iamv2

type AccountIamV2API struct {
	// contains filtered or unexported fields
}

type AccountIamV2Interface interface {

	// Adds a user, service principal, or group as a direct member of a group.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// its members come from your identity provider and can't be changed in
	// Databricks.
	CreateDirectGroupMember(ctx context.Context, request CreateDirectGroupMemberRequest) (*DirectGroupMember, error)

	// Creates a local group, which is a group that isn't synced from your identity
	// provider (IdP). You become a manager of the new group.
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// group from your IdP, get it as an external group instead.
	CreateGroup(ctx context.Context, request CreateGroupRequest) (*Group, error)

	// Creates a group visibility filter. It applies to every workspace in the
	// account.
	//
	// Returns `ALREADY_EXISTS` if a filter with the same ID, or the same type and
	// match value, already exists. Returns `RESOURCE_EXHAUSTED` if the account
	// already has the maximum number of filters of that type. You can't change a
	// filter: to change a rule, delete it and create a new one.
	CreateIdentityVisibilityFilter(ctx context.Context, request CreateIdentityVisibilityFilterRequest) (*IdentityVisibilityFilter, error)

	// Creates a local service principal, which is a service principal that isn't
	// synced from your identity provider (IdP).
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// service principal from your IdP, get it as an external service principal
	// instead.
	CreateServicePrincipal(ctx context.Context, request CreateServicePrincipalRequest) (*ServicePrincipal, error)

	// Creates a local user, which is a user that isn't synced from your identity
	// provider (IdP).
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// user from your IdP, get them as an external user instead.
	CreateUser(ctx context.Context, request CreateUserRequest) (*User, error)

	// Assigns a user, service principal, or group directly to a workspace with the
	// given entitlements. Returns an error if the principal is already assigned
	// directly.
	//
	// Entitlements are granted one at a time. If the request fails partway through,
	// the principal stays assigned with only some of the entitlements. Get the
	// assignment afterwards to check which were granted.
	CreateWorkspaceAssignment(ctx context.Context, request CreateWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Creates a workspace assignment detail for a principal.
	CreateWorkspaceAssignmentDetail(ctx context.Context, request CreateWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)

	// Removes a direct member from a group.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// its members come from your identity provider and can't be changed in
	// Databricks.
	DeleteDirectGroupMember(ctx context.Context, request DeleteDirectGroupMemberRequest) error

	// Deletes a group from your account and removes it from the workspaces it's
	// assigned to.
	DeleteGroup(ctx context.Context, request DeleteGroupRequest) error

	// Deletes a group visibility filter. Deleting a filter doesn't delete groups or
	// remove access. Groups that only this filter matched stop being visible,
	// unless they or a parent group are already in your account. If no group
	// filters remain, all groups become visible again. Deleting a filter that
	// doesn't exist succeeds.
	DeleteIdentityVisibilityFilter(ctx context.Context, request DeleteIdentityVisibilityFilterRequest) error

	// Deletes a service principal from your account and removes it from the
	// workspaces it's assigned to. You can't delete service principals that
	// Databricks manages.
	DeleteServicePrincipal(ctx context.Context, request DeleteServicePrincipalRequest) error

	// Deletes a user from your account and removes them from the workspaces they're
	// assigned to.
	DeleteUser(ctx context.Context, request DeleteUserRequest) error

	// Removes a principal's direct assignment to a workspace and revokes the
	// entitlements it granted. The principal keeps any access it gets through
	// groups.
	//
	// Entitlements are revoked one at a time. If the request fails partway through,
	// the principal stays assigned with some of its entitlements. You can retry the
	// request.
	DeleteWorkspaceAssignment(ctx context.Context, request DeleteWorkspaceAssignmentRequest) error

	// Deletes a workspace assignment detail for a principal, revoking all of its
	// entitlements. Entitlements are revoked one at a time rather than atomically.
	// If the request fails partway through, the principal stays assigned with some
	// of its original entitlements. Retrying is safe.
	DeleteWorkspaceAssignmentDetail(ctx context.Context, request DeleteWorkspaceAssignmentDetailRequest) error

	// Gets a direct member of a group, including where the membership comes from.
	// Returns an error if the principal isn't a direct member.
	GetDirectGroupMember(ctx context.Context, request GetDirectGroupMemberRequest) (*DirectGroupMember, error)

	// Gets a group by its ID in your identity provider (IdP) and syncs its name and
	// parent groups from your IdP. If the group isn't in your account yet, it's
	// added. Requires automatic identity management. If your account has group
	// visibility filters, the group must match them.
	GetExternalGroup(ctx context.Context, request GetExternalGroupRequest) (*ExternalGroup, error)

	// Gets a service principal by its ID in your identity provider (IdP) and syncs
	// its details and group memberships from your IdP. If the service principal
	// isn't in your account yet, it's added. Requires automatic identity management
	// with Microsoft Entra ID as your IdP.
	GetExternalServicePrincipal(ctx context.Context, request GetExternalServicePrincipalRequest) (*ExternalServicePrincipal, error)

	// Gets a user by their ID in your identity provider (IdP) and syncs their
	// details and group memberships from your IdP. If the user isn't in your
	// account yet, they're added. Requires automatic identity management.
	GetExternalUser(ctx context.Context, request GetExternalUserRequest) (*ExternalUser, error)

	// Gets a group by its Databricks ID.
	GetGroup(ctx context.Context, request GetGroupRequest) (*Group, error)

	// Gets a group visibility filter. It returns the rule, not the groups it
	// matches.
	GetIdentityVisibilityFilter(ctx context.Context, request GetIdentityVisibilityFilterRequest) (*IdentityVisibilityFilter, error)

	// Gets a service principal by its Databricks ID.
	GetServicePrincipal(ctx context.Context, request GetServicePrincipalRequest) (*ServicePrincipal, error)

	// Gets a user by their Databricks ID.
	GetUser(ctx context.Context, request GetUserRequest) (*User, error)

	// Returns the access details for a principal in a workspace. Allows for
	// checking access details for any provisioned principal (user, service
	// principal, or group) in a workspace. * Provisioned principal here refers to
	// one that has been synced into Databricks from the customer's IdP or added
	// explicitly to Databricks via SCIM/UI. Allows for passing in a "view"
	// parameter to control what fields are returned (BASIC by default or FULL).
	GetWorkspaceAccessDetail(ctx context.Context, request GetWorkspaceAccessDetailRequest) (*WorkspaceAccessDetail, error)

	// Gets a principal's direct assignment to a workspace, including its effective
	// entitlements. Returns an error if the principal isn't assigned directly.
	GetWorkspaceAssignment(ctx context.Context, request GetWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Returns the assignment details for a principal in a workspace.
	GetWorkspaceAssignmentDetail(ctx context.Context, request GetWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)

	// Lists the direct members of a group, sorted by display name, with where each
	// membership comes from. Members in your identity provider who haven't been
	// added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembers(ctx context.Context, request ListDirectGroupMembersRequest) listing.Iterator[DirectGroupMember]

	// Lists the direct members of a group, sorted by display name, with where each
	// membership comes from. Members in your identity provider who haven't been
	// added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersAll(ctx context.Context, request ListDirectGroupMembersRequest) ([]DirectGroupMember, error)

	// Lists the groups in your account, sorted by Databricks ID. Groups in your
	// identity provider that haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroups(ctx context.Context, request ListGroupsRequest) listing.Iterator[Group]

