sailpoint-api-client 1.8.57 → 1.8.59

package/v2026/api.ts

@@ -2247,6 +2247,12 @@ export interface AccessRequestAdminItemStatusV2026 {
      * @memberof AccessRequestAdminItemStatusV2026
      */
     'description'?: string | null;
+    /**
+     * When the role access is scheduled for provisioning.
+     * @type {string}
+     * @memberof AccessRequestAdminItemStatusV2026
+     */
+    'startDate'?: string | null;
     /**
      * When the role access is scheduled for removal.
      * @type {string}
@@ -2589,6 +2595,12 @@ export interface AccessRequestItemV2026 {
      * @memberof AccessRequestItemV2026
      */
     'clientMetadata'?: { [key: string]: string; };
+    /**
+     * The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. 
+     * @type {string}
+     * @memberof AccessRequestItemV2026
+     */
+    'startDate'?: string;
     /**
      * The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a  GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. 
      * @type {string}
@@ -3288,7 +3300,7 @@ export interface AccessRequestV2026 {
      */
     'clientMetadata'?: { [key: string]: string; };
     /**
-     * Additional submit data structure with requestedFor containing requestedItems allowing distinction for each request item and Identity. * Can only be used when \'requestedFor\' and \'requestedItems\' are not separately provided * Adds ability to specify which account the user wants the access on, in case they have multiple accounts on a source * Allows the ability to request items with different remove dates * Also allows different combinations of request items and identities in the same request * Only for use in GRANT_ACCESS type requests 
+     * Additional submit data structure with requestedFor containing requestedItems allowing distinction for each request item and Identity. * Can only be used when \'requestedFor\' and \'requestedItems\' are not separately provided * Adds ability to specify which account the user wants the access on, in case they have multiple accounts on a source * Allows the ability to request items with different start dates * Allows the ability to request items with different remove dates * Also allows different combinations of request items and identities in the same request * Only for use in GRANT_ACCESS type requests 
      * @type {Array<RequestedForDtoRefV2026>}
      * @memberof AccessRequestV2026
      */
@@ -14900,6 +14912,24 @@ export interface CompletedApprovalV2026 {
      * @memberof CompletedApprovalV2026
      */
     'currentRemoveDate'?: string | null;
+    /**
+     * The date the role or access profile or entitlement is/will assigned to the specified identity.
+     * @type {string}
+     * @memberof CompletedApprovalV2026
+     */
+    'startDate'?: string;
+    /**
+     * If true, then the request is to change the start date or sunrise date.
+     * @type {boolean}
+     * @memberof CompletedApprovalV2026
+     */
+    'startUpdateRequested'?: boolean;
+    /**
+     * The start date or sunrise date that was assigned at the time of the request.
+     * @type {string}
+     * @memberof CompletedApprovalV2026
+     */
+    'currentStartDate'?: string;
     /**
      * 
      * @type {SodViolationContextCheckCompletedV2026}
@@ -17079,6 +17109,43 @@ export interface CreateScheduledSearchRequestV2026 {
      */
     'displayQueryDetails'?: boolean;
 }
+/**
+ * 
+ * @export
+ * @interface CreateSourceSubtypeRequestV2026
+ */
+export interface CreateSourceSubtypeRequestV2026 {
+    /**
+     * ID of the source where subtype is created.
+     * @type {string}
+     * @memberof CreateSourceSubtypeRequestV2026
+     */
+    'sourceId': string;
+    /**
+     * Technical name of the subtype.
+     * @type {string}
+     * @memberof CreateSourceSubtypeRequestV2026
+     */
+    'technicalName': string;
+    /**
+     * Display name of the subtype.
+     * @type {string}
+     * @memberof CreateSourceSubtypeRequestV2026
+     */
+    'displayName': string;
+    /**
+     * Description of the subtype.
+     * @type {string}
+     * @memberof CreateSourceSubtypeRequestV2026
+     */
+    'description': string;
+    /**
+     * Type of the subtype.
+     * @type {string}
+     * @memberof CreateSourceSubtypeRequestV2026
+     */
+    'type'?: string;
+}
 /**
  * Full delivery configuration. method and endpoint_url are required.
  * @export
@@ -37060,6 +37127,24 @@ export interface PendingApprovalV2026 {
      * @memberof PendingApprovalV2026
      */
     'currentRemoveDate'?: string;
+    /**
+     * The date the role or access profile or entitlement is/will assigned to the specified identity.
+     * @type {string}
+     * @memberof PendingApprovalV2026
+     */
+    'startDate'?: string;
+    /**
+     * If true, then the request is to change the start date or sunrise date.
+     * @type {boolean}
+     * @memberof PendingApprovalV2026
+     */
+    'startUpdateRequested'?: boolean;
+    /**
+     * The start date or sunrise date that was assigned at the time of the request.
+     * @type {string}
+     * @memberof PendingApprovalV2026
+     */
+    'currentStartDate'?: string;
     /**
      * 
      * @type {SodViolationContextCheckCompletedV2026}
@@ -40055,6 +40140,12 @@ export interface RequestedItemDtoRefV2026 {
      * @memberof RequestedItemDtoRefV2026
      */
     'clientMetadata'?: { [key: string]: string; };
+    /**
+     * The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. 
+     * @type {string}
+     * @memberof RequestedItemDtoRefV2026
+     */
+    'startDate'?: string;
     /**
      * The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a  GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. 
      * @type {string}
@@ -40391,6 +40482,12 @@ export interface RequestedItemStatusV2026 {
      * @memberof RequestedItemStatusV2026
      */
     'description'?: string | null;
+    /**
+     * When the role access is scheduled for provisioning.
+     * @type {string}
+     * @memberof RequestedItemStatusV2026
+     */
+    'startDate'?: string | null;
     /**
      * When the role access is scheduled for removal.
      * @type {string}
@@ -49896,6 +49993,12 @@ export interface SourceSubtypeWithSourceV2026 {
      * @memberof SourceSubtypeWithSourceV2026
      */
     'source'?: SourceSubtypeWithSourceSourceV2026;
+    /**
+     * Indicates if the subtype is managed by the system.
+     * @type {boolean}
+     * @memberof SourceSubtypeWithSourceV2026
+     */
+    'systemManaged'?: boolean;
 }
 /**
  * 
@@ -59719,7 +59822,7 @@ export const AccessRequestsV2026ApiAxiosParamCreator = function (configuration?:
             };
         },
         /**
-         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
+         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \'startDate\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
          * @summary Submit access request
          * @param {AccessRequestV2026} accessRequestV2026 
          * @param {*} [axiosOptions] Override http request option.
@@ -59945,7 +60048,7 @@ export const AccessRequestsV2026ApiAxiosParamCreator = function (configuration?:
          * @param {boolean} [count] If this is true, the *X-Total-Count* response header populates with the number of results that would be returned if limit and offset were ignored.
          * @param {number} [limit] Max number of results to return.
          * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Defaults to 0 if not specified.
-         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
+         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
          * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
          * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
          * @param {*} [axiosOptions] Override http request option.
@@ -60191,7 +60294,7 @@ export const AccessRequestsV2026ApiFp = function(configuration?: Configuration)
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
+         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \'startDate\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
          * @summary Submit access request
          * @param {AccessRequestV2026} accessRequestV2026 
          * @param {*} [axiosOptions] Override http request option.
@@ -60262,7 +60365,7 @@ export const AccessRequestsV2026ApiFp = function(configuration?: Configuration)
          * @param {boolean} [count] If this is true, the *X-Total-Count* response header populates with the number of results that would be returned if limit and offset were ignored.
          * @param {number} [limit] Max number of results to return.
          * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. Defaults to 0 if not specified.
-         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
+         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
          * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
          * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
          * @param {*} [axiosOptions] Override http request option.
@@ -60352,7 +60455,7 @@ export const AccessRequestsV2026ApiFactory = function (configuration?: Configura
             return localVarFp.closeAccessRequest(requestParameters.closeAccessRequestV2026, axiosOptions).then((request) => request(axios, basePath));
         },
         /**
-         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
+         * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \'startDate\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
          * @summary Submit access request
          * @param {AccessRequestsV2026ApiCreateAccessRequestRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
@@ -60654,7 +60757,7 @@ export interface AccessRequestsV2026ApiListAdministratorsAccessRequestStatusRequ
     readonly offset?: number
 
