codegrade 17.0.49__tar.gz → 17.0.50__tar.gz

{codegrade-17.0.49 → codegrade-17.0.50}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codegrade
-Version: 17.0.49
+Version: 17.0.50
 Summary: A client library for accessing CodeGrade
 Project-URL: Documentation, https://python.api.codegrade.com
 License-Expression: AGPL-3.0-only OR BSD-3-Clause-Clear

{codegrade-17.0.49 → codegrade-17.0.50}/docs/conf.py

@@ -39,7 +39,7 @@ author = "CodeGrade Team"
 # built documents.
 #
 # The short X.Y version.
-version = "17.0.49"
+version = "17.0.50"
 # The full version, including alpha/beta/rc tags.
 release = version
 
@@ -103,7 +103,7 @@ html_js_files = ["toggle.js"]
 
 html_favicon = "_static/favicon/favicon.ico"
 html_logo = "_static/images/logo.svg"
-html_title = "CodeGrade 17.0.49"
+html_title = "CodeGrade 17.0.50"
 
 # -- Extension configuration -------------------------------------------------
 

{codegrade-17.0.49 → codegrade-17.0.50}/docs/models/ExtendedUser.rst

@@ -4,6 +4,6 @@ ExtendedUser
 .. currentmodule:: codegrade.models.extended_user
 
 .. autoclass:: ExtendedUser
-   :members: email, email_verified, hidden, permissions
+   :members: email, email_verified, hidden, is_managed_by_lti, is_managed_by_saml, permissions
    :inherited-members:
    :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

codegrade-17.0.50/docs/models/GlobalPermMap.rst

@@ -0,0 +1,9 @@
+GlobalPermMap
+=============
+
+.. currentmodule:: codegrade.models.global_perm_map
+
+.. autoclass:: GlobalPermMap
+   :members: can_create_courses_in_all_tenants, can_edit_coupons, can_edit_pricing, can_impersonate_users, can_list_hidden_tenants, can_manage_all_community_library_items, can_manage_background_jobs, can_manage_git_connections_in_all_tenants, can_manage_global_roles, can_manage_lti_providers, can_manage_pearson_templates, can_manage_quarantined_registrations, can_manage_site_settings, can_manage_sso_providers, can_manage_tenants, can_manage_tenant_roles_in_all_tenants, can_search_users_in_all_tenants, can_see_all_transactions, can_see_coupons, can_see_statistics_in_all_tenants, can_skip_payment_in_all_tenants, is_global_admin
+   :inherited-members:
+   :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

codegrade-17.0.50/docs/models/GlobalPermission.rst

@@ -0,0 +1,31 @@
+GlobalPermission
+================
+
+.. currentmodule:: codegrade.models.global_permission
+
+.. class:: GlobalPermission
+
+**Options**
+
+* ``can_create_courses_in_all_tenants``
+* ``can_edit_coupons``
+* ``can_edit_pricing``
+* ``can_impersonate_users``
+* ``can_list_hidden_tenants``
+* ``can_manage_all_community_library_items``
+* ``can_manage_background_jobs``
+* ``can_manage_git_connections_in_all_tenants``
+* ``can_manage_global_roles``
+* ``can_manage_lti_providers``
+* ``can_manage_pearson_templates``
+* ``can_manage_quarantined_registrations``
+* ``can_manage_site_settings``
+* ``can_manage_sso_providers``
+* ``can_manage_tenant_roles_in_all_tenants``
+* ``can_manage_tenants``
+* ``can_search_users_in_all_tenants``
+* ``can_see_all_transactions``
+* ``can_see_coupons``
+* ``can_see_statistics_in_all_tenants``
+* ``can_skip_payment_in_all_tenants``
+* ``is_global_admin``

codegrade-17.0.50/docs/models/LoginResponsePermissions.rst

@@ -0,0 +1,9 @@
+LoginResponsePermissions
+========================
+
+.. currentmodule:: codegrade.models.login_response_permissions
+
+.. autoclass:: LoginResponsePermissions
+   :members: tenant, global_
+   :inherited-members:
+   :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

codegrade-17.0.49/docs/models/GlobalPermMap.rst → codegrade-17.0.50/docs/models/MergedGlobalTenantPermMap.rst