	// Lists the groups in your account, sorted by Databricks ID. Groups in your
	// identity provider that haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsAll(ctx context.Context, request ListGroupsRequest) ([]Group, error)

	// Lists the group visibility filters in an account. It returns the rules, not
	// the groups they match.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListIdentityVisibilityFilters(ctx context.Context, request ListIdentityVisibilityFiltersRequest) listing.Iterator[IdentityVisibilityFilter]

	// Lists the group visibility filters in an account. It returns the rules, not
	// the groups they match.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListIdentityVisibilityFiltersAll(ctx context.Context, request ListIdentityVisibilityFiltersRequest) ([]IdentityVisibilityFilter, error)

	// Lists the service principals in your account, sorted by Databricks ID.
	// Service principals in your identity provider that haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipals(ctx context.Context, request ListServicePrincipalsRequest) listing.Iterator[ServicePrincipal]

	// Lists the service principals in your account, sorted by Databricks ID.
	// Service principals in your identity provider that haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsAll(ctx context.Context, request ListServicePrincipalsRequest) ([]ServicePrincipal, error)

	// Lists every group that a user, service principal, or group belongs to,
	// directly or through other groups, sorted by Databricks ID. If automatic
	// identity management is on, the principal's group memberships are synced from
	// your identity provider first.
	ListTransitiveParentGroups(ctx context.Context, request ListTransitiveParentGroupsRequest) (*ListTransitiveParentGroupsResponse, error)

	// Lists the users in your account, sorted by Databricks ID. Users in your
	// identity provider who haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsers(ctx context.Context, request ListUsersRequest) listing.Iterator[User]

	// Lists the users in your account, sorted by Databricks ID. Users in your
	// identity provider who haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersAll(ctx context.Context, request ListUsersRequest) ([]User, error)

	// Lists workspace assignment details for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetails(ctx context.Context, request ListWorkspaceAssignmentDetailsRequest) listing.Iterator[WorkspaceAssignmentDetail]

	// Lists workspace assignment details for a workspace. The response omits the
	// per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsAll(ctx context.Context, request ListWorkspaceAssignmentDetailsRequest) ([]WorkspaceAssignmentDetail, error)

	// Lists the principals assigned directly to a workspace. The response leaves
	// `entitlements` and `effective_entitlements` empty. To read a principal's
	// entitlements, get its assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignments(ctx context.Context, request ListWorkspaceAssignmentsRequest) listing.Iterator[WorkspaceAssignment]

	// Lists the principals assigned directly to a workspace. The response leaves
	// `entitlements` and `effective_entitlements` empty. To read a principal's
	// entitlements, get its assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsAll(ctx context.Context, request ListWorkspaceAssignmentsRequest) ([]WorkspaceAssignment, error)

	// Gets a group by its ID in your identity provider (IdP) and syncs its name and
	// parent groups from your IdP. If the group isn't in your account yet, it's
	// added. Requires automatic identity management. If your account has group
	// visibility filters, the group must match them.
	ResolveGroup(ctx context.Context, request ResolveGroupRequest) (*ResolveGroupResponse, error)

	// Gets a service principal by its ID in your identity provider (IdP) and syncs
	// its details and group memberships from your IdP. If the service principal
	// isn't in your account yet, it's added. Requires automatic identity management
	// with Microsoft Entra ID as your IdP.
	ResolveServicePrincipal(ctx context.Context, request ResolveServicePrincipalRequest) (*ResolveServicePrincipalResponse, error)

	// Gets a user by their ID in your identity provider (IdP) and syncs their
	// details and group memberships from your IdP. If the user isn't in your
	// account yet, they're added. Requires automatic identity management.
	ResolveUser(ctx context.Context, request ResolveUserRequest) (*ResolveUserResponse, error)

	// Updates a group. Only the fields in `update_mask` change.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// you can only update `external_id`. The group's other fields come from your
	// identity provider. If your account also has group visibility filters, a new
	// `external_id` must match them. You can always clear `external_id`.
	UpdateGroup(ctx context.Context, request UpdateGroupRequest) (*Group, error)

	// Updates a service principal. Only the fields in `update_mask` change.
	//
	// If automatic identity management is on and the service principal has an
	// `external_id`, you can only update `external_id`. Its other fields come from
	// your identity provider. A service principal can't deactivate itself, and you
	// can't update service principals that Databricks manages.
	UpdateServicePrincipal(ctx context.Context, request UpdateServicePrincipalRequest) (*ServicePrincipal, error)

	// Updates a user. Only the fields in `update_mask` change.
	//
	// If automatic identity management is on and the user has an `external_id`, you
	// can only update `external_id`. The user's other fields come from your
	// identity provider. You can't deactivate yourself or change the status of the
	// account owner.
	UpdateUser(ctx context.Context, request UpdateUserRequest) (*User, error)

	// Replaces the entitlements of a principal's direct assignment to a workspace.
	// The new list can't be empty.
	//
	// Entitlements are changed one at a time. If the request fails partway through,
	// only some of the changes take effect. Get the assignment afterwards to check
	// the result.
	UpdateWorkspaceAssignment(ctx context.Context, request UpdateWorkspaceAssignmentRequest) (*WorkspaceAssignment, error)

	// Updates the entitlements of a directly assigned principal in a workspace.
	// Changes are applied one at a time rather than atomically. If the request
	// fails partway through, only some of the requested changes take effect. Get
	// the assignment detail afterwards to confirm the final state.
	UpdateWorkspaceAssignmentDetail(ctx context.Context, request UpdateWorkspaceAssignmentDetailRequest) (*WorkspaceAssignmentDetail, error)
}

type CreateDirectGroupMemberProxyRequest struct {
	// The member to add. Set its `principal_id`.
	DirectGroupMember DirectGroupMember `json:"direct_group_member"`
	// The resource name of the group to add the member to, in the format
	// `groups/{group_id}`.
	Parent string `json:"-" url:"-"`
}

type CreateDirectGroupMemberRequest struct {
	// The member to add. Set its `principal_id`.
	DirectGroupMember DirectGroupMember `json:"direct_group_member"`
	// The resource name of the group to add the member to, in the format
	// `accounts/{account_id}/groups/{group_id}`.
	Parent string `json:"-" url:"-"`
}

type CreateGroupProxyRequest struct {
	// The group to create.
	Group Group `json:"group"`
	// The resource name of the account to create the group in, in the format
	// `accounts/{account_id}`. Defaults to the account that contains this
	// workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type CreateGroupRequest struct {
	// The group to create.
	Group Group `json:"group"`
	// The resource name of the account to create the group in, in the format
	// `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`
}

type CreateIdentityVisibilityFilterRequest struct {
	// The filter to create. Set `principal_type` to `GROUP` and exactly one of
	// `exact`, `prefix`, or `regex`. Databricks sets `name`, so any value you
	// set is ignored.
	IdentityVisibilityFilter IdentityVisibilityFilter `json:"identity_visibility_filter"`
	// The ID to give the filter, which becomes the last part of its resource
	// name. If you leave it empty, Databricks generates one. It can't contain
	// `/`.
	IdentityVisibilityFilterId string `json:"-" url:"identity_visibility_filter_id,omitempty"`
	// The resource name of the account, in the format `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type CreateServicePrincipalProxyRequest struct {
	// The resource name of the account to create the service principal in, in
	// the format `accounts/{account_id}`. Defaults to the account that contains
	// this workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`
	// The service principal to create.
	ServicePrincipal ServicePrincipal `json:"service_principal"`

