     errorMessage?: Maybe<Scalars["String"]["output"]>;
-    eventId: Scalars["EventId"]["output"];
     id: Scalars["AccessReviewResourceUserId"]["output"];
     isResourceDeleted: Scalars["Boolean"]["output"];
     lastSynced?: Maybe<Scalars["Time"]["output"]>;
@@ -1194,6 +1229,7 @@ export type AccessReviewResourceUser = {
     resourceId: Scalars["ResourceId"]["output"];
     resourceUser?: Maybe<ResourceUser>;
     reviewerUsers?: Maybe<Array<ReviewerUser>>;
+    roleAssignment?: Maybe<RoleAssignment>;
     statusAndOutcome: AccessReviewItemStatusAndOutcome;
     statusCode?: Maybe<PropagationStatusCode>;
     supportTicket?: Maybe<SupportTicket>;
@@ -1345,6 +1381,7 @@ export type AccessReviewTemplate = Node & RolePermissionTargetEntity & {
     monthSchedule: Array<Scalars["Int"]["output"]>;
     name: Scalars["String"]["output"];
     nextScheduledRun: Scalars["Time"]["output"];
+    permissionSources: PermissionSourceConnection;
     reminderIncludeManager: Scalars["Boolean"]["output"];
     reminderSchedule: Array<Scalars["Int"]["output"]>;
     reminderTimeOfDay: Scalars["Time"]["output"];
@@ -1358,6 +1395,12 @@ export type AccessReviewTemplate = Node & RolePermissionTargetEntity & {
     timeZone: Scalars["String"]["output"];
     updatedAt: Scalars["Time"]["output"];
 };
+export type AccessReviewTemplatePermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type AccessReviewTemplateInput = {
     accessReviewTemplateId: Scalars["AccessReviewTemplateId"]["input"];
 };
@@ -1404,7 +1447,7 @@ export type AccessReviewUserAssignment = Node & {
     accessReviewObjectId: Scalars["UUID"]["output"];
     connectionId?: Maybe<Scalars["ConnectionId"]["output"]>;
     connectionType?: Maybe<ConnectionType>;
-    entity: Node;
+    entity: AccessEntity;
     entityName: Scalars["String"]["output"];
     groupId?: Maybe<Scalars["GroupId"]["output"]>;
     groupType?: Maybe<GroupType>;
@@ -1429,6 +1472,7 @@ export type AccessReviewUserAssignmentFilters = {
     accessReviewId: Scalars["AccessReviewId"]["input"];
     adminOwnerId?: InputMaybe<Scalars["OwnerId"]["input"]>;
     assignedStatus?: InputMaybe<AccessReviewAssignedStatus>;
+    canAssignReviewers?: InputMaybe<Scalars["Boolean"]["input"]>;
     connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
     outcome?: InputMaybe<AccessReviewItemOutcome>;
     reviewerId?: InputMaybe<Scalars["UserId"]["input"]>;
@@ -1447,6 +1491,7 @@ export type AccessReviewUserAssignmentsResult = PageConnection & {
 export type AccessReviewUserFilters = {
     for?: InputMaybe<Scalars["UserId"]["input"]>;
     status?: InputMaybe<Array<ReviewerUserStatus>>;
+    userFullName?: InputMaybe<Scalars["String"]["input"]>;
 };
 export type AccessReviewUserInput = {
     accessReviewId: Scalars["AccessReviewId"]["input"];
@@ -1479,6 +1524,7 @@ export type AccessReviewUsersResult = {
     accessReviewUsers: Array<AccessReviewUser>;
 };
 export type AccessReviewsInput = {
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
     /**
      * status filter: by default, accessReviews will return ALL access reviews for
      * the org, otherwise it will only return access reviews with the given status
@@ -1490,6 +1536,9 @@ export type AccessReviewsResult = {
     __typename?: "AccessReviewsResult";
     accessReviews: Array<AccessReview>;
 };
+export type AccessReviewsTemplateFilters = {
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+};
 export type AccessRuleCondition = {
     __typename?: "AccessRuleCondition";
     ruleClauses: RuleClauses;
@@ -1508,6 +1557,7 @@ export declare enum AccessRuleStatus {
 export type AccessScope = {
     createdAfter?: InputMaybe<Scalars["Time"]["input"]>;
     expiresAfter?: InputMaybe<Scalars["Time"]["input"]>;
+    showHiddenGrants?: InputMaybe<Scalars["Boolean"]["input"]>;
     vulnerabilities?: InputMaybe<Array<RecommendationsSubscoreType>>;
 };
 export type AccessStats = {
@@ -1527,6 +1577,7 @@ export type AccessTypeData = {
     type: AccessType;
 };
 export type AccessibleItem = {
+    accessStats?: Maybe<AccessStats>;
     createdAt: Scalars["Time"]["output"];
     id: Scalars["UUID"]["output"];
     isManaged: Scalars["Boolean"]["output"];
@@ -1643,7 +1694,7 @@ export type AddGroupTagsResult = {
     entries: Array<AddGroupTagsEntryOutput>;
 };
 export type AddGroupUserInput = {
-    accessLevel?: InputMaybe<GroupAccessLevelInput>;
+    accessLevel: GroupAccessLevelInput;
     durationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
     groupId: Scalars["GroupId"]["input"];
     userId: Scalars["UserId"]["input"];
@@ -1704,11 +1755,11 @@ export type AddResourceUsersResult = {
     taskId: Scalars["PushTaskId"]["output"];
 };
 export type AddRoleAssignmentInput = {
-    accessLevel?: InputMaybe<AccessLevelInput>;
+    accessLevel: AccessLevelInput;
     durationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
     entityID: Scalars["EntityId"]["input"];
     entityType: EntityType;
-    principalID: Scalars["PrincipalId"]["input"];
+    principalID: Scalars["EntityId"]["input"];
     principalType: EntityType;
 };
 export type AddRoleAssignmentsEntryOutput = AddRoleAssignmentsEntryResult;
@@ -1755,16 +1806,6 @@ export declare enum AldwinRole {
     GlobalRequester = "GLOBAL_REQUESTER",
     ReadOnlyAdmin = "READ_ONLY_ADMIN"
 }
-export type AllPrincipalsConnection = PageConnection & {
-    __typename?: "AllPrincipalsConnection";
-    pageInfo: PageInfo;
-    principals: Array<PrincipalEdge>;
-    totalCount: Scalars["Int"]["output"];
-};
-export type AllPrincipalsFilters = {
-    entityTypes: Array<EntityType>;
-    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
-};
 export type AllowedToCreateOrganizationsOutput = AllowedToCreateOrganizationsResult;
 export type AllowedToCreateOrganizationsResult = {
     __typename?: "AllowedToCreateOrganizationsResult";
@@ -1828,8 +1869,10 @@ export declare enum AppCategory {
     Custom = "CUSTOM",
     Databases = "DATABASES",
     DeveloperTools = "DEVELOPER_TOOLS",
+    HrSystems = "HR_SYSTEMS",
     Identity = "IDENTITY",
-    OktaApp = "OKTA_APP"
+    OktaApp = "OKTA_APP",
+    SaasApps = "SAAS_APPS"
 }
 export type AppConnection = PageConnection & {
     __typename?: "AppConnection";
@@ -1850,6 +1893,7 @@ export type AppEntity = {
     healthStatus?: Maybe<HealthStatus>;
     id: Scalars["UUID"]["output"];
     imageUrl?: Maybe<Scalars["String"]["output"]>;
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
     totalGroupAccessCount: Scalars["Int"]["output"];
     totalNHIAccessCount: Scalars["Int"]["output"];
     totalResourceCount: Scalars["Int"]["output"];
@@ -1986,6 +2030,7 @@ export type AssignmentsSortBy = {
 export declare enum AssignmentsSortByField {
     EntityName = "ENTITY_NAME",
     PrincipalName = "PRINCIPAL_NAME",
+    ReviewerName = "REVIEWER_NAME",
     Type = "TYPE"
 }
 export type AssociatedItemConnection = PageConnection & {
@@ -2091,15 +2136,18 @@ export declare enum AuthType {
     Aws = "AWS",
     AwsSso = "AWS_SSO",
     AzureAd = "AZURE_AD",
+    Coupa = "COUPA",
     Custom = "CUSTOM",
     CustomConnector = "CUSTOM_CONNECTOR",
     Databricks = "DATABRICKS",
+    DatastaxAstra = "DATASTAX_ASTRA",
     Duo = "DUO",
     Gcp = "GCP",
     GitHub = "GIT_HUB",
     GitLab = "GIT_LAB",
     GoogleGroups = "GOOGLE_GROUPS",
     GoogleWorkspace = "GOOGLE_WORKSPACE",
+    Ilevel = "ILEVEL",
     Ldap = "LDAP",
     Mongo = "MONGO",
     MongoAtlas = "MONGO_ATLAS",
@@ -2121,8 +2169,6 @@ export type AuthUser = {
     isReadOnlyAdmin: Scalars["Boolean"]["output"];
     opalAdminExpirationTime?: Maybe<Scalars["Time"]["output"]>;
     organization: Organization;
-    /** @deprecated use scopedRolePermissions */
-    organizationAuthorizedActions?: Maybe<Array<Scalars["AuthorizedAction"]["output"]>>;
     scopedRolePermissions: Array<ScopedRolePermission>;
     user: User;
 };
@@ -2273,7 +2319,7 @@ export type BulkImportRemoteItemsResult = {
     __typename?: "BulkImportRemoteItemsResult";
     importedGroups?: Maybe<Array<Group>>;
     importedResources?: Maybe<Array<Resource>>;
-    syncTask: SyncTask;
+    syncTasks: Array<SyncTask>;
 };
 export type BulkRequestTooLargeError = Error & {
     __typename?: "BulkRequestTooLargeError";
@@ -2304,10 +2350,11 @@ export type BulkUpdateItemsInput = {
     resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
     updateInfo: UpdateItemsInput;
 };
-export type BulkUpdateItemsOutput = BulkUpdateItemsResult | CannotUpdateConfigurationTemplateError | GroupMaxDurationTooLargeError | GroupNotFoundError | InvalidReviewerSettingsError | InvalidUpdateGroupVisibilityGroupError | InvalidUpdateResourceVisibilityGroupError | ResourceMaxDurationTooLargeError | ResourceNotFoundError | TagNotFoundError | TooManyGroupLeadersError;
+export type BulkUpdateItemsOutput = BulkUpdateItemsResult | CannotUpdateConfigurationTemplateError | GroupMaxDurationTooLargeError | GroupNotFoundError | InvalidReviewerSettingsError | InvalidUpdateGroupVisibilityGroupError | InvalidUpdateItemsInputError | InvalidUpdateResourceVisibilityGroupError | ResourceMaxDurationTooLargeError | ResourceNotFoundError | TagNotFoundError | TooManyGroupLeadersError;
 export type BulkUpdateItemsResult = {
     __typename?: "BulkUpdateItemsResult";
-    syncTask?: Maybe<SyncTask>;
+    deferredUpdateCount: Scalars["Int"]["output"];
+    syncTasks?: Maybe<Array<SyncTask>>;
     updatedGroups?: Maybe<Array<Group>>;
     updatedResources?: Maybe<Array<Resource>>;
 };
@@ -2316,13 +2363,12 @@ export type Bundle = BaseEntity & Node & RolePermissionTargetEntity & {
     adminOwner: Owner;
     adminOwnerId: Scalars["OwnerId"]["output"];
     allowedPermissions: Array<RolePermissionKey>;
-    /** @deprecated use allowedPermissions */
-    authorizedActions?: Maybe<Array<Scalars["AuthorizedAction"]["output"]>>;
     createdAt: Scalars["Time"]["output"];
     description?: Maybe<Scalars["String"]["output"]>;
     id: Scalars["UUID"]["output"];
     items: BundleItemConnection;
     name: Scalars["String"]["output"];
+    permissionSources: PermissionSourceConnection;
     serviceTypes?: Maybe<Array<ServiceType>>;
     totalNumGroups: Scalars["Int"]["output"];
     totalNumItems: Scalars["Int"]["output"];
@@ -2339,6 +2385,12 @@ export type BundleItemsArgs = {
     last?: InputMaybe<Scalars["Int"]["input"]>;
     sortBy?: BundleItemsSortBy;
 };
+export type BundlePermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type BundleConnection = PageConnection & {
     __typename?: "BundleConnection";
     edges: Array<BundleEdge>;
@@ -2482,6 +2534,7 @@ export type BundleVisibilityGroupResult = {
     bundleVisibilityGroup: BundleVisibilityGroup;
 };
 export type BundlesFilter = {
+    bundleIds?: InputMaybe<Array<Scalars["BundleId"]["input"]>>;
     searchQuery?: InputMaybe<StringFilter>;
 };
 export type BundlesInput = {
@@ -2554,7 +2607,7 @@ export type CertIsTooLargeError = Error & {
 export type ClearPropagationStatusInput = {
     accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["input"];
     entityId: Scalars["EntityId"]["input"];
-    principalId: Scalars["PrincipalId"]["input"];
+    principalId: Scalars["EntityId"]["input"];
 };
 export type ClearPropagationStatusOutput = ClearPropagationStatusResult;
 export type ClearPropagationStatusResult = {
@@ -2571,6 +2624,7 @@ export type ClosedRequestMetricsResult = {
 };
 export type CodeFlowInput = {
     code: Scalars["String"]["input"];
+    installationId?: InputMaybe<Scalars["String"]["input"]>;
     state: Scalars["String"]["input"];
 };
 export type CommonMetadata = {
@@ -2611,6 +2665,8 @@ export type ConfigurationTemplate = {
     breakGlassUsers: Array<User>;
     customRequestNotification?: Maybe<Scalars["String"]["output"]>;
     id: Scalars["ConfigurationId"]["output"];
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
+    maxUsersExceededMessage?: Maybe<Scalars["String"]["output"]>;
     name: Scalars["String"]["output"];
     onCallSchedules: Array<OnCallSchedule>;
     requestConfigs: Array<RequestConfiguration>;
@@ -2673,6 +2729,7 @@ export type Connection = AccessEntity & AppEntity & BaseEntity & DisplayableEnti
     autoImportGroupResources: Scalars["Boolean"]["output"];
     childrenDefaultConfigTemplate?: Maybe<ConfigurationTemplate>;
     connectionType: ConnectionType;
+    connectionTypeMetadata: ConnectionTypeMetadata;
     connectionUsers: Array<ConnectionUser>;
     createdAt: Scalars["Time"]["output"];
     description: Scalars["String"]["output"];
@@ -2689,6 +2746,7 @@ export type Connection = AccessEntity & AppEntity & BaseEntity & DisplayableEnti
     importVisibility: Visibility;
     importVisibilityGroups: Array<ConnectionVisibilityGroup>;
     isDeleted: Scalars["Boolean"]["output"];
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
     metadata?: Maybe<ConnectionMetadataOutput>;
     name: Scalars["String"]["output"];
     numGroups: Scalars["Int"]["output"];
@@ -2696,6 +2754,8 @@ export type Connection = AccessEntity & AppEntity & BaseEntity & DisplayableEnti
     numUsers: Scalars["Int"]["output"];
     numVisibleGroups: Scalars["Int"]["output"];
     numVisibleResources: Scalars["Int"]["output"];
