iamv2

type AccountIamV2API struct {
	// contains filtered or unexported fields
}

type AccountIamV2Interface interface {

	// Creates a group membership (assigns a principal to a group).
	CreateDirectGroupMember(ctx context.Context, request CreateDirectGroupMemberRequest) (*DirectGroupMember, error)

	// Creates a local group in the Databricks account and returns the created
	// group. A local group is one that is not synced from the customer's identity
	// provider, and can be created whether or not Account Identity Management (AIM)
	// is enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveGroup; to read an existing external identity, use the ExternalGroup
	// resource.
	CreateGroup(ctx context.Context, request CreateGroupRequest) (*Group, error)

	// Creates a local service principal in the Databricks account and returns the
	// created service principal. A local service principal is one that is not
	// synced from the customer's identity provider, and can be created whether or
	// not Account Identity Management (AIM) is enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveServicePrincipal; to read an existing external identity, use the
	// ExternalServicePrincipal resource.
	CreateServicePrincipal(ctx context.Context, request CreateServicePrincipalRequest) (*ServicePrincipal, error)

	// Creates a local user in the Databricks account and returns the created user.
	// A local user is one that is not synced from the customer's identity provider,
	// and can be created whether or not Account Identity Management (AIM) is
	// enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveUser; to read an existing external identity, use the ExternalUser
	// resource.
	CreateUser(ctx context.Context, request CreateUserRequest) (*User, error)

	// Creates a workspace assignment for a principal. Entitlements are granted one
	// at a time rather than atomically. If the request fails partway through, the
	// principal stays assigned to the workspace with only some of the requested
	// entitlements. Get the assignment afterwards to confirm which entitlements
	// were granted.
	CreateWorkspaceAssignment(ctx context.Context, request CreateWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Creates a workspace assignment detail for a principal.
	CreateWorkspaceAssignmentDetail(ctx context.Context, request CreateWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)

	// Deletes a group membership (unassigns a principal from a group).
	DeleteDirectGroupMember(ctx context.Context, request DeleteDirectGroupMemberRequest) error

	// Deletes a group from the Databricks account by its internal ID.
	DeleteGroup(ctx context.Context, request DeleteGroupRequest) error

	// Deletes a service principal from the Databricks account by its internal ID.
	DeleteServicePrincipal(ctx context.Context, request DeleteServicePrincipalRequest) error

	// Deletes a user from the Databricks account by its internal ID.
	DeleteUser(ctx context.Context, request DeleteUserRequest) error

	// Deletes a workspace assignment for a principal, revoking all of its
	// entitlements. Entitlements are revoked one at a time rather than atomically.
	// If the request fails partway through, the principal stays assigned with some
	// of its original entitlements. Retrying is safe.
	DeleteWorkspaceAssignment(ctx context.Context, request DeleteWorkspaceAssignmentRequest) error

	// Deletes a workspace assignment detail for a principal, revoking all of its
	// entitlements. Entitlements are revoked one at a time rather than atomically.
	// If the request fails partway through, the principal stays assigned with some
	// of its original entitlements. Retrying is safe.
	DeleteWorkspaceAssignmentDetail(ctx context.Context, request DeleteWorkspaceAssignmentDetailRequest) error

	// Gets a provisioned direct member of a group.
	GetDirectGroupMember(ctx context.Context, request GetDirectGroupMemberRequest) (*DirectGroupMember, error)

	// Retrieves an external group with the given external ID from the customer's
	// IdP. If the group does not exist, it will be created in the account. If the
	// customer is not onboarded onto Automatic Identity Management (AIM), this will
	// return an error.
	GetExternalGroup(ctx context.Context, request GetExternalGroupRequest) (*ExternalGroup, error)

	// Retrieves an external service principal with the given external ID from the
	// customer's IdP. If the service principal does not exist, it will be created.
	// If the customer is not onboarded onto Automatic Identity Management (AIM),
	// this will return an error.
	GetExternalServicePrincipal(ctx context.Context, request GetExternalServicePrincipalRequest) (*ExternalServicePrincipal, error)

	// Retrieves an external user with the given external ID from the customer's
	// IdP. If the user does not exist, it will be created. If the customer is not
	// onboarded onto Automatic Identity Management (AIM), this will return an
	// error.
	GetExternalUser(ctx context.Context, request GetExternalUserRequest) (*ExternalUser, error)

	// Fetches a group from the Databricks account by its internal ID.
	GetGroup(ctx context.Context, request GetGroupRequest) (*Group, error)

	// Fetches a service principal from the Databricks account by its internal ID.
	GetServicePrincipal(ctx context.Context, request GetServicePrincipalRequest) (*ServicePrincipal, error)

	// Fetches a user from the Databricks account by its internal ID.
	GetUser(ctx context.Context, request GetUserRequest) (*User, error)

	// Returns the access details for a principal in a workspace. Allows for
	// checking access details for any provisioned principal (user, service
	// principal, or group) in a workspace. * Provisioned principal here refers to
	// one that has been synced into Databricks from the customer's IdP or added
	// explicitly to Databricks via SCIM/UI. Allows for passing in a "view"
	// parameter to control what fields are returned (BASIC by default or FULL).
	GetWorkspaceAccessDetail(ctx context.Context, request GetWorkspaceAccessDetailRequest) (*WorkspaceAccessDetail, error)

	// Returns the assignment for a principal in a workspace.
	GetWorkspaceAssignment(ctx context.Context, request GetWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Returns the assignment details for a principal in a workspace.
	GetWorkspaceAssignmentDetail(ctx context.Context, request GetWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)