	ForceSendFields []string `json:"-" url:"-"`
}

type CreateServicePrincipalRequest struct {
	// The resource name of the account to create the service principal in, in
	// the format `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`
	// The service principal to create.
	ServicePrincipal ServicePrincipal `json:"service_principal"`
}

type CreateUserProxyRequest struct {
	// The resource name of the account to create the user in, in the format
	// `accounts/{account_id}`. Defaults to the account that contains this
	// workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`
	// The user to create.
	User User `json:"user"`

	ForceSendFields []string `json:"-" url:"-"`
}

type CreateUserRequest struct {
	// The resource name of the account to create the user in, in the format
	// `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`
	// The user to create.
	User User `json:"user"`
}

type CreateWorkspaceAssignmentDetailProxyRequest struct {
	// Required. Workspace assignment detail to be created in Databricks.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
}

type CreateWorkspaceAssignmentDetailRequest struct {
	// Required. Workspace assignment detail to be created in Databricks.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
	// Required. The workspace ID for which the workspace assignment detail is
	// being created.
	WorkspaceId int64 `json:"-" url:"-"`
}

type CreateWorkspaceAssignmentProxyRequest struct {
	// The resource name of the workspace, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}`. Defaults to this
	// workspace. Any other workspace is rejected.
	Parent string `json:"-" url:"parent,omitempty"`
	// The assignment to create. Set its `principal_id` and `entitlements`.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`

	ForceSendFields []string `json:"-" url:"-"`
}

type CreateWorkspaceAssignmentRequest struct {
	// The resource name of the workspace, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}`.
	Parent string `json:"-" url:"-"`
	// The assignment to create. Set its `principal_id` and `entitlements`.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
}

type DeleteDirectGroupMemberProxyRequest struct {
	// The resource name of the membership, in the format
	// `groups/{group_id}/direct-members/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteDirectGroupMemberRequest struct {
	// The resource name of the membership, in the format
	// `accounts/{account_id}/groups/{group_id}/direct-members/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteGroupProxyRequest struct {
	// The resource name of the group, in the format `groups/{group_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteGroupRequest struct {
	// The resource name of the group, in the format
	// `accounts/{account_id}/groups/{group_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteIdentityVisibilityFilterRequest struct {
	// The resource name of the filter, in the format
	// `accounts/{account_id}/identity-visibility-filters/{identity_visibility_filter_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteServicePrincipalProxyRequest struct {
	// The resource name of the service principal, in the format
	// `service-principals/{service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteServicePrincipalRequest struct {
	// The resource name of the service principal, in the format
	// `accounts/{account_id}/service-principals/{service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteUserProxyRequest struct {
	// The resource name of the user, in the format `users/{user_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteUserRequest struct {
	// The resource name of the user, in the format
	// `accounts/{account_id}/users/{user_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentDetailProxyRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentDetailRequest struct {
	// Required. ID of the principal in Databricks to delete workspace
	// assignment for.
	PrincipalId int64 `json:"-" url:"-"`
	// The workspace ID where the principal has access.
	WorkspaceId int64 `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentProxyRequest struct {
	// The resource name of the assignment, in the format
	// `workspace-assignments/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type DeleteWorkspaceAssignmentRequest struct {
	// The resource name of the assignment, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type DirectGroupMember struct {
	// The member's display name.
	DisplayName string `json:"display_name,omitempty"`
	// The ID of the member in your identity provider (IdP).
	ExternalId string `json:"external_id,omitempty"`
	// The Databricks ID of the group.
	GroupId int64 `json:"group_id,omitempty"`
	// Where the membership comes from.
	MembershipSource GroupMembershipSource `json:"membership_source,omitempty"`
	// The resource name of the membership, in one of these formats: - Account
	// APIs:
	// `accounts/{account_id}/groups/{group_id}/direct-members/{principal_id}` -
	// Workspace APIs: `groups/{group_id}/direct-members/{principal_id}`
	Name string `json:"name,omitempty"`
	// The resource name of the group, in one of these formats: - Account APIs:
	// `accounts/{account_id}/groups/{group_id}` - Workspace APIs:
	// `groups/{group_id}`
	Parent string `json:"parent,omitempty"`
	// The Databricks ID of the member.
	PrincipalId int64 `json:"principal_id"`
	// Whether the member is a user, service principal, or group.
	PrincipalType PrincipalType `json:"principal_type,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type Entitlement string

type ExactMatchRule struct {
	// The ID of the group in your IdP, not its Databricks ID. It's matched
	// exactly, including case.
	ExternalId string `json:"external_id"`
}

type ExternalGroup struct {
	// The ID of the account that contains the group.
	AccountId string `json:"account_id,omitempty"`
	// The name of the group, from your IdP. It's the same as the group's
	// `group_name`.
	DisplayName string `json:"display_name,omitempty"`
	// The ID of the group in your IdP.
	ExternalGroupId string `json:"external_group_id,omitempty"`
	// The Databricks ID of the group. Use it as the `group_id` in the group
	// APIs.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external group, in one of these formats: -
	// Account APIs: `accounts/{account_id}/external-groups/{external_group_id}`
	// - Workspace APIs: `external-groups/{external_group_id}`
	Name string `json:"name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ExternalServicePrincipal struct {
	// The ID of the account that contains the service principal.
	AccountId string `json:"account_id,omitempty"`
	// Whether the service principal is active in the account.
	AccountSpStatus State `json:"account_sp_status,omitempty"`
	// The service principal's application ID, from your IdP.
	ApplicationId string `json:"application_id,omitempty"`
	// The service principal's display name, from your IdP.
	DisplayName string `json:"display_name,omitempty"`
	// The ID of the service principal in your IdP.
	ExternalServicePrincipalId string `json:"external_service_principal_id,omitempty"`
	// The Databricks ID of the service principal. Use it as the
	// `service_principal_id` in the service principal APIs.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external service principal, in one of these
	// formats: - Account APIs:
	// `accounts/{account_id}/external-service-principals/{external_service_principal_id}`
	// - Workspace APIs:
	// `external-service-principals/{external_service_principal_id}`
	Name string `json:"name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ExternalUser struct {
	// The ID of the account that contains the user.
	AccountId string `json:"account_id,omitempty"`
	// Whether the user is active in the account.
	AccountUserStatus State `json:"account_user_status,omitempty"`
	// The user's given and family names from your IdP, separated by a space.
	DisplayName string `json:"display_name,omitempty"`
	// The ID of the user in your IdP.
	ExternalUserId string `json:"external_user_id,omitempty"`
	// The user's name, from your IdP.
	FullName *FullName `json:"full_name,omitempty"`
	// The Databricks ID of the user. Use it as the `user_id` in the user APIs.
	InternalId string `json:"internal_id,omitempty"`
	// The resource name of the external user, in one of these formats: -
	// Account APIs: `accounts/{account_id}/external-users/{external_user_id}` -
	// Workspace APIs: `external-users/{external_user_id}`
	Name string `json:"name,omitempty"`
	// The user's username, which is their email address.
	Username string `json:"username,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type FullName struct {
	// The user's family (last) name.
	FamilyName string `json:"family_name,omitempty"`
	// The user's given (first) name.
	GivenName string `json:"given_name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type GetDirectGroupMemberProxyRequest struct {
	// The resource name of the membership, in the format
	// `groups/{group_id}/direct-members/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetDirectGroupMemberRequest struct {
	// The resource name of the membership, in the format
	// `accounts/{account_id}/groups/{group_id}/direct-members/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalGroupProxyRequest struct {
	// The resource name of the external group, in the format
	// `external-groups/{external_group_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalGroupRequest struct {
	// The resource name of the external group, in the format
	// `accounts/{account_id}/external-groups/{external_group_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalServicePrincipalProxyRequest struct {
	// The resource name of the external service principal, in the format
	// `external-service-principals/{external_service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalServicePrincipalRequest struct {
	// The resource name of the external service principal, in the format
	// `accounts/{account_id}/external-service-principals/{external_service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalUserProxyRequest struct {
	// The resource name of the external user, in the format
	// `external-users/{external_user_id}`.
	Name string `json:"-" url:"-"`
}