+    permissionSources: PermissionSourceConnection;
+    provisionConfigurationInfos: Array<ProvisionConfigurationInfo>;
     resources: Array<Resource>;
     totalGroupAccessCount: Scalars["Int"]["output"];
     totalNHIAccessCount: Scalars["Int"]["output"];
@@ -2718,6 +2778,12 @@ export type ConnectionAssociatedItemsArgs = {
     last?: InputMaybe<Scalars["Int"]["input"]>;
     sortBy?: InputMaybe<AssociatedItemsSortBy>;
 };
+export type ConnectionPermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type ConnectionAccessAlreadyReviewedError = Error & {
     __typename?: "ConnectionAccessAlreadyReviewedError";
     message: Scalars["String"]["output"];
@@ -2756,14 +2822,17 @@ export type ConnectionCredentialsInput = {
     aws?: InputMaybe<AwsConnectionCredentialsInput>;
     awsSso?: InputMaybe<AwsssoConnectionCredentialsInput>;
     azureAd?: InputMaybe<AzureAdConnectionCredentialsInput>;
+    coupa?: InputMaybe<CoupaConnectionCredentialsInput>;
     customConnector?: InputMaybe<CustomConnectorCredentials>;
     databricks?: InputMaybe<DatabricksConnectionCredentialsInput>;
+    datastaxAstra?: InputMaybe<DatastaxAstraConnectionCredentialsInput>;
     duo?: InputMaybe<DuoCredentialsInput>;
     gcp?: InputMaybe<GcpServiceAccountCredentialsInput>;
     gitHub?: InputMaybe<GitHubConnectionCredentialsInput>;
     gitLab?: InputMaybe<GitLabConnectionCredentialsInput>;
     googleGroups?: InputMaybe<GcpServiceAccountCredentialsInput>;
     googleWorkspace?: InputMaybe<GcpServiceAccountCredentialsInput>;
+    ilevel?: InputMaybe<ILevelConnectionCredentialsInput>;
     ldap?: InputMaybe<LdapConnectionCredentialsInput>;
     mongo?: InputMaybe<MongoConnectionCredentialsInput>;
     mongoAtlas?: InputMaybe<MongoAtlasConnectionCredentialsInput>;
@@ -2798,6 +2867,7 @@ export type ConnectionMetadataInput = {
     awsSso?: InputMaybe<AwsssoConnectionMetadataInput>;
     azureAd?: InputMaybe<AzureAdConnectionMetadataInput>;
     connectionType: ConnectionType;
+    coupa?: InputMaybe<CoupaConnectionMetadataInput>;
     customConnector?: InputMaybe<CustomConnectorMetadataInput>;
     databricks?: InputMaybe<DatabricksConnectionMetadataInput>;
     duo?: InputMaybe<DuoConnectionMetadataInput>;
@@ -2806,6 +2876,7 @@ export type ConnectionMetadataInput = {
     gitLab?: InputMaybe<GitLabConnectionMetadataInput>;
     googleGroups?: InputMaybe<GoogleGroupsConnectionMetadataInput>;
     googleWorkspace?: InputMaybe<GoogleWorkspaceConnectionMetadataInput>;
+    ilevel?: InputMaybe<ILevelConnectionMetadataInput>;
     ldap?: InputMaybe<LdapConnectionMetadataInput>;
     mongo?: InputMaybe<MongoConnectionMetadataInput>;
     mongoAtlas?: InputMaybe<MongoAtlasConnectionMetadataInput>;
@@ -2818,12 +2889,38 @@ export type ConnectionMetadataInput = {
     teleport?: InputMaybe<TeleportConnectionMetadataInput>;
     workday?: InputMaybe<WorkdayConnectionMetadataInput>;
 };
-export type ConnectionMetadataOutput = AdConnectionMetadata | AwsssoConnectionMetadata | AwsConnectionMetadata | AzureAdConnectionMetadata | CustomConnectorConnectionMetadata | DatabricksConnectionMetadata | DuoConnectionMetadata | GcpConnectionMetadata | GitHubConnectionMetadata | GitLabConnectionMetadata | GoogleGroupsConnectionMetadata | GoogleWorkspaceConnectionMetadata | LdapConnectionMetadata | MongoAtlasConnectionMetadata | MongoConnectionMetadata | MySqlMariaDbConnectionMetadata | OktaDirectoryConnectionMetadata | PagerDutyConnectionMetadata | PostgresConnectionMetadata | PropagationTicketConnectionMetadata | SalesforceConnectionMetadata | SnowflakeConnectionMetadata | TailscaleConnectionMetadata | TeleportConnectionMetadata | WorkdayConnectionMetadata;
+export type ConnectionMetadataOutput = AdConnectionMetadata | AwsssoConnectionMetadata | AwsConnectionMetadata | AzureAdConnectionMetadata | CoupaConnectionMetadata | CustomConnectorConnectionMetadata | DatabricksConnectionMetadata | DatastaxAstraConnectionMetadata | DuoConnectionMetadata | GcpConnectionMetadata | GitHubConnectionMetadata | GitLabConnectionMetadata | GoogleGroupsConnectionMetadata | GoogleWorkspaceConnectionMetadata | ILevelConnectionMetadata | LdapConnectionMetadata | MongoAtlasConnectionMetadata | MongoConnectionMetadata | MySqlMariaDbConnectionMetadata | OktaDirectoryConnectionMetadata | PagerDutyConnectionMetadata | PostgresConnectionMetadata | PropagationTicketConnectionMetadata | SalesforceConnectionMetadata | SnowflakeConnectionMetadata | TailscaleConnectionMetadata | TeleportConnectionMetadata | WorkdayConnectionMetadata;
 export type ConnectionNotFoundError = Error & {
     __typename?: "ConnectionNotFoundError";
     message: Scalars["String"]["output"];
 };
 export type ConnectionOutput = ConnectionNotFoundError | ConnectionResult;
+export type ConnectionPreview = Node & {
+    __typename?: "ConnectionPreview";
+    connection: Connection;
+    connectionUserCount: Scalars["Int"]["output"];
+    id: Scalars["UUID"]["output"];
+    reviewCount: Scalars["Int"]["output"];
+    truncatedConnectionUsers: Array<ConnectionUser>;
+};
+export type ConnectionPreviewConnection = PageConnection & {
+    __typename?: "ConnectionPreviewConnection";
+    edges: Array<ConnectionPreviewEdge>;
+    filteredConnectionCount: Scalars["Int"]["output"];
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+    totalReviewCount: Scalars["Int"]["output"];
+};
+export type ConnectionPreviewEdge = Edge & {
+    __typename?: "ConnectionPreviewEdge";
+    cursor: Scalars["String"]["output"];
+    node: ConnectionPreview;
+};
+export type ConnectionPreviewInput = {
+    filters?: FiltersInput;
+    hideEmpty?: InputMaybe<Scalars["Boolean"]["input"]>;
+    sortBy: AccessReviewPreviewSortBy;
+};
 export type ConnectionResult = {
     __typename?: "ConnectionResult";
     connection: Connection;
@@ -2842,15 +2939,18 @@ export declare enum ConnectionType {
     Aws = "AWS",
     AwsSso = "AWS_SSO",
     AzureAd = "AZURE_AD",
+    Coupa = "COUPA",
     Custom = "CUSTOM",
     CustomConnector = "CUSTOM_CONNECTOR",
     Databricks = "DATABRICKS",
+    DatastaxAstra = "DATASTAX_ASTRA",
     Duo = "DUO",
     Gcp = "GCP",
     GitHub = "GIT_HUB",
     GitLab = "GIT_LAB",
     GoogleGroups = "GOOGLE_GROUPS",
     GoogleWorkspace = "GOOGLE_WORKSPACE",
+    Ilevel = "ILEVEL",
     Ldap = "LDAP",
     Mariadb = "MARIADB",
     Mongo = "MONGO",
@@ -2866,6 +2966,10 @@ export declare enum ConnectionType {
     Teleport = "TELEPORT",
     Workday = "WORKDAY"
 }
+export type ConnectionTypeMetadata = {
+    __typename?: "ConnectionTypeMetadata";
+    ingestsRemoteUsers: Scalars["Boolean"]["output"];
+};
 export type ConnectionUnhealthyError = Error & {
     __typename?: "ConnectionUnhealthyError";
     message: Scalars["String"]["output"];
@@ -2948,6 +3052,7 @@ export type CountFilteredConnectionsInput = {
 export type CountFilteredConnectionsOutput = {
     __typename?: "CountFilteredConnectionsOutput";
     totalNumConnections: Scalars["Int"]["output"];
+    totalNumReviews: Scalars["Int"]["output"];
 };
 export type CountFilteredGroupsInput = {
     filters?: InputMaybe<FiltersInput>;
@@ -2966,6 +3071,17 @@ export type CountFilteredResourcesResult = {
     __typename?: "CountFilteredResourcesResult";
     totalNumResources: Scalars["Int"]["output"];
 };
+export type CoupaConnectionCredentialsInput = {
+    clientId: Scalars["String"]["input"];
+    clientSecret: Scalars["String"]["input"];
+};
+export type CoupaConnectionMetadata = {
+    __typename?: "CoupaConnectionMetadata";
+    hostname: Scalars["String"]["output"];
+};
+export type CoupaConnectionMetadataInput = {
+    hostname: Scalars["String"]["input"];
+};
 export type CreateAccessReviewTemplateInput = {
     accessReviewDuration: Scalars["Int"]["input"];
     endUserView: AccessReviewEndUserView;
@@ -3024,6 +3140,8 @@ export type CreateConfigurationTemplateInput = {
     adminOwnerId: Scalars["OwnerId"]["input"];
     breakGlassUsersIds: Array<Scalars["UserId"]["input"]>;
     customRequestNotification?: InputMaybe<NullableString>;
+    maxDirectUsersAllowed?: InputMaybe<NullableInt>;
+    maxUsersExceededMessage?: InputMaybe<NullableString>;
     messageChannelIds: Array<Scalars["MessageChannelId"]["input"]>;
     name: Scalars["String"]["input"];
     onCallSchedules: Array<OnCallScheduleInput>;
@@ -3257,7 +3375,7 @@ export type CreateRequestCommentInput = {
     comment: Scalars["String"]["input"];
     requestId: Scalars["RequestId"]["input"];
 };
-export type CreateRequestCommentOutput = CreateRequestCommentResult;
+export type CreateRequestCommentOutput = CreateRequestCommentResult | RequestNotFoundError;
 export type CreateRequestCommentResult = {
     __typename?: "CreateRequestCommentResult";
     request: Request;
@@ -3272,7 +3390,7 @@ export type CreateRequestInput = {
     targetGroupId?: InputMaybe<Scalars["GroupId"]["input"]>;
     targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
-export type CreateRequestOutput = BulkRequestTooLargeError | CreateRequestResult | GroupNestingNotAllowedError | ItemCannotBeRequestedError | LinkedGroupNotRequestableError | MfaInvalidError | NoManagerSetForRequestingUserError | NoReviewersSetForGroupError | NoReviewersSetForOwnerError | NoReviewersSetForResourceError | RequestDurationTooLargeError | RequestFieldValueMissingError | RequestReasonBelowMinLengthError | RequestReasonMissingError | RequestRequiresUserAuthTokenForConnectionError | TargetUserHasNestedAccessError | UserCannotRequestAccessForTargetGroupError;
+export type CreateRequestOutput = BulkRequestTooLargeError | CreateRequestResult | GroupNestingNotAllowedError | ItemCannotBeRequestedError | ItemsAtCapacityError | LinkedGroupNotRequestableError | MfaInvalidError | NoManagerSetForRequestingUserError | NoReviewersSetForGroupError | NoReviewersSetForOwnerError | NoReviewersSetForResourceError | RequestDurationTooLargeError | RequestFieldValueMissingError | RequestReasonBelowMinLengthError | RequestReasonMissingError | RequestRequiresUserAuthTokenForConnectionError | TargetUserHasNestedAccessError | UserCannotRequestAccessForTargetGroupError;
 export type CreateRequestProposalInput = {
     adminOwnerId: Scalars["OwnerId"]["input"];
     connectionId: Scalars["ConnectionId"]["input"];
@@ -3291,6 +3409,22 @@ export type CreateRequestResult = {
     __typename?: "CreateRequestResult";
     request: Request;
 };
+export type CreateRequestReviewerDelegationInput = {
+    delegateUserId: Scalars["UserId"]["input"];
+    endTime: Scalars["Time"]["input"];
+    reason: Scalars["String"]["input"];
+    startTime: Scalars["Time"]["input"];
+    targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
+};
+export type CreateRequestReviewerDelegationInvalidError = Error & {
+    __typename?: "CreateRequestReviewerDelegationInvalidError";
+    message: Scalars["String"]["output"];
+};
+export type CreateRequestReviewerDelegationOutput = CreateRequestReviewerDelegationInvalidError | CreateRequestReviewerDelegationResult;
+export type CreateRequestReviewerDelegationResult = {
+    __typename?: "CreateRequestReviewerDelegationResult";
+    delegation: RequestReviewerDelegation;
+};
 export type CreateRequestTemplateInput = {
     customFields?: InputMaybe<Array<RequestTemplateCustomFieldInput>>;
     name: Scalars["String"]["input"];
@@ -3298,7 +3432,7 @@ export type CreateRequestTemplateInput = {
 export type CreateRequestTemplateOutput = CreateRequestTemplateResult | RequestTemplateNameExistsError;
 export type CreateRequestTemplateResult = {
     __typename?: "CreateRequestTemplateResult";
-    requestTemplate: RequestTemplateSimple;
+    requestTemplate: RequestTemplate;
 };
 export type CreateResourceCustomAccessLevelEntryOutput = CreateResourceCustomAccessLevelEntryResult;
 export type CreateResourceCustomAccessLevelEntryResult = {
@@ -3380,7 +3514,7 @@ export type CreateResourcesOutput = CreateResourcesResult;
 export type CreateResourcesResult = {
     __typename?: "CreateResourcesResult";
     entries: Array<CreateResourceEntryOutput>;
-    syncTask: SyncTask;
+    syncTasks?: Maybe<Array<SyncTask>>;
 };
 export type CreateSamlConnectionInput = {
     certFile?: InputMaybe<Scalars["Upload"]["input"]>;
@@ -3427,6 +3561,11 @@ export type CreateTagResult = {
     __typename?: "CreateTagResult";
     tag: Tag;
 };
+export type CreateTestOrgResult = {
+    __typename?: "CreateTestOrgResult";
+    orgID: Scalars["OrganizationId"]["output"];
+    success: Scalars["Boolean"]["output"];
+};
 export type CreateThirdPartyIntegrationInput = {
     codeFlow?: InputMaybe<CodeFlowInput>;
     metadata?: InputMaybe<ThirdPartyIntegrationMetadataInput>;
@@ -3450,9 +3589,9 @@ export type CreateWebhookInfoResult = {
 export type CurrentUserGroupAccess = {
     __typename?: "CurrentUserGroupAccess";
     groupId: Scalars["GroupId"]["output"];
-    groupUser?: Maybe<GroupUser>;
+    groupUsers: Array<GroupUser>;
     hasBreakGlass: Scalars["Boolean"]["output"];
-    pendingRequest?: Maybe<Request>;
+    pendingRequests: Array<Request>;
 };
 export type CurrentUserResourceAccess = {
     __typename?: "CurrentUserResourceAccess";
@@ -3505,6 +3644,21 @@ export type CustomFieldExistsError = Error & {