	// Lists provisioned direct members of a group with their membership source
	// (internal or from identity provider).
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembers(ctx context.Context, request ListDirectGroupMembersRequest) listing.Iterator[DirectGroupMember]

	// Lists provisioned direct members of a group with their membership source
	// (internal or from identity provider).
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersAll(ctx context.Context, request ListDirectGroupMembersRequest) ([]DirectGroupMember, error)

	// Lists the groups in the Databricks account, returning one page per call.
	// Supports filtering by group name or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroups(ctx context.Context, request ListGroupsRequest) listing.Iterator[Group]

	// Lists the groups in the Databricks account, returning one page per call.
	// Supports filtering by group name or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsAll(ctx context.Context, request ListGroupsRequest) ([]Group, error)

	// Lists the service principals in the Databricks account, returning one page
	// per call. Supports filtering by application ID or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipals(ctx context.Context, request ListServicePrincipalsRequest) listing.Iterator[ServicePrincipal]

	// Lists the service principals in the Databricks account, returning one page
	// per call. Supports filtering by application ID or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsAll(ctx context.Context, request ListServicePrincipalsRequest) ([]ServicePrincipal, error)

	// Lists all transitive parent groups of a principal.
	ListTransitiveParentGroups(ctx context.Context, request ListTransitiveParentGroupsRequest) (*ListTransitiveParentGroupsResponse, error)

	// Lists the users in the Databricks account, returning one page per call.
	// Supports filtering by username or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsers(ctx context.Context, request ListUsersRequest) listing.Iterator[User]

	// Lists the users in the Databricks account, returning one page per call.
	// Supports filtering by username or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersAll(ctx context.Context, request ListUsersRequest) ([]User, error)

	// Lists workspace assignment details for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetails(ctx context.Context, request ListWorkspaceAssignmentDetailsRequest) listing.Iterator[WorkspaceAssignmentDetail]

	// Lists workspace assignment details for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsAll(ctx context.Context, request ListWorkspaceAssignmentDetailsRequest) ([]WorkspaceAssignmentDetail, error)

	// Lists workspace assignments for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignments(ctx context.Context, request ListWorkspaceAssignmentsRequest) listing.Iterator[WorkspaceAssignment]

	// Lists workspace assignments for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsAll(ctx context.Context, request ListWorkspaceAssignmentsRequest) ([]WorkspaceAssignment, error)

	// Resolves a group with the given external ID from the customer's IdP. If the
	// group does not exist, it will be created in the account. If the customer is
	// not onboarded onto Automatic Identity Management (AIM), this will return an
	// error.
	ResolveGroup(ctx context.Context, request ResolveGroupRequest) (*ResolveGroupResponse, error)

	// Resolves a service principal with the given external ID from the customer's
	// IdP. If the service principal does not exist, it will be created. If the
	// customer is not onboarded onto Automatic Identity Management (AIM), this will
	// return an error.
	ResolveServicePrincipal(ctx context.Context, request ResolveServicePrincipalRequest) (*ResolveServicePrincipalResponse, error)

	// Resolves a user with the given external ID from the customer's IdP. If the
	// user does not exist, it will be created. If the customer is not onboarded
	// onto Automatic Identity Management (AIM), this will return an error.
	ResolveUser(ctx context.Context, request ResolveUserRequest) (*ResolveUserResponse, error)

	// Updates an existing group in the Databricks account. Only the fields named in
	// the update mask are modified. Returns the updated Group resource.
	//
	// When AIM is enabled and the group is an external identity (its external_id is
	// set), only external_id can be updated; its other fields are sourced from your
	// identity provider.
	UpdateGroup(ctx context.Context, request UpdateGroupRequest) (*Group, error)

	// Updates an existing service principal in the Databricks account. Only the
	// fields named in the update mask are modified. Returns the updated
	// ServicePrincipal resource.
	//
	// When AIM is enabled and the service principal is an external identity (its
	// external_id is set), only external_id can be updated; its other fields are
	// sourced from your identity provider.
	UpdateServicePrincipal(ctx context.Context, request UpdateServicePrincipalRequest) (*ServicePrincipal, error)

	// Updates an existing user in the Databricks account and returns the updated
	// user. Only the fields named in the update mask are modified. The updatable
	// fields are fullName.givenName, fullName.familyName, status, and externalId.
	//
	// When AIM is enabled and the user is an external identity (its external_id is
	// set), only external_id can be updated; its other fields are sourced from your
	// identity provider.
	UpdateUser(ctx context.Context, request UpdateUserRequest) (*User, error)

	// Updates the entitlements of a directly assigned principal in a workspace.
	// Changes are applied one at a time rather than atomically. If the request
	// fails partway through, only some of the requested changes take effect. Get
	// the assignment afterwards to confirm the final state.
	UpdateWorkspaceAssignment(ctx context.Context, request UpdateWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Updates the entitlements of a directly assigned principal in a workspace.
	// Changes are applied one at a time rather than atomically. If the request
	// fails partway through, only some of the requested changes take effect. Get
	// the assignment detail afterwards to confirm the final state.
	UpdateWorkspaceAssignmentDetail(ctx context.Context, request UpdateWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)
}

type CreateDirectGroupMemberProxyRequest struct {
	// Required. The group membership to create.
	DirectGroupMember DirectGroupMember `json:"direct_group_member"`
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
}

type CreateDirectGroupMemberRequest struct {
	// Required. The direct group member to be added to the group.
	DirectGroupMember DirectGroupMember `json:"direct_group_member"`
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
}

