import { TypedDocumentNode as DocumentNode } from '@graphql-typed-document-node/core'; export type Maybe = T | null; export type Exact = { [K in keyof T]: T[K] }; export type MakeOptional = Omit & { [SubKey in K]?: Maybe }; export type MakeMaybe = Omit & { [SubKey in K]: Maybe }; /** All built-in and custom scalars, mapped to their actual values */ export type Scalars = { ID: string; String: string; Boolean: boolean; Int: number; Float: number; /** A location in a connection that can be used for resuming pagination. */ Cursor: any; /** * A point in time as described by the [ISO * 8601](https://en.wikipedia.org/wiki/ISO_8601) standard. May or may not include a timezone. */ Datetime: any; /** The `JSON` scalar type represents JSON values as specified by [ECMA-404](http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-404.pdf). */ JSON: { [key: string]: any }; /** A universally unique identifier as defined by [RFC 4122](https://tools.ietf.org/html/rfc4122). */ UUID: any; }; export type ActivePermission = { __typename?: 'ActivePermission'; createdAt?: Maybe; createdBy?: Maybe; environmentId?: Maybe; fromManagedService?: Maybe; id?: Maybe; name?: Maybe; serviceId?: Maybe; tenantId?: Maybe; title?: Maybe; updatedAt?: Maybe; updatedBy?: Maybe; usedByManagedServiceOnly?: Maybe; usedForDevelopment?: Maybe; }; /** * A condition to be used against `ActivePermission` object types. All fields are * tested for equality and combined with a logical ‘and.’ */ export type ActivePermissionCondition = { /** Checks for equality with the object’s `createdAt` field. */ createdAt?: Maybe; /** Checks for equality with the object’s `createdBy` field. */ createdBy?: Maybe; /** Checks for equality with the object’s `environmentId` field. */ environmentId?: Maybe; /** Checks for equality with the object’s `fromManagedService` field. */ fromManagedService?: Maybe; /** Checks for equality with the object’s `id` field. */ id?: Maybe; /** Checks for equality with the object’s `name` field. */ name?: Maybe; /** Checks for equality with the object’s `serviceId` field. */ serviceId?: Maybe; /** Checks for equality with the object’s `tenantId` field. */ tenantId?: Maybe; /** Checks for equality with the object’s `title` field. */ title?: Maybe; /** Checks for equality with the object’s `updatedAt` field. */ updatedAt?: Maybe; /** Checks for equality with the object’s `updatedBy` field. */ updatedBy?: Maybe; /** Checks for equality with the object’s `usedByManagedServiceOnly` field. */ usedByManagedServiceOnly?: Maybe; /** Checks for equality with the object’s `usedForDevelopment` field. */ usedForDevelopment?: Maybe; }; /** A filter to be used against `ActivePermission` object types. All fields are combined with a logical ‘and.’ */ export type ActivePermissionFilter = { /** Checks for all expressions in this list. */ and?: Maybe>; /** Filter by the object’s `createdAt` field. */ createdAt?: Maybe; /** Filter by the object’s `createdBy` field. */ createdBy?: Maybe; /** Filter by the object’s `environmentId` field. */ environmentId?: Maybe; /** Filter by the object’s `fromManagedService` field. */ fromManagedService?: Maybe; /** Filter by the object’s `id` field. */ id?: Maybe; /** Filter by the object’s `name` field. */ name?: Maybe; /** Negates the expression. */ not?: Maybe; /** Checks for any expressions in this list. */ or?: Maybe>; /** Filter by the object’s `serviceId` field. */ serviceId?: Maybe; /** Filter by the object’s `tenantId` field. */ tenantId?: Maybe; /** Filter by the object’s `title` field. */ title?: Maybe; /** Filter by the object’s `updatedAt` field. */ updatedAt?: Maybe; /** Filter by the object’s `updatedBy` field. */ updatedBy?: Maybe; /** Filter by the object’s `usedByManagedServiceOnly` field. */ usedByManagedServiceOnly?: Maybe; /** Filter by the object’s `usedForDevelopment` field. */ usedForDevelopment?: Maybe; }; /** A connection to a list of `ActivePermission` values. */ export type ActivePermissionsConnection = { __typename?: 'ActivePermissionsConnection'; /** A list of edges which contains the `ActivePermission` and cursor to aid in pagination. */ edges: Array; /** A list of `ActivePermission` objects. */ nodes: Array; /** Information to aid in pagination. */ pageInfo: PageInfo; /** The count of *all* `ActivePermission` you could get from the connection. */ totalCount: Scalars['Int']; }; /** A `ActivePermission` edge in the connection. */ export type ActivePermissionsEdge = { __typename?: 