     __typename?: "CustomFieldExistsError";
     message: Scalars["String"]["output"];
 };
+export type CustomSearchLink = {
+    __typename?: "CustomSearchLink";
+    customSearchLink?: Maybe<Scalars["String"]["output"]>;
+    customSearchLinkDescription?: Maybe<Scalars["String"]["output"]>;
+    customSearchLinkTitle?: Maybe<Scalars["String"]["output"]>;
+};
+export type CustomSearchLinkInput = {
+    customSearchLinkDescription: Scalars["String"]["input"];
+    customSearchLinkTitle: Scalars["String"]["input"];
+    enabled: Scalars["Boolean"]["input"];
+};
+export type CustomSearchLinkInvalidError = Error & {
+    __typename?: "CustomSearchLinkInvalidError";
+    message: Scalars["String"]["output"];
+};
 export type CustomerSupportSettingsInvalid = Error & {
     __typename?: "CustomerSupportSettingsInvalid";
     message: Scalars["String"]["output"];
@@ -3522,6 +3676,22 @@ export type DatabricksConnectionMetadataInput = {
     accountId: Scalars["String"]["input"];
     accountLoginUrl: Scalars["String"]["input"];
 };
+export type DatastaxAstraConnectionCredentialsInput = {
+    token: Scalars["String"]["input"];
+};
+export type DatastaxAstraConnectionMetadata = {
+    __typename?: "DatastaxAstraConnectionMetadata";
+    placeholder?: Maybe<Scalars["Boolean"]["output"]>;
+};
+export type DefaultNotification = {
+    __typename?: "DefaultNotification";
+    enabled?: Maybe<Scalars["Boolean"]["output"]>;
+    type: NotificationType;
+};
+export type DefaultNotificationsInput = {
+    enabled: Scalars["Boolean"]["input"];
+    type: NotificationType;
+};
 export type DeleteAccessReviewTemplatesInput = {
     ids: Array<Scalars["AccessReviewTemplateId"]["input"]>;
 };
@@ -3615,10 +3785,6 @@ export type DeleteGroupResult = {
     __typename?: "DeleteGroupResult";
     success: Scalars["Boolean"]["output"];
 };
-export type DeleteGroupUserPropStatusResult = {
-    __typename?: "DeleteGroupUserPropStatusResult";
-    success: Scalars["Boolean"]["output"];
-};
 export type DeleteGroupsInput = {
     ids: Array<Scalars["GroupId"]["input"]>;
 };
@@ -3668,13 +3834,25 @@ export type DeleteOwnersResult = {
     __typename?: "DeleteOwnersResult";
     owners: Array<Owner>;
 };
+export type DeleteRequestReviewerDelegationInput = {
+    delegationId: Scalars["RequestReviewerDelegationId"]["input"];
+};
+export type DeleteRequestReviewerDelegationInvalidError = Error & {
+    __typename?: "DeleteRequestReviewerDelegationInvalidError";
+    message: Scalars["String"]["output"];
+};
+export type DeleteRequestReviewerDelegationOutput = DeleteRequestReviewerDelegationInvalidError | DeleteRequestReviewerDelegationResult;
+export type DeleteRequestReviewerDelegationResult = {
+    __typename?: "DeleteRequestReviewerDelegationResult";
+    success: Scalars["Boolean"]["output"];
+};
 export type DeleteRequestTemplateInput = {
     id: Scalars["RequestTemplateId"]["input"];
 };
 export type DeleteRequestTemplateOutput = DeleteRequestTemplateResult;
 export type DeleteRequestTemplateResult = {
     __typename?: "DeleteRequestTemplateResult";
-    requestTemplate: RequestTemplateSimple;
+    requestTemplateId: Scalars["RequestTemplateId"]["output"];
 };
 export type DeleteResourceCustomAccessLevelsEntryResult = {
     __typename?: "DeleteResourceCustomAccessLevelsEntryResult";
@@ -3822,6 +4000,15 @@ export type EdgeMetadata = {
     accessType?: Maybe<AccessTypeData>;
     lastUsageTime?: Maybe<Scalars["Time"]["output"]>;
 };
+export type EnableDefaultNotificationsForAllError = Error & {
+    __typename?: "EnableDefaultNotificationsForAllError";
+    message: Scalars["String"]["output"];
+};
+export type EnableDefaultNotificationsForAllOutput = EnableDefaultNotificationsForAllError | EnableDefaultNotificationsForAllResult;
+export type EnableDefaultNotificationsForAllResult = {
+    __typename?: "EnableDefaultNotificationsForAllResult";
+    success: Scalars["Boolean"]["output"];
+};
 export type EndDateFilter = {
     date: Scalars["String"]["input"];
 };
@@ -3853,9 +4040,41 @@ export type EntityIdTupleInput = {
     entityId: Scalars["UUID"]["input"];
     entityType: EntityType;
 };
+export type EntityPermissionEdge = Edge & {
+    __typename?: "EntityPermissionEdge";
+    access?: Maybe<Access>;
+    accessLevel: AccessLevel;
+    cursor: Scalars["String"]["output"];
+    from: AccessibleItem;
+    node: AccessibleItem;
+    propagationStatus?: Maybe<PropagationStatus>;
+};
+export type EntityPermissionsConnection = PageConnection & {
+    __typename?: "EntityPermissionsConnection";
+    edges: Array<EntityPermissionEdge>;
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+    totalItemsCount: Scalars["Int"]["output"];
+};
+export type EntityPermissionsFilters = {
+    directAccessOnly?: Scalars["Boolean"]["input"];
+    entityType?: InputMaybe<EntityTypeFilter>;
+    includeUnmanaged?: Scalars["Boolean"]["input"];
+    name?: InputMaybe<StringFilter>;
+    propagationStatuses?: InputMaybe<Array<PropagationStatusCode>>;
+};
+export type EntityPermissionsSortBy = {
+    direction: SortDirection;
+    field: EntityPermissionsSortByField;
+};
+export declare enum EntityPermissionsSortByField {
+    AccessLevelName = "ACCESS_LEVEL_NAME",
+    Name = "NAME"
+}
 export type EntityScope = {
     entityIDs?: InputMaybe<Array<Scalars["EntityId"]["input"]>>;
     entitySubtypes?: InputMaybe<EntitySubtypes>;
+    entityTagIDs?: InputMaybe<Array<Scalars["TagId"]["input"]>>;
     entityTypes?: InputMaybe<Array<EntityType>>;
 };
 export type EntitySubtypes = {
@@ -3880,6 +4099,7 @@ export declare enum EntityType {
     Bundle = "BUNDLE",
     ConfigurationTemplate = "CONFIGURATION_TEMPLATE",
     Connection = "CONNECTION",
+    ConnectionUser = "CONNECTION_USER",
     Event = "EVENT",
     EventFilter = "EVENT_FILTER",
     EventStreamConnection = "EVENT_STREAM_CONNECTION",
@@ -4026,13 +4246,17 @@ export type EventStream = {
     id: Scalars["EventStreamId"]["output"];
 };
 export declare enum EventType {
+    AccessExtended = "ACCESS_EXTENDED",
     AccessReviewsCreated = "ACCESS_REVIEWS_CREATED",
+    AccessReviewsReportUpdated = "ACCESS_REVIEWS_REPORT_UPDATED",
     AccessReviewsUpdated = "ACCESS_REVIEWS_UPDATED",
     AccessReviewAutoAssignReviewerByApprovers = "ACCESS_REVIEW_AUTO_ASSIGN_REVIEWER_BY_APPROVERS",
     AccessReviewAutoAssignReviewerByManager = "ACCESS_REVIEW_AUTO_ASSIGN_REVIEWER_BY_MANAGER",
     AccessReviewAutoAssignReviewerByOwningTeamAdmin = "ACCESS_REVIEW_AUTO_ASSIGN_REVIEWER_BY_OWNING_TEAM_ADMIN",
     AccessReviewConnectionReviewed = "ACCESS_REVIEW_CONNECTION_REVIEWED",
     AccessReviewConnectionReviewersUpdated = "ACCESS_REVIEW_CONNECTION_REVIEWERS_UPDATED",
+    AccessReviewDelegationCreated = "ACCESS_REVIEW_DELEGATION_CREATED",
+    AccessReviewDelegationDeleted = "ACCESS_REVIEW_DELEGATION_DELETED",
     AccessReviewGroupAccessToGroupAccepted = "ACCESS_REVIEW_GROUP_ACCESS_TO_GROUP_ACCEPTED",
     AccessReviewGroupAccessToGroupRevoked = "ACCESS_REVIEW_GROUP_ACCESS_TO_GROUP_REVOKED",
     AccessReviewGroupAccessToGroupRevokedDecision = "ACCESS_REVIEW_GROUP_ACCESS_TO_GROUP_REVOKED_DECISION",
@@ -4094,6 +4318,8 @@ export declare enum EventType {
     ConfigurationTemplateCreated = "CONFIGURATION_TEMPLATE_CREATED",
     ConfigurationTemplateCustomRequestNotificationUpdated = "CONFIGURATION_TEMPLATE_CUSTOM_REQUEST_NOTIFICATION_UPDATED",
     ConfigurationTemplateDeleted = "CONFIGURATION_TEMPLATE_DELETED",
+    ConfigurationTemplateMaxDirectUsersAllowedUpdated = "CONFIGURATION_TEMPLATE_MAX_DIRECT_USERS_ALLOWED_UPDATED",
+    ConfigurationTemplateMaxUsersExceededMessageUpdated = "CONFIGURATION_TEMPLATE_MAX_USERS_EXCEEDED_MESSAGE_UPDATED",
     ConfigurationTemplateNameUpdated = "CONFIGURATION_TEMPLATE_NAME_UPDATED",
     ConfigurationTemplateOncallSchedulesUpdated = "CONFIGURATION_TEMPLATE_ONCALL_SCHEDULES_UPDATED",
     ConfigurationTemplateRequestConfigDeleted = "CONFIGURATION_TEMPLATE_REQUEST_CONFIG_DELETED",
@@ -4124,6 +4350,8 @@ export declare enum EventType {
     ConnectionVisibilityGroupsRemoved = "CONNECTION_VISIBILITY_GROUPS_REMOVED",
     ConnectionVisibilityUpdated = "CONNECTION_VISIBILITY_UPDATED",
     ConnectionWebhookEnabledUpdated = "CONNECTION_WEBHOOK_ENABLED_UPDATED",
+    EntityTagAdded = "ENTITY_TAG_ADDED",
+    EntityTagRemoved = "ENTITY_TAG_REMOVED",
     EventMonitorEventsDetected = "EVENT_MONITOR_EVENTS_DETECTED",
     EventStreamConnectionsCreated = "EVENT_STREAM_CONNECTIONS_CREATED",
     EventStreamConnectionsDeleted = "EVENT_STREAM_CONNECTIONS_DELETED",
@@ -4146,6 +4374,8 @@ export declare enum EventType {
     GroupBindingUpdated = "GROUP_BINDING_UPDATED",
     GroupConfigurationTemplateUpdated = "GROUP_CONFIGURATION_TEMPLATE_UPDATED",
     GroupCustomRequestNotificationUpdated = "GROUP_CUSTOM_REQUEST_NOTIFICATION_UPDATED",
+    GroupExtensionsDurationInMinutesUpdated = "GROUP_EXTENSIONS_DURATION_IN_MINUTES_UPDATED",
+    GroupExtensionsEnabledUpdated = "GROUP_EXTENSIONS_ENABLED_UPDATED",
     GroupFoldersCreated = "GROUP_FOLDERS_CREATED",
     GroupFoldersDeleted = "GROUP_FOLDERS_DELETED",
     GroupFunctionUpdated = "GROUP_FUNCTION_UPDATED",
@@ -4153,7 +4383,9 @@ export declare enum EventType {
     GroupIsRequestableUpdated = "GROUP_IS_REQUESTABLE_UPDATED",
     GroupLeadersCreated = "GROUP_LEADERS_CREATED",
     GroupLeadersRemoved = "GROUP_LEADERS_REMOVED",
+    GroupMaxDirectUsersAllowedUpdated = "GROUP_MAX_DIRECT_USERS_ALLOWED_UPDATED",
     GroupMaxDurationUpdated = "GROUP_MAX_DURATION_UPDATED",
+    GroupMaxUsersExceededMessageUpdated = "GROUP_MAX_USERS_EXCEEDED_MESSAGE_UPDATED",
     GroupNameUpdated = "GROUP_NAME_UPDATED",
     GroupRecommendedDurationUpdated = "GROUP_RECOMMENDED_DURATION_UPDATED",
     GroupRemovedFromBinding = "GROUP_REMOVED_FROM_BINDING",
@@ -4218,6 +4450,7 @@ export declare enum EventType {
     PropagatedRemoveUserFromResource = "PROPAGATED_REMOVE_USER_FROM_RESOURCE",
     PropagationComputeRemoteUserPushTasks = "PROPAGATION_COMPUTE_REMOTE_USER_PUSH_TASKS",
     PropagationFailureAddResourceToGroup = "PROPAGATION_FAILURE_ADD_RESOURCE_TO_GROUP",
+    PropagationFailureAddUserToConnection = "PROPAGATION_FAILURE_ADD_USER_TO_CONNECTION",
     PropagationFailureAddUserToGroup = "PROPAGATION_FAILURE_ADD_USER_TO_GROUP",
     PropagationFailureAddUserToResource = "PROPAGATION_FAILURE_ADD_USER_TO_RESOURCE",
     PropagationFailureRemoveResourceFromGroup = "PROPAGATION_FAILURE_REMOVE_RESOURCE_FROM_GROUP",
@@ -4229,6 +4462,7 @@ export declare enum EventType {
     PropagationManualAddUserToResource = "PROPAGATION_MANUAL_ADD_USER_TO_RESOURCE",
     PropagationManualRemoveUserFromResource = "PROPAGATION_MANUAL_REMOVE_USER_FROM_RESOURCE",
     PropagationSuccessAddResourceToGroup = "PROPAGATION_SUCCESS_ADD_RESOURCE_TO_GROUP",
+    PropagationSuccessAddUserToConnection = "PROPAGATION_SUCCESS_ADD_USER_TO_CONNECTION",
     PropagationSuccessAddUserToGroup = "PROPAGATION_SUCCESS_ADD_USER_TO_GROUP",
     PropagationSuccessAddUserToResource = "PROPAGATION_SUCCESS_ADD_USER_TO_RESOURCE",
     PropagationSuccessRemoveResourceFromGroup = "PROPAGATION_SUCCESS_REMOVE_RESOURCE_FROM_GROUP",
@@ -4275,6 +4509,7 @@ export declare enum EventType {
     RequestResourceRequested = "REQUEST_RESOURCE_REQUESTED",
     RequestReviewersAddedToRequests = "REQUEST_REVIEWERS_ADDED_TO_REQUESTS",
     RequestReviewersApproved = "REQUEST_REVIEWERS_APPROVED",
+    RequestReviewersApprovedOnBehalfOf = "REQUEST_REVIEWERS_APPROVED_ON_BEHALF_OF",
     RequestReviewersDenied = "REQUEST_REVIEWERS_DENIED",
     RequestSkipManagerAddedToRequests = "REQUEST_SKIP_MANAGER_ADDED_TO_REQUESTS",
     RequestSupportTicketAdded = "REQUEST_SUPPORT_TICKET_ADDED",
@@ -4297,10 +4532,14 @@ export declare enum EventType {
     ResourceConfigurationTemplateUpdated = "RESOURCE_CONFIGURATION_TEMPLATE_UPDATED",
     ResourceConnectRequireMfaUpdated = "RESOURCE_CONNECT_REQUIRE_MFA_UPDATED",
     ResourceCustomRequestNotificationUpdated = "RESOURCE_CUSTOM_REQUEST_NOTIFICATION_UPDATED",
+    ResourceExtensionsDurationInMinutesUpdated = "RESOURCE_EXTENSIONS_DURATION_IN_MINUTES_UPDATED",
+    ResourceExtensionsEnabledUpdated = "RESOURCE_EXTENSIONS_ENABLED_UPDATED",
     ResourceFoldersCreated = "RESOURCE_FOLDERS_CREATED",
     ResourceFoldersDeleted = "RESOURCE_FOLDERS_DELETED",
     ResourceIsRequestableUpdated = "RESOURCE_IS_REQUESTABLE_UPDATED",
+    ResourceMaxDirectUsersAllowedUpdated = "RESOURCE_MAX_DIRECT_USERS_ALLOWED_UPDATED",
     ResourceMaxDurationUpdated = "RESOURCE_MAX_DURATION_UPDATED",
+    ResourceMaxUsersExceededMessageUpdated = "RESOURCE_MAX_USERS_EXCEEDED_MESSAGE_UPDATED",
     ResourceNameUpdated = "RESOURCE_NAME_UPDATED",
     ResourceRecommendedDurationUpdated = "RESOURCE_RECOMMENDED_DURATION_UPDATED",
     ResourceRequestRequireMfaUpdated = "RESOURCE_REQUEST_REQUIRE_MFA_UPDATED",
@@ -4372,6 +4611,60 @@ export type Exclusion = {
     __typename?: "Exclusion";
     users: Array<User>;
 };
+export type ExtendRoleAssignmentOutput = RoleAssignment | UserFacingError;
+export type ExternalEvent = Node & {
+    __typename?: "ExternalEvent";
+    actor: Principal;
+    actorID?: Maybe<EntityIdTuple>;
+    connection: Connection;