type CreateGroupProxyRequest struct {
	// Required. Group to be created in <Databricks>
	Group Group `json:"group"`
}

type CreateGroupRequest struct {
	// Required. Group to be created in <Databricks>
	Group Group `json:"group"`
}

type CreateServicePrincipalProxyRequest struct {
	// Required. Service principal to be created in <Databricks>
	ServicePrincipal ServicePrincipal `json:"service_principal"`
}

type CreateServicePrincipalRequest struct {
	// Required. Service principal to be created in <Databricks>
	ServicePrincipal ServicePrincipal `json:"service_principal"`
}

type CreateUserProxyRequest struct {
	// Required. User to be created in <Databricks>
	User User `json:"user"`
}

type CreateUserRequest struct {
	// Required. User to be created in <Databricks>
	User User `json:"user"`
}

type CreateWorkspaceAssignmentDetailProxyRequest struct {
	// Required. Workspace assignment detail to be created in <Databricks>.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
}

type CreateWorkspaceAssignmentDetailRequest struct {
	// Required. Workspace assignment detail to be created in <Databricks>.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
	// Required. The workspace ID for which the workspace assignment detail is
	// being created.
	WorkspaceId int64 `json:"-" url:"-"`
}

type CreateWorkspaceAssignmentProxyRequest struct {
	// Required. Workspace assignment to be created in <Databricks>.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
}

type CreateWorkspaceAssignmentRequest struct {
	// Required. Workspace assignment to be created in <Databricks>.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
	// Required. The workspace ID for which the workspace assignment is being
	// created.
	WorkspaceId int64 `json:"-" url:"-"`
}

type DeleteDirectGroupMemberProxyRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
	// Required. Internal ID of the principal to be unassigned from the group.
	PrincipalId int64 `json:"-" url:"-"`
}

type DeleteDirectGroupMemberRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
	// Required. Internal ID of the principal to be unassigned from the group.
	PrincipalId int64 `json:"-" url:"-"`
}

type DeleteGroupProxyRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
}

type DeleteGroupRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
}

type DeleteServicePrincipalProxyRequest struct {
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
}

type DeleteServicePrincipalRequest struct {
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
}

type DeleteUserProxyRequest struct {
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type DeleteUserRequest struct {
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentDetailProxyRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentDetailRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
	// The workspace ID where the principal has access.
	WorkspaceId int64 `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentProxyRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
	// The workspace ID where the principal has access.
	WorkspaceId int64 `json:"-" url:"-"`
}

type DirectGroupMember struct {
	// Display name of the principal.
	DisplayName string `json:"display_name,omitempty"`
	// The external ID of the principal in Databricks.
	ExternalId string `json:"external_id,omitempty"`
	// The internal ID of the group this member belongs to.
	GroupId int64 `json:"group_id,omitempty"`
	// The source of group membership (internal or from identity provider).
	MembershipSource GroupMembershipSource `json:"membership_source,omitempty"`
	// Internal ID of the principal in Databricks.
	PrincipalId int64 `json:"principal_id"`
	// The type of the principal (user/service principal/group).
	PrincipalType PrincipalType `json:"principal_type,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type Entitlement string

type ExternalGroup struct {
	// The parent account ID, from Databricks.
	AccountId string `json:"account_id,omitempty"`
	// Display name of the group from the customer's IdP.
	DisplayName string `json:"display_name,omitempty"`
	// The external ID of the group in the customer's IdP.
	ExternalGroupId string `json:"external_group_id,omitempty"`
	// Internal groupId of the group in Databricks.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external group. The format depends on the API
	// that returned it: - Account-scoped:
	// accounts/{account_id}/external-groups/{external_group_id} -
	// Workspace-scoped: external-groups/{external_group_id}
	Name string `json:"name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ExternalServicePrincipal struct {
	// The parent account ID, from Databricks.
	AccountId string `json:"account_id,omitempty"`
	// The activity status of the service principal in the Databricks account.
	AccountSpStatus State `json:"account_sp_status,omitempty"`
	// Application ID of the service principal, from the customer's IdP.
	ApplicationId string `json:"application_id,omitempty"`
	// Display name of the service principal, from the customer's IdP.
	DisplayName string `json:"display_name,omitempty"`
	// The external ID of the service principal in the customer's IdP.
	ExternalServicePrincipalId string `json:"external_service_principal_id,omitempty"`
	// Internal servicePrincipalId of the service principal in Databricks.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external service principal. The format depends
	// on the API that returned it: - Account-scoped:
	// accounts/{account_id}/external-service-principals/{external_service_principal_id}
	// - Workspace-scoped:
	// external-service-principals/{external_service_principal_id}
	Name string `json:"name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ExternalUser struct {
	// The parent account ID, from Databricks.
	AccountId string `json:"account_id,omitempty"`
	// The activity status of the user in the Databricks account.
	AccountUserStatus State `json:"account_user_status,omitempty"`
	// Display name of the user from the customer's IdP.
	DisplayName string `json:"display_name,omitempty"`
	// The external ID of the user in the customer's IdP.
	ExternalUserId string `json:"external_user_id,omitempty"`
	// The full name of the user, from the customer's IdP.
	FullName *FullName `json:"full_name,omitempty"`
	// Internal userId of the user in Databricks.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external user. The format depends on the API
	// that returned it: - Account-scoped:
	// accounts/{account_id}/external-users/{external_user_id} -
	// Workspace-scoped: external-users/{external_user_id}
	Name string `json:"name,omitempty"`
	// Username/email of the user, from Databricks.
	Username string `json:"username,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type FullName struct {
	// The family (last) name of the user, from the customer's IdP.
	FamilyName string `json:"family_name,omitempty"`
	// The given (first) name of the user, from the customer's IdP.
	GivenName string `json:"given_name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type GetDirectGroupMemberProxyRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
	// Required. Internal ID of the principal belonging to the group in
	// Databricks.
	PrincipalId int64 `json:"-" url:"-"`
}

type GetDirectGroupMemberRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId int64 `json:"-" url:"-"`
	// Required. Internal ID of the principal belonging to the group in
	// Databricks.
	PrincipalId int64 `json:"-" url:"-"`
}

type GetExternalGroupProxyRequest struct {
	// Required. The resource name of the external group. Format:
	// external-groups/{external_group_id}
	Name string `json:"-" url:"-"`
}

type GetExternalGroupRequest struct {
	// Required. The resource name of the external group. Format:
	// accounts/{account_id}/external-groups/{external_group_id}
	Name string `json:"-" url:"-"`
}

type GetExternalServicePrincipalProxyRequest struct {
	// Required. The resource name of the external service principal. Format:
	// external-service-principals/{external_service_principal_id}
	Name string `json:"-" url:"-"`
}

type GetExternalServicePrincipalRequest struct {
	// Required. The resource name of the external service principal. Format:
	// accounts/{account_id}/external-service-principals/{external_service_principal_id}
	Name string `json:"-" url:"-"`
}

type GetExternalUserProxyRequest struct {
	// Required. The resource name of the external user. Format:
	// external-users/{external_user_id}
	Name string `json:"-" url:"-"`
}

type GetExternalUserRequest struct {
	// Required. The resource name of the external user. Format:
	// accounts/{account_id}/external-users/{external_user_id}
	Name string `json:"-" url:"-"`
}

type GetGroupProxyRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
}

type GetGroupRequest struct {
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
}

type GetServicePrincipalProxyRequest struct {
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
}

type GetServicePrincipalRequest struct {
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
}

type GetUserProxyRequest struct {
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type GetUserRequest struct {
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type GetWorkspaceAccessDetailLocalRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// access details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
	// Controls what fields are returned.
	View WorkspaceAccessDetailView `json:"-" url:"view,omitempty"`
}

type GetWorkspaceAccessDetailRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// access details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
	// Controls what fields are returned.
	View WorkspaceAccessDetailView `json:"-" url:"view,omitempty"`
	// Required. The workspace ID for which the access details are being
	// requested.
	WorkspaceId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentDetailProxyRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentDetailRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The workspace ID for which the assignment details are being
	// requested.
	WorkspaceId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentProxyRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment is being requested.
	PrincipalId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment is being requested.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The workspace ID for which the assignment is being requested.
	WorkspaceId int64 `json:"-" url:"-"`
}

type GetWorkspaceIdentityDetailRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// identity details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
}

type Group struct {
	// The parent account ID for group in Databricks.
	AccountId string `json:"account_id,omitempty"`
	// ExternalId of the group in the customer's IdP.
	ExternalId string `json:"external_id,omitempty"`
	// Internal group ID of the group in Databricks.
	GroupId string `json:"group_id,omitempty"`
	// Display name of the group.
	GroupName string `json:"group_name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type GroupMembershipSource string