type GetExternalUserRequest struct {
	// The resource name of the external user, in the format
	// `accounts/{account_id}/external-users/{external_user_id}`.
	Name string `json:"-" url:"-"`
}

type GetGroupProxyRequest struct {
	// The resource name of the group, in the format `groups/{group_id}`.
	Name string `json:"-" url:"-"`
}

type GetGroupRequest struct {
	// The resource name of the group, in the format
	// `accounts/{account_id}/groups/{group_id}`.
	Name string `json:"-" url:"-"`
}

type GetIdentityVisibilityFilterRequest struct {
	// The resource name of the filter, in the format
	// `accounts/{account_id}/identity-visibility-filters/{identity_visibility_filter_id}`.
	Name string `json:"-" url:"-"`
}

type GetServicePrincipalProxyRequest struct {
	// The resource name of the service principal, in the format
	// `service-principals/{service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetServicePrincipalRequest struct {
	// The resource name of the service principal, in the format
	// `accounts/{account_id}/service-principals/{service_principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetUserProxyRequest struct {
	// The resource name of the user, in the format `users/{user_id}`.
	Name string `json:"-" url:"-"`
}

type GetUserRequest struct {
	// The resource name of the user, in the format
	// `accounts/{account_id}/users/{user_id}`.
	Name string `json:"-" url:"-"`
}

type GetWorkspaceAccessDetailLocalRequest struct {
	// The resource name of the workspace access detail. Format:
	// workspace-access-details/{principal_id}
	Name string `json:"-" url:"-"`
	// Controls what fields are returned.
	View WorkspaceAccessDetailView `json:"-" url:"view,omitempty"`
}

type GetWorkspaceAccessDetailRequest struct {
	// The resource name of the workspace access detail. Format:
	// accounts/{account_id}/workspaces/{workspace_id}/workspace-access-details/{principal_id}
	Name string `json:"-" url:"-"`
	// Controls what fields are returned.
	View WorkspaceAccessDetailView `json:"-" url:"view,omitempty"`
}

type GetWorkspaceAssignmentDetailProxyRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentDetailRequest struct {
	// Required. The internal ID of the principal (user/sp/group) for which the
	// assignment details are being requested.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The workspace ID for which the assignment details are being
	// requested.
	WorkspaceId int64 `json:"-" url:"-"`
}

type GetWorkspaceAssignmentProxyRequest struct {
	// The resource name of the assignment, in the format
	// `workspace-assignments/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetWorkspaceAssignmentRequest struct {
	// The resource name of the assignment, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}`.
	Name string `json:"-" url:"-"`
}

type GetWorkspaceIdentityDetailRequest struct {
	// The resource name of the workspace identity detail, in the format
	// `principals/{principal_id}/workspace-identity-detail`.
	Name string `json:"-" url:"-"`
}

type Group struct {
	// The ID of the account that contains the group.
	AccountId string `json:"account_id,omitempty"`
	// The ID of the group in your identity provider (IdP).
	ExternalId string `json:"external_id,omitempty"`
	// The Databricks ID of the group.
	GroupId string `json:"group_id,omitempty"`
	// The name of the group.
	GroupName string `json:"group_name,omitempty"`
	// The resource name of the group, in one of these formats: - Account APIs:
	// `accounts/{account_id}/groups/{group_id}` - Workspace APIs:
	// `groups/{group_id}`
	Name string `json:"name,omitempty"`
	// The resource name of the account that contains the group, in the format
	// `accounts/{account_id}`. Workspace APIs return the same format.
	Parent string `json:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type GroupMembershipSource string

type IdentityVisibilityFilter struct {
	// Matches a group by its ID in your IdP.
	Exact *ExactMatchRule `json:"exact,omitempty"`
	// The resource name of the filter, in the format
	// `accounts/{account_id}/identity-visibility-filters/{identity_visibility_filter_id}`.
	Name string `json:"name,omitempty"`
	// Matches groups whose display name starts with a prefix.
	Prefix *PrefixMatchRule `json:"prefix,omitempty"`
	// The type of principal the filter applies to. Set it to `GROUP`. Other
	// types aren't supported.
	PrincipalType PrincipalType `json:"principal_type"`
	// Matches groups whose display name matches a regular expression.
	Regex *RegexMatchRule `json:"regex,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListDirectGroupMembersProxyRequest struct {
	// The maximum number of members to return, up to 1000. The default is 1000.
	// A page can contain fewer members.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the group, in the format `groups/{group_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListDirectGroupMembersRequest struct {
	// The maximum number of members to return, up to 1000. The default is 1000.
	// A page can contain fewer members.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the group, in the format
	// `accounts/{account_id}/groups/{group_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListDirectGroupMembersResponse struct {
	// The members on this page.
	DirectGroupMembers []DirectGroupMember `json:"direct_group_members,omitempty"`
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsProxyRequest struct {
	// Filters groups by `group_name` or `external_id`, for example `group_name
	// eq "Data engineers"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of groups to return, up to 1000. The default is 1000.
	// A page can contain fewer groups.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list groups in, in the format
	// `accounts/{account_id}`. Defaults to the account that contains this
	// workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsRequest struct {
	// Filters groups by `group_name` or `external_id`, for example `group_name
	// eq "Data engineers"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of groups to return, up to 1000. The default is 1000.
	// A page can contain fewer groups.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list groups in, in the format
	// `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListGroupsResponse struct {
	// The groups on this page.
	Groups []Group `json:"groups,omitempty"`
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListIdentityVisibilityFiltersRequest struct {
	// The maximum number of filters to return, up to 1000. The default is 100.
	// A page can contain fewer filters.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account, in the format `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListIdentityVisibilityFiltersResponse struct {
	// The filters on this page. These are the rules, not the groups they match.
	IdentityVisibilityFilters []IdentityVisibilityFilter `json:"identity_visibility_filters,omitempty"`
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsProxyRequest struct {
	// Filters service principals by `application_id` or `external_id`, for
	// example `application_id eq "<application-id>"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of service principals to return, up to 1000. The
	// default is 1000. A page can contain fewer service principals.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list service principals in, in the
	// format `accounts/{account_id}`. Defaults to the account that contains
	// this workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsRequest struct {
	// Filters service principals by `application_id` or `external_id`, for
	// example `application_id eq "<application-id>"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of service principals to return, up to 1000. The
	// default is 1000. A page can contain fewer service principals.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list service principals in, in the
	// format `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListServicePrincipalsResponse struct {
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`
	// The service principals on this page.
	ServicePrincipals []ServicePrincipal `json:"service_principals,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsProxyRequest struct {
	// The maximum number of groups to return, up to 1000. The default is 1000.
	// A page can contain fewer groups.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The user, service principal, or group whose parent groups to list, in the
	// format `principals/{principal_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsRequest struct {
	// The maximum number of groups to return, up to 1000. The default is 1000.
	// A page can contain fewer groups.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The user, service principal, or group whose parent groups to list, in the
	// format `accounts/{account_id}/principals/{principal_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListTransitiveParentGroupsResponse struct {
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`
	// The groups on this page.
	TransitiveParentGroups []TransitiveParentGroup `json:"transitive_parent_groups,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersProxyRequest struct {
	// Filters users by `username` or `external_id`, for example `username eq
	// "someone@example.com"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of users to return, up to 1000. The default is 1000. A
	// page can contain fewer users.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list users in, in the format
	// `accounts/{account_id}`. Defaults to the account that contains this
	// workspace. Any other account is rejected.
	Parent string `json:"-" url:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersRequest struct {
	// Filters users by `username` or `external_id`, for example `username eq
	// "someone@example.com"`. Put the value in quotes.
	Filter string `json:"-" url:"filter,omitempty"`
	// The maximum number of users to return, up to 1000. The default is 1000. A
	// page can contain fewer users.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the account to list users in, in the format
	// `accounts/{account_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListUsersResponse struct {
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`
	// The users on this page.
	Users []User `json:"users,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsProxyRequest struct {
	// The maximum number of workspace assignment details to return. The service
	// may return fewer than this value. If not provided, defaults to 1000,
	// which is also the maximum allowed. Requests for more than the maximum are
	// clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token from a previous list call. Provide this to retrieve the
	// subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsRequest struct {
	// The maximum number of workspace assignment details to return. The service
	// may return fewer than this value. If not provided, defaults to 1000,
	// which is also the maximum allowed. Requests for more than the maximum are
	// clamped to 1000.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// A page token, received from a previous ListWorkspaceAssignmentDetails
	// call. Provide this to retrieve the subsequent page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// Required. The workspace ID for which the workspace assignment details are
	// being fetched.
	WorkspaceId int64 `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentDetailsResponse struct {
	// A token, which can be sent as page_token to retrieve the next page. If
	// this field is omitted, there are no subsequent pages.
	NextPageToken string `json:"next_page_token,omitempty"`