+    connectionID: Scalars["ConnectionId"]["output"];
+    createdAt: Scalars["Time"]["output"];
+    entity: EntityDisplayInfo;
+    entityID: EntityIdTuple;
+    eventTime: Scalars["Time"]["output"];
+    eventType: ExternalEventType;
+    id: Scalars["UUID"]["output"];
+    remoteID: Scalars["RemoteEventId"]["output"];
+    secondaryEntity?: Maybe<EntityDisplayInfo>;
+    secondaryEntityID?: Maybe<EntityIdTuple>;
+};
+export type ExternalEventConnection = PageConnection & {
+    __typename?: "ExternalEventConnection";
+    edges: Array<ExternalEventEdge>;
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+};
+export type ExternalEventEdge = Edge & {
+    __typename?: "ExternalEventEdge";
+    cursor: Scalars["String"]["output"];
+    node: ExternalEvent;
+};
+export declare enum ExternalEventType {
+    GroupsCreated = "GROUPS_CREATED",
+    GroupsDeleted = "GROUPS_DELETED",
+    GroupAddedToResource = "GROUP_ADDED_TO_RESOURCE",
+    GroupRemovedFromResource = "GROUP_REMOVED_FROM_RESOURCE",
+    GroupUsed = "GROUP_USED",
+    LoginSuccess = "LOGIN_SUCCESS",
+    ResourcesCreated = "RESOURCES_CREATED",
+    ResourcesDeleted = "RESOURCES_DELETED",
+    ResourceRead = "RESOURCE_READ",
+    UserAddedToGroup = "USER_ADDED_TO_GROUP",
+    UserAddedToResource = "USER_ADDED_TO_RESOURCE",
+    UserRemovedFromGroup = "USER_REMOVED_FROM_GROUP",
+    UserRemovedFromResource = "USER_REMOVED_FROM_RESOURCE"
+}
+export type ExternalEventsFilters = {
+    actor?: InputMaybe<EntityIdTupleInput>;
+    secondaryEntity: EntityIdTupleInput;
+};
+export type ExternalEventsSortBy = {
+    direction: SortDirection;
+    field: ExternalEventsSortByFields;
+};
+export declare enum ExternalEventsSortByFields {
+    EventTime = "EVENT_TIME"
+}
 export type Factor = {
     __typename?: "Factor";
     factorCreatedAt?: Maybe<Scalars["Time"]["output"]>;
@@ -4519,8 +4812,14 @@ export declare enum GeneralSettingType {
     AccessExpiringNotifications = "ACCESS_EXPIRING_NOTIFICATIONS",
     AccessReviewReminders = "ACCESS_REVIEW_REMINDERS",
     AccessRuleFailsafe = "ACCESS_RULE_FAILSAFE",
+    AiAccessRequestGrading = "AI_ACCESS_REQUEST_GRADING",
+    AiAllFeatures = "AI_ALL_FEATURES",
+    AiCustomRoleDescriptionGenerator = "AI_CUSTOM_ROLE_DESCRIPTION_GENERATOR",
+    AiCustomRoleSummary = "AI_CUSTOM_ROLE_SUMMARY",
+    AiRiskCenterAskOpal = "AI_RISK_CENTER_ASK_OPAL",
     AutoMergeUsersByEmail = "AUTO_MERGE_USERS_BY_EMAIL",
     DisableNonAdminLogins = "DISABLE_NON_ADMIN_LOGINS",
+    DisableRequestDelegation = "DISABLE_REQUEST_DELEGATION",
     GlobalRequesterRole = "GLOBAL_REQUESTER_ROLE",
     NestedGroups = "NESTED_GROUPS",
     RequireManagerCc = "REQUIRE_MANAGER_CC",
@@ -4530,6 +4829,7 @@ export declare enum GeneralSettingType {
     ToxicSetBlockRequest = "TOXIC_SET_BLOCK_REQUEST",
     UserDeprovisionDeleteDeprovisioned = "USER_DEPROVISION_DELETE_DEPROVISIONED",
     UserImpersonation = "USER_IMPERSONATION",
+    UserRevokeEndSystemAccessDeprovisioned = "USER_REVOKE_END_SYSTEM_ACCESS_DEPROVISIONED",
     UseOidcMfaForGatingOpalActions = "USE_OIDC_MFA_FOR_GATING_OPAL_ACTIONS",
     UseOktaMfaForGatingOpalActions = "USE_OKTA_MFA_FOR_GATING_OPAL_ACTIONS"
 }
@@ -4538,16 +4838,25 @@ export type GenerateChannelNameInput = {
     itemName: Scalars["String"]["input"];
 };
 export type GitHubConnectionCredentialsInput = {
-    adminToken: Scalars["String"]["input"];
-    clientId: Scalars["String"]["input"];
-    clientSecret: Scalars["String"]["input"];
+    adminToken?: InputMaybe<Scalars["String"]["input"]>;
+    appClientId?: InputMaybe<Scalars["String"]["input"]>;
+    appClientSecret?: InputMaybe<Scalars["String"]["input"]>;
+    clientId?: InputMaybe<Scalars["String"]["input"]>;
+    clientSecret?: InputMaybe<Scalars["String"]["input"]>;
+    privateKey?: InputMaybe<Scalars["String"]["input"]>;
 };
 export type GitHubConnectionMetadata = {
     __typename?: "GitHubConnectionMetadata";
+    appName?: Maybe<Scalars["String"]["output"]>;
+    installationId?: Maybe<Scalars["Int"]["output"]>;
     orgName: Scalars["String"]["output"];
+    samlUserIngestionEnabled: Scalars["Boolean"]["output"];
 };
 export type GitHubConnectionMetadataInput = {
+    appName?: InputMaybe<Scalars["String"]["input"]>;
+    installationId?: InputMaybe<Scalars["Int"]["input"]>;
     orgName: Scalars["String"]["input"];
+    samlUserIngestionEnabled: Scalars["Boolean"]["input"];
 };
 export type GitLabConnectionCredentialsInput = {
     appSecret: Scalars["String"]["input"];
@@ -4608,8 +4917,6 @@ export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntit
     allowedPermissions: Array<RolePermissionKey>;
     associatedItems: AssociatedItemConnection;
     auditMessageChannels?: Maybe<Array<MessageChannel>>;
-    /** @deprecated use allowedPermissions */
-    authorizedActions?: Maybe<Array<Scalars["AuthorizedAction"]["output"]>>;
     breakGlassUsers: Array<GroupBreakGlassUser>;
     canHaveUsageData: Scalars["Boolean"]["output"];
     commonMetadata: CommonMetadata;
@@ -4621,6 +4928,7 @@ export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntit
     currentUserAccess: CurrentUserGroupAccess;
     customRequestNotification?: Maybe<Scalars["String"]["output"]>;
     description: Scalars["String"]["output"];
+    entityPermissions: EntityPermissionsConnection;
     groupBinding?: Maybe<GroupBinding>;
     groupBindingId?: Maybe<Scalars["GroupBindingId"]["output"]>;
     /** @deprecated Do not use groupGroups, use containingGroups instead. */
@@ -4637,12 +4945,15 @@ export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntit
     isManaged: Scalars["Boolean"]["output"];
     isOnCallSynced: Scalars["Boolean"]["output"];
     isRequestable: Scalars["Boolean"]["output"];
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
+    maxUsersExceededMessage?: Maybe<Scalars["String"]["output"]>;
     memberGroups: Array<GroupGroup>;
     name: Scalars["String"]["output"];
     numGroupUsers: Scalars["Int"]["output"];
     onCallSchedules?: Maybe<Array<GroupOnCallSchedule>>;
     paginatedGroupUsers: PaginatedGroupUsersOutput;
     parentApp?: Maybe<AppEntity>;
+    permissionSources: PermissionSourceConnection;
     principalAssignmentsForEntity: Array<RoleAssignment>;
     remoteId?: Maybe<Scalars["RemoteGroupId"]["output"]>;
     remoteName: Scalars["String"]["output"];
@@ -4679,9 +4990,26 @@ export type GroupAssociatedItemsArgs = {
     last?: InputMaybe<Scalars["Int"]["input"]>;
     sortBy?: InputMaybe<AssociatedItemsSortBy>;
 };
+export type GroupContainingGroupsArgs = {
+    includeUnmanaged?: InputMaybe<Scalars["Boolean"]["input"]>;
+};
+export type GroupEntityPermissionsArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    filters?: EntityPermissionsFilters;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy?: EntityPermissionsSortBy;
+};
 export type GroupPaginatedGroupUsersArgs = {
     input?: InputMaybe<PaginatedGroupUsersInput>;
 };
+export type GroupPermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type GroupAccessAlreadyReviewedError = Error & {
     __typename?: "GroupAccessAlreadyReviewedError";
     message: Scalars["String"]["output"];
@@ -4702,7 +5030,7 @@ export type GroupAccessLevelsInput = {
 export type GroupAccessLevelsOutput = GroupAccessLevelsResult | GroupNotFoundError;
 export type GroupAccessLevelsResult = {
     __typename?: "GroupAccessLevelsResult";
-    accessLevels?: Maybe<Array<GroupAccessLevel>>;
+    accessLevels: Array<GroupAccessLevel>;
     groupId: Scalars["GroupId"]["output"];
 };
 export type GroupAccessRequestFrequencyReminderOutOfBoundsError = Error & {
@@ -4945,6 +5273,36 @@ export type GroupOnCallSchedulesResult = {
     groupOnCallSchedules: Array<GroupOnCallSchedule>;
 };
 export type GroupOutput = GroupNotFoundError | GroupResult;
+export type GroupPreview = Node & {
+    __typename?: "GroupPreview";
+    group: Group;
+    groupGroupCount: Scalars["Int"]["output"];
+    groupResourceCount: Scalars["Int"]["output"];
+    groupUserCount: Scalars["Int"]["output"];
+    id: Scalars["UUID"]["output"];
+    reviewCount: Scalars["Int"]["output"];
+    truncatedGroupGroups: Array<GroupGroup>;
+    truncatedGroupResources: Array<GroupResource>;
+    truncatedGroupUsers: Array<GroupUser>;
+};
+export type GroupPreviewConnection = PageConnection & {
+    __typename?: "GroupPreviewConnection";
+    edges: Array<GroupPreviewEdge>;
+    filteredGroupCount: Scalars["Int"]["output"];
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+    totalReviewCount: Scalars["Int"]["output"];
+};
+export type GroupPreviewEdge = Edge & {
+    __typename?: "GroupPreviewEdge";
+    cursor: Scalars["String"]["output"];
+    node: GroupPreview;
+};
+export type GroupPreviewFilters = {
+    filters?: FiltersInput;
+    hideEmpty?: InputMaybe<Scalars["Boolean"]["input"]>;
+    includeGroupBindings?: Scalars["Boolean"]["input"];
+};
 export type GroupRequestConfigurationOutput = {
     __typename?: "GroupRequestConfigurationOutput";
     accessLevelRemoteId?: Maybe<Scalars["AccessLevelRemoteId"]["output"]>;
@@ -4953,6 +5311,7 @@ export type GroupRequestConfigurationOutput = {
 };
 export type GroupRequestStatusCountsInput = {
     groupId: Scalars["GroupId"]["input"];
+    userId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
 export type GroupRequestStatusCountsOutput = GroupNotFoundError | GroupRequestStatusCountsResult;
 export type GroupRequestStatusCountsResult = {
@@ -4971,6 +5330,7 @@ export type GroupResource = {
     resource?: Maybe<Resource>;
     resourceId: Scalars["ResourceId"]["output"];
     source: GroupResourceSource;
+    userUsage?: Maybe<Scalars["Int"]["output"]>;
 };
 export type GroupResourceAccess = {
     __typename?: "GroupResourceAccess";
@@ -5032,11 +5392,6 @@ export type GroupResult = {
     __typename?: "GroupResult";
     group: Group;
 };
-export type GroupSmall = {
-    __typename?: "GroupSmall";
-    id: Scalars["GroupId"]["output"];
-    name: Scalars["String"]["output"];
-};
 export type GroupSuggestion = {
     __typename?: "GroupSuggestion";
     group?: Maybe<Group>;
@@ -5104,8 +5459,9 @@ export type GroupTypesWithCountsResult = {
 export type GroupUser = {
     __typename?: "GroupUser";
     access?: Maybe<GroupUserAccess>;
-    accessLevel?: Maybe<GroupAccessLevel>;
+    accessLevel: GroupAccessLevel;
     accessStats?: Maybe<AccessStats>;
+    extendability: RequestConfiguration;
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
@@ -5117,6 +5473,7 @@ export type GroupUser = {
 };
 export type GroupUserAccess = {
     __typename?: "GroupUserAccess";
+    accessLevel: GroupAccessLevel;
     /**
      * Describes attributes of `userId`'s direct access to `groupId`. If unset, this user does not have
      * direct access to the group.
@@ -5138,7 +5495,7 @@ export type GroupUserAccess = {
 };
 export type GroupUserAccessPoint = {
     __typename?: "GroupUserAccessPoint";
-    accessLevel?: Maybe<GroupAccessLevel>;
+    accessLevel: GroupAccessLevel;
     createdAt: Scalars["Time"]["output"];
     eventId: Scalars["EventId"]["output"];
     expiration?: Maybe<Scalars["Time"]["output"]>;
@@ -5166,6 +5523,7 @@ export type GroupUserFiltersInput = {
     neverUsedOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
     permanentAccessOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
     propagationStatuses?: InputMaybe<Array<PropagationStatusCode>>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
     team?: InputMaybe<Scalars["String"]["input"]>;
     title?: InputMaybe<Scalars["String"]["input"]>;
     userFullName?: InputMaybe<Scalars["String"]["input"]>;
@@ -5249,11 +5607,20 @@ export type IAccessLevel = {
     accessLevelName: Scalars["AccessLevelName"]["output"];
     accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["output"];
 };
-export declare enum IdentityCategory {
-    All = "ALL",
-    Nhi = "NHI",
-    User = "USER"
-}
+export type ILevelConnectionCredentialsInput = {
+    clientSecret: Scalars["String"]["input"];
+};
+export type ILevelConnectionMetadata = {
+    __typename?: "ILevelConnectionMetadata";
+    clientId: Scalars["String"]["output"];
+    isSandbox: Scalars["Boolean"]["output"];
+    passwordStrategy: Scalars["String"]["output"];
+};
+export type ILevelConnectionMetadataInput = {
+    clientId: Scalars["String"]["input"];
+    isSandbox: Scalars["Boolean"]["input"];
+    passwordStrategy: Scalars["String"]["input"];
+};
 export type IdpConnection = {
     __typename?: "IdpConnection";
     connection: Connection;
@@ -5278,6 +5645,7 @@ export type IdpConnectionResult = {
     idpConnections: Array<IdpConnection>;
 };
 export declare enum IdpConnectionType {
+    ActiveDirectory = "ACTIVE_DIRECTORY",
     AzureAd = "AZURE_AD",
     Google = "GOOGLE",
     Okta = "OKTA",
@@ -5361,13 +5729,9 @@ export type ImportCustomResourceInfo = {
     usersWithAccess: Array<ImportCustomResourceUserInfo>;
 };
 export type ImportCustomResourceUserInfo = {
-    /**
-     * Describes the nature of this user's access to the resource. Currently, since import
-     * functionality is only implemented for resources with no access levels, only 'Y' is
-     * permitted.