@@ -1,9 +1,9 @@
-GlobalPermMap
-=============
+MergedGlobalTenantPermMap
+=========================
 
-.. currentmodule:: codegrade.models.global_perm_map
+.. currentmodule:: codegrade.models.merged_global_tenant_perm_map
 
-.. autoclass:: GlobalPermMap
-   :members: can_add_users, can_create_courses, can_manage_site_users, can_search_users, can_impersonate_users, can_manage_lti_providers, can_delete_community_library_items, can_list_hidden_tenants, can_manage_pearson_templates, can_view_community_library_items, can_view_all_community_library_items, can_create_community_library_items, is_admin, can_see_teacher_announcements, can_manage_sso_providers, can_manage_site_settings, can_manage_background_jobs, can_create_tenant, can_create_courses_for_other_tenants, can_see_other_tenant_statistics, can_search_users_other_tenant, can_skip_payment, can_edit_pricing, can_see_all_transactions, can_edit_coupons, can_see_coupons, can_use_snippets, can_edit_own_info, can_edit_own_password, can_view_not_started_autotest_results, can_see_other_tenant_oauth_providers, can_login_outside_system, can_login_outside_lti, can_login_outside_sso, can_manage_quarantined_registrations
+.. autoclass:: MergedGlobalTenantPermMap
+   :members: can_add_users, can_create_courses, can_manage_site_users, can_search_users, can_impersonate_users, can_manage_lti_providers, can_delete_community_library_items, can_list_hidden_tenants, can_manage_pearson_templates, can_view_community_library_items, can_view_all_community_library_items, can_create_community_library_items, is_admin, can_see_teacher_announcements, can_manage_sso_providers, can_manage_site_settings, can_manage_background_jobs, can_create_tenant, can_create_courses_for_other_tenants, can_see_other_tenant_statistics, can_search_users_other_tenant, can_skip_payment, can_edit_pricing, can_see_all_transactions, can_edit_coupons, can_see_coupons, can_use_snippets, can_edit_own_info, can_edit_own_password, can_view_not_started_autotest_results, can_see_other_tenant_oauth_providers, can_login_outside_system
    :inherited-members:
    :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

{codegrade-17.0.49 → codegrade-17.0.50}/docs/models/RemovedPermissions.rst

@@ -4,6 +4,6 @@ RemovedPermissions
 .. currentmodule:: codegrade.models.removed_permissions
 
 .. autoclass:: RemovedPermissions
-   :members: course, global_
+   :members: course, tenant
    :inherited-members:
    :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

codegrade-17.0.50/docs/models/TenantPermMap.rst

@@ -0,0 +1,9 @@
+TenantPermMap
+=============
+
+.. currentmodule:: codegrade.models.tenant_perm_map
+
+.. autoclass:: TenantPermMap
+   :members: can_add_users, can_create_community_library_items, can_create_courses, can_delete_community_library_items, can_login_outside_lti, can_login_outside_sso, can_manage_tenant_roles, can_search_users, can_see_tenant_statistics, can_skip_payment, can_use_password, can_use_snippets, can_view_community_library_items, is_tenant_admin
+   :inherited-members:
+   :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

codegrade-17.0.50/docs/models/TenantPermission.rst

@@ -0,0 +1,23 @@
+TenantPermission
+================
+
+.. currentmodule:: codegrade.models.tenant_permission
+
+.. class:: TenantPermission
+
+**Options**
+
+* ``can_add_users``
+* ``can_create_community_library_items``
+* ``can_create_courses``
+* ``can_delete_community_library_items``
+* ``can_login_outside_lti``
+* ``can_login_outside_sso``
+* ``can_manage_tenant_roles``
+* ``can_search_users``
+* ``can_see_tenant_statistics``
+* ``can_skip_payment``
+* ``can_use_password``
+* ``can_use_snippets``
+* ``can_view_community_library_items``
+* ``is_tenant_admin``