	WorkspaceAssignmentDetails []WorkspaceAssignmentDetail `json:"workspace_assignment_details,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsProxyRequest struct {
	// The maximum number of assignments to return, up to 1000. The default is
	// 1000. A page can contain fewer assignments.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the workspace, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}`. Defaults to this
	// workspace. Any other workspace is rejected.
	Parent string `json:"-" url:"parent,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsRequest struct {
	// The maximum number of assignments to return, up to 1000. The default is
	// 1000. A page can contain fewer assignments.
	PageSize int `json:"-" url:"page_size,omitempty"`
	// The `next_page_token` from a previous response, to get the next page.
	PageToken string `json:"-" url:"page_token,omitempty"`
	// The resource name of the workspace, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}`.
	Parent string `json:"-" url:"-"`

	ForceSendFields []string `json:"-" url:"-"`
}

type ListWorkspaceAssignmentsResponse struct {
	// The token for the next page. Not set on the last page.
	NextPageToken string `json:"next_page_token,omitempty"`
	// The assignments on this page.
	WorkspaceAssignments []WorkspaceAssignment `json:"workspace_assignments,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type PrefixMatchRule struct {
	// The prefix to match. It must contain at least one non-whitespace
	// character. Leading and trailing spaces are kept.
	DisplayNamePrefix string `json:"display_name_prefix"`
}

type PrincipalType string

type RegexMatchRule struct {
	// The RE2 regular expression to match against the whole display name. At
	// most 255 characters.
	DisplayNameRegex string `json:"display_name_regex"`
}

type ResolveGroupProxyRequest struct {
	// The ID of the group in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveGroupRequest struct {
	// The ID of the group in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveGroupResponse struct {
	// The resolved group.
	Group *Group `json:"group,omitempty"`
}

type ResolveServicePrincipalProxyRequest struct {
	// The ID of the service principal in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveServicePrincipalRequest struct {
	// The ID of the service principal in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveServicePrincipalResponse struct {
	// The resolved service principal.
	ServicePrincipal *ServicePrincipal `json:"service_principal,omitempty"`
}

type ResolveUserProxyRequest struct {
	// The ID of the user in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveUserRequest struct {
	// The ID of the user in your IdP.
	ExternalId string `json:"external_id"`
}

type ResolveUserResponse struct {
	// The resolved user.
	User *User `json:"user,omitempty"`
}

type ServicePrincipal struct {
	// The ID of the account that contains the service principal.
	AccountId string `json:"account_id,omitempty"`
	// Whether the service principal is active in the account.
	AccountSpStatus State `json:"account_sp_status"`
	// The service principal's application ID, a UUID. If you don't set it when
	// you create the service principal, Databricks generates one. It must be
	// unique in the account and can't be changed.
	ApplicationId string `json:"application_id,omitempty"`
	// The service principal's display name.
	DisplayName string `json:"display_name"`
	// The ID of the service principal in your identity provider (IdP).
	ExternalId string `json:"external_id,omitempty"`
	// The resource name of the service principal, in one of these formats: -
	// Account APIs:
	// `accounts/{account_id}/service-principals/{service_principal_id}` -
	// Workspace APIs: `service-principals/{service_principal_id}`
	Name string `json:"name,omitempty"`
	// The resource name of the account that contains the service principal, in
	// the format `accounts/{account_id}`. Workspace APIs return the same
	// format.
	Parent string `json:"parent,omitempty"`
	// The Databricks ID of the service principal.
	ServicePrincipalId string `json:"service_principal_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type State string

type TransitiveParentGroup struct {
	// The ID of the account that contains the group.
	AccountId string `json:"account_id,omitempty"`
	// The ID of the group in your identity provider (IdP).
	ExternalId string `json:"external_id,omitempty"`
	// The Databricks ID of the group.
	GroupId string `json:"group_id,omitempty"`
	// The resource name of the parent group, in one of these formats: - Account
	// APIs:
	// `accounts/{account_id}/principals/{principal_id}/transitive-parent-groups/{group_id}`
	// - Workspace APIs:
	// `principals/{principal_id}/transitive-parent-groups/{group_id}`
	Name string `json:"name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type UpdateGroupProxyRequest struct {
	// The group to update. Its `name` identifies the group.
	Group Group `json:"group"`
	// The resource name of the group, in one of these formats: - Account APIs:
	// `accounts/{account_id}/groups/{group_id}` - Workspace APIs:
	// `groups/{group_id}`
	Name string `json:"-" url:"-"`
	// The fields to update, separated by commas. You can update `group_name`
	// and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateGroupRequest struct {
	// The group to update. Its `name` identifies the group.
	Group Group `json:"group"`
	// The resource name of the group, in one of these formats: - Account APIs:
	// `accounts/{account_id}/groups/{group_id}` - Workspace APIs:
	// `groups/{group_id}`
	Name string `json:"-" url:"-"`
	// The fields to update, separated by commas. You can update `group_name`
	// and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateServicePrincipalProxyRequest struct {
	// The resource name of the service principal, in one of these formats: -
	// Account APIs:
	// `accounts/{account_id}/service-principals/{service_principal_id}` -
	// Workspace APIs: `service-principals/{service_principal_id}`
	Name string `json:"-" url:"-"`
	// The service principal to update. Its `name` identifies the service
	// principal.
	ServicePrincipal ServicePrincipal `json:"service_principal"`
	// The fields to update, separated by commas. You can update `display_name`,
	// `account_sp_status`, and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateServicePrincipalRequest struct {
	// The resource name of the service principal, in one of these formats: -
	// Account APIs:
	// `accounts/{account_id}/service-principals/{service_principal_id}` -
	// Workspace APIs: `service-principals/{service_principal_id}`
	Name string `json:"-" url:"-"`
	// The service principal to update. Its `name` identifies the service
	// principal.
	ServicePrincipal ServicePrincipal `json:"service_principal"`
	// The fields to update, separated by commas. You can update `display_name`,
	// `account_sp_status`, and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
}