-     * (TODO: we can support import functionality for resources with access levels by
-     * allowing other descriptors)
-     */
+    accessLevelName: Scalars["AccessLevelName"]["input"];
+    accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["input"];
+    /** Deprecated: do not use. */
     cellContent: Scalars["String"]["input"];
     email: Scalars["String"]["input"];
 };
@@ -5565,6 +5929,10 @@ export type InvalidUpdateGroupVisibilityGroupError = Error & {
     __typename?: "InvalidUpdateGroupVisibilityGroupError";
     message: Scalars["String"]["output"];
 };
+export type InvalidUpdateItemsInputError = Error & {
+    __typename?: "InvalidUpdateItemsInputError";
+    message: Scalars["String"]["output"];
+};
 export type InvalidUpdateResourceVisibilityGroupError = Error & {
     __typename?: "InvalidUpdateResourceVisibilityGroupError";
     message: Scalars["String"]["output"];
@@ -5602,10 +5970,15 @@ export type ItemTypeFilter = {
     not?: InputMaybe<ItemTypeFilter>;
     notIn?: InputMaybe<Array<Scalars["String"]["input"]>>;
 };
+export type ItemsAtCapacityError = Error & {
+    __typename?: "ItemsAtCapacityError";
+    groupIds?: Maybe<Array<Scalars["GroupId"]["output"]>>;
+    message: Scalars["String"]["output"];
+    resourceIds?: Maybe<Array<Scalars["ResourceId"]["output"]>>;
+};
 export type JiraMetadataInput = {
     email: Scalars["String"]["input"];
     orgUrl: Scalars["String"]["input"];
-    projectName: Scalars["String"]["input"];
 };
 export type LdapConnectionCredentialsInput = {
     rootPassword: Scalars["String"]["input"];
@@ -5775,7 +6148,6 @@ export type MetricsInput = {
     resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
     startDate: Scalars["Time"]["input"];
     tagIds?: InputMaybe<Array<Scalars["TagId"]["input"]>>;
-    timezone: Scalars["String"]["input"];
 };
 export type MfaCallbackInput = {
     code: Scalars["String"]["input"];
@@ -5802,6 +6174,13 @@ export type ModifyAccessAction = {
     __typename?: "ModifyAccessAction";
     durationInDays: Scalars["Int"]["output"];
 };
+export type ModifyRecommendationsEdgeHideActionInput = {
+    roleAssignmentKeys: Array<RoleAssignmentKeyInput>;
+};
+export type ModifyRecommendationsEdgeHideActionOutput = {
+    __typename?: "ModifyRecommendationsEdgeHideActionOutput";
+    roleAssignments: Array<RoleAssignment>;
+};
 export type MongoAtlasConnectionCredentialsInput = {
     privateKey: Scalars["String"]["input"];
     projectID: Scalars["String"]["input"];
@@ -5885,6 +6264,7 @@ export type Mutation = {
     __typename?: "Mutation";
     addBigData: AddBigDataOutput;
     addConnectionUsers: AddConnectionUsersOutput;
+    addFavorite?: Maybe<Scalars["Boolean"]["output"]>;
     addGroupGroups: AddGroupGroupsOutput;
     addGroupResources: AddGroupResourcesOutput;
     addGroupTags: AddGroupTagsOutput;
@@ -5911,6 +6291,7 @@ export type Mutation = {
     createConfigurationTemplate: CreateConfigurationTemplateOutput;
     createConnection: CreateConnectionOutput;
     createConnectionForIdp: CreateIdpConnectionOutput;
+    createE2ETestOrganization: CreateTestOrgResult;
     createEventFilter: CreateEventFilterOutput;
     createEventStream: CreateEventStreamOutput;
     createFirstPartyToken: CreateFirstPartyTokenOutput;
@@ -5920,15 +6301,16 @@ export type Mutation = {
     createIdpConnection: CreateIdpConnectionOutput;
     createIdpConnectionUserAttributeImportMapping: CreateIdpConnectionUserAttributeImportMappingOutput;
     createItems: CreateItemsOutput;
-    createOpalScopedRole?: Maybe<CreateOpalScopedRoleOutput>;
     createOrUpdateOidcProvider: CreateOrUpdateOidcProviderOutput;
     createOrganization: CreateOrganizationOutput;
     createOwner: CreateOwnerOutput;
     createOwners: CreateOwnersOutput;
+    createRecommendationsEdgeHideAction: ModifyRecommendationsEdgeHideActionOutput;
     createRemoteMessageChannel: CreateRemoteMessageChannelOutput;
     createRequest: CreateRequestOutput;
     createRequestComment: CreateRequestCommentOutput;
     createRequestProposal: CreateRequestProposalOutput;
+    createRequestReviewerDelegation: CreateRequestReviewerDelegationOutput;
     createRequestTemplate: CreateRequestTemplateOutput;
     /** @deprecated Use createItems instead. */
     createResource: CreateResourceOutput;
@@ -5950,10 +6332,10 @@ export type Mutation = {
     deleteConnection: DeleteConnectionOutput;
     deleteEventFilter: DeleteEventFilterOutput;
     deleteEventStream: DeleteEventStreamOutput;
+    deleteFavorite?: Maybe<Scalars["Boolean"]["output"]>;
     deleteFirstPartyTokens: DeleteFirstPartyTokensOutput;
     deleteGroup: DeleteGroupOutput;
     deleteGroupBindings: DeleteGroupBindingsOutput;
-    deleteGroupUserPropStatus: DeleteGroupUserPropStatusResult;
     deleteGroups: DeleteGroupsOutput;
     deleteIdpConnection: DeleteIdpConnectionOutput;
     deleteIdpConnectionUserAttributeImportMapping: DeleteIdpConnectionUserAttributeImportMappingOutput;
@@ -5961,6 +6343,8 @@ export type Mutation = {
     deleteOrganization: DeleteOrganizationOutput;
     deleteOwner: DeleteOwnerOutput;
     deleteOwners: DeleteOwnersOutput;
+    deleteRecommendationsEdgeHideAction: ModifyRecommendationsEdgeHideActionOutput;
+    deleteRequestReviewerDelegation: DeleteRequestReviewerDelegationOutput;
     deleteRequestTemplate: DeleteRequestTemplateOutput;
     deleteResourceCustomAccessLevels: DeleteResourceCustomAccessLevelsOutput;
     deleteResources: DeleteResourcesOutput;
@@ -5975,7 +6359,9 @@ export type Mutation = {
     dismissGroupBindingSuggestions: DismissGroupBindingSuggestionsOutput;
     dismissRecommendationsSubscores: DismissRecommendationsSubscoresOutput;
     dismissSyncErrors: DismissSyncErrorsOutput;
+    enableDefaultNotificationsForAll: EnableDefaultNotificationsForAllOutput;
     escalateRequestToSkipManager: EscalateRequestToSkipManagerOutput;
+    extendRoleAssignment: ExtendRoleAssignmentOutput;
     forfeitGroup: ForfeitGroupOutput;
     forfeitResource: ForfeitResourceOutput;
     /** @deprecated Use bulkUpdateItems with importUnmanagedItems set to true */
@@ -6054,7 +6440,6 @@ export type Mutation = {
     updateGroupUsers: UpdateGroupUsersOutput;
     updateIdpConnection: UpdateIdpConnectionOutput;
     updateIdpGroupMappings: IdpGroupMappingsOutput;
-    updateOpalScopedRole?: Maybe<UpdateOpalScopedRoleOutput>;
     updateOrganizationSettings: UpdateOrganizationSettingsOutput;
     updateOwner: UpdateOwnerOutput;
     updateRequestTemplate: UpdateRequestTemplateOutput;
@@ -6065,7 +6450,6 @@ export type Mutation = {
     updateResources: UpdateResourcesOutput;
     updateRoleAssignments: UpdateRoleAssignmentsOutput;
     updateSamlConnection: UpdateSamlConnectionOutput;
-    updateScopedRoleAssignments: UpdateRoleAssignmentsOutput;
     updateUser: UpdateUserOutput;
     updateUserManager: UpdateUserManagerOutput;
     updateUserSettings: UpdateUserSettingsOutput;
@@ -6083,6 +6467,9 @@ export type MutationAddBigDataArgs = {
 export type MutationAddConnectionUsersArgs = {
     input: AddConnectionUsersInput;
 };
+export type MutationAddFavoriteArgs = {
+    entityIdTuple?: InputMaybe<EntityIdTupleInput>;
+};
 export type MutationAddGroupGroupsArgs = {
     input: AddGroupGroupsInput;
 };
@@ -6182,9 +6569,6 @@ export type MutationCreateIdpConnectionUserAttributeImportMappingArgs = {
 export type MutationCreateItemsArgs = {
     input: CreateItemsInput;
 };
-export type MutationCreateOpalScopedRoleArgs = {
-    input: CreateOpalScopedRoleInput;
-};
 export type MutationCreateOrUpdateOidcProviderArgs = {
     input: CreateOrUpdateOidcProviderInput;
 };
@@ -6197,6 +6581,9 @@ export type MutationCreateOwnerArgs = {
 export type MutationCreateOwnersArgs = {
     input: CreateOwnersInput;
 };
+export type MutationCreateRecommendationsEdgeHideActionArgs = {
+    input: ModifyRecommendationsEdgeHideActionInput;
+};
 export type MutationCreateRemoteMessageChannelArgs = {
     input: CreateRemoteMessageChannelInput;
 };
@@ -6209,6 +6596,9 @@ export type MutationCreateRequestCommentArgs = {
 export type MutationCreateRequestProposalArgs = {
     input: CreateRequestProposalInput;
 };
+export type MutationCreateRequestReviewerDelegationArgs = {
+    input: CreateRequestReviewerDelegationInput;
+};
 export type MutationCreateRequestTemplateArgs = {
     input: CreateRequestTemplateInput;
 };
@@ -6266,6 +6656,9 @@ export type MutationDeleteEventFilterArgs = {
 export type MutationDeleteEventStreamArgs = {
     input: DeleteEventStreamInput;
 };
+export type MutationDeleteFavoriteArgs = {
+    entityIdTuple?: InputMaybe<EntityIdTupleInput>;
+};
 export type MutationDeleteFirstPartyTokensArgs = {
     input: DeleteFirstPartyTokensInput;
 };
@@ -6275,9 +6668,6 @@ export type MutationDeleteGroupArgs = {
 export type MutationDeleteGroupBindingsArgs = {
     input: DeleteGroupBindingsInput;
 };
-export type MutationDeleteGroupUserPropStatusArgs = {
-    accessReviewGroupUserId: Scalars["AccessReviewGroupUserId"]["input"];
-};
 export type MutationDeleteGroupsArgs = {
     input: DeleteGroupsInput;
 };
@@ -6296,6 +6686,12 @@ export type MutationDeleteOwnerArgs = {
 export type MutationDeleteOwnersArgs = {
     input: DeleteOwnersInput;
 };
+export type MutationDeleteRecommendationsEdgeHideActionArgs = {
+    input: ModifyRecommendationsEdgeHideActionInput;
+};
+export type MutationDeleteRequestReviewerDelegationArgs = {
+    input: DeleteRequestReviewerDelegationInput;
+};
 export type MutationDeleteRequestTemplateArgs = {
     input: DeleteRequestTemplateInput;
 };
@@ -6335,6 +6731,9 @@ export type MutationDismissSyncErrorsArgs = {
 export type MutationEscalateRequestToSkipManagerArgs = {
     input: EscalateRequestToSkipManagerInput;
 };
+export type MutationExtendRoleAssignmentArgs = {
+    input: RoleAssignmentKeyInput;
+};
 export type MutationForfeitGroupArgs = {
     input: ForfeitGroupInput;
 };
@@ -6536,9 +6935,6 @@ export type MutationUpdateIdpConnectionArgs = {
 export type MutationUpdateIdpGroupMappingsArgs = {
     input: IdpGroupMappingsUpdateInput;
 };
-export type MutationUpdateOpalScopedRoleArgs = {
-    input: UpdateOpalScopedRoleInput;
-};
 export type MutationUpdateOrganizationSettingsArgs = {
     input: UpdateOrganizationSettingsInput;
 };
@@ -6566,9 +6962,6 @@ export type MutationUpdateRoleAssignmentsArgs = {
 export type MutationUpdateSamlConnectionArgs = {
     input: UpdateSamlConnectionInput;
 };
-export type MutationUpdateScopedRoleAssignmentsArgs = {
-    input: UpdateScopedRoleAssignmentsInput;
-};
 export type MutationUpdateUserArgs = {
     input: UpdateUserInput;
 };
@@ -6680,6 +7073,13 @@ export type NotSessionableError = Error & {
     __typename?: "NotSessionableError";
     message: Scalars["String"]["output"];
 };
+export type NotificationPreference = {
+    __typename?: "NotificationPreference";
+    isDefault: Scalars["Boolean"]["output"];
+    isEnabled: Scalars["Boolean"]["output"];
+    isIntegrated: Scalars["Boolean"]["output"];
+    type: NotificationType;
+};
 export declare enum NotificationType {
     Email = "EMAIL",
     GoogleChat = "GOOGLE_CHAT",
@@ -6720,7 +7120,8 @@ export type NullableUserId = {
 };
 export declare enum OidcProviderType {
     AwsSession = "AWS_SESSION",
-    Mfa = "MFA"
+    Mfa = "MFA",
+    Signin = "SIGNIN"
 }
 export type ObjectFilter = {
     objectId: Scalars["String"]["input"];
@@ -6903,8 +7304,10 @@ export type OrganizationSettings = {
     auditTicketProvider?: Maybe<TicketProvider>;
     authSessionExpirationInMinutes: Scalars["Int"]["output"];
     createdAt: Scalars["Time"]["output"];
+    customSearchLink?: Maybe<CustomSearchLink>;
     customerSupportExpiresAt: Scalars["Time"]["output"];
     customerSupportGatingAllowed: Scalars["Boolean"]["output"];
+    defaultNotifications?: Maybe<Array<DefaultNotification>>;
     dryRunModeEnabled?: Maybe<Scalars["Boolean"]["output"]>;
     errorNotificationSetting: ErrorNotificationSettingType;
     generalSettings: Array<GeneralSettingType>;
@@ -6912,6 +7315,7 @@ export type OrganizationSettings = {
     isRemoteReadOnly?: Maybe<Scalars["Boolean"]["output"]>;
     maxGroupDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
     maxResourceDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
+    maxUsersExceededMessage?: Maybe<Scalars["String"]["output"]>;
     reasonMinWordCount?: Maybe<Scalars["Int"]["output"]>;
     roleCreationReviewerOwner?: Maybe<Owner>;
     roleCreationReviewerOwnerId?: Maybe<Scalars["OwnerId"]["output"]>;
@@ -6969,8 +7373,11 @@ export type Owner = BaseEntity & Node & {
     name: Scalars["String"]["output"];
     ownedConfigurationTemplates: Array<OwnedConfigurationTemplate>;
     ownedGroups: Array<OwnedGroup>;
+    ownedGroupsCount: Scalars["Int"]["output"];
     ownedResources: Array<OwnedResource>;
+    ownedResourcesCount: Scalars["Int"]["output"];
     ownerUsers: Array<OwnerUser>;
+    ownerUsersCount: Scalars["Int"]["output"];
     reviewerMessageChannel?: Maybe<MessageChannel>;
     reviewerMessageChannelId?: Maybe<Scalars["MessageChannelId"]["output"]>;
     sourceGroup?: Maybe<Group>;
@@ -7022,6 +7429,7 @@ export type OwnerUserAlreadyExists = Error & {
 export type OwnersFiltersInput = {
     searchQuery?: InputMaybe<Scalars["String"]["input"]>;
     sourceGroupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
+    userIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
 };
 export type OwnersInput = {
     cursor?: InputMaybe<Scalars["String"]["input"]>;
@@ -7117,7 +7525,7 @@ export type PaginatedSubEventsSortBy = {
 };
 export type PaginatedUserGroupsInput = {
     cursor?: InputMaybe<Scalars["String"]["input"]>;
-    filters?: InputMaybe<GroupUserFiltersInput>;
+    filters?: GroupUserFiltersInput;
     maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
     sortBy?: InputMaybe<PaginatedGroupUsersSortBy>;
 };
@@ -7129,7 +7537,7 @@ export type PaginatedUserGroupsOutput = {
 };
 export type PaginatedUserResourcesInput = {
     cursor?: InputMaybe<Scalars["String"]["input"]>;
-    filters?: InputMaybe<ResourceUserFiltersInput>;
+    filters?: ResourceUserFiltersInput;
     maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
     sortBy?: InputMaybe<PaginatedResourceUsersSortBy>;
 };
@@ -7156,6 +7564,18 @@ export type PerformReviewResult = {
     __typename?: "PerformReviewResult";
     success: Scalars["Boolean"]["output"];
 };
+export type PermissionSourceConnection = PageConnection & {
+    __typename?: "PermissionSourceConnection";
+    edges: Array<PermissionSourceEdge>;
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+};
+export type PermissionSourceEdge = Edge & {
+    __typename?: "PermissionSourceEdge";
+    cursor: Scalars["String"]["output"];
+    node: Resource;
+    rolePermissions: Array<RolePermissionKey>;
+};
 export type PostgresConnectionCredentialsInput = {
     rootPassword: Scalars["String"]["input"];
     rootUserName: Scalars["String"]["input"];
@@ -7184,7 +7604,8 @@ export type PrincipalEdge = Edge & {
     node: Principal;
 };
 export type PrincipalScope = {
-    principalIDs?: InputMaybe<Array<Scalars["PrincipalId"]["input"]>>;