{codegrade-17.0.49 → codegrade-17.0.50}/docs/models/UserLoginResponse.rst

@@ -4,6 +4,6 @@ UserLoginResponse
 .. currentmodule:: codegrade.models.user_login_response
 
 .. autoclass:: UserLoginResponse
-   :members: user, access_token, restrictions, expires_at
+   :members: user, access_token, restrictions, expires_at, permissions
    :inherited-members:
    :exclude-members: raw_data, data_parser, to_dict, from_dict, __init__, __new__

{codegrade-17.0.49 → codegrade-17.0.50}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codegrade"
-version = "17.0.49"
+version = "17.0.50"
 description = "A client library for accessing CodeGrade"
 authors = []
 requires-python = ">=3.12,<4.0"

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/__init__.py

@@ -17,7 +17,7 @@ except ImportError:
     )
 
 __all__ = ("login", "AuthenticatedClient", "Client", "login_from_cli")
-__version__ = "17.0.49"
+__version__ = "17.0.50"
 
 _P = _ParamSpec("_P")
 _T = _t.TypeVar("_T")

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/_api/user.py

@@ -206,14 +206,21 @@ class UserService(t.Generic[_ClientT]):
 
     def get(
         self: UserService[client.AuthenticatedClient],
-    ) -> ExtendedUser:
+        *,
+        v2: bool = False,
+    ) -> t.Union[ExtendedUser, UserLoginResponse]:
         """Get the info of the currently logged in user.
 
+        :param v2: When `true` this changes the response to the same format as
+            used by `POST /login`.
+
         :returns: A response containing the JSON serialized user
         """
 
         url = "/api/v1/login"
-        params = None
+        params: t.Dict[str, str | int | bool] = {
+            "v2": v2,
+        }
 
         with self.__client as client:
             resp = client.http.get(url=url, params=params)
@@ -221,9 +228,13 @@ class UserService(t.Generic[_ClientT]):
 
         if utils.response_code_matches(resp.status_code, 200):
             from ..models.extended_user import ExtendedUser
+            from ..models.user_login_response import UserLoginResponse
 
             return parsers.JsonResponseParser(
-                parsers.ParserFor.make(ExtendedUser)
+                parsers.make_union(
+                    parsers.ParserFor.make(ExtendedUser),
+                    parsers.ParserFor.make(UserLoginResponse),
+                )
             ).try_parse(resp)
 
         from ..models.any_error import AnyErrorParser

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/client.py

@@ -661,7 +661,7 @@ class Client(_BaseClient):
         return httpx.Client(
             base_url=self.base_url,
             headers={
-                "User-Agent": "CodeGradeAPI/17.0.49",
+                "User-Agent": "CodeGradeAPI/17.0.50",
             },
             follow_redirects=True,
             transport=RetryingTransport(httpx.HTTPTransport()),
@@ -682,7 +682,7 @@ class AuthenticatedClient(_BaseClient):
             base_url=self.base_url,
             headers={
                 "Authorization": f"Bearer {self.token}",
-                "User-Agent": "CodeGradeAPI/17.0.49",
+                "User-Agent": "CodeGradeAPI/17.0.50",
             },
             follow_redirects=True,
             transport=RetryingTransport(httpx.HTTPTransport()),

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/models/__init__.py

@@ -409,6 +409,7 @@ from .line_range import LineRange
 from .lms_capabilities import LMSCapabilities
 from .login_data import LoginData
 from .login_login_link_data import LoginLoginLinkData
+from .login_response_permissions import LoginResponsePermissions
 from .login_token_before_time_setting import LoginTokenBeforeTimeSetting
 from .login_user_data import LoginUserData
 from .logout_response import LogoutResponse
@@ -447,6 +448,7 @@ from .lti_version import LTIVersion as LTIVersion
 from .max_file_size_setting import MaxFileSizeSetting
 from .max_large_upload_size_setting import MaxLargeUploadSizeSetting
 from .max_normal_upload_size_setting import MaxNormalUploadSizeSetting
+from .merged_global_tenant_perm_map import MergedGlobalTenantPermMap
 from .min_password_score_setting import MinPasswordScoreSetting
 from .mirror_file_result import MirrorFileResult
 from .missing_cookie_error import MissingCookieError
@@ -662,6 +664,8 @@ from .tenant_coupon_with_code import TenantCouponWithCode
 from .tenant_coupon_without_code import TenantCouponWithoutCode
 from .tenant_course_statistics import TenantCourseStatistics
 from .tenant_of_tenant_price import TenantOfTenantPrice
+from .tenant_perm_map import TenantPermMap
+from .tenant_permission import TenantPermission as TenantPermission
 from .tenant_permissions import TenantPermissions
 from .tenant_price import TenantPrice
 from .tenant_role_as_json_with_perms import TenantRoleAsJSONWithPerms