type UpdateUserProxyRequest struct {
	// The resource name of the user, in one of these formats: - Account APIs:
	// `accounts/{account_id}/users/{user_id}` - Workspace APIs:
	// `users/{user_id}`
	Name string `json:"-" url:"-"`
	// The fields to update, separated by commas. You can update
	// `full_name.given_name`, `full_name.family_name`, `account_user_status`,
	// and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
	// The user to update. Its `name` identifies the user.
	User User `json:"user"`
}

type UpdateUserRequest struct {
	// The resource name of the user, in one of these formats: - Account APIs:
	// `accounts/{account_id}/users/{user_id}` - Workspace APIs:
	// `users/{user_id}`
	Name string `json:"-" url:"-"`
	// The fields to update, separated by commas. You can update
	// `full_name.given_name`, `full_name.family_name`, `account_user_status`,
	// and `external_id`.
	UpdateMask string `json:"-" url:"update_mask"`
	// The user to update. Its `name` identifies the user.
	User User `json:"user"`
}

type UpdateWorkspaceAssignmentDetailProxyRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment detail to be updated in Databricks.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
}

type UpdateWorkspaceAssignmentDetailRequest struct {
	// Required. ID of the principal in Databricks.
	PrincipalId int64 `json:"-" url:"-"`
	// Required. The list of fields to update.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// Required. Workspace assignment detail to be updated in Databricks.
	WorkspaceAssignmentDetail WorkspaceAssignmentDetail `json:"workspace_assignment_detail"`
	// Required. The workspace ID for which the workspace assignment detail is
	// being updated.
	WorkspaceId int64 `json:"-" url:"-"`
}

type UpdateWorkspaceAssignmentProxyRequest struct {
	// The resource name of the assignment, in one of these formats: - Account
	// APIs:
	// `accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}`
	// - Workspace APIs: `workspace-assignments/{principal_id}`
	Name string `json:"-" url:"-"`
	// The fields to update. The only supported field is `entitlements`.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// The assignment to update. Its `name` identifies the assignment.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
}

type UpdateWorkspaceAssignmentRequest struct {
	// The resource name of the assignment, in one of these formats: - Account
	// APIs:
	// `accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}`
	// - Workspace APIs: `workspace-assignments/{principal_id}`
	Name string `json:"-" url:"-"`
	// The fields to update. The only supported field is `entitlements`.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// The assignment to update. Its `name` identifies the assignment.
	WorkspaceAssignment WorkspaceAssignment `json:"workspace_assignment"`
}

type UpdateWorkspaceIdentityDetailRequest struct {
	// The resource name of the workspace identity detail, in the format
	// `principals/{principal_id}/workspace-identity-detail`.
	Name string `json:"-" url:"-"`
	// The fields to update. The only supported field is
	// `workspace_identity_status`.
	UpdateMask fieldmask.FieldMask `json:"-" url:"update_mask"`
	// The workspace identity detail to update. Its `name` identifies the
	// principal.
	WorkspaceIdentityDetail WorkspaceIdentityDetail `json:"workspace_identity_detail"`
}

type User struct {
	// The ID of the account that contains the user.
	AccountId string `json:"account_id,omitempty"`
	// Whether the user is active in the account. New users are active unless
	// you set this to `INACTIVE`.
	AccountUserStatus State `json:"account_user_status"`
	// The ID of the user in your identity provider (IdP).
	ExternalId string `json:"external_id,omitempty"`
	// The user's name.
	FullName UserFullName `json:"full_name"`
	// The resource name of the user, in one of these formats: - Account APIs:
	// `accounts/{account_id}/users/{user_id}` - Workspace APIs:
	// `users/{user_id}`
	Name string `json:"name,omitempty"`
	// The resource name of the account that contains the user, in the format
	// `accounts/{account_id}`. Workspace APIs return the same format.
	Parent string `json:"parent,omitempty"`
	// The Databricks ID of the user.
	UserId string `json:"user_id,omitempty"`
	// The user's username, which is their email address. It can't be changed
	// after the user is created.
	Username string `json:"username"`

	ForceSendFields []string `json:"-" url:"-"`
}

type UserFullName struct {
	// The user's family (last) name.
	FamilyName string `json:"family_name,omitempty"`
	// The user's given (first) name.
	GivenName string `json:"given_name,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAccessDetail struct {
	AccessType WorkspaceAccessDetailAccessType `json:"access_type,omitempty"`
	// The account ID parent of the workspace where the principal has access.
	AccountId string `json:"account_id,omitempty"`
	// The resource name of the workspace access detail. The format depends on
	// the API that returned it: - Account-scoped:
	// accounts/{account_id}/workspaces/{workspace_id}/workspace-access-details/{principal_id}
	// - Workspace-scoped: workspace-access-details/{principal_id}
	Name string `json:"name,omitempty"`
	// The permissions granted to the principal in the workspace.
	Permissions []WorkspacePermission `json:"permissions,omitempty"`
	// The internal ID of the principal (user/sp/group) in Databricks.
	PrincipalId int64 `json:"principal_id,omitempty"`

	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The activity status of the principal in the workspace. Not applicable for
	// groups at the moment.
	Status State `json:"status,omitempty"`
	// The workspace ID where the principal has access.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAccessDetailAccessType string

type WorkspaceAccessDetailView string

type WorkspaceAssignment struct {
	// The ID of the account that contains the workspace.
	AccountId string `json:"account_id,omitempty"`
	// Every entitlement the principal has in the workspace, granted directly or
	// through a group. List responses leave it empty.
	EffectiveEntitlements []Entitlement `json:"effective_entitlements,omitempty"`
	// The entitlements granted directly by this assignment. Create and update
	// set exactly this list, even if the principal also gets some of these
	// entitlements through a group. List responses leave it empty.
	Entitlements []Entitlement `json:"entitlements,omitempty"`
	// The resource name of the assignment, in one of these formats: - Account
	// APIs:
	// `accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}`
	// - Workspace APIs: `workspace-assignments/{principal_id}`
	Name string `json:"name,omitempty"`
	// The resource name of the workspace, in the format
	// `accounts/{account_id}/workspaces/{workspace_id}`. Workspace APIs return
	// the same format.
	Parent string `json:"parent,omitempty"`
	// The Databricks ID of the assigned user, service principal, or group. It
	// can't be changed after the assignment is created.
	PrincipalId int64 `json:"principal_id"`
	// Whether the assigned principal is a user, service principal, or group.
	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The ID of the workspace.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceAssignmentDetail struct {
	// The account ID parent of the workspace where the principal is assigned
	AccountId string `json:"account_id,omitempty"`
	// Every entitlement the principal holds in this workspace, whether granted
	// directly or through group membership. Get responses populate this field.
	// List responses leave it empty.
	EffectiveEntitlements []Entitlement `json:"effective_entitlements,omitempty"`
	// Entitlements granted directly to the principal on this workspace. This is
	// the only client-settable field. Create and update manage exactly this
	// set, including entitlements the principal also holds through a group.
	// List responses leave this field empty. Get a single principal to read its
	// entitlements.
	Entitlements []Entitlement `json:"entitlements,omitempty"`
	// The internal ID of the principal (user/sp/group) in Databricks.
	PrincipalId int64 `json:"principal_id"`