+    principalIDs?: InputMaybe<Array<Scalars["EntityId"]["input"]>>;
+    principalTagIDs?: InputMaybe<Array<Scalars["TagId"]["input"]>>;
     principalTypes?: InputMaybe<Array<EntityType>>;
 };
 export type PrincipalSearchOptions = {
@@ -7239,6 +7660,7 @@ export declare enum PropagationStatusCode {
     Success = "SUCCESS"
 }
 export declare enum PropagationTaskType {
+    ConnectionsCreateEntities = "CONNECTIONS_CREATE_ENTITIES",
     ConnectionsDeleteUsers = "CONNECTIONS_DELETE_USERS",
     GroupsCreateGroups = "GROUPS_CREATE_GROUPS",
     GroupsCreateResources = "GROUPS_CREATE_RESOURCES",
@@ -7271,11 +7693,54 @@ export type PropagationTicketOwnerMetadata = {
     owner?: Maybe<Owner>;
     ownerId?: Maybe<Scalars["OwnerId"]["output"]>;
 };
+export type ProvisionConfiguration = Node & {
+    __typename?: "ProvisionConfiguration";
+    connectionId: Scalars["ConnectionId"]["output"];
+    entityItemType: Scalars["String"]["output"];
+    entityItemTypeDisplayName: Scalars["String"]["output"];
+    id: Scalars["UUID"]["output"];
+    provisionStrategy: ProvisionStrategy;
+    provisioningAction: ProvisioningAction;
+};
+export type ProvisionConfigurationInfo = {
+    __typename?: "ProvisionConfigurationInfo";
+    enabled: Scalars["Boolean"]["output"];
+    entityItemType: Scalars["String"]["output"];
+    entityItemTypeDisplayName: Scalars["String"]["output"];
+    provisionStrategy: ProvisionStrategy;
+    provisioningAction: ProvisioningAction;
+};
+export type ProvisionConfigurationInput = {
+    entityItemType: Scalars["String"]["input"];
+    provisionStrategy: ProvisionStrategy;
+    provisioningAction: ProvisioningAction;
+};
+export type ProvisionEntityStatus = {
+    __typename?: "ProvisionEntityStatus";
+    action: Scalars["String"]["output"];
+    connectionId: Scalars["ConnectionId"]["output"];
+    entityId: Scalars["EntityId"]["output"];
+    entityItemType: Scalars["String"]["output"];
+    errorMessage?: Maybe<Scalars["String"]["output"]>;
+    statusCode: PropagationStatusCode;
+};
 export declare enum ProvisionSource {
     External = "EXTERNAL",
     Opal = "OPAL",
     Unknown = "UNKNOWN"
 }
+export declare enum ProvisionStrategy {
+    None = "NONE",
+    PushEntityToConnection = "PUSH_ENTITY_TO_CONNECTION"
+}
+export declare enum ProvisioningAction {
+    Create = "CREATE",
+    Delete = "DELETE"
+}
+export type ProvisioningPushTaskResult = {
+    __typename?: "ProvisioningPushTaskResult";
+    propStatuses: Array<ProvisionEntityStatus>;
+};
 export type PubsubPublishConnection = {
     __typename?: "PubsubPublishConnection";
     connectionType: PubsubPublishConnectionType;
@@ -7327,7 +7792,7 @@ export type PushTaskComplete = {
     result: PushTaskCompleteResult;
     taskType: PropagationTaskType;
 };
-export type PushTaskCompleteResult = ConnectionUserPushTaskResult | RoleAssignmentPushTaskResult;
+export type PushTaskCompleteResult = ConnectionUserPushTaskResult | ProvisioningPushTaskResult | RoleAssignmentPushTaskResult;
 export type PushTaskInput = {
     id: Scalars["PushTaskId"]["input"];
 };
@@ -7377,7 +7842,7 @@ export type Query = {
     accessReviews: AccessReviewsOutput;
     activeGroupRequestConfigurations: Array<GroupRequestConfigurationOutput>;
     activeResourceRequestConfigurations: Array<ResourceRequestConfigurationOutput>;
-    allPrincipals: AllPrincipalsConnection;
+    allDelegations: RequestReviewerDelegationConnection;
     allowedToCreateOrganizations: AllowedToCreateOrganizationsOutput;
     allowedToUseAldwin: AllowedToUseAldwinOutput;
     app: AppOutput;
@@ -7402,6 +7867,7 @@ export type Query = {
     configurationTemplate: ConfigurationTemplateOutput;
     configurationTemplates: ConfigurationTemplatesOutput;
     connection: ConnectionOutput;
+    connectionPreview: ConnectionPreviewConnection;
     connections: ConnectionsOutput;
     countFilteredConnections: CountFilteredConnectionsOutput;
     countFilteredGroups: CountFilteredGroupsOutput;
@@ -7414,6 +7880,7 @@ export type Query = {
     eventFilter: EventFilterOutput;
     eventFilters: EventFiltersOutput;
     events: EventsOutput;
+    externalEvents: ExternalEventConnection;
     filteredConnections: FilteredConnectionsOutput;
     filteredGroups: FilteredGroupsOutput;
     filteredResources: FilteredResourcesOutput;
@@ -7427,6 +7894,7 @@ export type Query = {
     groupBindings: GroupBindingsOutput;
     groupGroupAccess: GroupGroupAccessOutput;
     groupOnCallSchedules: GroupOnCallSchedulesOutput;
+    groupPreview: GroupPreviewConnection;
     groupRequestStatusCounts: GroupRequestStatusCountsOutput;
     groupTypesWithCounts: GroupTypesWithCountsOutput;
     groups: GroupsOutput;
@@ -7456,6 +7924,7 @@ export type Query = {
     owners: OwnersOutput;
     principals: PrincipalsOutput;
     priorityOrder: UserAttributePriorityOutput;
+    provisionConfiguration?: Maybe<ProvisionConfiguration>;
     pushTask: PushTaskOutput;
     recommendationsMetrics: Array<Maybe<RecommendationsMetricList>>;
     recommendationsMetricsGraph: RecommendationsMetricsGraph;
@@ -7468,10 +7937,12 @@ export type Query = {
     requestTemplates: RequestTemplatesOutput;
     requestTemplatesWithFields: RequestTemplatesWithFieldsOutput;
     requests: RequestsOutput;
+    requestsConnection: RequestConnection;
     resource: ResourceOutput;
     resourceAncestors: ResourcesOutput;
     resourceCustomAccessLevel: ResourceCustomAccessLevelOutput;
     resourceCustomAccessLevels: ResourceCustomAccessLevelsOutput;
+    resourcePreview: ResourcePreviewConnection;
     resourceRequestStatusCounts: ResourceRequestStatusCountsOutput;
     resourceTags: ResourceTagsOutput;
     resourceTypesWithCounts: ResourceTypesWithCountsOutput;
@@ -7485,12 +7956,12 @@ export type Query = {
     setupState: SetupStateResult;
     signInMethod?: Maybe<SignInMethodOutput>;
     startAccessReviewStats: StartAccessReviewStatsOutput;
-    suggestedAccessToRemediateForEntity: SuggestedAccessList;
     suggestions: SuggestionsOutput;
     supportTicket: SupportTicketOutput;
     supportTickets: SupportTicketsOutput;
     syncStatus: SyncStatusOutput;
     syncTask: SyncTaskOutput;
+    syncTasks: SyncTasksOutput;
     tag: TagOutput;
     tags: TagsOutput;
     teams: TeamsOutput;
@@ -7501,6 +7972,7 @@ export type Query = {
     topBulkSuggestions: RecommendationsBulkSuggestionConnection;
     uiNotifications: Array<UiNotification>;
     user: UserOutput;
+    userDelegations: UserDelegationsOutput;
     userSettings: UserSettingsOutput;
     userTags: Array<UserTag>;
     users: UsersOutput;
@@ -7581,6 +8053,9 @@ export type QueryAccessReviewStatsArgs = {
 export type QueryAccessReviewTemplateArgs = {
     input: AccessReviewTemplateInput;
 };
+export type QueryAccessReviewTemplatesArgs = {
+    filters?: InputMaybe<AccessReviewsTemplateFilters>;
+};
 export type QueryAccessReviewUserArgs = {
     input: AccessReviewUserInput;
 };
@@ -7604,12 +8079,13 @@ export type QueryActiveGroupRequestConfigurationsArgs = {
 export type QueryActiveResourceRequestConfigurationsArgs = {
     input: ActiveResourceRequestConfigurationInput;
 };
-export type QueryAllPrincipalsArgs = {
+export type QueryAllDelegationsArgs = {
     after?: InputMaybe<Scalars["String"]["input"]>;
     before?: InputMaybe<Scalars["String"]["input"]>;
+    filters?: InputMaybe<RequestReviewerDelegationsFilter>;
     first?: InputMaybe<Scalars["Int"]["input"]>;
-    input: AllPrincipalsFilters;
     last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy?: InputMaybe<RequestReviewerDelegationsSortBy>;
 };
 export type QueryAppArgs = {
     id: Scalars["UUID"]["input"];
@@ -7668,6 +8144,13 @@ export type QueryConfigurationTemplateArgs = {
 export type QueryConnectionArgs = {
     input: ConnectionInput;
 };
+export type QueryConnectionPreviewArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    input: ConnectionPreviewInput;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type QueryConnectionsArgs = {
     input: ConnectionsInput;
 };
@@ -7699,6 +8182,14 @@ export type QueryEventFilterArgs = {
 export type QueryEventsArgs = {
     input: EventsInput;
 };
+export type QueryExternalEventsArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    filters: ExternalEventsFilters;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy?: ExternalEventsSortBy;
+};
 export type QueryFilteredConnectionsArgs = {
     input: FilteredConnectionsInput;
 };
@@ -7729,6 +8220,14 @@ export type QueryGroupBindingsArgs = {
 export type QueryGroupGroupAccessArgs = {
     input: GroupGroupAccessInput;
 };
+export type QueryGroupPreviewArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    filters: GroupPreviewFilters;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy: AccessReviewPreviewSortBy;
+};
 export type QueryGroupRequestStatusCountsArgs = {
     input: GroupRequestStatusCountsInput;
 };
@@ -7784,11 +8283,15 @@ export type QueryOwnersArgs = {
 export type QueryPrincipalsArgs = {
     input: PrincipalsInput;
 };
+export type QueryProvisionConfigurationArgs = {
+    connectionId: Scalars["ConnectionId"]["input"];
+    entityItemType: Scalars["String"]["input"];
+    provisioningAction: ProvisioningAction;
+};
 export type QueryPushTaskArgs = {
     input: PushTaskInput;
 };
 export type QueryRecommendationsMetricsArgs = {
-    identityCategory: IdentityCategory;
     metricTypes: Array<RecommendationsMetricType>;
     numDays: Scalars["Int"]["input"];
 };
@@ -7816,6 +8319,9 @@ export type QueryRequestTemplatesWithFieldsArgs = {
 export type QueryRequestsArgs = {
     input: RequestsInput;
 };
+export type QueryRequestsConnectionArgs = {
+    input: RequestsRelayInput;
+};
 export type QueryResourceArgs = {
     input: ResourceInput;
 };
@@ -7828,6 +8334,14 @@ export type QueryResourceCustomAccessLevelArgs = {
 export type QueryResourceCustomAccessLevelsArgs = {
     input: ResourceCustomAccessLevelsInput;
 };
+export type QueryResourcePreviewArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    filters: ResourcePreviewFilters;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy: AccessReviewPreviewSortBy;
+};
 export type QueryResourceRequestStatusCountsArgs = {
     input: ResourceRequestStatusCountsInput;
 };
@@ -7858,10 +8372,6 @@ export type QuerySignInMethodArgs = {
 export type QueryStartAccessReviewStatsArgs = {
     input: StartAccessReviewStatsInput;
 };
-export type QuerySuggestedAccessToRemediateForEntityArgs = {
-    entityKey: RecommendationsEntityKey;
-    type: RecommendationsSubscoreType;
-};
 export type QuerySuggestionsArgs = {
     input?: InputMaybe<SuggestionsInput>;
 };
@@ -7877,6 +8387,9 @@ export type QuerySyncStatusArgs = {
 export type QuerySyncTaskArgs = {
     input: SyncTaskInput;
 };
+export type QuerySyncTasksArgs = {
+    input: SyncTasksInput;
+};
 export type QueryTagArgs = {
     input: TagInput;
 };
@@ -8166,7 +8679,7 @@ export type RemoveConnectionUserInput = {
 export type RemoveConnectionUsersInput = {
     connectionUsers: Array<RemoveConnectionUserInput>;
 };
-export type RemoveConnectionUsersOutput = ConnectionNotFoundError | ConnectionUserNotFound | RemoveConnectionUsersResult;
+export type RemoveConnectionUsersOutput = ConnectionNotFoundError | ConnectionUserNotFound | RemoveConnectionUsersResult | UserFacingError;
 export type RemoveConnectionUsersResult = {
     __typename?: "RemoveConnectionUsersResult";
     success: Scalars["Boolean"]["output"];
@@ -8221,6 +8734,7 @@ export type RemoveGroupTagsResult = {
     success: Scalars["Boolean"]["output"];
 };
 export type RemoveGroupUserInput = {
+    accessLevel: GroupAccessLevelInput;
     groupId: Scalars["GroupId"]["input"];
     userId: Scalars["UserId"]["input"];
 };
@@ -8281,7 +8795,7 @@ export type RemoveRoleAssignmentInput = {
     accessLevel?: InputMaybe<AccessLevelInput>;
     entityID: Scalars["EntityId"]["input"];
     entityType: EntityType;
-    principalID: Scalars["PrincipalId"]["input"];
+    principalID: Scalars["EntityId"]["input"];
     principalType: EntityType;
 };
 export type RemoveRoleAssignmentsEntryOutput = RemoveRoleAssignmentsEntryResult;
@@ -8379,6 +8893,8 @@ export type RequestComment = {
 };
 export type RequestConfigInput = {
     autoApprove?: InputMaybe<Scalars["Boolean"]["input"]>;
+    extensionsDurationInMinutes?: InputMaybe<NullableInt>;
+    extensionsEnabled?: InputMaybe<Scalars["Boolean"]["input"]>;
     groupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
     id?: InputMaybe<Scalars["RequestConfigurationId"]["input"]>;
     isRequestable?: InputMaybe<Scalars["Boolean"]["input"]>;
@@ -8395,6 +8911,8 @@ export type RequestConfigInput = {
 export type RequestConfiguration = {
     __typename?: "RequestConfiguration";
     autoApproval: Scalars["Boolean"]["output"];
+    extensionsDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
+    extensionsEnabled: Scalars["Boolean"]["output"];
     groupId?: Maybe<Scalars["GroupId"]["output"]>;
     groupIds?: Maybe<Array<Scalars["GroupId"]["output"]>>;
     id: Scalars["RequestConfigurationId"]["output"];
@@ -8418,6 +8936,12 @@ export type RequestConfigurationResourceInput = {
     accessLevelRemoteId?: InputMaybe<Scalars["AccessLevelRemoteId"]["input"]>;
     resourceId: Scalars["ResourceId"]["input"];
 };
+export type RequestConnection = PageConnection & {
+    __typename?: "RequestConnection";
+    edges: Array<RequestEdge>;
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+};
 export type RequestCustomMetadata = {
     __typename?: "RequestCustomMetadata";
     fieldName: Scalars["String"]["output"];
@@ -8446,6 +8970,7 @@ export type RequestDefaults = {
     __typename?: "RequestDefaults";
     defaultDurationInMinutes: Scalars["Int"]["output"];
     durationOptions: Array<DurationOption>;
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
     maxDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
     messages: Array<RequestMessage>;
     reasonOptional: Scalars["Boolean"]["output"];
@@ -8462,6 +8987,11 @@ export type RequestDurationTooLargeError = Error & {
     __typename?: "RequestDurationTooLargeError";
     message: Scalars["String"]["output"];
 };
+export type RequestEdge = Edge & {
+    __typename?: "RequestEdge";
+    cursor: Scalars["String"]["output"];
+    node: Request;
+};
 export type RequestFieldValueMissingError = Error & {
     __typename?: "RequestFieldValueMissingError";
     fieldName: Scalars["String"]["output"];
@@ -8481,6 +9011,9 @@ export type RequestInput = {
 };
 export type RequestItemStages = {
     __typename?: "RequestItemStages";
+    accessLevel: AccessLevel;
+    item?: Maybe<AccessibleItem>;
+    itemId: Scalars["UUID"]["output"];
     requestedItemName: Scalars["String"]["output"];
     requestedRoleName?: Maybe<Scalars["String"]["output"]>;
     stages: Array<RequestStage>;
@@ -8492,6 +9025,8 @@ export type RequestMessage = {
     level: RequestMessageLevel;
 };
 export declare enum RequestMessageCode {
+    EntityNotRequestable = "ENTITY_NOT_REQUESTABLE",
+    ItemAtCapacity = "ITEM_AT_CAPACITY",
     LinkedGroupNotRequestable = "LINKED_GROUP_NOT_REQUESTABLE",