'ActivePermissionsEdge'; /** A cursor for use in pagination. */ cursor?: Maybe; /** The `ActivePermission` at the end of the edge. */ node: ActivePermission; }; /** Methods to use when ordering `ActivePermission`. */ export enum ActivePermissionsOrderBy { CREATED_AT_ASC = 'CREATED_AT_ASC', CREATED_AT_DESC = 'CREATED_AT_DESC', CREATED_BY_ASC = 'CREATED_BY_ASC', CREATED_BY_DESC = 'CREATED_BY_DESC', ENVIRONMENT_ID_ASC = 'ENVIRONMENT_ID_ASC', ENVIRONMENT_ID_DESC = 'ENVIRONMENT_ID_DESC', FROM_MANAGED_SERVICE_ASC = 'FROM_MANAGED_SERVICE_ASC', FROM_MANAGED_SERVICE_DESC = 'FROM_MANAGED_SERVICE_DESC', ID_ASC = 'ID_ASC', ID_DESC = 'ID_DESC', NAME_ASC = 'NAME_ASC', NAME_DESC = 'NAME_DESC', NATURAL = 'NATURAL', SERVICE_ID_ASC = 'SERVICE_ID_ASC', SERVICE_ID_DESC = 'SERVICE_ID_DESC', TENANT_ID_ASC = 'TENANT_ID_ASC', TENANT_ID_DESC = 'TENANT_ID_DESC', TITLE_ASC = 'TITLE_ASC', TITLE_DESC = 'TITLE_DESC', UPDATED_AT_ASC = 'UPDATED_AT_ASC', UPDATED_AT_DESC = 'UPDATED_AT_DESC', UPDATED_BY_ASC = 'UPDATED_BY_ASC', UPDATED_BY_DESC = 'UPDATED_BY_DESC', USED_BY_MANAGED_SERVICE_ONLY_ASC = 'USED_BY_MANAGED_SERVICE_ONLY_ASC', USED_BY_MANAGED_SERVICE_ONLY_DESC = 'USED_BY_MANAGED_SERVICE_ONLY_DESC', USED_FOR_DEVELOPMENT_ASC = 'USED_FOR_DEVELOPMENT_ASC', USED_FOR_DEVELOPMENT_DESC = 'USED_FOR_DEVELOPMENT_DESC' } export type AuthenticateManagedServiceAccountInput = { /** Managed Service Account ID. */ clientId: Scalars['String']; /** Managed Service Account Password. */ clientSecret: Scalars['String']; /** Environment ID to be used in resulting AccessToken. If not provided, Root Environment ID will be used. */ targetEnvironmentId?: Maybe; /** Tenant ID to be used in resulting AccessToken. If not provided, Root Tenant ID will be used. */ targetTenantId?: Maybe; }; export type AuthenticateManagedServiceAccountPayload = { __typename?: 'AuthenticateManagedServiceAccountPayload'; /** Access Token containing permissions of the Service Account */ accessToken: Scalars['String']; /** Access Token expiration timeout */ expiresInSeconds: Scalars['Int']; /** Access Token type to use when making client requests */ tokenType: Scalars['String']; }; export type AuthenticateManagedServiceAccountWithEnvironmentScopeInput = { /** Managed Service Account ID. */ clientId: Scalars['String']; /** Managed Service Account Password. */ clientSecret: Scalars['String']; /** * A Management JWT authenticated by the Mosaic ID Service. * The Tenant and Environment IDs in this JWT is used to scope * the Managed Service Account Token to a specific Environment. */ managementJWT: Scalars['String']; }; export type AuthenticateServiceAccountInput = { /** Service Account ID. */ clientId: Scalars['String']; /** Service Account Password. */ clientSecret: Scalars['String']; }; export type AuthenticateServiceAccountPayload = { __typename?: 'AuthenticateServiceAccountPayload'; /** Access Token containing permissions of the Service Account */ accessToken: Scalars['String']; /** Access Token expiration timeout */ expiresInSeconds: Scalars['Int']; /** Access Token type to use when making client requests */ tokenType: Scalars['String']; }; /** A filter to be used against Boolean fields. All fields are combined with a logical ‘and.’ */ export type BooleanFilter = { /** Not equal to the specified value, treating null like an ordinary value. */ distinctFrom?: Maybe; /** Equal to the specified value. */ equalTo?: Maybe; /** Greater than the specified value. */ greaterThan?: Maybe; /** Greater than or equal to the specified value. */ greaterThanOrEqualTo?: Maybe; /** Included in the specified list. */ in?: Maybe>; /** Is null (if `true` is specified) or is not null (if `false` is specified). */ isNull?: Maybe; /** Less than the specified value. */ lessThan?: Maybe; /** Less than or equal to the specified value. */ lessThanOrEqualTo?: Maybe; /** Equal to the specified value, treating null like an ordinary value. */ notDistinctFrom?: Maybe; /** Not equal to the specified value. */ notEqualTo?: Maybe; /** Not included in the specified list. */ notIn?: Maybe>; }; /** Bulk mutation payload type. */ export type BulkMutationUuidPayload = { __typename?: 'BulkMutationUuidPayload'; affectedIds?: Maybe>>; totalCount?: Maybe; }; export type CreateDevServiceAccountInput = { /** Optional Environment ID to use for service account. If not specified will default to configured dev value. */ environmentId?: Maybe; /** * Example: * * permissionStructure: [ * { * serviceId: "media-service", * permissions: ["ADMIN", "MOVIES_EDIT"] * }, * { * serviceId: "ax-video-service", * permissions: ["ADMIN", "VIDEOS_EDIT"] * } * ] */ permissionStructure: Array>; /** Service account name. */ serviceAccountName: Scalars['String']; /** Optional tenant ID to use for service account. If not specified will default to configured dev value. */ tenantId?: Maybe; }; export type CreateDevServiceAccountPayload = { __typename?: 'CreateDevServiceAccountPayload'; clientId: Scalars['String']; clientSecret: Scalars['String']; environmentId: Scalars['String']; serviceAccountName: Scalars['String']; tenantId: Scalars['String']; }; /** All input for the create `User` mutation. */ export type CreateUserInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `User` to be created by this mutation. */ user: UserInput; }; /** The output of our create `User` mutation. */ export type CreateUserPayload = { __typename?: 'CreateUserPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `User` that was created by this mutation. */ user?: Maybe; /** An edge for our `User`. May be used by Relay 1. */ userEdge?: Maybe; }; /** The output of our create `User` mutation. */ export type CreateUserPayloadUserEdgeArgs = { orderBy?: Maybe>; }; /** All input for the create `UserRoleAssignment` mutation. */ export type CreateUserRoleAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `UserRoleAssignment` to be created by this mutation. */ userRoleAssignment: UserRoleAssignmentInput; }; /** The output of our create `UserRoleAssignment` mutation. */ export type CreateUserRoleAssignmentPayload = { __typename?: 'CreateUserRoleAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `User` that is related to this `UserRoleAssignment`. */ user?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleAssignment`. */ userRole?: Maybe; /** The `UserRoleAssignment` that was created by this mutation. */ userRoleAssignment?: Maybe; /** An edge for our `UserRoleAssignment`. May be used by Relay 1. */ userRoleAssignmentEdge?: Maybe; }; /** The output of our create `UserRoleAssignment` mutation. */ export type CreateUserRoleAssignmentPayloadUserRoleAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** All input for the create `UserRole` mutation. */ export type CreateUserRoleInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `UserRole` to be created by this mutation. */ userRole: UserRoleInput; }; /** All input for the create `UserRoleParentAssignment` mutation. */ export type CreateUserRoleParentAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `UserRoleParentAssignment` to be created by this mutation. */ userRoleParentAssignment: UserRoleParentAssignmentInput; }; /** The output of our create `UserRoleParentAssignment` mutation. */ export type CreateUserRoleParentAssignmentPayload = { __typename?: 'CreateUserRoleParentAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleParentAssignment`. */ parentUserRole?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `UserRoleParentAssignment` that was created by this mutation. */ userRoleParentAssignment?: Maybe; /** An edge for our `UserRoleParentAssignment`. May be used by Relay 1. */ userRoleParentAssignmentEdge?: Maybe; }; /** The output of our create `UserRoleParentAssignment` mutation. */ export type CreateUserRoleParentAssignmentPayloadUserRoleParentAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** The output of our create `UserRole` mutation. */ export type CreateUserRolePayload = { __typename?: 'CreateUserRolePayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `UserRole` that was created by this mutation. */ userRole?: Maybe; /** An edge for our `UserRole`. May be used by Relay 1. */ userRoleEdge?: Maybe; }; /** The output of our create `UserRole` mutation. */ export type CreateUserRolePayloadUserRoleEdgeArgs = { orderBy?: Maybe>; }; /** All input for the create `UserRolePermissionAssignment` mutation. */ export type CreateUserRolePermissionAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `UserRolePermissionAssignment` to be created by this mutation. */ userRolePermissionAssignment: UserRolePermissionAssignmentInput; }; /** The output of our create `UserRolePermissionAssignment` mutation. */ export type CreateUserRolePermissionAssignmentPayload = { __typename?: 'CreateUserRolePermissionAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Reads a single `Permission` that is related to this `UserRolePermissionAssignment`. */ permission?