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/models/confirm_registered_response.py

@@ -42,6 +42,7 @@ class ConfirmRegisteredResponse(UserLoginResponse):
             "access_token": to_dict(self.access_token),
             "restrictions": to_dict(self.restrictions),
             "expires_at": to_dict(self.expires_at),
+            "permissions": to_dict(self.permissions),
         }
         return res
 
@@ -57,6 +58,7 @@ class ConfirmRegisteredResponse(UserLoginResponse):
             access_token=parsed.access_token,
             restrictions=parsed.restrictions,
             expires_at=parsed.expires_at,
+            permissions=parsed.permissions,
         )
         res.raw_data = d
         return res
@@ -68,4 +70,5 @@ if os.getenv("CG_GENERATING_DOCS", "False").lower() in ("", "true"):
     import datetime
 
     from .extended_user import ExtendedUser
+    from .login_response_permissions import LoginResponsePermissions
     from .session_restriction_data import SessionRestrictionData

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/models/course_user_limit_exceeded_exception.py

@@ -104,3 +104,4 @@ if os.getenv("CG_GENERATING_DOCS", "False").lower() in ("", "true"):
     from .base_error import BaseError
     from .course_permission import CoursePermission
     from .global_permission import GlobalPermission
+    from .tenant_permission import TenantPermission

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/models/disabled_setting_exception.py

@@ -79,3 +79,4 @@ if os.getenv("CG_GENERATING_DOCS", "False").lower() in ("", "true"):
     from .base_error import BaseError
     from .course_permission import CoursePermission
     from .global_permission import GlobalPermission
+    from .tenant_permission import TenantPermission

{codegrade-17.0.49 → codegrade-17.0.50}/src/codegrade/models/extended_user.py

@@ -12,7 +12,7 @@ import cg_request_args as rqa
 
 from .. import parsers
 from ..utils import to_dict
-from .global_perm_map import GlobalPermMap
+from .merged_global_tenant_perm_map import MergedGlobalTenantPermMap
 from .normal_user import NormalUser
 
 
@@ -29,8 +29,16 @@ class ExtendedUser(NormalUser):
     email_verified: t.Optional[bool]
     #: Can this user see hidden assignments at least in one course.
     hidden: bool
-    #: The global permissions of the user.
-    permissions: GlobalPermMap
+    #: Whether this user's identity is linked to an LTI provider. When `True`,
+    #: the name and email are managed by the LMS and changes made locally will
+    #: be overwritten on the next sync.
+    is_managed_by_lti: bool
+    #: Whether this user's identity is linked to a SAML provider. When `True`,
+    #: the name and email are managed by the SSO IdP and changes made locally
+    #: will be overwritten on the next sync.
+    is_managed_by_saml: bool
+    #: The global and tenant permissions of the user.
+    permissions: MergedGlobalTenantPermMap
 
     raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
 
@@ -52,10 +60,20 @@ class ExtendedUser(NormalUser):
                     rqa.SimpleValue.bool,
                     doc="Can this user see hidden assignments at least in one course.",
                 ),
+                rqa.RequiredArgument(
+                    "is_managed_by_lti",
+                    rqa.SimpleValue.bool,
+                    doc="Whether this user's identity is linked to an LTI provider. When `True`, the name and email are managed by the LMS and changes made locally will be overwritten on the next sync.",
+                ),
+                rqa.RequiredArgument(
+                    "is_managed_by_saml",
+                    rqa.SimpleValue.bool,
+                    doc="Whether this user's identity is linked to a SAML provider. When `True`, the name and email are managed by the SSO IdP and changes made locally will be overwritten on the next sync.",
+                ),
                 rqa.RequiredArgument(
                     "permissions",
-                    parsers.ParserFor.make(GlobalPermMap),
-                    doc="The global permissions of the user.",
+                    parsers.ParserFor.make(MergedGlobalTenantPermMap),
+                    doc="The global and tenant permissions of the user.",
                 ),
             )
         )
@@ -66,6 +84,8 @@ class ExtendedUser(NormalUser):
             "email": to_dict(self.email),
             "email_verified": to_dict(self.email_verified),
             "hidden": to_dict(self.hidden),
+            "is_managed_by_lti": to_dict(self.is_managed_by_lti),
+            "is_managed_by_saml": to_dict(self.is_managed_by_saml),
             "permissions": to_dict(self.permissions),
             "type": to_dict(self.type),
             "name": to_dict(self.name),
@@ -86,6 +106,8 @@ class ExtendedUser(NormalUser):
             email=parsed.email,
             email_verified=parsed.email_verified,
             hidden=parsed.hidden,
+            is_managed_by_lti=parsed.is_managed_by_lti,
+            is_managed_by_saml=parsed.is_managed_by_saml,
             permissions=parsed.permissions,
             type=parsed.type,
             name=parsed.name,