     /**
-     * Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
+     * Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
      * @type {string}
      * @memberof AccessRequestsV2026ApiListAdministratorsAccessRequestStatus
      */
@@ -60766,7 +60869,7 @@ export class AccessRequestsV2026Api extends BaseAPI {
     }
 
     /**
-     * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
+     * Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes.  >**Security:** idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level.  :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\'s user context. :::  Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected.  It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/idn/api/v3/list-access-request-status) or the [Pending Access Request Approvals](https://developer.sailpoint.com/idn/api/v3/list-pending-approvals) APIs. You can also use the [Search API](https://developer.sailpoint.com/idn/api/v3/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\'t requesting access that is already granted. If you use this API to request access that an identity already has,  without changing the account details or end date information from the existing assignment,  the API will cancel the request as a duplicate.  There are two types of access request:  __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/idn/api/v3/get-access-request-config) endpoint for request configuration options.   * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \'requestedForWithRequestedItems\' for users to specify account selections while requesting items where they have more than one account on the source.  :::caution  If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.  :::  __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.  * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \'startDate\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time.  * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \'assignmentId\' and \'nativeIdentity\' fields. These fields should be used within the \'requestedItems\' section for the revoke requests.  * Usage of \'requestedForWithRequestedItems\' field is not supported for revoke requests. 
      * @summary Submit access request
      * @param {AccessRequestsV2026ApiCreateAccessRequestRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
@@ -107664,16 +107767,77 @@ export class MachineAccountMappingsV2026Api extends BaseAPI {
  */
 export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
+        /**
+         * Create a new machine account subtype.
+         * @summary Create subtype
+         * @param {CreateSourceSubtypeRequestV2026} createSourceSubtypeRequestV2026 
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        createSourceSubtype: async (createSourceSubtypeRequestV2026: CreateSourceSubtypeRequestV2026, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'createSourceSubtypeRequestV2026' is not null or undefined
+            assertParamExists('createSourceSubtype', 'createSourceSubtypeRequestV2026', createSourceSubtypeRequestV2026)
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
+            const localVarPath = `/source-subtypes`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication applicationAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "applicationAuth", [], configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(createSourceSubtypeRequestV2026, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                axiosOptions: localVarRequestOptions,
+            };
+        },
         /**
          * Delete a machine account subtype by subtype ID.  Note: If subtype has approval settings or entitlement for machine account creation enablement then it\'ll be also deleted.
          * @summary Delete subtype by ID
          * @param {string} subtypeId The ID of the subtype.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        deleteMachineAccountSubtype: async (subtypeId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        deleteMachineAccountSubtype: async (subtypeId: string, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'subtypeId' is not null or undefined
             assertParamExists('deleteMachineAccountSubtype', 'subtypeId', subtypeId)
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
             const localVarPath = `/source-subtypes/{subtypeId}`
                 .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -107701,6 +107865,61 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
 
 
     
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                axiosOptions: localVarRequestOptions,
+            };
+        },
+        /**
+         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
+         * @summary Machine Subtype Approval Config
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {string} subtypeId machine subtype id.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        getMachineAccountSubtypeApprovalConfig: async (xSailPointExperimental: string, subtypeId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
+            // verify required parameter 'xSailPointExperimental' is not null or undefined
+            assertParamExists('getMachineAccountSubtypeApprovalConfig', 'xSailPointExperimental', xSailPointExperimental)
+            // verify required parameter 'subtypeId' is not null or undefined
+            assertParamExists('getMachineAccountSubtypeApprovalConfig', 'subtypeId', subtypeId)
+            const localVarPath = `/source-subtypes/{subtypeId}/machine-config`
+                .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+
+    
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
@@ -107714,12 +107933,17 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
          * Get a machine account subtype by subtype ID.
          * @summary Get subtype by ID
          * @param {string} subtypeId The ID of the subtype.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        getSourceSubtypeById: async (subtypeId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        getSourceSubtypeById: async (subtypeId: string, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'subtypeId' is not null or undefined
             assertParamExists('getSourceSubtypeById', 'subtypeId', subtypeId)
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
             const localVarPath = `/source-subtypes/{subtypeId}`
                 .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -107747,9 +107971,145 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
 
 
     
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                axiosOptions: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all machine account subtypes.
+         * @summary Retrieve all subtypes
+         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, sw*  **technicalName**: *eq, sw*  **source.id**: *eq, in*
+         * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **displayName, technicalName**
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+         * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        listSourceSubtypes: async (filters?: string, sorters?: string, xSailPointExperimental?: string, count?: boolean, limit?: number, offset?: number, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
+            const localVarPath = `/source-subtypes`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication applicationAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "applicationAuth", [], configuration)
+
+            if (filters !== undefined) {
+                localVarQueryParameter['filters'] = filters;
+            }
+
+            if (sorters !== undefined) {
+                localVarQueryParameter['sorters'] = sorters;
+            }
+
+            if (count !== undefined) {
+                localVarQueryParameter['count'] = count;
+            }
+
+            if (limit !== undefined) {
+                localVarQueryParameter['limit'] = limit;
+            }
+
+            if (offset !== undefined) {
+                localVarQueryParameter['offset'] = offset;
+            }
+
+
+    
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                axiosOptions: localVarRequestOptions,
+            };
+        },
+        /**
+         * This endpoint retrieves the subtypes for given subtypeIds.
+         * @summary Bulk Retrieve of Source Subtypes
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {Array<string>} requestBody 
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        loadBulkSourceSubtypes: async (xSailPointExperimental: string, requestBody: Array<string>, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
+            // verify required parameter 'xSailPointExperimental' is not null or undefined
+            assertParamExists('loadBulkSourceSubtypes', 'xSailPointExperimental', xSailPointExperimental)
+            // verify required parameter 'requestBody' is not null or undefined
+            assertParamExists('loadBulkSourceSubtypes', 'requestBody', requestBody)
+            const localVarPath = `/source-subtypes/bulk-retrieve`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication applicationAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "applicationAuth", [], configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(requestBody, localVarRequestOptions, configuration)
 
