Auto-update SDK on 2026-05-11

Author: github-actions[bot]

.openapi-generator/FILES

@@ -81,6 +81,7 @@ docs/GroupRemoteInfoGithubEnterpriseTeam.md
 docs/GroupRemoteInfoGithubTeam.md
 docs/GroupRemoteInfoGitlabGroup.md
 docs/GroupRemoteInfoGoogleGroup.md
+docs/GroupRemoteInfoGrafanaTeam.md
 docs/GroupRemoteInfoIncidentioOnCallSchedule.md
 docs/GroupRemoteInfoLdapGroup.md
 docs/GroupRemoteInfoOktaGroup.md
@@ -90,6 +91,7 @@ docs/GroupRemoteInfoRootlyOnCallSchedule.md
 docs/GroupRemoteInfoSnowflakeRole.md
 docs/GroupRemoteInfoTailscaleGroup.md
 docs/GroupRemoteInfoTwingateGroup.md
+docs/GroupRemoteInfoTwingateGroupSynced.md
 docs/GroupRemoteInfoWorkdayUserSecurityGroup.md
 docs/GroupResource.md
 docs/GroupResourceList.md
@@ -207,6 +209,9 @@ docs/ResourceRemoteInfoGithubOrgRole.md
 docs/ResourceRemoteInfoGithubRepo.md
 docs/ResourceRemoteInfoGitlabProject.md
 docs/ResourceRemoteInfoGoogleWorkspaceRole.md
+docs/ResourceRemoteInfoGrafanaDashboard.md
+docs/ResourceRemoteInfoGrafanaFolder.md
+docs/ResourceRemoteInfoGrafanaRole.md
 docs/ResourceRemoteInfoIlevelAdvancedRole.md
 docs/ResourceRemoteInfoNetsuiteRole.md
 docs/ResourceRemoteInfoOktaApp.md
@@ -386,6 +391,7 @@ opal_security/models/group_remote_info_github_enterprise_team.py
 opal_security/models/group_remote_info_github_team.py
 opal_security/models/group_remote_info_gitlab_group.py
 opal_security/models/group_remote_info_google_group.py
+opal_security/models/group_remote_info_grafana_team.py
 opal_security/models/group_remote_info_incidentio_on_call_schedule.py
 opal_security/models/group_remote_info_ldap_group.py
 opal_security/models/group_remote_info_okta_group.py
@@ -395,6 +401,7 @@ opal_security/models/group_remote_info_rootly_on_call_schedule.py
 opal_security/models/group_remote_info_snowflake_role.py
 opal_security/models/group_remote_info_tailscale_group.py
 opal_security/models/group_remote_info_twingate_group.py
+opal_security/models/group_remote_info_twingate_group_synced.py
 opal_security/models/group_remote_info_workday_user_security_group.py
 opal_security/models/group_resource.py
 opal_security/models/group_resource_list.py
@@ -505,6 +512,9 @@ opal_security/models/resource_remote_info_github_org_role.py
 opal_security/models/resource_remote_info_github_repo.py
 opal_security/models/resource_remote_info_gitlab_project.py
 opal_security/models/resource_remote_info_google_workspace_role.py
+opal_security/models/resource_remote_info_grafana_dashboard.py
+opal_security/models/resource_remote_info_grafana_folder.py
+opal_security/models/resource_remote_info_grafana_role.py
 opal_security/models/resource_remote_info_ilevel_advanced_role.py
 opal_security/models/resource_remote_info_netsuite_role.py
 opal_security/models/resource_remote_info_okta_app.py
@@ -587,15 +597,9 @@ setup.cfg
 setup.py
 test-requirements.txt
 test/__init__.py
-test/test_api_access_level_enum.py
-test/test_group_remote_info_clickhouse_role.py
-test/test_group_remote_info_twingate_group.py
-test/test_paginated_tokens_list.py
-test/test_resource_remote_info_clickhouse_database.py
-test/test_resource_remote_info_clickhouse_table.py
-test/test_resource_remote_info_datadog_role.py
-test/test_resource_remote_info_netsuite_role.py
-test/test_resource_remote_info_twingate_resource.py
-test/test_token.py
-test/test_tokens_api.py
+test/test_group_remote_info_grafana_team.py
+test/test_group_remote_info_twingate_group_synced.py
+test/test_resource_remote_info_grafana_dashboard.py
+test/test_resource_remote_info_grafana_folder.py
+test/test_resource_remote_info_grafana_role.py
 tox.ini