type ListDirectGroupMembersProxyRequest struct {
	// Required. Internal ID of the group in Databricks whose direct members are
	// being listed.
	GroupId int64 `json:"-" url:"-"`
	// The maximum number of members to return. The service may return fewer
	// than this value. If not provided, defaults to 1000, which is also the
	// maximum allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token from a previous list call. Provide this to retrieve the
	// subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListDirectGroupMembersRequest struct {
	// Required. Internal ID of the group in Databricks whose direct members are
	// being listed.
	GroupId int64 `json:"-" url:"-"`
	// The maximum number of members to return. The service may return fewer
	// than this value. If not provided, defaults to 1000, which is also the
	// maximum allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListDirectGroupMembers call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListDirectGroupMembersResponse struct {
	// The list of direct group members with their membership source type.
	DirectGroupMembers []DirectGroupMember `json:"direct_group_members,omitempty"`
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsProxyRequest struct {
	// Optional. Allows filtering groups by group name or external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of groups to return. The service may return fewer than
	// this value. If not provided, defaults to 1000, which is also the maximum
	// allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListGroups call. Provide this to
	// retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsRequest struct {
	// Optional. Allows filtering groups by group name or external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of groups to return. The service may return fewer than
	// this value. If not provided, defaults to 1000, which is also the maximum
	// allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListGroups call. Provide this to
	// retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsResponse struct {
	Groups []Group `json:"groups,omitempty"`
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsProxyRequest struct {
	// Optional. Allows filtering service principals by application id or
	// external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of SPs to return. The service may return fewer than
	// this value. If not provided, defaults to 1000, which is also the maximum
	// allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListServicePrincipals call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsRequest struct {
	// Optional. Allows filtering service principals by application id or
	// external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of service principals to return. The service may
	// return fewer than this value. If not provided, defaults to 1000, which is
	// also the maximum allowed. Requests for more than the maximum are clamped
	// to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListServicePrincipals call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	ServicePrincipals []ServicePrincipal `json:"service_principals,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsProxyRequest struct {
	// The maximum number of parent groups to return. The service may return
	// fewer than this value. If not provided, defaults to 1000, which is also
	// the maximum allowed. Requests for more than the maximum are clamped to
	// 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListTransitiveParentGroups call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// Required. Internal ID of the principal in Databricks whose transitive
	// parent groups are being listed.
	PrincipalId int64 `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsRequest struct {
	// The maximum number of parent groups to return. The service may return
	// fewer than this value. If not provided, defaults to 1000, which is also
	// the maximum allowed. Requests for more than the maximum are clamped to
	// 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListTransitiveParentGroups call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// Required. Internal ID of the principal in Databricks whose transitive
	// parent groups are being listed.
	PrincipalId int64 `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`
	// The list of transitive parent groups.
	TransitiveParentGroups []TransitiveParentGroup `json:"transitive_parent_groups,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersProxyRequest struct {
	// Optional. Allows filtering users by username or external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of users to return. The service may return fewer than
	// this value. If not provided, defaults to 1000, which is also the maximum
	// allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListUsers call. Provide this to
	// retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersRequest struct {
	// Optional. Allows filtering users by username or external id.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of users to return. The service may return fewer than
	// this value. If not provided, defaults to 1000, which is also the maximum
	// allowed. Requests for more than the maximum are clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListUsers call. Provide this to
	// retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	Users []User `json:"users,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsProxyRequest struct {
	// The maximum number of workspace assignment details to return. The service
	// may return fewer than this value. If not provided, defaults to 1000,
	// which is also the maximum allowed. Requests for more than the maximum are
	// clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token from a previous list call. Provide this to retrieve the
	// subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsRequest struct {
	// The maximum number of workspace assignment details to return. The service
	// may return fewer than this value. If not provided, defaults to 1000,
	// which is also the maximum allowed. Requests for more than the maximum are
	// clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListWorkspaceAssignmentDetails
	// call. Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// Required. The workspace ID for which the workspace assignment details are
	// being fetched.
	WorkspaceId int64 `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	WorkspaceAssignmentDetails []WorkspaceAssignmentDetail `json:"workspace_assignment_details,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsProxyRequest struct {
	// The maximum number of workspace assignments to return. The service may
	// return fewer than this value. If not provided, defaults to 1000, which is
	// also the maximum allowed. Requests for more than the maximum are clamped
	// to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token from a previous list call. Provide this to retrieve the
	// subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsRequest struct {
	// The maximum number of workspace assignments to return. The service may
	// return fewer than this value. If not provided, defaults to 1000, which is
	// also the maximum allowed. Requests for more than the maximum are clamped
	// to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListWorkspaceAssignments call.
	// Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// Required. The workspace ID for which the workspace assignments are being
	// fetched.
	WorkspaceId int64 `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	WorkspaceAssignments []WorkspaceAssignment `json:"workspace_assignments,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type PrincipalType string

type ResolveGroupProxyRequest struct {
	// Required. The external ID of the group in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveGroupRequest struct {
	// Required. The external ID of the group in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveGroupResponse struct {
	// The group that was resolved.
	Group *Group `json:"group,omitempty"`
}

type ResolveServicePrincipalProxyRequest struct {
	// Required. The external ID of the service principal in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveServicePrincipalRequest struct {
	// Required. The external ID of the service principal in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveServicePrincipalResponse struct {
	// The service principal that was resolved.
	ServicePrincipal *ServicePrincipal `json:"service_principal,omitempty"`
}

type ResolveUserProxyRequest struct {
	// Required. The external ID of the user in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveUserRequest struct {
	// Required. The external ID of the user in the customer's IdP.
	ExternalId string `json:"external_id"`
}

type ResolveUserResponse struct {
	// The user that was resolved.
	User *User `json:"user,omitempty"`
}

type ServicePrincipal struct {
	// The parent account ID for the service principal in Databricks.
	AccountId string `json:"account_id,omitempty"`
	// The activity status of a service principal in a Databricks account.
	AccountSpStatus State `json:"account_sp_status"`
	// Application ID of the service principal. Set at creation time and cannot
	// be changed afterwards; when omitted, the server generates one.
	ApplicationId string `json:"application_id,omitempty"`
	// Display name of the service principal.
	DisplayName string `json:"display_name"`
	// ExternalId of the service principal in the customer's IdP.
	ExternalId string `json:"external_id,omitempty"`
	// Internal service principal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"service_principal_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type State string

type TransitiveParentGroup struct {
	// The parent account ID for group in Databricks.
	AccountId string `json:"account_id,omitempty"`
	// ExternalId of the group in the customer's IdP.
	ExternalId string `json:"external_id,omitempty"`
	// Internal group ID of the group in Databricks.
	GroupId string `json:"group_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type UpdateGroupProxyRequest struct {
	// Required. Group to be updated in <Databricks>
	Group Group `json:"group"`
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateGroupRequest struct {
	// Required. Group to be updated in <Databricks>
	Group Group `json:"group"`
	// Required. Internal ID of the group in Databricks.
	GroupId string `json:"-" url:"-"`
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateServicePrincipalProxyRequest struct {
	// Required. Service principal to be updated in <Databricks>
	ServicePrincipal ServicePrincipal `json:"service_principal"`
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateServicePrincipalRequest struct {
	// Required. Service Principal to be updated in <Databricks>
	ServicePrincipal ServicePrincipal `json:"service_principal"`
	// Required. Internal ID of the service principal in Databricks.
	ServicePrincipalId string `json:"-" url:"-"`
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateUserProxyRequest struct {
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
	// Required. User to be updated in <Databricks>
	User User `json:"user"`
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type UpdateUserRequest struct {
	// Optional. The list of fields to update.
	UpdateMask string `json:"-" url:"update_mask"`
	// Required. User to be updated in <Databricks>
	User User `json:"user"`
	// Required. Internal ID of the user in Databricks.
	UserId string `json:"-" url:"-"`
}