             return {
                 url: toPathString(localVarUrlObj),
@@ -107761,14 +108121,19 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
          * @summary Patch subtype by ID
          * @param {string} subtypeId The ID of the subtype.
          * @param {Array<object>} requestBody A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        patchMachineAccountSubtype: async (subtypeId: string, requestBody: Array<object>, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+        patchMachineAccountSubtype: async (subtypeId: string, requestBody: Array<object>, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
             // verify required parameter 'subtypeId' is not null or undefined
             assertParamExists('patchMachineAccountSubtype', 'subtypeId', subtypeId)
             // verify required parameter 'requestBody' is not null or undefined
             assertParamExists('patchMachineAccountSubtype', 'requestBody', requestBody)
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
             const localVarPath = `/source-subtypes/{subtypeId}`
                 .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -107798,11 +108163,72 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
     
             localVarHeaderParameter['Content-Type'] = 'application/json-patch+json';
 
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
             localVarRequestOptions.data = serializeDataIfNeeded(requestBody, localVarRequestOptions, configuration)
 
+            return {
+                url: toPathString(localVarUrlObj),
+                axiosOptions: localVarRequestOptions,
+            };
+        },
+        /**
+         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
+         * @summary Machine Subtype Approval Config
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {string} subtypeId machine account subtype ID.
+         * @param {Array<JsonPatchOperationV2026>} jsonPatchOperationV2026 The JSONPatch payload used to update the object.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateMachineAccountSubtypeApprovalConfig: async (xSailPointExperimental: string, subtypeId: string, jsonPatchOperationV2026: Array<JsonPatchOperationV2026>, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            if (xSailPointExperimental === undefined) {
+                xSailPointExperimental = 'true';
+            }
+            
+            // verify required parameter 'xSailPointExperimental' is not null or undefined
+            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'xSailPointExperimental', xSailPointExperimental)
+            // verify required parameter 'subtypeId' is not null or undefined
+            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'subtypeId', subtypeId)
+            // verify required parameter 'jsonPatchOperationV2026' is not null or undefined
+            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'jsonPatchOperationV2026', jsonPatchOperationV2026)
+            const localVarPath = `/source-subtypes/{subtypeId}/machine-config`
+                .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...axiosOptions};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+            // authentication userAuth required
+            // oauth required
+            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json-patch+json';
+
+            if (xSailPointExperimental != null) {
+                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(jsonPatchOperationV2026, localVarRequestOptions, configuration)
+
             return {
                 url: toPathString(localVarUrlObj),
                 axiosOptions: localVarRequestOptions,
@@ -107818,46 +108244,124 @@ export const MachineAccountSubtypesV2026ApiAxiosParamCreator = function (configu
 export const MachineAccountSubtypesV2026ApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = MachineAccountSubtypesV2026ApiAxiosParamCreator(configuration)
     return {
+        /**
+         * Create a new machine account subtype.
+         * @summary Create subtype
+         * @param {CreateSourceSubtypeRequestV2026} createSourceSubtypeRequestV2026 
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        async createSourceSubtype(createSourceSubtypeRequestV2026: CreateSourceSubtypeRequestV2026, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeWithSourceV2026>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createSourceSubtype(createSourceSubtypeRequestV2026, xSailPointExperimental, axiosOptions);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.createSourceSubtype']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Delete a machine account subtype by subtype ID.  Note: If subtype has approval settings or entitlement for machine account creation enablement then it\'ll be also deleted.
          * @summary Delete subtype by ID
          * @param {string} subtypeId The ID of the subtype.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        async deleteMachineAccountSubtype(subtypeId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteMachineAccountSubtype(subtypeId, axiosOptions);
+        async deleteMachineAccountSubtype(subtypeId: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteMachineAccountSubtype(subtypeId, xSailPointExperimental, axiosOptions);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.deleteMachineAccountSubtype']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
+         * @summary Machine Subtype Approval Config
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {string} subtypeId machine subtype id.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getMachineAccountSubtypeApprovalConfig(xSailPointExperimental: string, subtypeId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MachineAccountSubtypeConfigDtoV2026>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getMachineAccountSubtypeApprovalConfig(xSailPointExperimental, subtypeId, axiosOptions);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.getMachineAccountSubtypeApprovalConfig']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Get a machine account subtype by subtype ID.
          * @summary Get subtype by ID
          * @param {string} subtypeId The ID of the subtype.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        async getSourceSubtypeById(subtypeId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeWithSourceV2026>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getSourceSubtypeById(subtypeId, axiosOptions);
+        async getSourceSubtypeById(subtypeId: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeWithSourceV2026>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getSourceSubtypeById(subtypeId, xSailPointExperimental, axiosOptions);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.getSourceSubtypeById']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Get all machine account subtypes.
+         * @summary Retrieve all subtypes
+         * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, sw*  **technicalName**: *eq, sw*  **source.id**: *eq, in*
+         * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **displayName, technicalName**
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
+         * @param {boolean} [count] If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listSourceSubtypes(filters?: string, sorters?: string, xSailPointExperimental?: string, count?: boolean, limit?: number, offset?: number, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<SourceSubtypeWithSourceV2026>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listSourceSubtypes(filters, sorters, xSailPointExperimental, count, limit, offset, axiosOptions);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.listSourceSubtypes']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * This endpoint retrieves the subtypes for given subtypeIds.
+         * @summary Bulk Retrieve of Source Subtypes
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {Array<string>} requestBody 
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        async loadBulkSourceSubtypes(xSailPointExperimental: string, requestBody: Array<string>, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<SourceSubtypeWithSourceV2026>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.loadBulkSourceSubtypes(xSailPointExperimental, requestBody, axiosOptions);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.loadBulkSourceSubtypes']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Update fields of a machine account subtype by subtype ID. Patchable fields only include: `displayName`, `description`.
          * @summary Patch subtype by ID
          * @param {string} subtypeId The ID of the subtype.
          * @param {Array<object>} requestBody A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        async patchMachineAccountSubtype(subtypeId: string, requestBody: Array<object>, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeWithSourceV2026>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.patchMachineAccountSubtype(subtypeId, requestBody, axiosOptions);
+        async patchMachineAccountSubtype(subtypeId: string, requestBody: Array<object>, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeWithSourceV2026>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.patchMachineAccountSubtype(subtypeId, requestBody, xSailPointExperimental, axiosOptions);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.patchMachineAccountSubtype']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
+         * @summary Machine Subtype Approval Config
+         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
+         * @param {string} subtypeId machine account subtype ID.
+         * @param {Array<JsonPatchOperationV2026>} jsonPatchOperationV2026 The JSONPatch payload used to update the object.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        async updateMachineAccountSubtypeApprovalConfig(xSailPointExperimental: string, subtypeId: string, jsonPatchOperationV2026: Array<JsonPatchOperationV2026>, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MachineAccountSubtypeConfigDtoV2026>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateMachineAccountSubtypeApprovalConfig(xSailPointExperimental, subtypeId, jsonPatchOperationV2026, axiosOptions);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['MachineAccountSubtypesV2026Api.updateMachineAccountSubtypeApprovalConfig']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
     }
 };
 