README.md

@@ -353,6 +353,7 @@ Class | Method | HTTP request | Description
  - [GroupRemoteInfoGithubTeam](docs/GroupRemoteInfoGithubTeam.md)
  - [GroupRemoteInfoGitlabGroup](docs/GroupRemoteInfoGitlabGroup.md)
  - [GroupRemoteInfoGoogleGroup](docs/GroupRemoteInfoGoogleGroup.md)
+ - [GroupRemoteInfoGrafanaTeam](docs/GroupRemoteInfoGrafanaTeam.md)
  - [GroupRemoteInfoIncidentioOnCallSchedule](docs/GroupRemoteInfoIncidentioOnCallSchedule.md)
  - [GroupRemoteInfoLdapGroup](docs/GroupRemoteInfoLdapGroup.md)
  - [GroupRemoteInfoOktaGroup](docs/GroupRemoteInfoOktaGroup.md)
@@ -362,6 +363,7 @@ Class | Method | HTTP request | Description
  - [GroupRemoteInfoSnowflakeRole](docs/GroupRemoteInfoSnowflakeRole.md)
  - [GroupRemoteInfoTailscaleGroup](docs/GroupRemoteInfoTailscaleGroup.md)
  - [GroupRemoteInfoTwingateGroup](docs/GroupRemoteInfoTwingateGroup.md)
+ - [GroupRemoteInfoTwingateGroupSynced](docs/GroupRemoteInfoTwingateGroupSynced.md)
  - [GroupRemoteInfoWorkdayUserSecurityGroup](docs/GroupRemoteInfoWorkdayUserSecurityGroup.md)
  - [GroupResource](docs/GroupResource.md)
  - [GroupResourceList](docs/GroupResourceList.md)
@@ -472,6 +474,9 @@ Class | Method | HTTP request | Description
  - [ResourceRemoteInfoGithubRepo](docs/ResourceRemoteInfoGithubRepo.md)
  - [ResourceRemoteInfoGitlabProject](docs/ResourceRemoteInfoGitlabProject.md)
  - [ResourceRemoteInfoGoogleWorkspaceRole](docs/ResourceRemoteInfoGoogleWorkspaceRole.md)
+ - [ResourceRemoteInfoGrafanaDashboard](docs/ResourceRemoteInfoGrafanaDashboard.md)
+ - [ResourceRemoteInfoGrafanaFolder](docs/ResourceRemoteInfoGrafanaFolder.md)
+ - [ResourceRemoteInfoGrafanaRole](docs/ResourceRemoteInfoGrafanaRole.md)
  - [ResourceRemoteInfoIlevelAdvancedRole](docs/ResourceRemoteInfoIlevelAdvancedRole.md)
  - [ResourceRemoteInfoNetsuiteRole](docs/ResourceRemoteInfoNetsuiteRole.md)
  - [ResourceRemoteInfoOktaApp](docs/ResourceRemoteInfoOktaApp.md)