	PrincipalType PrincipalType `json:"principal_type,omitempty"`
	// The workspace ID where the principal is assigned.
	WorkspaceId int64 `json:"workspace_id,omitempty"`

	ForceSendFields []string `json:"-" url:"-"`
}

type WorkspaceIamV2API struct {
	// contains filtered or unexported fields
}

type WorkspaceIamV2Interface interface {

	// Adds a user, service principal, or group as a direct member of a group in the
	// account that contains this workspace.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// its members come from your identity provider and can't be changed in
	// Databricks.
	CreateDirectGroupMemberProxy(ctx context.Context, request CreateDirectGroupMemberProxyRequest) (*DirectGroupMember, error)

	// Creates a local group in the account that contains this workspace. A local
	// group is a group that isn't synced from your identity provider (IdP). You
	// become a manager of the new group.
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// group from your IdP, get it as an external group instead.
	CreateGroupProxy(ctx context.Context, request CreateGroupProxyRequest) (*Group, error)

	// Creates a local service principal in the account that contains this
	// workspace. A local service principal is one that isn't synced from your
	// identity provider (IdP).
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// service principal from your IdP, get it as an external service principal
	// instead.
	CreateServicePrincipalProxy(ctx context.Context, request CreateServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Creates a local user in the account that contains this workspace. A local
	// user is a user that isn't synced from your identity provider (IdP).
	//
	// If automatic identity management is on, you can't set `external_id`. To add a
	// user from your IdP, get them as an external user instead.
	CreateUserProxy(ctx context.Context, request CreateUserProxyRequest) (*User, error)

	// Creates a workspace assignment detail for a principal in the calling
	// workspace.
	CreateWorkspaceAssignmentDetailProxy(ctx context.Context, request CreateWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Assigns a user, service principal, or group directly to this workspace with
	// the given entitlements. Returns an error if the principal is already assigned
	// directly.
	//
	// Entitlements are granted one at a time. If the request fails partway through,
	// the principal stays assigned with only some of the entitlements. Get the
	// assignment afterwards to check which were granted.
	CreateWorkspaceAssignmentProxy(ctx context.Context, request CreateWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Removes a direct member from a group in the account that contains this
	// workspace.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// its members come from your identity provider and can't be changed in
	// Databricks.
	DeleteDirectGroupMemberProxy(ctx context.Context, request DeleteDirectGroupMemberProxyRequest) error

	// Deletes a group from the account that contains this workspace and removes it
	// from the workspaces it's assigned to.
	DeleteGroupProxy(ctx context.Context, request DeleteGroupProxyRequest) error

	// Deletes a service principal from the account that contains this workspace and
	// removes it from the workspaces it's assigned to. You can't delete service
	// principals that Databricks manages.
	DeleteServicePrincipalProxy(ctx context.Context, request DeleteServicePrincipalProxyRequest) error

	// Deletes a user from the account that contains this workspace and removes them
	// from the workspaces they're assigned to.
	DeleteUserProxy(ctx context.Context, request DeleteUserProxyRequest) error

	// Deletes a workspace assignment detail for a principal in the calling
	// workspace, revoking all of its entitlements. Entitlements are revoked one at
	// a time rather than atomically. If the request fails partway through, the
	// principal stays assigned with some of its original entitlements. Retrying is
	// safe.
	DeleteWorkspaceAssignmentDetailProxy(ctx context.Context, request DeleteWorkspaceAssignmentDetailProxyRequest) error

	// Removes a principal's direct assignment to this workspace and revokes the
	// entitlements it granted. The principal keeps any access it gets through
	// groups.
	//
	// Entitlements are revoked one at a time. If the request fails partway through,
	// the principal stays assigned with some of its entitlements. You can retry the
	// request.
	DeleteWorkspaceAssignmentProxy(ctx context.Context, request DeleteWorkspaceAssignmentProxyRequest) error

	// Gets a direct member of a group in the account that contains this workspace,
	// including where the membership comes from. Returns an error if the principal
	// isn't a direct member.
	GetDirectGroupMemberProxy(ctx context.Context, request GetDirectGroupMemberProxyRequest) (*DirectGroupMember, error)

	// Gets a group by its ID in your identity provider (IdP) and syncs its name and
	// parent groups from your IdP. If the group isn't in the account that contains
	// this workspace yet, it's added. Requires automatic identity management. If
	// your account has group visibility filters, the group must match them.
	GetExternalGroupProxy(ctx context.Context, request GetExternalGroupProxyRequest) (*ExternalGroup, error)

	// Gets a service principal by its ID in your identity provider (IdP) and syncs
	// its details and group memberships from your IdP. If the service principal
	// isn't in the account that contains this workspace yet, it's added. Requires
	// automatic identity management with Microsoft Entra ID as your IdP.
	GetExternalServicePrincipalProxy(ctx context.Context, request GetExternalServicePrincipalProxyRequest) (*ExternalServicePrincipal, error)

	// Gets a user by their ID in your identity provider (IdP) and syncs their
	// details and group memberships from your IdP. If the user isn't in the account
	// that contains this workspace yet, they're added. Requires automatic identity
	// management.
	GetExternalUserProxy(ctx context.Context, request GetExternalUserProxyRequest) (*ExternalUser, error)

	// Gets a group in the account that contains this workspace by its Databricks
	// ID.
	GetGroupProxy(ctx context.Context, request GetGroupProxyRequest) (*Group, error)

	// Gets a service principal in the account that contains this workspace by its
	// Databricks ID.
	GetServicePrincipalProxy(ctx context.Context, request GetServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Gets a user in the account that contains this workspace by their Databricks
	// ID.
	GetUserProxy(ctx context.Context, request GetUserProxyRequest) (*User, error)

	// Returns the access details for a principal in the current workspace. Allows
	// for checking access details for any provisioned principal (user, service
	// principal, or group) in the current workspace. * Provisioned principal here
	// refers to one that has been synced into Databricks from the customer's IdP or
	// added explicitly to Databricks via SCIM/UI. Allows for passing in a "view"
	// parameter to control what fields are returned (BASIC by default or FULL).
	GetWorkspaceAccessDetailLocal(ctx context.Context, request GetWorkspaceAccessDetailLocalRequest) (*WorkspaceAccessDetail, error)

	// Returns the assignment details for a principal in the calling workspace.
	GetWorkspaceAssignmentDetailProxy(ctx context.Context, request GetWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Gets a principal's direct assignment to this workspace, including its
	// effective entitlements. Returns an error if the principal isn't assigned
	// directly.
	GetWorkspaceAssignmentProxy(ctx context.Context, request GetWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Gets a principal's status in this workspace and whether it has access
	// directly or through a group. Returns an error if the principal doesn't have
	// access to the workspace.
	GetWorkspaceIdentityDetail(ctx context.Context, request GetWorkspaceIdentityDetailRequest) (*WorkspaceIdentityDetail, error)