@@ -107868,6 +108372,16 @@ export const MachineAccountSubtypesV2026ApiFp = function(configuration?: Configu
 export const MachineAccountSubtypesV2026ApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
     const localVarFp = MachineAccountSubtypesV2026ApiFp(configuration)
     return {
+        /**
+         * Create a new machine account subtype.
+         * @summary Create subtype
+         * @param {MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest} requestParameters Request parameters.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        createSourceSubtype(requestParameters: MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeWithSourceV2026> {
+            return localVarFp.createSourceSubtype(requestParameters.createSourceSubtypeRequestV2026, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
+        },
         /**
          * Delete a machine account subtype by subtype ID.  Note: If subtype has approval settings or entitlement for machine account creation enablement then it\'ll be also deleted.
          * @summary Delete subtype by ID
@@ -107876,7 +108390,17 @@ export const MachineAccountSubtypesV2026ApiFactory = function (configuration?: C
          * @throws {RequiredError}
          */
         deleteMachineAccountSubtype(requestParameters: MachineAccountSubtypesV2026ApiDeleteMachineAccountSubtypeRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<void> {
-            return localVarFp.deleteMachineAccountSubtype(requestParameters.subtypeId, axiosOptions).then((request) => request(axios, basePath));
+            return localVarFp.deleteMachineAccountSubtype(requestParameters.subtypeId, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
+        },
+        /**
+         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
+         * @summary Machine Subtype Approval Config
+         * @param {MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        getMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountSubtypeConfigDtoV2026> {
+            return localVarFp.getMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, axiosOptions).then((request) => request(axios, basePath));
         },
         /**
          * Get a machine account subtype by subtype ID.
@@ -107886,7 +108410,27 @@ export const MachineAccountSubtypesV2026ApiFactory = function (configuration?: C
          * @throws {RequiredError}
          */
         getSourceSubtypeById(requestParameters: MachineAccountSubtypesV2026ApiGetSourceSubtypeByIdRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeWithSourceV2026> {
-            return localVarFp.getSourceSubtypeById(requestParameters.subtypeId, axiosOptions).then((request) => request(axios, basePath));
+            return localVarFp.getSourceSubtypeById(requestParameters.subtypeId, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all machine account subtypes.
+         * @summary Retrieve all subtypes
+         * @param {MachineAccountSubtypesV2026ApiListSourceSubtypesRequest} requestParameters Request parameters.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        listSourceSubtypes(requestParameters: MachineAccountSubtypesV2026ApiListSourceSubtypesRequest = {}, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<SourceSubtypeWithSourceV2026>> {
+            return localVarFp.listSourceSubtypes(requestParameters.filters, requestParameters.sorters, requestParameters.xSailPointExperimental, requestParameters.count, requestParameters.limit, requestParameters.offset, axiosOptions).then((request) => request(axios, basePath));
+        },
+        /**
+         * This endpoint retrieves the subtypes for given subtypeIds.
+         * @summary Bulk Retrieve of Source Subtypes
+         * @param {MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest} requestParameters Request parameters.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        loadBulkSourceSubtypes(requestParameters: MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<SourceSubtypeWithSourceV2026>> {
+            return localVarFp.loadBulkSourceSubtypes(requestParameters.xSailPointExperimental, requestParameters.requestBody, axiosOptions).then((request) => request(axios, basePath));
         },
         /**
          * Update fields of a machine account subtype by subtype ID. Patchable fields only include: `displayName`, `description`.
@@ -107896,11 +108440,42 @@ export const MachineAccountSubtypesV2026ApiFactory = function (configuration?: C
          * @throws {RequiredError}
          */
         patchMachineAccountSubtype(requestParameters: MachineAccountSubtypesV2026ApiPatchMachineAccountSubtypeRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeWithSourceV2026> {
-            return localVarFp.patchMachineAccountSubtype(requestParameters.subtypeId, requestParameters.requestBody, axiosOptions).then((request) => request(axios, basePath));
+            return localVarFp.patchMachineAccountSubtype(requestParameters.subtypeId, requestParameters.requestBody, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
+        },
+        /**
+         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
+         * @summary Machine Subtype Approval Config
+         * @param {MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
+         * @param {*} [axiosOptions] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountSubtypeConfigDtoV2026> {
+            return localVarFp.updateMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, requestParameters.jsonPatchOperationV2026, axiosOptions).then((request) => request(axios, basePath));
         },
     };
 };
 
+/**
+ * Request parameters for createSourceSubtype operation in MachineAccountSubtypesV2026Api.
+ * @export
+ * @interface MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest
+ */
+export interface MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest {
+    /**
+     * 
+     * @type {CreateSourceSubtypeRequestV2026}
+     * @memberof MachineAccountSubtypesV2026ApiCreateSourceSubtype
+     */
+    readonly createSourceSubtypeRequestV2026: CreateSourceSubtypeRequestV2026
+
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiCreateSourceSubtype
+     */
+    readonly xSailPointExperimental?: string
+}
+
 /**
  * Request parameters for deleteMachineAccountSubtype operation in MachineAccountSubtypesV2026Api.
  * @export
@@ -107913,6 +108488,34 @@ export interface MachineAccountSubtypesV2026ApiDeleteMachineAccountSubtypeReques
      * @memberof MachineAccountSubtypesV2026ApiDeleteMachineAccountSubtype
      */
     readonly subtypeId: string
+
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiDeleteMachineAccountSubtype
+     */
+    readonly xSailPointExperimental?: string
+}
+
+/**
+ * Request parameters for getMachineAccountSubtypeApprovalConfig operation in MachineAccountSubtypesV2026Api.
+ * @export
+ * @interface MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest
+ */
+export interface MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest {
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfig
+     */
+    readonly xSailPointExperimental: string
+
+    /**
+     * machine subtype id.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfig
+     */
+    readonly subtypeId: string
 }
 