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `UserRole` that is related to this `UserRolePermissionAssignment`. */ userRole?: Maybe; /** The `UserRolePermissionAssignment` that was created by this mutation. */ userRolePermissionAssignment?: Maybe; /** An edge for our `UserRolePermissionAssignment`. May be used by Relay 1. */ userRolePermissionAssignmentEdge?: Maybe; }; /** The output of our create `UserRolePermissionAssignment` mutation. */ export type CreateUserRolePermissionAssignmentPayloadUserRolePermissionAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** All input for the create `UserRoleTagAssignment` mutation. */ export type CreateUserRoleTagAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; /** The `UserRoleTagAssignment` to be created by this mutation. */ userRoleTagAssignment: UserRoleTagAssignmentInput; }; /** The output of our create `UserRoleTagAssignment` mutation. */ export type CreateUserRoleTagAssignmentPayload = { __typename?: 'CreateUserRoleTagAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleTagAssignment`. */ userRole?: Maybe; /** The `UserRoleTagAssignment` that was created by this mutation. */ userRoleTagAssignment?: Maybe; /** An edge for our `UserRoleTagAssignment`. May be used by Relay 1. */ userRoleTagAssignmentEdge?: Maybe; }; /** The output of our create `UserRoleTagAssignment` mutation. */ export type CreateUserRoleTagAssignmentPayloadUserRoleTagAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** A filter to be used against Datetime fields. All fields are combined with a logical ‘and.’ */ export type DatetimeFilter = { /** Not equal to the specified value, treating null like an ordinary value. */ distinctFrom?: Maybe; /** Equal to the specified value. */ equalTo?: Maybe; /** Greater than the specified value. */ greaterThan?: Maybe; /** Greater than or equal to the specified value. */ greaterThanOrEqualTo?: Maybe; /** Included in the specified list. */ in?: Maybe>; /** Is null (if `true` is specified) or is not null (if `false` is specified). */ isNull?: Maybe; /** Less than the specified value. */ lessThan?: Maybe; /** Less than or equal to the specified value. */ lessThanOrEqualTo?: Maybe; /** Equal to the specified value, treating null like an ordinary value. */ notDistinctFrom?: Maybe; /** Not equal to the specified value. */ notEqualTo?: Maybe; /** Not included in the specified list. */ notIn?: Maybe>; }; /** All input for the `deleteUser` mutation. */ export type DeleteUserInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; id: Scalars['UUID']; }; /** The output of our delete `User` mutation. */ export type DeleteUserPayload = { __typename?: 'DeleteUserPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `User` that was deleted by this mutation. */ user?: Maybe; /** An edge for our `User`. May be used by Relay 1. */ userEdge?: Maybe; }; /** The output of our delete `User` mutation. */ export type DeleteUserPayloadUserEdgeArgs = { orderBy?: Maybe>; }; /** All input for the `deleteUserRoleAssignment` mutation. */ export type DeleteUserRoleAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; id: Scalars['UUID']; }; /** The output of our delete `UserRoleAssignment` mutation. */ export type DeleteUserRoleAssignmentPayload = { __typename?: 'DeleteUserRoleAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `User` that is related to this `UserRoleAssignment`. */ user?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleAssignment`. */ userRole?: Maybe; /** The `UserRoleAssignment` that was deleted by this mutation. */ userRoleAssignment?: Maybe; /** An edge for our `UserRoleAssignment`. May be used by Relay 1. */ userRoleAssignmentEdge?: Maybe; }; /** The output of our delete `UserRoleAssignment` mutation. */ export type DeleteUserRoleAssignmentPayloadUserRoleAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** All input for the `deleteUserRole` mutation. */ export type DeleteUserRoleInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; id: Scalars['UUID']; }; /** All input for the `deleteUserRoleParentAssignment` mutation. */ export type DeleteUserRoleParentAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; id: Scalars['UUID']; }; /** The output of our delete `UserRoleParentAssignment` mutation. */ export type DeleteUserRoleParentAssignmentPayload = { __typename?: 'DeleteUserRoleParentAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleParentAssignment`. */ parentUserRole?