codegrade-17.0.50/src/codegrade/models/global_perm_map.py

@@ -0,0 +1,283 @@
+"""The module that defines the ``GlobalPermMap`` model.
+
+SPDX-License-Identifier: AGPL-3.0-only OR BSD-3-Clause-Clear
+"""
+
+from __future__ import annotations
+
+import typing as t
+from dataclasses import dataclass, field
+
+import cg_request_args as rqa
+
+from ..utils import to_dict
+
+
+@dataclass
+class GlobalPermMap:
+    """The mapping between global permission and value for a user."""
+
+    #: Users with this permission can create courses in all tenants regardless
+    #: of whether they are a member of the tenant or not.
+    can_create_courses_in_all_tenants: bool
+    #: Users with this permission can create, edit and delete pricing coupons
+    #: for courses.
+    can_edit_coupons: bool
+    #: Users with this permission can change the pricing for courses and
+    #: tenants.
+    can_edit_pricing: bool
+    #: Users with this permission can impersonate users, i.e. they can login as
+    #: other users.
+    can_impersonate_users: bool
+    #: Users with this global permission can list hidden tenants. All users can
+    #: still retrieve hidden tenants if they know the id. This permission only
+    #: has effect on the global level, not tenant level.
+    can_list_hidden_tenants: bool
+    #: Users with this permission can see and delete all the items in the
+    #: community library, even those not published to their tenant.
+    can_manage_all_community_library_items: bool
+    #: Users with this permission can view, stop, and restart background jobs.
+    can_manage_background_jobs: bool
+    #: Users with this permission can create, edit, and list all Git
+    #: connections that exist on the platform.
+    can_manage_git_connections_in_all_tenants: bool
+    #: Users with this permission can change the global permissions for other
+    #: users on the site.
+    can_manage_global_roles: bool
+    #: Users with this permission can edit and list existing, and create new
+    #: LTI providers.
+    can_manage_lti_providers: bool
+    #: Users with this permission can create, edit, and delete Pearson
+    #: templates, questions, and books.
+    can_manage_pearson_templates: bool
+    #: Users with this permission can accept and decline quarantined user
+    #: registrations.
+    can_manage_quarantined_registrations: bool
+    #: Users with this permission can manage the settings of this CodeGrade
+    #: instance
+    can_manage_site_settings: bool
+    #: Users with this permission can connect new SSO Identity Providers.
+    can_manage_sso_providers: bool
+    #: Users with this permission can create new tenants on the system.
+    can_manage_tenants: bool
+    #: Users with this permission can update permissions of tenant roles in all
+    #: tenants, regardless of whether they are a member of the tenant or not.
+    can_manage_tenant_roles_in_all_tenants: bool
+    #: Users with this permission can search for users in all tenants
+    #: regardless of whether they are a member of the tenant or not.
+    can_search_users_in_all_tenants: bool
+    #: Users with this permission are allowed to view all transactions from all
+    #: users.
+    can_see_all_transactions: bool
+    #: Users with this permission can see the pricing coupons generated for the
+    #: courses they are part of.
+    can_see_coupons: bool
+    #: Users with this permission can view the statistics of any tenant on the
+    #: system. The own-tenant counterpart is the tenant permission
+    #: `can_see_tenant_statistics`.
+    can_see_statistics_in_all_tenants: bool
+    #: Users with this permission do not have to pay for paid courses in any
+    #: tenant.
+    can_skip_payment_in_all_tenants: bool
+    #: Users with this permission are granted every course-level permission in
+    #: every course across every tenant, even when they do not have a role
+    #: within the tenant or course. This does not confer arbitrary system
+    #: access; it only elevates course-level access.
+    is_global_admin: bool
+
+    raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
+
+    data_parser: t.ClassVar[t.Any] = rqa.Lazy(
+        lambda: rqa.FixedMapping(
+            rqa.RequiredArgument(
+                "can_create_courses_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can create courses in all tenants regardless of whether they are a member of the tenant or not.",
+            ),
+            rqa.RequiredArgument(
+                "can_edit_coupons",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can create, edit and delete pricing coupons for courses.",
+            ),
+            rqa.RequiredArgument(
+                "can_edit_pricing",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can change the pricing for courses and tenants.",
+            ),
+            rqa.RequiredArgument(
+                "can_impersonate_users",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can impersonate users, i.e. they can login as other users.",
+            ),
+            rqa.RequiredArgument(
+                "can_list_hidden_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this global permission can list hidden tenants. All users can still retrieve hidden tenants if they know the id. This permission only has effect on the global level, not tenant level.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_all_community_library_items",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can see and delete all the items in the community library, even those not published to their tenant.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_background_jobs",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can view, stop, and restart background jobs.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_git_connections_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can create, edit, and list all Git connections that exist on the platform.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_global_roles",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can change the global permissions for other users on the site.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_lti_providers",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can edit and list existing, and create new LTI providers.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_pearson_templates",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can create, edit, and delete Pearson templates, questions, and books.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_quarantined_registrations",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can accept and decline quarantined user registrations.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_site_settings",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can manage the settings of this CodeGrade instance",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_sso_providers",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can connect new SSO Identity Providers.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can create new tenants on the system.",