 /**
@@ -107927,6 +108530,83 @@ export interface MachineAccountSubtypesV2026ApiGetSourceSubtypeByIdRequest {
      * @memberof MachineAccountSubtypesV2026ApiGetSourceSubtypeById
      */
     readonly subtypeId: string
+
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiGetSourceSubtypeById
+     */
+    readonly xSailPointExperimental?: string
+}
+
+/**
+ * Request parameters for listSourceSubtypes operation in MachineAccountSubtypesV2026Api.
+ * @export
+ * @interface MachineAccountSubtypesV2026ApiListSourceSubtypesRequest
+ */
+export interface MachineAccountSubtypesV2026ApiListSourceSubtypesRequest {
+    /**
+     * Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **id**: *eq, in, sw*  **displayName**: *eq, sw*  **technicalName**: *eq, sw*  **source.id**: *eq, in*
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly filters?: string
+
+    /**
+     * Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **displayName, technicalName**
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly sorters?: string
+
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly xSailPointExperimental?: string
+
+    /**
+     * If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored.  Since requesting a total count can have a performance impact, it is recommended not to send **count&#x3D;true** if that value will not be used.  See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+     * @type {boolean}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly count?: boolean
+
+    /**
+     * Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly limit?: number
+
+    /**
+     * Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
+     * @type {number}
+     * @memberof MachineAccountSubtypesV2026ApiListSourceSubtypes
+     */
+    readonly offset?: number
+}
+
+/**
+ * Request parameters for loadBulkSourceSubtypes operation in MachineAccountSubtypesV2026Api.
+ * @export
+ * @interface MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest
+ */
+export interface MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest {
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypes
+     */
+    readonly xSailPointExperimental: string
+
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypes
+     */
+    readonly requestBody: Array<string>
 }
 
 /**
@@ -107948,6 +108628,41 @@ export interface MachineAccountSubtypesV2026ApiPatchMachineAccountSubtypeRequest
      * @memberof MachineAccountSubtypesV2026ApiPatchMachineAccountSubtype
      */
     readonly requestBody: Array<object>
+
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiPatchMachineAccountSubtype
+     */
+    readonly xSailPointExperimental?: string
+}
+
+/**
+ * Request parameters for updateMachineAccountSubtypeApprovalConfig operation in MachineAccountSubtypesV2026Api.
+ * @export
+ * @interface MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest
+ */
+export interface MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest {
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfig
+     */
+    readonly xSailPointExperimental: string
+
+    /**
+     * machine account subtype ID.
+     * @type {string}
+     * @memberof MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfig
+     */
+    readonly subtypeId: string
+
+    /**
+     * The JSONPatch payload used to update the object.
+     * @type {Array<JsonPatchOperationV2026>}
+     * @memberof MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfig
+     */
+    readonly jsonPatchOperationV2026: Array<JsonPatchOperationV2026>
 }
 
 /**
@@ -107957,6 +108672,18 @@ export interface MachineAccountSubtypesV2026ApiPatchMachineAccountSubtypeRequest
  * @extends {BaseAPI}
  */
 export class MachineAccountSubtypesV2026Api extends BaseAPI {
+    /**
+     * Create a new machine account subtype.
+     * @summary Create subtype
+     * @param {MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof MachineAccountSubtypesV2026Api
+     */
+    public createSourceSubtype(requestParameters: MachineAccountSubtypesV2026ApiCreateSourceSubtypeRequest, axiosOptions?: RawAxiosRequestConfig) {
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).createSourceSubtype(requestParameters.createSourceSubtypeRequestV2026, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Delete a machine account subtype by subtype ID.  Note: If subtype has approval settings or entitlement for machine account creation enablement then it\'ll be also deleted.
      * @summary Delete subtype by ID
@@ -107966,7 +108693,19 @@ export class MachineAccountSubtypesV2026Api extends BaseAPI {
      * @memberof MachineAccountSubtypesV2026Api
      */
     public deleteMachineAccountSubtype(requestParameters: MachineAccountSubtypesV2026ApiDeleteMachineAccountSubtypeRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountSubtypesV2026ApiFp(this.configuration).deleteMachineAccountSubtype(requestParameters.subtypeId, axiosOptions).then((request) => request(this.axios, this.basePath));
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).deleteMachineAccountSubtype(requestParameters.subtypeId, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
+     * @summary Machine Subtype Approval Config
+     * @param {MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof MachineAccountSubtypesV2026Api
+     */
+    public getMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountSubtypesV2026ApiGetMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig) {
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).getMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
 
     /**
@@ -107978,7 +108717,31 @@ export class MachineAccountSubtypesV2026Api extends BaseAPI {
      * @memberof MachineAccountSubtypesV2026Api
      */
     public getSourceSubtypeById(requestParameters: MachineAccountSubtypesV2026ApiGetSourceSubtypeByIdRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountSubtypesV2026ApiFp(this.configuration).getSourceSubtypeById(requestParameters.subtypeId, axiosOptions).then((request) => request(this.axios, this.basePath));
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).getSourceSubtypeById(requestParameters.subtypeId, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all machine account subtypes.
+     * @summary Retrieve all subtypes
+     * @param {MachineAccountSubtypesV2026ApiListSourceSubtypesRequest} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof MachineAccountSubtypesV2026Api
+     */
+    public listSourceSubtypes(requestParameters: MachineAccountSubtypesV2026ApiListSourceSubtypesRequest = {}, axiosOptions?: RawAxiosRequestConfig) {
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).listSourceSubtypes(requestParameters.filters, requestParameters.sorters, requestParameters.xSailPointExperimental, requestParameters.count, requestParameters.limit, requestParameters.offset, axiosOptions).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * This endpoint retrieves the subtypes for given subtypeIds.
+     * @summary Bulk Retrieve of Source Subtypes
+     * @param {MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof MachineAccountSubtypesV2026Api
+     */
+    public loadBulkSourceSubtypes(requestParameters: MachineAccountSubtypesV2026ApiLoadBulkSourceSubtypesRequest, axiosOptions?: RawAxiosRequestConfig) {
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).loadBulkSourceSubtypes(requestParameters.xSailPointExperimental, requestParameters.requestBody, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
 
     /**
@@ -107990,7 +108753,19 @@ export class MachineAccountSubtypesV2026Api extends BaseAPI {
      * @memberof MachineAccountSubtypesV2026Api
      */
     public patchMachineAccountSubtype(requestParameters: MachineAccountSubtypesV2026ApiPatchMachineAccountSubtypeRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountSubtypesV2026ApiFp(this.configuration).patchMachineAccountSubtype(requestParameters.subtypeId, requestParameters.requestBody, axiosOptions).then((request) => request(this.axios, this.basePath));
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).patchMachineAccountSubtype(requestParameters.subtypeId, requestParameters.requestBody, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
+     * @summary Machine Subtype Approval Config
+     * @param {MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
+     * @param {*} [axiosOptions] Override http request option.
+     * @throws {RequiredError}
+     * @memberof MachineAccountSubtypesV2026Api
+     */
+    public updateMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountSubtypesV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig) {
+        return MachineAccountSubtypesV2026ApiFp(this.configuration).updateMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, requestParameters.jsonPatchOperationV2026, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
 }
 