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `UserRoleParentAssignment` that was deleted by this mutation. */ userRoleParentAssignment?: Maybe; /** An edge for our `UserRoleParentAssignment`. May be used by Relay 1. */ userRoleParentAssignmentEdge?: Maybe; }; /** The output of our delete `UserRoleParentAssignment` mutation. */ export type DeleteUserRoleParentAssignmentPayloadUserRoleParentAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** The output of our delete `UserRole` mutation. */ export type DeleteUserRolePayload = { __typename?: 'DeleteUserRolePayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** The `UserRole` that was deleted by this mutation. */ userRole?: Maybe; /** An edge for our `UserRole`. May be used by Relay 1. */ userRoleEdge?: Maybe; }; /** The output of our delete `UserRole` mutation. */ export type DeleteUserRolePayloadUserRoleEdgeArgs = { orderBy?: Maybe>; }; /** All input for the `deleteUserRolePermissionAssignment` mutation. */ export type DeleteUserRolePermissionAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; id: Scalars['UUID']; }; /** The output of our delete `UserRolePermissionAssignment` mutation. */ export type DeleteUserRolePermissionAssignmentPayload = { __typename?: 'DeleteUserRolePermissionAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Reads a single `Permission` that is related to this `UserRolePermissionAssignment`. */ permission?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `UserRole` that is related to this `UserRolePermissionAssignment`. */ userRole?: Maybe; /** The `UserRolePermissionAssignment` that was deleted by this mutation. */ userRolePermissionAssignment?: Maybe; /** An edge for our `UserRolePermissionAssignment`. May be used by Relay 1. */ userRolePermissionAssignmentEdge?: Maybe; }; /** The output of our delete `UserRolePermissionAssignment` mutation. */ export type DeleteUserRolePermissionAssignmentPayloadUserRolePermissionAssignmentEdgeArgs = { orderBy?: Maybe>; }; /** All input for the `deleteUserRoleTagAssignment` mutation. */ export type DeleteUserRoleTagAssignmentInput = { /** * An arbitrary string value with no semantic meaning. Will be included in the * payload verbatim. May be used to track mutations by the client. */ clientMutationId?: Maybe; environmentId: Scalars['UUID']; tag: Scalars['String']; tenantId: Scalars['UUID']; userRoleId: Scalars['UUID']; }; /** The output of our delete `UserRoleTagAssignment` mutation. */ export type DeleteUserRoleTagAssignmentPayload = { __typename?: 'DeleteUserRoleTagAssignmentPayload'; /** * The exact same `clientMutationId` that was provided in the mutation input, * unchanged and unused. May be used by a client to track mutations. */ clientMutationId?: Maybe; /** Our root query field type. Allows us to run any query from our mutation payload. */ query?: Maybe; /** Reads a single `UserRole` that is related to this `UserRoleTagAssignment`. */ userRole?: Maybe; /** The `UserRoleTagAssignment` that was deleted by this mutation. */ userRoleTagAssignment?: Maybe; /** An edge for our `UserRoleTagAssignment`. May be used by Relay 1. */ userRoleTagAssignmentEdge?: Maybe; }; /** The output of our delete `UserRoleTagAssignment` mutation. */ export type DeleteUserRoleTagAssignmentPayloadUserRoleTagAssignmentEdgeArgs = { orderBy?: Maybe>; }; export type DevDeleteServiceAccountInput = { /** Client ID of the Service Account to be deleted */ clientId: Scalars['String']; }; export type DevDeleteServiceAccountPayload = { __typename?: 'DevDeleteServiceAccountPayload'; /** Indicates if the permission structure was deleted successfully */ isSuccess: Scalars['Boolean']; }; export type DevGenerateUserAccessTokenWithPermissionsInput = { /** * Email address the user token will be generated against. * If not given, a pseudo user with following metadata data will be used for generating the token. * * name: **DEV** * email: dev@domain.local * id: 00000000-0000-0000-0000-000000000000 */ email?: Maybe; /** * If set to true, the permissions will be validated against existing permissions. * If any invalid permissions exist, the setup operation will be aborted. */ enforceValidPermissionStructure?: Maybe; /** * Permission Structure for the new account. * This is an array of shape {serviceId: String!, permissions: [String!]