     NestedGroupAccessNotAllowed = "NESTED_GROUP_ACCESS_NOT_ALLOWED",
     RequestResetsAccessDuration = "REQUEST_RESETS_ACCESS_DURATION",
@@ -8526,6 +9061,15 @@ export type RequestReasonMissingError = Error & {
     message: Scalars["String"]["output"];
     resourceIds?: Maybe<Array<Scalars["ResourceId"]["output"]>>;
 };
+export type RequestRelayFilters = {
+    endDate?: InputMaybe<EndDateFilter>;
+    from?: InputMaybe<Scalars["UserId"]["input"]>;
+    includedEntities?: InputMaybe<Array<Scalars["EntityId"]["input"]>>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+    startDate?: InputMaybe<StartDateFilter>;
+    status?: InputMaybe<RequestStatus>;
+    to?: InputMaybe<Scalars["UserId"]["input"]>;
+};
 export type RequestRequiresUserAuthTokenForConnectionError = Error & {
     __typename?: "RequestRequiresUserAuthTokenForConnectionError";
     connection?: Maybe<Connection>;
@@ -8543,10 +9087,50 @@ export type RequestReviewer = {
     owner?: Maybe<Owner>;
     ownerId?: Maybe<Scalars["OwnerId"]["output"]>;
     reviewerAction?: Maybe<ReviewerAction>;
+    reviewerActionOnBehalfOfUser?: Maybe<User>;
+    reviewerActionOnBehalfOfUserId?: Maybe<Scalars["UserId"]["output"]>;
     reviewerType: RequestApprovalType;
     user?: Maybe<User>;
     userId: Scalars["UserId"]["output"];
 };
+export type RequestReviewerDelegation = {
+    __typename?: "RequestReviewerDelegation";
+    createdAt: Scalars["Time"]["output"];
+    delegateUser: User;
+    delegateUserId: Scalars["UserId"]["output"];
+    delegatorUser: User;
+    delegatorUserId: Scalars["UserId"]["output"];
+    endTime: Scalars["Time"]["output"];
+    id: Scalars["RequestReviewerDelegationId"]["output"];
+    reason: Scalars["String"]["output"];
+    startTime: Scalars["Time"]["output"];
+    updatedAt: Scalars["Time"]["output"];
+};
+export type RequestReviewerDelegationConnection = PageConnection & {
+    __typename?: "RequestReviewerDelegationConnection";
+    edges: Array<RequestReviewerDelegationEdge>;
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+};
+export type RequestReviewerDelegationEdge = Edge & {
+    __typename?: "RequestReviewerDelegationEdge";
+    cursor: Scalars["String"]["output"];
+    node: RequestReviewerDelegation;
+};
+export type RequestReviewerDelegationsFilter = {
+    afterTime?: InputMaybe<Scalars["Time"]["input"]>;
+    beforeTime?: InputMaybe<Scalars["Time"]["input"]>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
+};
+export type RequestReviewerDelegationsSortBy = {
+    direction?: InputMaybe<SortDirection>;
+    field?: InputMaybe<RequestReviewerDelegationsSortByField>;
+};
+export declare enum RequestReviewerDelegationsSortByField {
+    CreatedAt = "CREATED_AT",
+    EndTime = "END_TIME",
+    StartTime = "START_TIME"
+}
 export type RequestStage = {
     __typename?: "RequestStage";
     operator: ReviewStageOperator;
@@ -8622,15 +9206,10 @@ export type RequestTemplateResult = {
     __typename?: "RequestTemplateResult";
     requestTemplate?: Maybe<RequestTemplate>;
 };
-export type RequestTemplateSimple = {
-    __typename?: "RequestTemplateSimple";
-    id: Scalars["RequestTemplateId"]["output"];
-    name: Scalars["String"]["output"];
-};
 export type RequestTemplatesOutput = RequestTemplatesResult;
 export type RequestTemplatesResult = {
     __typename?: "RequestTemplatesResult";
-    requestTemplates: Array<RequestTemplateSimple>;
+    requestTemplates: Array<RequestTemplate>;
 };
 export type RequestTemplatesWithFieldsInput = {
     fetchAll?: InputMaybe<Scalars["Boolean"]["input"]>;
@@ -8647,14 +9226,14 @@ export declare enum RequestType {
 }
 export type RequestedGroup = {
     __typename?: "RequestedGroup";
-    accessLevel?: Maybe<GroupAccessLevel>;
+    accessLevel: GroupAccessLevel;
     group?: Maybe<Group>;
     groupId: Scalars["GroupId"]["output"];
     propagationStatus?: Maybe<PropagationStatus>;
     targetUserAccess?: Maybe<UserGroupAccess>;
 };
 export type RequestedGroupInput = {
-    accessLevel?: InputMaybe<GroupAccessLevelInput>;
+    accessLevel: GroupAccessLevelInput;
     groupId: Scalars["GroupId"]["input"];
 };
 export type RequestedResource = {
@@ -8677,6 +9256,14 @@ export type RequestsInput = {
     sortBy?: RequestsSortBy;
 };
 export type RequestsOutput = RequestsResult;
+export type RequestsRelayInput = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    filters?: RequestRelayFilters;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+    sortBy?: RequestsSortBy;
+};
 export type RequestsResult = {
     __typename?: "RequestsResult";
     cursor?: Maybe<Scalars["String"]["output"]>;
@@ -8748,8 +9335,6 @@ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity &
     ancestorPathToResource?: Maybe<Scalars["String"]["output"]>;
     associatedItems: AssociatedItemConnection;
     auditMessageChannels?: Maybe<Array<MessageChannel>>;
-    /** @deprecated use allowedPermissions */
-    authorizedActions?: Maybe<Array<Scalars["AuthorizedAction"]["output"]>>;
     canHaveUsageData: Scalars["Boolean"]["output"];
     childResources?: Maybe<Array<Resource>>;
     commonMetadata: CommonMetadata;
@@ -8771,6 +9356,8 @@ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity &
     isDeleted: Scalars["Boolean"]["output"];
     isManaged: Scalars["Boolean"]["output"];
     isRequestable: Scalars["Boolean"]["output"];
+    maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
+    maxUsersExceededMessage?: Maybe<Scalars["String"]["output"]>;
     metadata?: Maybe<ResourceMetadata>;
     name: Scalars["String"]["output"];
     /** @deprecated do not use, it doesn't include non-visible resources */
@@ -8785,6 +9372,7 @@ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity &
     paginatedResourceUsers: PaginatedResourceUsersOutput;
     parentResource?: Maybe<Resource>;
     parentResourceId?: Maybe<Scalars["ResourceId"]["output"]>;
+    permissionSources: PermissionSourceConnection;
     principalAssignmentsForEntity: Array<RoleAssignment>;
     remoteId: Scalars["RemoteResourceId"]["output"];
     remoteName: Scalars["String"]["output"];
@@ -8798,9 +9386,14 @@ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity &
     riskSensitivity?: Maybe<RiskSensitivityDetails>;
     /**
      * The role permissions assigned to this resource. It will only be available if
-     * ResourceType is OPAL_SCOPED_ROLE
+     * ResourceType is OPAL_SCOPED_ROLE or OPAL_ROLE (simulated as scoped role)
+     *
+     * Params:
+     * for: will allow you to get scoped role permissions for a specific entity,
+     *   this is helpful if you want to simulate "what permissions do I get on this
+     *   entity?"
      */
-    scopedRolePermissions?: Maybe<Array<ScopedRolePermission>>;
+    scopedRolePermissions: Array<ScopedRolePermission>;
     serviceType: ServiceType;
     tags: Array<ResourceTag>;
     ticketPropagation?: Maybe<TicketPropagation>;
@@ -8829,6 +9422,12 @@ export type ResourceAssociatedItemsArgs = {
 export type ResourcePaginatedResourceUsersArgs = {
     input?: InputMaybe<PaginatedResourceUsersInput>;
 };
+export type ResourcePermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
+};
 export type ResourceAccessAlreadyReviewedError = Error & {
     __typename?: "ResourceAccessAlreadyReviewedError";
     message: Scalars["String"]["output"];
@@ -8921,6 +9520,35 @@ export type ResourceNotFoundError = Error & {
     message: Scalars["String"]["output"];
 };
 export type ResourceOutput = ResourceNotFoundError | ResourceResult;
+export type ResourcePreview = Node & {
+    __typename?: "ResourcePreview";
+    groupResourceCount: Scalars["Int"]["output"];
+    id: Scalars["UUID"]["output"];
+    resource: Resource;
+    resourceToResourceAssignmentCount: Scalars["Int"]["output"];
+    resourceUserCount: Scalars["Int"]["output"];
+    reviewCount: Scalars["Int"]["output"];
+    truncatedGroupResources: Array<GroupResource>;
+    truncatedResourceToResourceAssignments: Array<RoleAssignment>;
+    truncatedResourceUsers: Array<ResourceUser>;
+};
+export type ResourcePreviewConnection = PageConnection & {
+    __typename?: "ResourcePreviewConnection";
+    edges: Array<ResourcePreviewEdge>;
+    filteredCount: Scalars["Int"]["output"];
+    pageInfo: PageInfo;
+    totalCount: Scalars["Int"]["output"];
+    totalReviewCount: Scalars["Int"]["output"];
+};
+export type ResourcePreviewEdge = Edge & {
+    __typename?: "ResourcePreviewEdge";
+    cursor: Scalars["String"]["output"];
+    node: ResourcePreview;
+};
+export type ResourcePreviewFilters = {
+    filters?: FiltersInput;
+    hideEmpty?: InputMaybe<Scalars["Boolean"]["input"]>;
+};
 export type ResourceProposal = {
     __typename?: "ResourceProposal";
     adminOwnerId: Scalars["OwnerId"]["output"];
@@ -8942,6 +9570,7 @@ export type ResourceRequestConfigurationOutput = {
 };
 export type ResourceRequestStatusCountsInput = {
     resourceId: Scalars["ResourceId"]["input"];
+    userId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
 export type ResourceRequestStatusCountsOutput = ResourceNotFoundError | ResourceRequestStatusCountsResult;
 export type ResourceRequestStatusCountsResult = {
@@ -8952,11 +9581,6 @@ export type ResourceResult = {
     __typename?: "ResourceResult";
     resource: Resource;
 };
-export type ResourceRoleKey = {
-    __typename?: "ResourceRoleKey";
-    accessLevelRemoteId?: Maybe<Scalars["String"]["output"]>;
-    resourceId: Scalars["ResourceId"]["output"];
-};
 export type ResourceSmall = {
     __typename?: "ResourceSmall";
     id: Scalars["ResourceId"]["output"];
@@ -9005,6 +9629,7 @@ export declare enum ResourceType {
     AwsEc2Instance = "AWS_EC2_INSTANCE",
     AwsEksCluster = "AWS_EKS_CLUSTER",
     AwsIamRole = "AWS_IAM_ROLE",
+    AwsOrganizationalUnit = "AWS_ORGANIZATIONAL_UNIT",
     AwsRdsMysqlCluster = "AWS_RDS_MYSQL_CLUSTER",
     AwsRdsMysqlInstance = "AWS_RDS_MYSQL_INSTANCE",
     AwsRdsPostgresCluster = "AWS_RDS_POSTGRES_CLUSTER",
@@ -9023,9 +9648,11 @@ export declare enum ResourceType {
     AzureSubscription = "AZURE_SUBSCRIPTION",
     AzureUserAssignedManagedIdentity = "AZURE_USER_ASSIGNED_MANAGED_Identity",
     AzureVirtualMachine = "AZURE_VIRTUAL_MACHINE",
+    CoupaRole = "COUPA_ROLE",
     Custom = "CUSTOM",
     CustomConnector = "CUSTOM_CONNECTOR",
     DatabricksAccountServicePrincipal = "DATABRICKS_ACCOUNT_SERVICE_PRINCIPAL",
+    DatastaxAstraRole = "DATASTAX_ASTRA_ROLE",
     GcpBigQueryDataset = "GCP_BIG_QUERY_DATASET",
     GcpBigQueryTable = "GCP_BIG_QUERY_TABLE",
     GcpBucket = "GCP_BUCKET",
@@ -9041,6 +9668,7 @@ export declare enum ResourceType {
     GitHubRepo = "GIT_HUB_REPO",
     GitLabProject = "GIT_LAB_PROJECT",
     GoogleWorkspaceRole = "GOOGLE_WORKSPACE_ROLE",
+    IlevelAdvancedRole = "ILEVEL_ADVANCED_ROLE",
     MariadbInstance = "MARIADB_INSTANCE",
     MongoAtlasInstance = "MONGO_ATLAS_INSTANCE",
     MongoInstance = "MONGO_INSTANCE",
@@ -9103,6 +9731,7 @@ export type ResourceUser = {
     access?: Maybe<ResourceUserAccess>;
     accessLevel: ResourceAccessLevel;
     accessStats?: Maybe<AccessStats>;
+    extendability: RequestConfiguration;
     id: Scalars["UUID"]["output"];
     mostRecentSessionEnded?: Maybe<Scalars["Time"]["output"]>;
     propagationStatus?: Maybe<PropagationStatus>;
@@ -9169,6 +9798,7 @@ export type ResourceUserFiltersInput = {
     resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
     resourceName?: InputMaybe<Scalars["String"]["input"]>;
     resourceTypes?: InputMaybe<Array<ResourceType>>;
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
     userFullName?: InputMaybe<Scalars["String"]["input"]>;
 };
 export declare enum ResourceUserSortByField {
@@ -9338,15 +9968,16 @@ export type RoleAssignment = {
     entityID: Scalars["EntityId"]["output"];
     entityType: EntityType;
     id: Scalars["RoleAssignmentId"]["output"];
+    isHidden?: Maybe<Scalars["Boolean"]["output"]>;
     lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
     principal?: Maybe<Principal>;
-    principalID: Scalars["PrincipalId"]["output"];
+    principalID: Scalars["EntityId"]["output"];
     principalType: EntityType;
     propagationStatus?: Maybe<PropagationStatus>;
     provisionSource: ProvisionSource;
     suggestion?: Maybe<RoleAssignmentSuggestion>;
 };
-export type RoleAssignmentAction = InvestigateEventAction | ModifyAccessAction | RuleInsightAction;
+export type RoleAssignmentAction = InvestigateEventAction | ModifyAccessAction | RuleInsightAction | SubmitHiddenGrantFeedback;
 export type RoleAssignmentAlreadyExists = Error & {
     __typename?: "RoleAssignmentAlreadyExists";
     message: Scalars["String"]["output"];
@@ -9357,6 +9988,9 @@ export type RoleAssignmentConnection = PageConnection & {
     roleAssignments: Array<RoleAssignment>;
     totalCount: Scalars["Int"]["output"];
 };
+export type RoleAssignmentConnectionTotalCountArgs = {
+    scope?: InputMaybe<RoleAssignmentScope>;
+};
 export type RoleAssignmentEntity = {
     accessLevels?: Maybe<Array<IAccessLevel>>;
     id: Scalars["UUID"]["output"];
@@ -9373,6 +10007,13 @@ export type RoleAssignmentEntityTypeScope = {
     groupTypes?: InputMaybe<Array<GroupType>>;
     resourceTypes?: InputMaybe<Array<ResourceType>>;
 };
+export type RoleAssignmentKeyInput = {
+    accessLevel: AccessLevelInput;
+    entityID: Scalars["EntityId"]["input"];
+    entityType: EntityType;
+    principalID: Scalars["EntityId"]["input"];
+    principalType: EntityType;
+};
 export type RoleAssignmentNotFoundError = Error & {
     __typename?: "RoleAssignmentNotFoundError";
     message: Scalars["String"]["output"];
@@ -9444,7 +10085,7 @@ export declare enum RoleAssignmentsSortByField {
     VulnerabilityCount = "VULNERABILITY_COUNT"
 }
 export declare enum RolePermission {
-    AssignReviewers = "ASSIGN_REVIEWERS",
+    AssignUarReviewers = "ASSIGN_UAR_REVIEWERS",
     Create = "CREATE",
     Delete = "DELETE",
     EditAssignments = "EDIT_ASSIGNMENTS",
@@ -9457,6 +10098,9 @@ export declare enum RolePermission {
     Import = "IMPORT",
     Read = "READ",
     ReadAssignments = "READ_ASSIGNMENTS",
+    ReadSettings = "READ_SETTINGS",
+    RequestOnBehalf = "REQUEST_ON_BEHALF",
+    ResetMfa = "RESET_MFA",
     SendReminders = "SEND_REMINDERS",
     Stop = "STOP",
     Sync = "SYNC"
@@ -9469,6 +10113,13 @@ export type RolePermissionKey = {
 export type RolePermissionTargetEntity = {
     allowedPermissions: Array<RolePermissionKey>;
     id: Scalars["UUID"]["output"];
+    permissionSources: PermissionSourceConnection;
+};
+export type RolePermissionTargetEntityPermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
 };
 export declare enum RolePermissionTargetType {
     AccessReview = "ACCESS_REVIEW",
@@ -9607,9 +10258,11 @@ export declare enum ServiceType {
     AwsIam = "AWS_IAM",
     AwsSso = "AWS_SSO",
     AzureAd = "AZURE_AD",
+    Coupa = "COUPA",
     Custom = "CUSTOM",
     CustomConnector = "CUSTOM_CONNECTOR",
     Databricks = "DATABRICKS",
+    DatastaxAstra = "DATASTAX_ASTRA",
     Duo = "DUO",
     GcpBigQuery = "GCP_BIG_QUERY",
     GcpIam = "GCP_IAM",