@@ -108009,6 +108784,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {CreateMachineAccountSubtypeRequestV2026} createMachineAccountSubtypeRequestV2026 
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         createMachineAccountSubtype: async (sourceId: string, createMachineAccountSubtypeRequestV2026: CreateMachineAccountSubtypeRequestV2026, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108069,6 +108845,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {string} technicalName The technical name of the subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         deleteMachineAccountSubtypeByTechnicalName: async (sourceId: string, technicalName: string, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108158,58 +108935,6 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
 
 
     
-            if (xSailPointExperimental != null) {
-                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
-            }
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                axiosOptions: localVarRequestOptions,
-            };
-        },
-        /**
-         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
-         * @summary Machine Subtype Approval Config
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {string} subtypeId machine subtype id.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        getMachineAccountSubtypeApprovalConfig: async (xSailPointExperimental: string, subtypeId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            if (xSailPointExperimental === undefined) {
-                xSailPointExperimental = 'true';
-            }
-            
-            // verify required parameter 'xSailPointExperimental' is not null or undefined
-            assertParamExists('getMachineAccountSubtypeApprovalConfig', 'xSailPointExperimental', xSailPointExperimental)
-            // verify required parameter 'subtypeId' is not null or undefined
-            assertParamExists('getMachineAccountSubtypeApprovalConfig', 'subtypeId', subtypeId)
-            const localVarPath = `/source-subtypes/{subtypeId}/machine-config`
-                .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-
-    
             if (xSailPointExperimental != null) {
                 localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
             }
@@ -108228,6 +108953,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {string} subtypeId The ID of the machine account subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         getMachineAccountSubtypeById: async (subtypeId: string, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108283,6 +109009,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {string} technicalName The technical name of the subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         getMachineAccountSubtypeByTechnicalName: async (sourceId: string, technicalName: string, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108345,6 +109072,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
          * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         listMachineAccountSubtypes: async (sourceId: string, filters?: string, sorters?: string, xSailPointExperimental?: string, count?: boolean, limit?: number, offset?: number, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108484,64 +109212,6 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
                 axiosOptions: localVarRequestOptions,
             };
         },
-        /**
-         * This endpoint retrieves the subtypes for given subtypeIds.
-         * @summary Bulk Retrieve of Source Subtypes
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {Array<string>} requestBody 
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        loadBulkSourceSubtypes: async (xSailPointExperimental: string, requestBody: Array<string>, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            if (xSailPointExperimental === undefined) {
-                xSailPointExperimental = 'true';
-            }
-            
-            // verify required parameter 'xSailPointExperimental' is not null or undefined
-            assertParamExists('loadBulkSourceSubtypes', 'xSailPointExperimental', xSailPointExperimental)
-            // verify required parameter 'requestBody' is not null or undefined
-            assertParamExists('loadBulkSourceSubtypes', 'requestBody', requestBody)
-            const localVarPath = `/source-subtypes/bulk-retrieve`;
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-            // authentication applicationAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "applicationAuth", [], configuration)
-
-
-    
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-
-            if (xSailPointExperimental != null) {
-                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
-            }
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(requestBody, localVarRequestOptions, configuration)
-
-            return {
-                url: toPathString(localVarUrlObj),
-                axiosOptions: localVarRequestOptions,
-            };
-        },
         /**
          * Update fields of a machine account subtype by source ID and technical name. Patchable fields include: `displayName`, `description`.
          * @summary Patch subtype
@@ -108550,6 +109220,7 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
          * @param {Array<object>} requestBody A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         patchMachineAccountSubtypeByTechnicalName: async (sourceId: string, technicalName: string, requestBody: Array<object>, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
@@ -108661,64 +109332,6 @@ export const MachineAccountsV2026ApiAxiosParamCreator = function (configuration?
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
             localVarRequestOptions.data = serializeDataIfNeeded(requestBody, localVarRequestOptions, configuration)
 
-            return {
-                url: toPathString(localVarUrlObj),
-                axiosOptions: localVarRequestOptions,
-            };
-        },
-        /**
-         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
-         * @summary Machine Subtype Approval Config
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {string} subtypeId machine account subtype ID.
-         * @param {Array<JsonPatchOperationV2026>} jsonPatchOperationV2026 The JSONPatch payload used to update the object.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        updateMachineAccountSubtypeApprovalConfig: async (xSailPointExperimental: string, subtypeId: string, jsonPatchOperationV2026: Array<JsonPatchOperationV2026>, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            if (xSailPointExperimental === undefined) {
-                xSailPointExperimental = 'true';
-            }
-            
-            // verify required parameter 'xSailPointExperimental' is not null or undefined
-            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'xSailPointExperimental', xSailPointExperimental)
-            // verify required parameter 'subtypeId' is not null or undefined
-            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'subtypeId', subtypeId)
-            // verify required parameter 'jsonPatchOperationV2026' is not null or undefined
-            assertParamExists('updateMachineAccountSubtypeApprovalConfig', 'jsonPatchOperationV2026', jsonPatchOperationV2026)
-            const localVarPath = `/source-subtypes/{subtypeId}/machine-config`
-                .replace(`{${"subtypeId"}}`, encodeURIComponent(String(subtypeId)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...axiosOptions};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-            // authentication userAuth required
-            // oauth required
-            await setOAuthToObject(localVarHeaderParameter, "userAuth", [], configuration)
-
-
-    
-            localVarHeaderParameter['Content-Type'] = 'application/json-patch+json';
-
-            if (xSailPointExperimental != null) {
-                localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);
-            }
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};
-            localVarRequestOptions.data = serializeDataIfNeeded(jsonPatchOperationV2026, localVarRequestOptions, configuration)
-
             return {
                 url: toPathString(localVarUrlObj),
                 axiosOptions: localVarRequestOptions,
@@ -108741,6 +109354,7 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
          * @param {CreateMachineAccountSubtypeRequestV2026} createMachineAccountSubtypeRequestV2026 
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async createMachineAccountSubtype(sourceId: string, createMachineAccountSubtypeRequestV2026: CreateMachineAccountSubtypeRequestV2026, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeV2026>> {
@@ -108756,6 +109370,7 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
          * @param {string} technicalName The technical name of the subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async deleteMachineAccountSubtypeByTechnicalName(sourceId: string, technicalName: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
@@ -108778,26 +109393,13 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
             const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.getMachineAccount']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
-        /**
-         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
-         * @summary Machine Subtype Approval Config
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {string} subtypeId machine subtype id.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        async getMachineAccountSubtypeApprovalConfig(xSailPointExperimental: string, subtypeId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MachineAccountSubtypeConfigDtoV2026>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getMachineAccountSubtypeApprovalConfig(xSailPointExperimental, subtypeId, axiosOptions);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.getMachineAccountSubtypeApprovalConfig']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
         /**
          * Get a machine account subtype by its unique ID.
          * @summary Retrieve subtype by subtype id
          * @param {string} subtypeId The ID of the machine account subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async getMachineAccountSubtypeById(subtypeId: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeV2026>> {
@@ -108813,6 +109415,7 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
          * @param {string} technicalName The technical name of the subtype.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async getMachineAccountSubtypeByTechnicalName(sourceId: string, technicalName: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeV2026>> {
@@ -108832,6 +109435,7 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
          * @param {number} [limit] Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
          * @param {number} [offset] Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async listMachineAccountSubtypes(sourceId: string, filters?: string, sorters?: string, xSailPointExperimental?: string, count?: boolean, limit?: number, offset?: number, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<SourceSubtypeV2026>>> {
@@ -108858,20 +109462,6 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
             const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.listMachineAccounts']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
-        /**
-         * This endpoint retrieves the subtypes for given subtypeIds.
-         * @summary Bulk Retrieve of Source Subtypes
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {Array<string>} requestBody 
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        async loadBulkSourceSubtypes(xSailPointExperimental: string, requestBody: Array<string>, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<SourceSubtypeWithSourceV2026>>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.loadBulkSourceSubtypes(xSailPointExperimental, requestBody, axiosOptions);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.loadBulkSourceSubtypes']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
         /**
          * Update fields of a machine account subtype by source ID and technical name. Patchable fields include: `displayName`, `description`.
          * @summary Patch subtype
@@ -108880,6 +109470,7 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
          * @param {Array<object>} requestBody A JSON of updated values [JSON Patch](https://tools.ietf.org/html/rfc6902) standard.
          * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         async patchMachineAccountSubtypeByTechnicalName(sourceId: string, technicalName: string, requestBody: Array<object>, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<SourceSubtypeV2026>> {
@@ -108903,21 +109494,6 @@ export const MachineAccountsV2026ApiFp = function(configuration?: Configuration)
             const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.updateMachineAccount']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
-        /**
-         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
-         * @summary Machine Subtype Approval Config
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
-         * @param {string} subtypeId machine account subtype ID.
-         * @param {Array<JsonPatchOperationV2026>} jsonPatchOperationV2026 The JSONPatch payload used to update the object.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        async updateMachineAccountSubtypeApprovalConfig(xSailPointExperimental: string, subtypeId: string, jsonPatchOperationV2026: Array<JsonPatchOperationV2026>, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<MachineAccountSubtypeConfigDtoV2026>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.updateMachineAccountSubtypeApprovalConfig(xSailPointExperimental, subtypeId, jsonPatchOperationV2026, axiosOptions);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['MachineAccountsV2026Api.updateMachineAccountSubtypeApprovalConfig']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
     }
 };
 