} */ permissionStructure?: Maybe>>; /** Token Expiration time in seconds. If not given, this will be defaulted to 30 days. */ tokenExpirationInSeconds?: Maybe; }; export type DevGenerateUserAccessTokenWithPermissionsPayload = { __typename?: 'DevGenerateUserAccessTokenWithPermissionsPayload'; /** Access token with requested permissions. */ accessToken: Scalars['String']; expiresInSeconds: Scalars['Int']; tokenType: Scalars['String']; }; export type DevPermissionStructureInput = { permissions?: Maybe>>; serviceId: Scalars['String']; }; export type DevSetupServiceAccountWithPermissionsInput = { /** * If set to true, the permissions will be validated against existing permissions. * If any invalid permissions exist, the setup operation will be aborted. */ enforceValidPermissionStructure?: Maybe; /** * Permission Structure for the new account. * This is an array of shape {serviceId: String!, permissions: [String!]} */ permissionStructure?: Maybe>>; /** Service Account Name */ serviceAccountName: Scalars['String']; }; export type DevSetupServiceAccountWithPermissionsPayload = { __typename?: 'DevSetupServiceAccountWithPermissionsPayload'; /** Client ID of the created service account. */ clientId: Scalars['String']; /** Client Secret of the created service account. */ clientSecret: Scalars['String']; }; export type DevUpdateServiceAccountPermissionStructureInput = { /** Client ID of the Service Account to be updated */ clientId: Scalars['String']; /** * If set to true, the permissions will be validated against existing permissions. * If any invalid permissions exist, the setup operation will be aborted. */ enforceValidPermissionStructure?: Maybe; /** * Permission Structure for the new account. * This is an array of shape {serviceId: String!, permissions: [String!]} */ permissionStructure?: Maybe>>; }; export type DevUpdateServiceAccountPermissionStructurePayload = { __typename?: 'DevUpdateServiceAccountPermissionStructurePayload'; /** Indicates if the permission structure was updated successfully */ isSuccess: Scalars['Boolean']; }; export type EnabledManagedServicesPayload = { __typename?: 'EnabledManagedServicesPayload'; /** Enabled Managed Service Name */ name: Scalars['String']; /** Enabled Managed Service ID */ serviceId: Scalars['String']; }; /** Exposes all error codes and messages for errors that a service requests can throw. In some cases, messages that are actually thrown can be different, since they can include more details or a single code can used for different errors of the same type. */ export enum ErrorCodesEnum { /** Access Token has expired. */ ACCESS_TOKEN_EXPIRED = 'ACCESS_TOKEN_EXPIRED', /** Access Token is invalid */ ACCESS_TOKEN_INVALID = 'ACCESS_TOKEN_INVALID', /** Access Token Lifetime must be greater than or equal to 30. */ ACCESS_TOKEN_LIFETIME_INSUFFICIENT = 'ACCESS_TOKEN_LIFETIME_INSUFFICIENT', /** Access token not received during idp token refresh in idpTokenMiddleware. */ ACCESS_TOKEN_NOT_RECEIVED = 'ACCESS_TOKEN_NOT_RECEIVED', /** Error while refreshing the IDP access token using the IDP refresh token. */ ACCESS_TOKEN_REFRESH_ERROR = 'ACCESS_TOKEN_REFRESH_ERROR', /** Access Token is not provided */ ACCESS_TOKEN_REQUIRED = 'ACCESS_TOKEN_REQUIRED', /** Access token verification failed */ ACCESS_TOKEN_VERIFICATION_FAILED = 'ACCESS_TOKEN_VERIFICATION_FAILED', /** The email has not yet been verified for use. Please check your inbox for verification instructions. */ ACCOUNT_NOT_VERIFIED = 'ACCOUNT_NOT_VERIFIED', /** An active signing key already exists for the application. */ ACTIVE_SIGNING_KEY_EXISTS = 'ACTIVE_SIGNING_KEY_EXISTS', /** The assertion check for the identifier %s failed. */ ASSERTION_FAILED = 'ASSERTION_FAILED', /** Auth Callback Error */ AUTH_CALLBACK_ERROR = 'AUTH_CALLBACK_ERROR', /** Auth config is invalid. */ AUTH_CONFIG_INVALID = 'AUTH_CONFIG_INVALID', /** Authenticated End User not found. */ AUTHENTICATED_END_USER_NOT_FOUND = 'AUTHENTICATED_END_USER_NOT_FOUND', /** Authenticated Management Subject not found. */ AUTHENTICATED_MANAGEMENT_SUBJECT_NOT_FOUND = 'AUTHENTICATED_MANAGEMENT_SUBJECT_NOT_FOUND', /** A Permission Definition or an EndUserAuthorizationConfig was not found to be passed into Postgraphile build options. This is a development time issue. */ AUTHORIZATION_OPTIONS_MISCONFIGURED = 'AUTHORIZATION_OPTIONS_MISCONFIGURED', /** Permission synchronization is allowed for Service IDs that start with `ax-` only with Managed Service Accounts. */ AX_SERVICE_PERMISSION_SYNC_NOT_ALLOWED = 'AX_SERVICE_PERMISSION_SYNC_NOT_ALLOWED', /** Bad Request */ BAD_REQUEST = 'BAD_REQUEST', /** Basic Data has not been setup. Please run the [_DEV_setupIdBasicData] mutation. */ BASIC_DATA_NOT_SETUP = 'BASIC_DATA_NOT_SETUP', /** Cannot change the state while the service [%s] has a pending state change. No action was performed. */ CANNOT_CHANGE_STATE_WHEN_PENDING = 'CANNOT_CHANGE_STATE_WHEN_PENDING', /** Cannot change the state for the service [%s] when it has a failed state change attempt, please retry the previous action. No action was performed. */ CANNOT_CHANGE_STATE_WITH_ERROR = 'CANNOT_CHANGE_STATE_WITH_ERROR', /** Service [%s] is a core-service and cannot be disabled. No action was performed. */ CANNOT_DISABLE_CORE_SERVICE = 'CANNOT_DISABLE_CORE_SERVICE', /** Unable to enable Tenant as there are currently no Tenant Administrators in active state. */ CANNOT_ENABLE_TENANT = 'CANNOT_ENABLE_TENANT', /** The Administrator role cannot be renamed or deleted. */ CANNOT_MUTATE_ADMIN_ROLE = 'CANNOT_MUTATE_ADMIN_ROLE', /** Client ID and Client Secret are required to enable the identity provider. */ CLIENT_ID_SECRET_REQUIRED = 'CLIENT_ID_SECRET_REQUIRED', /** Error updating service account client secret. */ CLIENT_SECRET_UPDATE_FAILED = 'CLIENT_SECRET_UPDATE_FAILED', /** The service [%s] does not support the [%s] command. */ COMMAND_NOT_SUPPORTED = 'COMMAND_NOT_SUPPORTED', /** Contains invalid permissions. */ CONTAINS_INVALID_PERMISSIONS = 'CONTAINS_INVALID_PERMISSIONS', /** Custom branding is not allowed for this identity provider. */ CUSTOM_BRANDING_NOT_ALLOWED = 'CUSTOM_BRANDING_NOT_ALLOWED', /** customStepFunctionName missing in orchestration step. */ CUSTOM_STEP_FUNCTION_NAME_MISSING = 'CUSTOM_STEP_FUNCTION_NAME_MISSING', /** An error occurred while checking for cyclic user roles. */ CYCLIC_ROLE_VALIDATE_ERROR = 'CYCLIC_ROLE_VALIDATE_ERROR', /** A database operation has failed because of a lock timeout. */ DATABASE_LOCK_TIMEOUT_ERROR = 'DATABASE_LOCK_TIMEOUT_ERROR', /** An authorization database error has occurred. The user might not have enough permissions. */ DATABASE_PERMISSIONS_CHECK_FAILED = 'DATABASE_PERMISSIONS_CHECK_FAILED', /** An expected and handled database constraint error has occurred. The actual message will have more information. */ DATABASE_VALIDATION_FAILED = 'DATABASE_VALIDATION_FAILED', /** Error accessing database. */ DB_ACCESS_ERROR = 'DB_ACCESS_ERROR', /** The specified email address is not allowed according to the current configuration. Please use different email address and try again. */ EMAIL_NOT_ALLOWED = 'EMAIL_NOT_ALLOWED', /** The account is not activated. Please contact another Tenant Administrator or Axinom Support to activate the account. */ ENV_ADMIN_ACCOUNT_NOT_ACTIVE = 'ENV_ADMIN_ACCOUNT_NOT_ACTIVE', /** Either the account or the tenant is not enabled for usage. */ ENV_ADMIN_OR_TENANT_NOT_ACTIVE = 'ENV_ADMIN_OR_TENANT_NOT_ACTIVE', /** Cannot enable the environment when the initialization status is not [Completed]. */ ENV_INITIALIZATION_NOT_COMPLETED = 'ENV_INITIALIZATION_NOT_COMPLETED', /** Environment [%s] is not enabled for use. */ ENVIRONMENT_NOT_ACTIVE = 'ENVIRONMENT_NOT_ACTIVE', /** The environment is not enabled for use. Please contact your Tenant Administrator or Axinom Support. */ ENVIRONMENT_NOT_ENABLED = 'ENVIRONMENT_NOT_ENABLED', /** Environment [%s] not found. */ ENVIRONMENT_NOT_FOUND = 'ENVIRONMENT_NOT_FOUND', /** An error occurred while generating long lived token. */ ERROR_GENERATING_LONG_LIVED_TOKEN = 'ERROR_GENERATING_LONG_LIVED_TOKEN', /** Error occurred generating a service account secret. */ ERROR_GENERATING_SERVICE_ACCOUNT_SECRET = 'ERROR_GENERATING_SERVICE_ACCOUNT_SECRET', /** Error while retrieving the enabled managed services. */ ERROR_RETRIEVING_ENABLED_MANAGED_SERVICES = 'ERROR_RETRIEVING_ENABLED_MANAGED_SERVICES', /** An error occurred while attempting to retrieve token signing key details. */ ERROR_RETRIEVING_SIGNING_KEYS = 'ERROR_RETRIEVING_SIGNING_KEYS', /** This is a wrapper error for the original unhandled error of unsupported type. */ ERROR_WRAPPER = 'ERROR_WRAPPER', /** A GraphQL validation error has occurred. Please make sure that the GraphQL request is made with correct syntax or parameters. */ GRAPHQL_VALIDATION_FAILED = 'GRAPHQL_VALIDATION_FAILED', /** The Identity service is not accessible. Please contact Axinom support. */ IDENTITY_SERVICE_NOT_ACCESSIBLE = 'IDENTITY_SERVICE_NOT_ACCESSIBLE', /** An error occurred while generating IDP authorization URL. */ IDP_AUTH_URL_GENERATION_ERROR = 'IDP_AUTH_URL_GENERATION_ERROR', /** IDP configuration does not exist. */ IDP_CONFIG_DOES_NOT_EXIST = 