api/openapi.yaml

@@ -1621,7 +1621,7 @@ paths:
                 access_level_remote_id: arn:aws:iam::590304332660:role/AdministratorAccess
               properties:
                 duration_minutes:
-                  description: The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite.
+                  description: The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite, or a negative value to revoke access.
                   type: integer
                   maximum: 525960 # One year
                   example: 120
@@ -3470,7 +3470,7 @@ paths:
                 access_level_remote_id: arn:aws:iam::590304332660:role/AdministratorAccess
               properties:
                 duration_minutes:
-                  description: The updated duration for which the resource can be accessed (in minutes). Use 0 for indefinite.
+                  description: The updated duration for which the resource can be accessed (in minutes). Use 0 for indefinite, or a negative value to revoke access.
                   type: integer
                   maximum: 525960 # One year
                   example: 120
@@ -6213,17 +6213,41 @@ components:
         results:
           - group_id: f454d283-ca87-4a8a-bdbb-df212eca5353
             app_id: b5a5ca27-0ea3-4d86-9199-2126d57d1fbd
+            name: Payments Production Admin
             description: This group represents Active Directory group "Payments Production Admin". We use this AD group to facilitate staging deployments and qualifying new releases.
             admin_owner_id: 7c86c85d-0651-43e2-a748-d69d658418e8
+            group_leader_user_ids:
+              - 7c86c85d-0651-43e2-a748-d69d658418e8
+            remote_id: 037m2jsg218b2wb
+            remote_name: Finance Team
+            group_type: ACTIVE_DIRECTORY_GROUP
             max_duration: 120
+            recommended_duration: 60
+            extensions_duration_in_minutes: 60
             require_manager_approval: False
             require_support_ticket: False
+            require_mfa_to_approve: False
+            require_mfa_to_request: False
+            auto_approval: False
+            is_requestable: True
           - group_id: 99d0b81d-14be-4cf6-bd27-348b4af1d11b
+            app_id: a7c3e291-1234-4abc-9def-1234567890ab
+            name: Integrations On-Call
             description: Manages the Integrations Team on-call privileged resources. This group is automatically synced with the on-call rotation defined in PagerDuty.
             admin_owner_id: 4220bc12-ab8a-4b5d-be7b-f6bbcf9159f3
+            group_leader_user_ids: []
+            remote_id: pagerduty-schedule:P123XYZ
+            remote_name: Integrations On-Call
+            group_type: PAGERDUTY_ON_CALL_SCHEDULE
             max_duration: 360
+            recommended_duration: 120
+            extensions_duration_in_minutes: 0
             require_manager_approval: False
             require_support_ticket: True
+            require_mfa_to_approve: False
+            require_mfa_to_request: False
+            auto_approval: False
+            is_requestable: True
       properties:
         next:
           description:
@@ -6299,7 +6323,7 @@ components:
           format: uuid
           type: string
         duration_minutes:
-          description: The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite.
+          description: The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite, or a negative value to revoke access.
           type: integer
           maximum: 525960 # One year
           example: 120
@@ -6321,13 +6345,23 @@ components:
       example:
         group_id: f454d283-ca87-4a8a-bdbb-df212eca5353
         app_id: b5a5ca27-0ea3-4d86-9199-2126d57d1fbd
-        remote_id: 037m2jsg218b2wb
-        remote_name: Finance Team
+        name: Payments Production Admin
         description: This group represents Active Directory group "Payments Production Admin". We use this AD group to facilitate staging deployments and qualifying new releases.
         admin_owner_id: 7c86c85d-0651-43e2-a748-d69d658418e8
+        group_leader_user_ids:
+          - 7c86c85d-0651-43e2-a748-d69d658418e8
+        remote_id: 037m2jsg218b2wb
+        remote_name: Finance Team
+        group_type: ACTIVE_DIRECTORY_GROUP
         max_duration: 120
+        recommended_duration: 60
+        extensions_duration_in_minutes: 60
         require_manager_approval: False
         require_support_ticket: False
+        require_mfa_to_approve: False
+        require_mfa_to_request: False
+        auto_approval: False
+        is_requestable: True
       properties:
         group_id:
           description: The ID of the group.
@@ -6825,6 +6859,7 @@ components:
         - GRAFANA_TEAM
         - CLICKHOUSE_ROLE
         - TWINGATE_GROUP
+        - TWINGATE_GROUP_SYNCED
       example: OPAL_GROUP
       type: string
     ResourceTypeEnum:
@@ -7407,6 +7442,16 @@ components:
           type: object
           required:
             - group_id
+        twingate_group_synced:
+          description: Remote info for Twingate synced group.
+          properties:
+            group_id:
+              description: The id of the Twingate synced group.
+              example: R3JvdXA6MTIzNA==
+              type: string
+          type: object
+          required:
+            - group_id
         aws_sso_group:
           description: Remote info for AWS SSO group.
           properties:
@@ -7612,6 +7657,16 @@ components:
           type: object
           required:
             - role_id
+        grafana_team:
+          description: Remote info for Grafana team.
+          properties:
+            team_id:
+              description: The ID of the team.
+              example: 2323
+              type: string
+          type: object
+          required:
+            - team_id
       type: object
     ResourceRemoteInfo:
       description: Information that defines the remote resource. This replaces the deprecated remote_id and metadata fields.
@@ -8440,6 +8495,36 @@ components:
           required:
             - database_name
             - table_name
+        grafana_folder:
+          description: Remote info for Grafana folder.
+          properties:
+            folder_uid:
+              description: The UID of the Grafana folder.
+              example: fffRTXX
+              type: string
+          type: object
+          required:
+            - folder_uid
+        grafana_dashboard:
+          description: Remote info for Grafana dashboard.
+          properties:
+            dashboard_uid:
+              description: The UID of the Grafana dashboard.
+              example: dddRTXX
+              type: string
+          type: object
+          required:
+            - dashboard_uid
+        grafana_role:
+          description: Remote info for Grafana role(fixed or custom).
+          properties:
+            role_uid:
+              description: The UID of the Grafana role.
+              example: rrfRTXX
+              type: string
+          type: object
+          required:
+            - role_uid
       type: object
     RiskSensitivityEnum:
       type: string
@@ -9675,6 +9760,12 @@ components:
           type: integer
           example: 120
           deprecated: true
+        parent_resource_id:
+          description: The ID of the parent resource.
+          example: f454d283-ca67-4a8a-bdbb-df212eca5345
+          format: uuid
+          type: string
+          nullable: true
         request_configurations:
           type: array
           items:

docs/GroupContainingGroup.md

@@ -7,7 +7,7 @@
 Name | Type | Description | Notes
 ------------ | ------------- | ------------- | -------------
 **containing_group_id** | **UUID** | The groupID of the containing group. | 
-**duration_minutes** | **int** | The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite. | [optional] 
+**duration_minutes** | **int** | The updated duration for which the group can be accessed (in minutes). Use 0 for indefinite, or a negative value to revoke access. | [optional] 
 **access_level_remote_id** | **str** | The updated remote ID of the access level granted to this group. | [optional] 
 
 ## Example

docs/GroupRemoteInfo.md

@@ -9,6 +9,7 @@ Name | Type | Description | Notes
 **active_directory_group** | [**GroupRemoteInfoActiveDirectoryGroup**](GroupRemoteInfoActiveDirectoryGroup.md) |  | [optional] 
 **tailscale_group** | [**GroupRemoteInfoTailscaleGroup**](GroupRemoteInfoTailscaleGroup.md) |  | [optional] 
 **twingate_group** | [**GroupRemoteInfoTwingateGroup**](GroupRemoteInfoTwingateGroup.md) |  | [optional] 
+**twingate_group_synced** | [**GroupRemoteInfoTwingateGroupSynced**](GroupRemoteInfoTwingateGroupSynced.md) |  | [optional] 
 **aws_sso_group** | [**GroupRemoteInfoAwsSsoGroup**](GroupRemoteInfoAwsSsoGroup.md) |  | [optional] 
 **databricks_account_group** | [**GroupRemoteInfoDatabricksAccountGroup**](GroupRemoteInfoDatabricksAccountGroup.md) |  | [optional] 
 **connector_group** | [**GroupRemoteInfoConnectorGroup**](GroupRemoteInfoConnectorGroup.md) |  | [optional] 
@@ -29,6 +30,7 @@ Name | Type | Description | Notes
 **rootly_on_call_schedule** | [**GroupRemoteInfoRootlyOnCallSchedule**](GroupRemoteInfoRootlyOnCallSchedule.md) |  | [optional] 
 **devin_group** | [**GroupRemoteInfoDevinGroup**](GroupRemoteInfoDevinGroup.md) |  | [optional] 
 **clickhouse_role** | [**GroupRemoteInfoClickhouseRole**](GroupRemoteInfoClickhouseRole.md) |  | [optional] 
+**grafana_team** | [**GroupRemoteInfoGrafanaTeam**](GroupRemoteInfoGrafanaTeam.md) |  | [optional] 
 