@@ -108933,6 +109509,7 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
          * @summary Create subtype
          * @param {MachineAccountsV2026ApiCreateMachineAccountSubtypeRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         createMachineAccountSubtype(requestParameters: MachineAccountsV2026ApiCreateMachineAccountSubtypeRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeV2026> {
@@ -108943,6 +109520,7 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
          * @summary Delete subtype
          * @param {MachineAccountsV2026ApiDeleteMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         deleteMachineAccountSubtypeByTechnicalName(requestParameters: MachineAccountsV2026ApiDeleteMachineAccountSubtypeByTechnicalNameRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<void> {
@@ -108958,21 +109536,12 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
         getMachineAccount(requestParameters: MachineAccountsV2026ApiGetMachineAccountRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountV2026> {
             return localVarFp.getMachineAccount(requestParameters.id, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
         },
-        /**
-         * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
-         * @summary Machine Subtype Approval Config
-         * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        getMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountSubtypeConfigDtoV2026> {
-            return localVarFp.getMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, axiosOptions).then((request) => request(axios, basePath));
-        },
         /**
          * Get a machine account subtype by its unique ID.
          * @summary Retrieve subtype by subtype id
          * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeByIdRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         getMachineAccountSubtypeById(requestParameters: MachineAccountsV2026ApiGetMachineAccountSubtypeByIdRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeV2026> {
@@ -108983,6 +109552,7 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
          * @summary Retrieve subtype by source and technicalName
          * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         getMachineAccountSubtypeByTechnicalName(requestParameters: MachineAccountsV2026ApiGetMachineAccountSubtypeByTechnicalNameRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeV2026> {
@@ -108993,6 +109563,7 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
          * @summary Retrieve all subtypes by source
          * @param {MachineAccountsV2026ApiListMachineAccountSubtypesRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         listMachineAccountSubtypes(requestParameters: MachineAccountsV2026ApiListMachineAccountSubtypesRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<SourceSubtypeV2026>> {
@@ -109008,21 +109579,12 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
         listMachineAccounts(requestParameters: MachineAccountsV2026ApiListMachineAccountsRequest = {}, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<MachineAccountV2026>> {
             return localVarFp.listMachineAccounts(requestParameters.limit, requestParameters.offset, requestParameters.count, requestParameters.filters, requestParameters.sorters, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
         },
-        /**
-         * This endpoint retrieves the subtypes for given subtypeIds.
-         * @summary Bulk Retrieve of Source Subtypes
-         * @param {MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest} requestParameters Request parameters.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        loadBulkSourceSubtypes(requestParameters: MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<SourceSubtypeWithSourceV2026>> {
-            return localVarFp.loadBulkSourceSubtypes(requestParameters.xSailPointExperimental, requestParameters.requestBody, axiosOptions).then((request) => request(axios, basePath));
-        },
         /**
          * Update fields of a machine account subtype by source ID and technical name. Patchable fields include: `displayName`, `description`.
          * @summary Patch subtype
          * @param {MachineAccountsV2026ApiPatchMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
          * @param {*} [axiosOptions] Override http request option.
+         * @deprecated
          * @throws {RequiredError}
          */
         patchMachineAccountSubtypeByTechnicalName(requestParameters: MachineAccountsV2026ApiPatchMachineAccountSubtypeByTechnicalNameRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<SourceSubtypeV2026> {
@@ -109038,16 +109600,6 @@ export const MachineAccountsV2026ApiFactory = function (configuration?: Configur
         updateMachineAccount(requestParameters: MachineAccountsV2026ApiUpdateMachineAccountRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountV2026> {
             return localVarFp.updateMachineAccount(requestParameters.id, requestParameters.requestBody, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));
         },
-        /**
-         * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
-         * @summary Machine Subtype Approval Config
-         * @param {MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
-         * @param {*} [axiosOptions] Override http request option.
-         * @throws {RequiredError}
-         */
-        updateMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<MachineAccountSubtypeConfigDtoV2026> {
-            return localVarFp.updateMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, requestParameters.jsonPatchOperationV2026, axiosOptions).then((request) => request(axios, basePath));
-        },
     };
 };
 
@@ -109128,27 +109680,6 @@ export interface MachineAccountsV2026ApiGetMachineAccountRequest {
     readonly xSailPointExperimental?: string
 }
 
-/**
- * Request parameters for getMachineAccountSubtypeApprovalConfig operation in MachineAccountsV2026Api.
- * @export
- * @interface MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest
- */
-export interface MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest {
-    /**
-     * Use this header to enable this experimental API.
-     * @type {string}
-     * @memberof MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfig
-     */
-    readonly xSailPointExperimental: string
-
-    /**
-     * machine subtype id.
-     * @type {string}
-     * @memberof MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfig
-     */
-    readonly subtypeId: string
-}
-
 /**
  * Request parameters for getMachineAccountSubtypeById operation in MachineAccountsV2026Api.
  * @export
@@ -109303,27 +109834,6 @@ export interface MachineAccountsV2026ApiListMachineAccountsRequest {
     readonly xSailPointExperimental?: string
 }
 