type UpdateWorkspaceAssignmentDetailProxyRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment detail to be updated in <Databricks>.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
}

type UpdateWorkspaceAssignmentDetailRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment detail to be updated in <Databricks>.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
	// Required. The workspace ID for which the workspace assignment detail is
	// being updated.
	WorkspaceId int64 `json:"-" url:"-"`
}

type UpdateWorkspaceAssignmentProxyRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment to be updated in <Databricks>.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
}

type UpdateWorkspaceAssignmentRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment to be updated in <Databricks>.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
	// Required. The workspace ID for which the workspace assignment is being
	// updated.
	WorkspaceId int64 `json:"-" url:"-"`
}

type UpdateWorkspaceIdentityDetailRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace identity detail to be updated in <Databricks>.
	WorkspaceIdentityDetail WorkspaceIdentityDetail `json:"workspace_identity_detail"`
}

type User struct {
	// The accountId parent of the user in Databricks.
	AccountId string `json:"account_id,omitempty"`
	// The activity status of a user in a Databricks account.
	AccountUserStatus State `json:"account_user_status"`
	// ExternalId of the user in the customer's IdP.
	ExternalId string `json:"external_id,omitempty"`

	FullName UserFullName `json:"full_name"`
	// Internal userId of the user in Databricks.
	UserId string `json:"user_id,omitempty"`
	// Username/email of the user.
	Username string `json:"username"`

	ForceSendFields []string `json:"-" url:"-"`
}

type UserFullName struct {
	FamilyName string `json:"family_name,omitempty"`

	GivenName string `json:"given_name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAccessDetail struct {
	AccessType WorkspaceAccessDetailAccessType `json:"access_type,omitempty"`
	// The account ID parent of the workspace where the principal has access.
	AccountId string `json:"account_id,omitempty"`
	// The permissions granted to the principal in the workspace.
	Permissions []WorkspacePermission `json:"permissions,omitempty"`
	// The internal ID of the principal (user/sp/group) in Databricks.
	PrincipalId int64 `json:"principal_id,omitempty"`

	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The activity status of the principal in the workspace. Not applicable for
	// groups at the moment.
	Status State `json:"status,omitempty"`
	// The workspace ID where the principal has access.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAccessDetailAccessType string

type WorkspaceAccessDetailView string

type WorkspaceAssignment struct {
	// The account ID parent of the workspace where the principal is assigned
	AccountId string `json:"account_id,omitempty"`
	// Every entitlement the principal holds in this workspace, whether granted
	// directly or through group membership. Get responses populate this field.
	// List responses leave it empty.
	EffectiveEntitlements []Entitlement `json:"effective_entitlements,omitempty"`
	// Entitlements granted directly to the principal on this workspace. This is
	// the only client-settable field. Create and update manage exactly this
	// set, including entitlements the principal also holds through a group.
	// List responses leave this field empty. Get a single principal to read its
	// entitlements.
	Entitlements []Entitlement `json:"entitlements,omitempty"`
	// The internal ID of the principal (user/sp/group) in Databricks.
	PrincipalId int64 `json:"principal_id"`
	// The type of the principal (user/service principal/group) that is
	// assigned.
	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The workspace ID where the principal is assigned.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAssignmentDetail struct {
	// The account ID parent of the workspace where the principal is assigned
	AccountId string `json:"account_id,omitempty"`
	// Every entitlement the principal holds in this workspace, whether granted
	// directly or through group membership. Get responses populate this field.
	// List responses leave it empty.
	EffectiveEntitlements []Entitlement `json:"effective_entitlements,omitempty"`
	// Entitlements granted directly to the principal on this workspace. This is
	// the only client-settable field. Create and update manage exactly this
	// set, including entitlements the principal also holds through a group.
	// List responses leave this field empty. Get a single principal to read its
	// entitlements.
	Entitlements []Entitlement `json:"entitlements,omitempty"`
	// The internal ID of the principal (user/sp/group) in Databricks.
	PrincipalId int64 `json:"principal_id"`

	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The workspace ID where the principal is assigned.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceIamV2API struct {
	// contains filtered or unexported fields
}

type WorkspaceIamV2Interface interface {

	// Creates a group membership (assigns a principal to a group).
	CreateDirectGroupMemberProxy(ctx context.Context, request CreateDirectGroupMemberProxyRequest) (*DirectGroupMember, error)

	// Creates a local group in the Databricks account that parents the calling
	// workspace and returns the created group. A local group is one that is not
	// synced from the customer's identity provider, and can be created whether or
	// not Account Identity Management (AIM) is enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveGroup; to read an existing external identity, use the ExternalGroup
	// resource.
	CreateGroupProxy(ctx context.Context, request CreateGroupProxyRequest) (*Group, error)

	// Creates a local service principal in the Databricks account that parents the
	// calling workspace and returns the created service principal. A local service
	// principal is one that is not synced from the customer's identity provider,
	// and can be created whether or not Account Identity Management (AIM) is
	// enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveServicePrincipal; to read an existing external identity, use the
	// ExternalServicePrincipal resource.
	CreateServicePrincipalProxy(ctx context.Context, request CreateServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Creates a local user in the Databricks account that parents the calling
	// workspace and returns the created user. A local user is one that is not
	// synced from the customer's identity provider, and can be created whether or
	// not Account Identity Management (AIM) is enabled.
	//
	// When AIM is enabled, supplying an external ID returns an error. To provision
	// the identity from your identity provider, resolve it by its external ID with
	// ResolveUser; to read an existing external identity, use the ExternalUser
	// resource.
	CreateUserProxy(ctx context.Context, request CreateUserProxyRequest) (*User, error)