@@ -9845,7 +10498,7 @@ export type StartSyncInput = {
 export type StartSyncOutput = AccessReviewNotFoundError | ConnectionNotFoundError | GroupNotFoundError | InvalidSyncTypeError | ResourceNotFoundError | StartSyncResult;
 export type StartSyncResult = {
     __typename?: "StartSyncResult";
-    syncTask: SyncTask;
+    syncTasks: Array<SyncTask>;
 };
 export type StopAccessReviewInput = {
     id: Scalars["AccessReviewId"]["input"];
@@ -9898,11 +10551,9 @@ export declare enum SubEventsSortByField {
     Entity_3Name = "ENTITY_3_NAME",
     Entity_4Name = "ENTITY_4_NAME"
 }
-export type SuggestedAccessList = {
-    __typename?: "SuggestedAccessList";
-    resourceRoleKeys?: Maybe<Array<ResourceRoleKey>>;
-    type: RecommendationsSubscoreType;
-    userRoleKeys?: Maybe<Array<UserRoleKey>>;
+export type SubmitHiddenGrantFeedback = {
+    __typename?: "SubmitHiddenGrantFeedback";
+    isHidden?: Maybe<Scalars["Boolean"]["output"]>;
 };
 export type Suggestion = GroupSuggestion | ResourceSuggestion;
 export type SuggestionCounts = {
@@ -9911,6 +10562,7 @@ export type SuggestionCounts = {
     totalCount: Scalars["Int"]["output"];
 };
 export type SuggestionsInput = {
+    favoritesOnly?: Scalars["Boolean"]["input"];
     numMaxSuggestions?: InputMaybe<Scalars["Int"]["input"]>;
 };
 export type SuggestionsOutput = SuggestionsResult;
@@ -9952,6 +10604,7 @@ export type SupportTicketResult = {
     ticket: SupportTicket;
 };
 export type SupportTicketsInput = {
+    searchQuery?: InputMaybe<Scalars["String"]["input"]>;
     thirdPartyProvider: ThirdPartyProvider;
 };
 export type SupportTicketsOutput = SupportTicketApiKeyNotFoundError | SupportTicketsResult | UserFacingError;
@@ -10025,6 +10678,14 @@ export type SyncTaskStep = {
     numItemsCompleted: Scalars["Int"]["output"];
     totalNumItems: Scalars["Int"]["output"];
 };
+export type SyncTasksInput = {
+    ids?: InputMaybe<Array<Scalars["SyncTaskId"]["input"]>>;
+};
+export type SyncTasksOutput = SyncTaskNotFoundError | SyncTasksResult;
+export type SyncTasksResult = {
+    __typename?: "SyncTasksResult";
+    syncTasks: Array<SyncTask>;
+};
 export declare enum SyncType {
     PullConnectionsAll = "PULL_CONNECTIONS_ALL",
     PullConnectionsAllGroups = "PULL_CONNECTIONS_ALL_GROUPS",
@@ -10153,6 +10814,8 @@ export type TailscaleConnectionMetadataInput = {
 };
 export type TailscaleCredentialsInput = {
     apiToken: Scalars["String"]["input"];
+    oauthClientId: Scalars["String"]["input"];
+    oauthClientSecret: Scalars["String"]["input"];
 };
 export type TargetUserHasNestedAccessError = Error & {
     __typename?: "TargetUserHasNestedAccessError";
@@ -10161,6 +10824,7 @@ export type TargetUserHasNestedAccessError = Error & {
 };
 export declare enum TaskTrigger {
     AccessExpired = "ACCESS_EXPIRED",
+    AccessExtended = "ACCESS_EXTENDED",
     AccessReview = "ACCESS_REVIEW",
     AdminAction = "ADMIN_ACTION",
     BreakGlassUsed = "BREAK_GLASS_USED",
@@ -10254,14 +10918,20 @@ export type ThirdPartyIntegration = {
     connectionId?: Maybe<Scalars["ConnectionId"]["output"]>;
     id: Scalars["ThirdPartyTokenId"]["output"];
     integrationType: IntegrationType;
-    slackMetadata?: Maybe<ThirdPartyIntegrationSlackMetadata>;
+    metadata?: Maybe<ThirdPartyIntegrationMetadata>;
     thirdPartyProvider: ThirdPartyProvider;
 };
+export type ThirdPartyIntegrationGitHubMetadata = {
+    __typename?: "ThirdPartyIntegrationGitHubMetadata";
+    appName: Scalars["String"]["output"];
+    targetId: Scalars["Int"]["output"];
+};
 export type ThirdPartyIntegrationInput = {
     connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
     thirdPartyProvider: ThirdPartyProvider;
     userId?: InputMaybe<Scalars["UserId"]["input"]>;
 };
+export type ThirdPartyIntegrationMetadata = ThirdPartyIntegrationGitHubMetadata | ThirdPartyIntegrationSlackMetadata;
 export type ThirdPartyIntegrationMetadataInput = {
     googlechat?: InputMaybe<GoogleChatMetadataInput>;
     jira?: InputMaybe<JiraMetadataInput>;
@@ -10299,6 +10969,8 @@ export type ThirdPartyIntegrationsResult = {
 export declare enum ThirdPartyProvider {
     Auth0 = "AUTH0",
     GitHub = "GIT_HUB",
+    GitHubConnection = "GIT_HUB_CONNECTION",
+    GitHubRegistration = "GIT_HUB_REGISTRATION",
     GitLab = "GIT_LAB",
     GitLabConnection = "GIT_LAB_CONNECTION",
     GoogleChat = "GOOGLE_CHAT",
@@ -10414,6 +11086,7 @@ export type UiNotification = {
     userId: Scalars["UserId"]["output"];
 };
 export declare enum UiSource {
+    Catalog = "CATALOG",
     PublicApi = "PUBLIC_API",
     ThreatCenter = "THREAT_CENTER",
     Unknown = "UNKNOWN"
@@ -10522,6 +11195,8 @@ export type UpdateConfigurationTemplateInput = {
     breakGlassUsersIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
     customRequestNotification?: InputMaybe<NullableString>;
     id: Scalars["ConfigurationId"]["input"];
+    maxDirectUsersAllowed?: InputMaybe<NullableInt>;
+    maxUsersExceededMessage?: InputMaybe<NullableString>;
     messageChannelIds?: InputMaybe<Array<Scalars["MessageChannelId"]["input"]>>;
     name?: InputMaybe<Scalars["String"]["input"]>;
     onCallScheduleIds?: InputMaybe<Array<Scalars["OnCallScheduleId"]["input"]>>;
@@ -10552,6 +11227,7 @@ export type UpdateConnectionInput = {
     importVisibilityGroupsIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
     metadata?: InputMaybe<ConnectionMetadataInput>;
     name?: InputMaybe<Scalars["String"]["input"]>;
+    provisionConfigurations?: InputMaybe<Array<ProvisionConfigurationInput>>;
     visibility?: InputMaybe<Visibility>;
     visibilityGroupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
     webhookEnabled?: InputMaybe<Scalars["Boolean"]["input"]>;
@@ -10660,7 +11336,7 @@ export type UpdateGroupResult = {
     group: Group;
 };
 export type UpdateGroupUserInput = {
-    accessLevel?: InputMaybe<GroupAccessLevelInput>;
+    accessLevel: GroupAccessLevelInput;
     durationInMinutes?: InputMaybe<NullableInt>;
     groupId: Scalars["GroupId"]["input"];
     userId: Scalars["UserId"]["input"];
@@ -10709,6 +11385,8 @@ export type UpdateItemsInput = {
     forkConfigurationTemplates?: InputMaybe<Scalars["Boolean"]["input"]>;
     groupAccessRuleCondition?: InputMaybe<AccessRuleConditionInput>;
     groupLeaderUserIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
+    maxDirectUsersAllowed?: InputMaybe<NullableInt>;
+    maxUsersExceededMessage?: InputMaybe<NullableString>;
     messageChannelIds?: InputMaybe<Array<Scalars["MessageChannelId"]["input"]>>;
     name?: InputMaybe<Scalars["String"]["input"]>;
     onCallSchedules?: InputMaybe<Array<OnCallScheduleInput>>;
@@ -10735,19 +11413,22 @@ export type UpdateOrganizationSettingsInput = {
     auditTicketProvider?: InputMaybe<NullableTicketProvider>;
     authSessionExpirationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
     createOrUpdateOidcProviderInput?: InputMaybe<CreateOrUpdateOidcProviderInput>;
+    customSearchLink?: InputMaybe<CustomSearchLinkInput>;
     customerSupportExpiresAt?: InputMaybe<Scalars["Time"]["input"]>;
+    defaultNotifications?: InputMaybe<DefaultNotificationsInput>;
     dryRunModeEnabled?: InputMaybe<Scalars["Boolean"]["input"]>;
     errorNotificationSetting?: InputMaybe<ErrorNotificationSettingType>;
     isRemoteReadOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
     maxGroupDurationInMinutes?: InputMaybe<NullableInt>;
     maxResourceDurationInMinutes?: InputMaybe<NullableInt>;
+    maxUsersExceededMessage?: InputMaybe<Scalars["String"]["input"]>;
     reasonMinWordCount?: InputMaybe<NullableInt>;
     roleCreationReviewerOwnerId?: InputMaybe<NullableOwnerId>;
     settings?: InputMaybe<Array<GeneralSettingType>>;
     syncErrorHandlerOwnerId?: InputMaybe<NullableOwnerId>;
     unusedAccessThresholdInDays?: InputMaybe<Scalars["Int"]["input"]>;
 };
-export type UpdateOrganizationSettingsOutput = AccessExpiringNotificationsInvalidError | AccessRequestEscalationPeriodInvalidError | AuthSessionExpirationInvalidError | CustomerSupportSettingsInvalid | OidcIssuerNotValidError | OrgMaxGroupDurationInvalidError | OrgMaxResourceDurationInvalidError | OrganizationSettingsNotFoundError | ReasonMinWordCountInvalidError | UpdateOrganizationSettingsResult;
+export type UpdateOrganizationSettingsOutput = AccessExpiringNotificationsInvalidError | AccessRequestEscalationPeriodInvalidError | AuthSessionExpirationInvalidError | CustomSearchLinkInvalidError | CustomerSupportSettingsInvalid | OidcIssuerNotValidError | OrgMaxGroupDurationInvalidError | OrgMaxResourceDurationInvalidError | OrganizationSettingsNotFoundError | ReasonMinWordCountInvalidError | UpdateOrganizationSettingsResult;
 export type UpdateOrganizationSettingsResult = {
     __typename?: "UpdateOrganizationSettingsResult";
     settings: OrganizationSettings;
@@ -10777,7 +11458,7 @@ export type UpdateRequestTemplateInput = {
 export type UpdateRequestTemplateOutput = CustomFieldExistsError | RequestTemplateNameExistsError | UpdateRequestTemplateResult;
 export type UpdateRequestTemplateResult = {
     __typename?: "UpdateRequestTemplateResult";
-    requestTemplate: RequestTemplateSimple;
+    requestTemplate: RequestTemplate;
 };
 export type UpdateResourceCustomAccessLevelInput = {
     id: Scalars["ResourceCustomAccessLevelId"]["input"];
@@ -10834,11 +11515,11 @@ export type UpdateReviewerStagesInput = {
     stages?: InputMaybe<Array<ReviewerInputStage>>;
 };
 export type UpdateRoleAssignmentInput = {
-    accessLevel?: InputMaybe<AccessLevelInput>;
+    accessLevel: AccessLevelInput;
     entityID: Scalars["EntityId"]["input"];
     entityType: EntityType;
     newDurationInMinutes?: InputMaybe<NullableInt>;
-    principalID: Scalars["PrincipalId"]["input"];
+    principalID: Scalars["EntityId"]["input"];
     principalType: EntityType;
 };
 export type UpdateRoleAssignmentResult = {
@@ -10945,7 +11626,10 @@ export type User = BaseEntity & DisplayableEntity & Node & Principal & RolePermi
     organizationId: Scalars["OrganizationId"]["output"];
     paginatedUserGroups: PaginatedUserGroupsOutput;
     paginatedUserResources: PaginatedUserResourcesOutput;
+    permissionSources: PermissionSourceConnection;
     position: Scalars["String"]["output"];
+    requestReviewerDelegationsGiven: Array<RequestReviewerDelegation>;
+    requestReviewerDelegationsReceived: Array<RequestReviewerDelegation>;
     secondaryEmails: Array<Scalars["String"]["output"]>;
     teamAttr?: Maybe<Scalars["String"]["output"]>;
     updatedAt: Scalars["Time"]["output"];
@@ -10961,10 +11645,16 @@ export type UserAccessReviewItemsArgs = {
     first?: InputMaybe<Scalars["Int"]["input"]>;
 };
 export type UserPaginatedUserGroupsArgs = {
-    input?: InputMaybe<PaginatedUserGroupsInput>;
+    input?: PaginatedUserGroupsInput;
 };
 export type UserPaginatedUserResourcesArgs = {
-    input?: InputMaybe<PaginatedUserResourcesInput>;
+    input?: PaginatedUserResourcesInput;
+};
+export type UserPermissionSourcesArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    first?: InputMaybe<Scalars["Int"]["input"]>;
+    last?: InputMaybe<Scalars["Int"]["input"]>;
 };
 export type UserUserTagsArgs = {
     input?: InputMaybe<UserTagsByTagInput>;
@@ -10994,10 +11684,21 @@ export type UserCannotRequestAccessForTargetGroupError = Error & {
 };
 export type UserConnection = PageConnection & {
     __typename?: "UserConnection";
+    assignedCount: Scalars["Int"]["output"];
     edges: Array<UserEdge>;
     pageInfo: PageInfo;
+    reviewedCount: Scalars["Int"]["output"];
     totalCount: Scalars["Int"]["output"];
 };
+export type UserDelegationsNotFoundError = Error & {
+    __typename?: "UserDelegationsNotFoundError";
+    message: Scalars["String"]["output"];
+};
+export type UserDelegationsOutput = UserDelegationsNotFoundError | UserDelegationsResult;
+export type UserDelegationsResult = {
+    __typename?: "UserDelegationsResult";
+    delegations: Array<RequestReviewerDelegation>;
+};
 export type UserEdge = Edge & {
     __typename?: "UserEdge";
     cursor: Scalars["String"]["output"];
@@ -11070,16 +11771,13 @@ export type UserResult = {
     __typename?: "UserResult";
     user: User;
 };
-export type UserRoleKey = {
-    __typename?: "UserRoleKey";
-    accessLevelRemoteId?: Maybe<Scalars["String"]["output"]>;
-    userId: Scalars["UserId"]["output"];
-};
 export type UserSettings = {
     __typename?: "UserSettings";
-    allNotifications: Array<NotificationType>;
+    allNotifications?: Maybe<Array<NotificationType>>;
     createdAt: Scalars["Time"]["output"];
     id: Scalars["UserId"]["output"];
+    notificationPreferences?: Maybe<Array<NotificationPreference>>;
+    /** @deprecated use notificationPreferences instead */
     updatedAt: Scalars["Time"]["output"];
 };
 export type UserSettingsInvalidError = Error & {
@@ -11145,7 +11843,7 @@ export type UsersInput = {
     teamFilter?: InputMaybe<TeamFilter>;
     titleFilter?: InputMaybe<TitleFilter>;
     userEmails?: InputMaybe<Array<Scalars["String"]["input"]>>;
-    userIds?: InputMaybe<Array<Scalars["String"]["input"]>>;
+    userIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
 };
 export type UsersOutput = UsersResult;
 export type UsersResult = {
@@ -11162,6 +11860,8 @@ export declare enum UsersSortByField {
     CreatedAt = "CREATED_AT",
     Email = "EMAIL",
     FirstName = "FIRST_NAME",
+    FullName = "FULL_NAME",
+    HrIdpStatus = "HR_IDP_STATUS",
     LastName = "LAST_NAME",
     Manager = "MANAGER",
     Team = "TEAM",
@@ -11388,11 +12088,6 @@ export declare enum RequestDecisionLevel {
     Admin = "ADMIN",
     Regular = "REGULAR"
 }
-export type UpdateScopedRoleAssignmentsInput = {
-    newDurationInMinutes?: InputMaybe<NullableInt>;
-    scope?: InputMaybe<RoleAssignmentSearchScope>;
-    source?: InputMaybe<UiSource>;
-};
 export type GetGroupQueryVariables = Exact<{
     id: Scalars["GroupId"]["input"];
 }>;
@@ -11479,6 +12174,8 @@ export type CreateRequestMutation = {
     } | {
         __typename?: "ItemCannotBeRequestedError";
         message: string;
+    } | {
+        __typename?: "ItemsAtCapacityError";
     } | {
         __typename?: "LinkedGroupNotRequestableError";
         message: string;
@@ -11725,11 +12422,11 @@ export type RequestFieldsFragment = {
                 GroupFieldsFragment: GroupFieldsFragment;
             };
         }) | null;
-        accessLevel?: {
+        accessLevel: {
             __typename?: "GroupAccessLevel";
             accessLevelName: string;
             accessLevelRemoteId: string;
-        } | null;
+        };
     }>;
 } & {
     " $fragmentName"?: "RequestFieldsFragment";
@@ -11839,11 +12536,11 @@ export type GroupAccessLevelsQuery = {
     groupAccessLevels: {
         __typename?: "GroupAccessLevelsResult";
         groupId: string;
-        accessLevels?: Array<{
+        accessLevels: Array<{
             __typename?: "GroupAccessLevel";
             accessLevelName: string;
             accessLevelRemoteId: string;
-        }> | null;
+        }>;
     } | {
         __typename?: "GroupNotFoundError";
     };