-/**
- * Request parameters for loadBulkSourceSubtypes operation in MachineAccountsV2026Api.
- * @export
- * @interface MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest
- */
-export interface MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest {
-    /**
-     * Use this header to enable this experimental API.
-     * @type {string}
-     * @memberof MachineAccountsV2026ApiLoadBulkSourceSubtypes
-     */
-    readonly xSailPointExperimental: string
-
-    /**
-     * 
-     * @type {Array<string>}
-     * @memberof MachineAccountsV2026ApiLoadBulkSourceSubtypes
-     */
-    readonly requestBody: Array<string>
-}
-
 /**
  * Request parameters for patchMachineAccountSubtypeByTechnicalName operation in MachineAccountsV2026Api.
  * @export
@@ -109387,34 +109897,6 @@ export interface MachineAccountsV2026ApiUpdateMachineAccountRequest {
     readonly xSailPointExperimental?: string
 }
 
-/**
- * Request parameters for updateMachineAccountSubtypeApprovalConfig operation in MachineAccountsV2026Api.
- * @export
- * @interface MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest
- */
-export interface MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest {
-    /**
-     * Use this header to enable this experimental API.
-     * @type {string}
-     * @memberof MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfig
-     */
-    readonly xSailPointExperimental: string
-
-    /**
-     * machine account subtype ID.
-     * @type {string}
-     * @memberof MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfig
-     */
-    readonly subtypeId: string
-
-    /**
-     * The JSONPatch payload used to update the object.
-     * @type {Array<JsonPatchOperationV2026>}
-     * @memberof MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfig
-     */
-    readonly jsonPatchOperationV2026: Array<JsonPatchOperationV2026>
-}
-
 /**
  * MachineAccountsV2026Api - object-oriented interface
  * @export
@@ -109427,6 +109909,7 @@ export class MachineAccountsV2026Api extends BaseAPI {
      * @summary Create subtype
      * @param {MachineAccountsV2026ApiCreateMachineAccountSubtypeRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109439,6 +109922,7 @@ export class MachineAccountsV2026Api extends BaseAPI {
      * @summary Delete subtype
      * @param {MachineAccountsV2026ApiDeleteMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109458,23 +109942,12 @@ export class MachineAccountsV2026Api extends BaseAPI {
         return MachineAccountsV2026ApiFp(this.configuration).getMachineAccount(requestParameters.id, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
 
-    /**
-     * This endpoint retrieves the approval configuration for machine account creation and deletion at the machine subtype level. By providing a specific subtypeId in the path, clients can fetch the approval rules and settings (such as required approvers and comments policy) that govern account creation and deletion for that particular machine subtype. The response includes a MachineAccountSubtypeConfigDto object detailing these configurations, enabling clients to understand or display the approval workflow required for creating and deleting machine accounts of the given subtype. Use this endpoint to get machine subtype level approval config for account creation and deletion.
-     * @summary Machine Subtype Approval Config
-     * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
-     * @memberof MachineAccountsV2026Api
-     */
-    public getMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountsV2026ApiGetMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountsV2026ApiFp(this.configuration).getMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, axiosOptions).then((request) => request(this.axios, this.basePath));
-    }
-
     /**
      * Get a machine account subtype by its unique ID.
      * @summary Retrieve subtype by subtype id
      * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeByIdRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109487,6 +109960,7 @@ export class MachineAccountsV2026Api extends BaseAPI {
      * @summary Retrieve subtype by source and technicalName
      * @param {MachineAccountsV2026ApiGetMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109499,6 +109973,7 @@ export class MachineAccountsV2026Api extends BaseAPI {
      * @summary Retrieve all subtypes by source
      * @param {MachineAccountsV2026ApiListMachineAccountSubtypesRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109518,23 +109993,12 @@ export class MachineAccountsV2026Api extends BaseAPI {
         return MachineAccountsV2026ApiFp(this.configuration).listMachineAccounts(requestParameters.limit, requestParameters.offset, requestParameters.count, requestParameters.filters, requestParameters.sorters, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
 
-    /**
-     * This endpoint retrieves the subtypes for given subtypeIds.
-     * @summary Bulk Retrieve of Source Subtypes
-     * @param {MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest} requestParameters Request parameters.
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
-     * @memberof MachineAccountsV2026Api
-     */
-    public loadBulkSourceSubtypes(requestParameters: MachineAccountsV2026ApiLoadBulkSourceSubtypesRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountsV2026ApiFp(this.configuration).loadBulkSourceSubtypes(requestParameters.xSailPointExperimental, requestParameters.requestBody, axiosOptions).then((request) => request(this.axios, this.basePath));
-    }
-
     /**
      * Update fields of a machine account subtype by source ID and technical name. Patchable fields include: `displayName`, `description`.
      * @summary Patch subtype
      * @param {MachineAccountsV2026ApiPatchMachineAccountSubtypeByTechnicalNameRequest} requestParameters Request parameters.
      * @param {*} [axiosOptions] Override http request option.
+     * @deprecated
      * @throws {RequiredError}
      * @memberof MachineAccountsV2026Api
      */
@@ -109553,18 +110017,6 @@ export class MachineAccountsV2026Api extends BaseAPI {
     public updateMachineAccount(requestParameters: MachineAccountsV2026ApiUpdateMachineAccountRequest, axiosOptions?: RawAxiosRequestConfig) {
         return MachineAccountsV2026ApiFp(this.configuration).updateMachineAccount(requestParameters.id, requestParameters.requestBody, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));
     }
-
-    /**
-     * Updates the approval configuration for machine account deletion at the specified machine subtype level. This endpoint allows clients to modify approval rules and settings (such as required approvers and comments policy) for account creation and deletion workflows associated with a given subtypeId. Use this to customize or enforce approval requirements for creating and deleting machine accounts of a particular subtype.
-     * @summary Machine Subtype Approval Config
-     * @param {MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest} requestParameters Request parameters.
-     * @param {*} [axiosOptions] Override http request option.
-     * @throws {RequiredError}
-     * @memberof MachineAccountsV2026Api
-     */
-    public updateMachineAccountSubtypeApprovalConfig(requestParameters: MachineAccountsV2026ApiUpdateMachineAccountSubtypeApprovalConfigRequest, axiosOptions?: RawAxiosRequestConfig) {
-        return MachineAccountsV2026ApiFp(this.configuration).updateMachineAccountSubtypeApprovalConfig(requestParameters.xSailPointExperimental, requestParameters.subtypeId, requestParameters.jsonPatchOperationV2026, axiosOptions).then((request) => request(this.axios, this.basePath));
-    }
 }