	// Creates a workspace assignment detail for a principal in the calling
	// workspace.
	CreateWorkspaceAssignmentDetailProxy(ctx context.Context, request CreateWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Creates a workspace assignment for a principal in the calling workspace.
	// Entitlements are granted one at a time rather than atomically. If the request
	// fails partway through, the principal stays assigned to the workspace with
	// only some of the requested entitlements. Get the assignment afterwards to
	// confirm which entitlements were granted.
	CreateWorkspaceAssignmentProxy(ctx context.Context, request CreateWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Deletes a group membership (unassigns a principal from a group).
	DeleteDirectGroupMemberProxy(ctx context.Context, request DeleteDirectGroupMemberProxyRequest) error

	// Deletes a group by its internal ID from the Databricks account that parents
	// the calling workspace.
	DeleteGroupProxy(ctx context.Context, request DeleteGroupProxyRequest) error

	// Deletes a service principal by its internal ID from the Databricks account
	// that parents the calling workspace.
	DeleteServicePrincipalProxy(ctx context.Context, request DeleteServicePrincipalProxyRequest) error

	// Deletes a user by its internal ID from the Databricks account that parents
	// the calling workspace.
	DeleteUserProxy(ctx context.Context, request DeleteUserProxyRequest) error

	// Deletes a workspace assignment detail for a principal in the calling
	// workspace, revoking all of its entitlements. Entitlements are revoked one at
	// a time rather than atomically. If the request fails partway through, the
	// principal stays assigned with some of its original entitlements. Retrying is
	// safe.
	DeleteWorkspaceAssignmentDetailProxy(ctx context.Context, request DeleteWorkspaceAssignmentDetailProxyRequest) error

	// Deletes a workspace assignment for a principal in the calling workspace,
	// revoking all of its entitlements. Entitlements are revoked one at a time
	// rather than atomically. If the request fails partway through, the principal
	// stays assigned with some of its original entitlements. Retrying is safe.
	DeleteWorkspaceAssignmentProxy(ctx context.Context, request DeleteWorkspaceAssignmentProxyRequest) error

	// Gets a provisioned direct member of a group.
	GetDirectGroupMemberProxy(ctx context.Context, request GetDirectGroupMemberProxyRequest) (*DirectGroupMember, error)

	// Retrieves an external group with the given external ID from the customer's
	// IdP. If the group does not exist, it will be created in the account. If the
	// customer is not onboarded onto Automatic Identity Management (AIM), this will
	// return an error. Workspace-scoped variant for workspace-authenticated
	// callers.
	GetExternalGroupProxy(ctx context.Context, request GetExternalGroupProxyRequest) (*ExternalGroup, error)

	// Retrieves an external service principal with the given external ID from the
	// customer's IdP. If the service principal does not exist, it will be created.
	// If the customer is not onboarded onto Automatic Identity Management (AIM),
	// this will return an error. Workspace-scoped variant for
	// workspace-authenticated callers.
	GetExternalServicePrincipalProxy(ctx context.Context, request GetExternalServicePrincipalProxyRequest) (*ExternalServicePrincipal, error)

	// Retrieves an external user with the given external ID from the customer's
	// IdP. If the user does not exist, it will be created. If the customer is not
	// onboarded onto Automatic Identity Management (AIM), this will return an
	// error. Workspace-scoped variant for workspace-authenticated callers.
	GetExternalUserProxy(ctx context.Context, request GetExternalUserProxyRequest) (*ExternalUser, error)

	// Fetches a group by its internal ID from the Databricks account that parents
	// the calling workspace.
	GetGroupProxy(ctx context.Context, request GetGroupProxyRequest) (*Group, error)

	// Fetches a service principal by its internal ID from the Databricks account
	// that parents the calling workspace.
	GetServicePrincipalProxy(ctx context.Context, request GetServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Fetches a user by its internal ID from the Databricks account that parents
	// the calling workspace.
	GetUserProxy(ctx context.Context, request GetUserProxyRequest) (*User, error)

	// Returns the access details for a principal in the current workspace. Allows
	// for checking access details for any provisioned principal (user, service
	// principal, or group) in the current workspace. * Provisioned principal here
	// refers to one that has been synced into Databricks from the customer's IdP or
	// added explicitly to Databricks via SCIM/UI. Allows for passing in a "view"
	// parameter to control what fields are returned (BASIC by default or FULL).
	GetWorkspaceAccessDetailLocal(ctx context.Context, request GetWorkspaceAccessDetailLocalRequest) (*WorkspaceAccessDetail, error)

	// Returns the assignment details for a principal in the calling workspace.
	GetWorkspaceAssignmentDetailProxy(ctx context.Context, request GetWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Returns the assignment for a principal in the calling workspace.
	GetWorkspaceAssignmentProxy(ctx context.Context, request GetWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Returns the identity details for a principal in a workspace.
	GetWorkspaceIdentityDetail(ctx context.Context, request GetWorkspaceIdentityDetailRequest) (*WorkspaceIdentityDetail, error)

	// Lists provisioned direct members of a group with their membership source
	// (internal or from identity provider).
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersProxy(ctx context.Context, request ListDirectGroupMembersProxyRequest) listing.Iterator[DirectGroupMember]

	// Lists provisioned direct members of a group with their membership source
	// (internal or from identity provider).
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersProxyAll(ctx context.Context, request ListDirectGroupMembersProxyRequest) ([]DirectGroupMember, error)

