v1beta1

type Identity struct {
	// Type of credentials used to authenticate to the Microsoft Graph API.
	Type IdentityType `json:"type"`
}

type IdentityType string

type Input struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// QueryType defines the type of Microsoft Graph API query to perform
	// Supported values: UserValidation, GroupMembership, GroupObjectIDs, ServicePrincipalDetails
	QueryType string `json:"queryType"`

	// Users is a list of userPrincipalName (email IDs) for user validation
	// +optional
	Users []*string `json:"users,omitempty"`

	// UsersRef is a reference to retrieve the user names (e.g., from status or context)
	// Overrides Users field if used
	// +optional
	UsersRef *string `json:"usersRef,omitempty"`

	// Groups is a list of group names for group object ID queries
	// +optional
	Groups []*string `json:"groups,omitempty"`

	// GroupsRef is a reference to retrieve the group names (e.g., from status or context)
	// Overrides Groups field if used
	// +optional
	GroupsRef *string `json:"groupsRef,omitempty"`

	// Group is a single group name for group membership queries
	// +optional
	Group *string `json:"group,omitempty"`

	// GroupRef is a reference to retrieve the group name (e.g., from status or context)
	// Overrides Group field if used
	// +optional
	GroupRef *string `json:"groupRef,omitempty"`

	// ServicePrincipals is a list of service principal names
	// +optional
	ServicePrincipals []*string `json:"servicePrincipals,omitempty"`

	// ServicePrincipalsRef is a reference to retrieve the service principal names (e.g., from status or context)
	// Overrides ServicePrincipals field if used
	// +optional
	ServicePrincipalsRef *string `json:"servicePrincipalsRef,omitempty"`

	// Target where to store the Query Result
	Target string `json:"target"`

	// SkipQueryWhenTargetHasData controls whether to skip the query when the target already has data
	// Default is false to ensure continuous reconciliation
	// +optional
	SkipQueryWhenTargetHasData *bool `json:"skipQueryWhenTargetHasData,omitempty"`

	// Identity defines the type of identity used for authentication to the Microsoft Graph API.
	Identity *Identity `json:"identity,omitempty"`
}