 ## Example
 

docs/GroupRemoteInfoGrafanaTeam.md

@@ -0,0 +1,30 @@
+# GroupRemoteInfoGrafanaTeam
+
+Remote info for Grafana team.
+
+## Properties
+
+Name | Type | Description | Notes
+------------ | ------------- | ------------- | -------------
+**team_id** | **str** | The ID of the team. | 
+
+## Example
+
+```python
+from opal_security.models.group_remote_info_grafana_team import GroupRemoteInfoGrafanaTeam
+
+# TODO update the JSON string below
+json = "{}"
+# create an instance of GroupRemoteInfoGrafanaTeam from a JSON string
+group_remote_info_grafana_team_instance = GroupRemoteInfoGrafanaTeam.from_json(json)
+# print the JSON string representation of the object
+print(GroupRemoteInfoGrafanaTeam.to_json())
+
+# convert the object into a dict
+group_remote_info_grafana_team_dict = group_remote_info_grafana_team_instance.to_dict()
+# create an instance of GroupRemoteInfoGrafanaTeam from a dict
+group_remote_info_grafana_team_from_dict = GroupRemoteInfoGrafanaTeam.from_dict(group_remote_info_grafana_team_dict)
+```
+[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
+
+

docs/GroupRemoteInfoTwingateGroupSynced.md

@@ -0,0 +1,30 @@
+# GroupRemoteInfoTwingateGroupSynced
+
+Remote info for Twingate synced group.
+
+## Properties
+
+Name | Type | Description | Notes
+------------ | ------------- | ------------- | -------------
+**group_id** | **str** | The id of the Twingate synced group. | 
+
+## Example
+
+```python
+from opal_security.models.group_remote_info_twingate_group_synced import GroupRemoteInfoTwingateGroupSynced
+
+# TODO update the JSON string below
+json = "{}"
+# create an instance of GroupRemoteInfoTwingateGroupSynced from a JSON string
+group_remote_info_twingate_group_synced_instance = GroupRemoteInfoTwingateGroupSynced.from_json(json)
+# print the JSON string representation of the object
+print(GroupRemoteInfoTwingateGroupSynced.to_json())
+
+# convert the object into a dict
+group_remote_info_twingate_group_synced_dict = group_remote_info_twingate_group_synced_instance.to_dict()
+# create an instance of GroupRemoteInfoTwingateGroupSynced from a dict
+group_remote_info_twingate_group_synced_from_dict = GroupRemoteInfoTwingateGroupSynced.from_dict(group_remote_info_twingate_group_synced_dict)
+```
+[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
+
+

docs/GroupTypeEnum.md

@@ -58,6 +58,8 @@ The type of the group.
 
 * `TWINGATE_GROUP` (value: `'TWINGATE_GROUP'`)
 
+* `TWINGATE_GROUP_SYNCED` (value: `'TWINGATE_GROUP_SYNCED'`)
+
 [[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)
 
 

docs/ResourceRemoteInfo.md

@@ -73,6 +73,9 @@ Name | Type | Description | Notes
 **datadog_role** | [**ResourceRemoteInfoDatadogRole**](ResourceRemoteInfoDatadogRole.md) |  | [optional] 
 **clickhouse_database** | [**ResourceRemoteInfoClickhouseDatabase**](ResourceRemoteInfoClickhouseDatabase.md) |  | [optional] 
 **clickhouse_table** | [**ResourceRemoteInfoClickhouseTable**](ResourceRemoteInfoClickhouseTable.md) |  | [optional] 
+**grafana_folder** | [**ResourceRemoteInfoGrafanaFolder**](ResourceRemoteInfoGrafanaFolder.md) |  | [optional] 
+**grafana_dashboard** | [**ResourceRemoteInfoGrafanaDashboard**](ResourceRemoteInfoGrafanaDashboard.md) |  | [optional] 
+**grafana_role** | [**ResourceRemoteInfoGrafanaRole**](ResourceRemoteInfoGrafanaRole.md) |  | [optional] 
 
 ## Example