+            ),
+            rqa.RequiredArgument(
+                "can_manage_tenant_roles_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can update permissions of tenant roles in all tenants, regardless of whether they are a member of the tenant or not.",
+            ),
+            rqa.RequiredArgument(
+                "can_search_users_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can search for users in all tenants regardless of whether they are a member of the tenant or not.",
+            ),
+            rqa.RequiredArgument(
+                "can_see_all_transactions",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission are allowed to view all transactions from all users.",
+            ),
+            rqa.RequiredArgument(
+                "can_see_coupons",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can see the pricing coupons generated for the courses they are part of.",
+            ),
+            rqa.RequiredArgument(
+                "can_see_statistics_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission can view the statistics of any tenant on the system. The own-tenant counterpart is the tenant permission `can_see_tenant_statistics`.",
+            ),
+            rqa.RequiredArgument(
+                "can_skip_payment_in_all_tenants",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission do not have to pay for paid courses in any tenant.",
+            ),
+            rqa.RequiredArgument(
+                "is_global_admin",
+                rqa.SimpleValue.bool,
+                doc="Users with this permission are granted every course-level permission in every course across every tenant, even when they do not have a role within the tenant or course. This does not confer arbitrary system access; it only elevates course-level access.",
+            ),
+        )
+    )
+
+    def to_dict(self) -> t.Dict[str, t.Any]:
+        res: t.Dict[str, t.Any] = {
+            "can_create_courses_in_all_tenants": to_dict(
+                self.can_create_courses_in_all_tenants
+            ),
+            "can_edit_coupons": to_dict(self.can_edit_coupons),
+            "can_edit_pricing": to_dict(self.can_edit_pricing),
+            "can_impersonate_users": to_dict(self.can_impersonate_users),
+            "can_list_hidden_tenants": to_dict(self.can_list_hidden_tenants),
+            "can_manage_all_community_library_items": to_dict(
+                self.can_manage_all_community_library_items
+            ),
+            "can_manage_background_jobs": to_dict(
+                self.can_manage_background_jobs
+            ),
+            "can_manage_git_connections_in_all_tenants": to_dict(
+                self.can_manage_git_connections_in_all_tenants
+            ),
+            "can_manage_global_roles": to_dict(self.can_manage_global_roles),
+            "can_manage_lti_providers": to_dict(self.can_manage_lti_providers),
+            "can_manage_pearson_templates": to_dict(
+                self.can_manage_pearson_templates
+            ),
+            "can_manage_quarantined_registrations": to_dict(
+                self.can_manage_quarantined_registrations
+            ),
+            "can_manage_site_settings": to_dict(self.can_manage_site_settings),
+            "can_manage_sso_providers": to_dict(self.can_manage_sso_providers),
+            "can_manage_tenants": to_dict(self.can_manage_tenants),
+            "can_manage_tenant_roles_in_all_tenants": to_dict(
+                self.can_manage_tenant_roles_in_all_tenants
+            ),
+            "can_search_users_in_all_tenants": to_dict(
+                self.can_search_users_in_all_tenants
+            ),
+            "can_see_all_transactions": to_dict(self.can_see_all_transactions),
+            "can_see_coupons": to_dict(self.can_see_coupons),
+            "can_see_statistics_in_all_tenants": to_dict(
+                self.can_see_statistics_in_all_tenants
+            ),
+            "can_skip_payment_in_all_tenants": to_dict(
+                self.can_skip_payment_in_all_tenants
+            ),
+            "is_global_admin": to_dict(self.is_global_admin),
+        }
+        return res
+
+    @classmethod
+    def from_dict(
+        cls: t.Type[GlobalPermMap], d: t.Dict[str, t.Any]
+    ) -> GlobalPermMap:
+        parsed = cls.data_parser.try_parse(d)
+
+        res = cls(
+            can_create_courses_in_all_tenants=parsed.can_create_courses_in_all_tenants,
+            can_edit_coupons=parsed.can_edit_coupons,
+            can_edit_pricing=parsed.can_edit_pricing,
+            can_impersonate_users=parsed.can_impersonate_users,
+            can_list_hidden_tenants=parsed.can_list_hidden_tenants,
+            can_manage_all_community_library_items=parsed.can_manage_all_community_library_items,
+            can_manage_background_jobs=parsed.can_manage_background_jobs,
+            can_manage_git_connections_in_all_tenants=parsed.can_manage_git_connections_in_all_tenants,
+            can_manage_global_roles=parsed.can_manage_global_roles,
+            can_manage_lti_providers=parsed.can_manage_lti_providers,
+            can_manage_pearson_templates=parsed.can_manage_pearson_templates,
+            can_manage_quarantined_registrations=parsed.can_manage_quarantined_registrations,
+            can_manage_site_settings=parsed.can_manage_site_settings,
+            can_manage_sso_providers=parsed.can_manage_sso_providers,
+            can_manage_tenants=parsed.can_manage_tenants,
+            can_manage_tenant_roles_in_all_tenants=parsed.can_manage_tenant_roles_in_all_tenants,
+            can_search_users_in_all_tenants=parsed.can_search_users_in_all_tenants,
+            can_see_all_transactions=parsed.can_see_all_transactions,
+            can_see_coupons=parsed.can_see_coupons,
+            can_see_statistics_in_all_tenants=parsed.can_see_statistics_in_all_tenants,
+            can_skip_payment_in_all_tenants=parsed.can_skip_payment_in_all_tenants,
+            is_global_admin=parsed.is_global_admin,
+        )
+        res.raw_data = d
+        return res