	// Lists the groups in the Databricks account that parents the calling
	// workspace, returning one page per call. Supports filtering by group name or
	// external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsProxy(ctx context.Context, request ListGroupsProxyRequest) listing.Iterator[Group]

	// Lists the groups in the Databricks account that parents the calling
	// workspace, returning one page per call. Supports filtering by group name or
	// external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsProxyAll(ctx context.Context, request ListGroupsProxyRequest) ([]Group, error)

	// Lists the service principals in the Databricks account that parents the
	// calling workspace, returning one page per call. Supports filtering by
	// application ID or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsProxy(ctx context.Context, request ListServicePrincipalsProxyRequest) listing.Iterator[ServicePrincipal]

	// Lists the service principals in the Databricks account that parents the
	// calling workspace, returning one page per call. Supports filtering by
	// application ID or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsProxyAll(ctx context.Context, request ListServicePrincipalsProxyRequest) ([]ServicePrincipal, error)

	// Lists all transitive parent groups of a principal.
	ListTransitiveParentGroupsProxy(ctx context.Context, request ListTransitiveParentGroupsProxyRequest) (*ListTransitiveParentGroupsResponse, error)

	// Lists the users in the Databricks account that parents the calling workspace,
	// returning one page per call. Supports filtering by username or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersProxy(ctx context.Context, request ListUsersProxyRequest) listing.Iterator[User]

	// Lists the users in the Databricks account that parents the calling workspace,
	// returning one page per call. Supports filtering by username or external ID.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersProxyAll(ctx context.Context, request ListUsersProxyRequest) ([]User, error)

	// Lists workspace assignment details for the calling workspace. The response
	// omits the per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsProxy(ctx context.Context, request ListWorkspaceAssignmentDetailsProxyRequest) listing.Iterator[WorkspaceAssignmentDetail]

	// Lists workspace assignment details for the calling workspace. The response
	// omits the per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsProxyAll(ctx context.Context, request ListWorkspaceAssignmentDetailsProxyRequest) ([]WorkspaceAssignmentDetail, error)

	// Lists workspace assignments for the calling workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsProxy(ctx context.Context, request ListWorkspaceAssignmentsProxyRequest) listing.Iterator[WorkspaceAssignment]

	// Lists workspace assignments for the calling workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsProxyAll(ctx context.Context, request ListWorkspaceAssignmentsProxyRequest) ([]WorkspaceAssignment, error)

	// Resolves a group with the given external ID from the customer's IdP. If the
	// group does not exist, it will be created in the account. If the customer is
	// not onboarded onto Automatic Identity Management (AIM), this will return an
	// error.
	ResolveGroupProxy(ctx context.Context, request ResolveGroupProxyRequest) (*ResolveGroupResponse, error)

	// Resolves a service principal with the given external ID from the customer's
	// IdP. If the service principal does not exist, it will be created. If the
	// customer is not onboarded onto Automatic Identity Management (AIM), this will
	// return an error.
	ResolveServicePrincipalProxy(ctx context.Context, request ResolveServicePrincipalProxyRequest) (*ResolveServicePrincipalResponse, error)

	// Resolves a user with the given external ID from the customer's IdP. If the
	// user does not exist, it will be created. If the customer is not onboarded
	// onto Automatic Identity Management (AIM), this will return an error.
	ResolveUserProxy(ctx context.Context, request ResolveUserProxyRequest) (*ResolveUserResponse, error)

	// Updates an existing group in the Databricks account that parents the calling
	// workspace. Only the fields named in the update mask are modified. Returns the
	// updated Group resource.
	//
	// When AIM is enabled and the group is an external identity (its external_id is
	// set), only external_id can be updated; its other fields are sourced from your
	// identity provider.
	UpdateGroupProxy(ctx context.Context, request UpdateGroupProxyRequest) (*Group, error)

	// Updates an existing service principal in the Databricks account that parents
	// the calling workspace. Only the fields named in the update mask are modified.
	// Returns the updated ServicePrincipal resource.
	//
	// When AIM is enabled and the service principal is an external identity (its
	// external_id is set), only external_id can be updated; its other fields are
	// sourced from your identity provider.
	UpdateServicePrincipalProxy(ctx context.Context, request UpdateServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Updates an existing user in the Databricks account that parents the calling
	// workspace and returns the updated user. Only the fields named in the update
	// mask are modified. The updatable fields are fullName.givenName,
	// fullName.familyName, status, and externalId.
	//
	// When AIM is enabled and the user is an external identity (its external_id is
	// set), only external_id can be updated; its other fields are sourced from your
	// identity provider.
	UpdateUserProxy(ctx context.Context, request UpdateUserProxyRequest) (*User, error)

	// Updates the entitlements of a directly assigned principal in the calling
	// workspace. Changes are applied one at a time rather than atomically. If the
	// request fails partway through, only some of the requested changes take
	// effect. Get the assignment detail afterwards to confirm the final state.
	UpdateWorkspaceAssignmentDetailProxy(ctx context.Context, request UpdateWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Updates the entitlements of a directly assigned principal in the calling
	// workspace. Changes are applied one at a time rather than atomically. If the
	// request fails partway through, only some of the requested changes take
	// effect. Get the assignment afterwards to confirm the final state.
	UpdateWorkspaceAssignmentProxy(ctx context.Context, request UpdateWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Updates a workspace identity detail for a principal.
	UpdateWorkspaceIdentityDetail(ctx context.Context, request UpdateWorkspaceIdentityDetailRequest) (*WorkspaceIdentityDetail, error)
}