	// Lists the direct members of a group in the account that contains this
	// workspace, sorted by display name, with where each membership comes from.
	// Members in your identity provider who haven't been added to Databricks aren't
	// included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersProxy(ctx context.Context, request ListDirectGroupMembersProxyRequest) listing.Iterator[DirectGroupMember]

	// Lists the direct members of a group in the account that contains this
	// workspace, sorted by display name, with where each membership comes from.
	// Members in your identity provider who haven't been added to Databricks aren't
	// included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListDirectGroupMembersProxyAll(ctx context.Context, request ListDirectGroupMembersProxyRequest) ([]DirectGroupMember, error)

	// Lists the groups in the account that contains this workspace, sorted by
	// Databricks ID. Groups in your identity provider that haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsProxy(ctx context.Context, request ListGroupsProxyRequest) listing.Iterator[Group]

	// Lists the groups in the account that contains this workspace, sorted by
	// Databricks ID. Groups in your identity provider that haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListGroupsProxyAll(ctx context.Context, request ListGroupsProxyRequest) ([]Group, error)

	// Lists the service principals in the account that contains this workspace,
	// sorted by Databricks ID. Service principals in your identity provider that
	// haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsProxy(ctx context.Context, request ListServicePrincipalsProxyRequest) listing.Iterator[ServicePrincipal]

	// Lists the service principals in the account that contains this workspace,
	// sorted by Databricks ID. Service principals in your identity provider that
	// haven't been added to Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListServicePrincipalsProxyAll(ctx context.Context, request ListServicePrincipalsProxyRequest) ([]ServicePrincipal, error)

	// Lists every group that a user, service principal, or group belongs to,
	// directly or through other groups, in the account that contains this
	// workspace. Results are sorted by Databricks ID. If automatic identity
	// management is on, the principal's group memberships are synced from your
	// identity provider first.
	ListTransitiveParentGroupsProxy(ctx context.Context, request ListTransitiveParentGroupsProxyRequest) (*ListTransitiveParentGroupsResponse, error)

	// Lists the users in the account that contains this workspace, sorted by
	// Databricks ID. Users in your identity provider who haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersProxy(ctx context.Context, request ListUsersProxyRequest) listing.Iterator[User]

	// Lists the users in the account that contains this workspace, sorted by
	// Databricks ID. Users in your identity provider who haven't been added to
	// Databricks aren't included.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListUsersProxyAll(ctx context.Context, request ListUsersProxyRequest) ([]User, error)

	// Lists workspace assignment details for the calling workspace. The response
	// omits the per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsProxy(ctx context.Context, request ListWorkspaceAssignmentDetailsProxyRequest) listing.Iterator[WorkspaceAssignmentDetail]

	// Lists workspace assignment details for the calling workspace. The response
	// omits the per-principal entitlement fields (`entitlements` and
	// `effective_entitlements`). To read the entitlements for a single principal,
	// get that principal's assignment detail.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentDetailsProxyAll(ctx context.Context, request ListWorkspaceAssignmentDetailsProxyRequest) ([]WorkspaceAssignmentDetail, error)

	// Lists the principals assigned directly to this workspace. The response leaves
	// `entitlements` and `effective_entitlements` empty. To read a principal's
	// entitlements, get its assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsProxy(ctx context.Context, request ListWorkspaceAssignmentsProxyRequest) listing.Iterator[WorkspaceAssignment]

	// Lists the principals assigned directly to this workspace. The response leaves
	// `entitlements` and `effective_entitlements` empty. To read a principal's
	// entitlements, get its assignment.
	//
	// This method is generated by Databricks SDK Code Generator.
	ListWorkspaceAssignmentsProxyAll(ctx context.Context, request ListWorkspaceAssignmentsProxyRequest) ([]WorkspaceAssignment, error)

	// Gets a group by its ID in your identity provider (IdP) and syncs its name and
	// parent groups from your IdP. If the group isn't in the account that contains
	// this workspace yet, it's added. Requires automatic identity management. If
	// your account has group visibility filters, the group must match them.
	ResolveGroupProxy(ctx context.Context, request ResolveGroupProxyRequest) (*ResolveGroupResponse, error)

	// Gets a service principal by its ID in your identity provider (IdP) and syncs
	// its details and group memberships from your IdP. If the service principal
	// isn't in the account that contains this workspace yet, it's added. Requires
	// automatic identity management with Microsoft Entra ID as your IdP.
	ResolveServicePrincipalProxy(ctx context.Context, request ResolveServicePrincipalProxyRequest) (*ResolveServicePrincipalResponse, error)

	// Gets a user by their ID in your identity provider (IdP) and syncs their
	// details and group memberships from your IdP. If the user isn't in the account
	// that contains this workspace yet, they're added. Requires automatic identity
	// management.
	ResolveUserProxy(ctx context.Context, request ResolveUserProxyRequest) (*ResolveUserResponse, error)

	// Updates a group in the account that contains this workspace. Only the fields
	// in `update_mask` change.
	//
	// If automatic identity management is on and the group has an `external_id`,
	// you can only update `external_id`. The group's other fields come from your
	// identity provider. If your account also has group visibility filters, a new
	// `external_id` must match them. You can always clear `external_id`.
	UpdateGroupProxy(ctx context.Context, request UpdateGroupProxyRequest) (*Group, error)

	// Updates a service principal in the account that contains this workspace. Only
	// the fields in `update_mask` change.
	//
	// If automatic identity management is on and the service principal has an
	// `external_id`, you can only update `external_id`. Its other fields come from
	// your identity provider. A service principal can't deactivate itself, and you
	// can't update service principals that Databricks manages.
	UpdateServicePrincipalProxy(ctx context.Context, request UpdateServicePrincipalProxyRequest) (*ServicePrincipal, error)

	// Updates a user in the account that contains this workspace. Only the fields
	// in `update_mask` change.
	//
	// If automatic identity management is on and the user has an `external_id`, you
	// can only update `external_id`. The user's other fields come from your
	// identity provider. You can't deactivate yourself or change the status of the
	// account owner.
	UpdateUserProxy(ctx context.Context, request UpdateUserProxyRequest) (*User, error)

	// Updates the entitlements of a directly assigned principal in the calling
	// workspace. Changes are applied one at a time rather than atomically. If the
	// request fails partway through, only some of the requested changes take
	// effect. Get the assignment detail afterwards to confirm the final state.
	UpdateWorkspaceAssignmentDetailProxy(ctx context.Context, request UpdateWorkspaceAssignmentDetailProxyRequest) (*WorkspaceAssignmentDetail, error)

	// Replaces the entitlements of a principal's direct assignment to this
	// workspace. The new list can't be empty.
	//
	// Entitlements are changed one at a time. If the request fails partway through,
	// only some of the changes take effect. Get the assignment afterwards to check
	// the result.
	UpdateWorkspaceAssignmentProxy(ctx context.Context, request UpdateWorkspaceAssignmentProxyRequest) (*WorkspaceAssignment, error)

	// Activates or deactivates a user or service principal in this workspace. You
	// can only update `workspace_identity_status`. You can't change your own status
	// or the status of a group.
	UpdateWorkspaceIdentityDetail(ctx context.Context, request UpdateWorkspaceIdentityDetailRequest) (*WorkspaceIdentityDetail, error)
}