'IDP_CONFIG_DOES_NOT_EXIST', /** Invalid IDP Configuration. */ IDP_CONFIG_INVALID = 'IDP_CONFIG_INVALID', /** Built in IDP configuration is only available for Google IDP. */ IDP_CONFIG_ONLY_AVAILABLE_FOR_GOOGLE = 'IDP_CONFIG_ONLY_AVAILABLE_FOR_GOOGLE', /** An error occurred while validating IDP Configuration. */ IDP_CONFIG_VALIDATION_ERROR = 'IDP_CONFIG_VALIDATION_ERROR', /** The requested Identity Provider is disabled for the environment. Please retry logging in using a different Identity Provider. */ IDP_DISABLED = 'IDP_DISABLED', /** The requested Identity Provider is not configured for the environment. Please retry logging in using a different Identity Provider. */ IDP_NOT_CONFIGURED = 'IDP_NOT_CONFIGURED', /** Error while requesting IDP Tokens */ IDP_TOKEN_REQUEST_ERROR = 'IDP_TOKEN_REQUEST_ERROR', /** The value for initDefaults does not match its schema. */ INIT_DEFAULTS_SCHEMA_MISMATCH = 'INIT_DEFAULTS_SCHEMA_MISMATCH', /** An unhandled and unexpected error has occurred. Please contact the service support. */ INTERNAL_SERVER_ERROR = 'INTERNAL_SERVER_ERROR', /** Invalid Client ID or Client Secret */ INVALID_CLIENT_ID_SECRET = 'INVALID_CLIENT_ID_SECRET', /** Invalid email or password. */ INVALID_CREDENTIALS = 'INVALID_CREDENTIALS', /** Email format is invalid. */ INVALID_EMAIL_FORMAT = 'INVALID_EMAIL_FORMAT', /** Invalid email or tenant not enabled for usage. */ INVALID_EMAIL_OR_TENANT_INACTIVE = 'INVALID_EMAIL_OR_TENANT_INACTIVE', /** Email Whitelist Pattern is not valid */ INVALID_EMAIL_WHITELIST_PATTERN = 'INVALID_EMAIL_WHITELIST_PATTERN', /** Invalid Environment ID. */ INVALID_ENVIRONMENT_ID = 'INVALID_ENVIRONMENT_ID', /** Unrecognized state change was attempted and an error was logged. */ INVALID_ENVIRONMENT_STATE = 'INVALID_ENVIRONMENT_STATE', /** Error occurred while trying to fetch signing keys from the JWKS endpoint for the Tenant/Environment/Application. */ JWKS_ERROR = 'JWKS_ERROR', /** Passed JWT is not a Mosaic End-User Token. Cannot be verified. */ JWT_IS_NOT_MOSAIC_TOKEN = 'JWT_IS_NOT_MOSAIC_TOKEN', /** Missing required property %s in Identity Provider user token. */ JWT_MISSING_REQUIRED_PROP = 'JWT_MISSING_REQUIRED_PROP', /** The Management JWT is not valid. Cannot generate Managed Service Account token. */ JWT_NOT_VALID = 'JWT_NOT_VALID', /** Please disable the tenant before deactivating the last active Tenant Administrator. */ LAST_TENANT_ADMIN_ACTIVE_TENANT_DEACTIVATE = 'LAST_TENANT_ADMIN_ACTIVE_TENANT_DEACTIVATE', /** Please disable the tenant before deleting the last active Tenant Administrator. */ LAST_TENANT_ADMIN_ACTIVE_TENANT_DELETE = 'LAST_TENANT_ADMIN_ACTIVE_TENANT_DELETE', /** Malformed access token received */ MALFORMED_TOKEN = 'MALFORMED_TOKEN', /** Service [%s] is already disabled for this environment. No action was performed. */ MANAGED_SERVICE_ALREADY_DISABLED = 'MANAGED_SERVICE_ALREADY_DISABLED', /** Service [%s] is already enabled for this environment. No action was performed. */ MANAGED_SERVICE_ALREADY_ENABLED = 'MANAGED_SERVICE_ALREADY_ENABLED', /** Managed service [%s] not found in environment [%s]. */ MANAGED_SERVICE_NOT_FOUND = 'MANAGED_SERVICE_NOT_FOUND', /** Management super admin account not found. */ MANAGEMENT_SUPER_ADMIN_ACCOUNT_NOT_FOUND = 'MANAGEMENT_SUPER_ADMIN_ACCOUNT_NOT_FOUND', /** No active token signing keys found for the environment [%s]. */ NO_ACTIVE_SIGNING_KEY = 'NO_ACTIVE_SIGNING_KEY', /** Token does not contain an email. */ NO_EMAIL_IN_TOKEN = 'NO_EMAIL_IN_TOKEN', /** A caught error does not contain an error code. */ NO_ERROR_CODE_FOUND = 'NO_ERROR_CODE_FOUND', /** The token is not an Authenticated End-User */ NOT_AUTHENTICATED_END_USER = 'NOT_AUTHENTICATED_END_USER', /** The object is not a AuthenticatedManagementSubject */ NOT_AUTHENTICATED_MANAGEMENT_SUBJECT = 'NOT_AUTHENTICATED_MANAGEMENT_SUBJECT', /** The object is not a AuthenticatedRequest */ NOT_AUTHENTICATED_REQUEST = 'NOT_AUTHENTICATED_REQUEST', /** A caught error is not an AxiosError. */ NOT_AXIOS_ERROR = 'NOT_AXIOS_ERROR', /** The token is not an End-User Application */ NOT_END_USER_APPLICATION = 'NOT_END_USER_APPLICATION', /** The object is not an EndUserAuthenticationContext */ NOT_END_USER_AUTHENTICATION_CONTEXT = 'NOT_END_USER_AUTHENTICATION_CONTEXT', /** The object is not a GenericAuthenticatedSubject */ NOT_GENERIC_AUTHENTICATED_SUBJECT = 'NOT_GENERIC_AUTHENTICATED_SUBJECT', /** The object is not a ManagementAuthenticationContext */ NOT_MANAGEMENT_AUTHENTICATION_CONTEXT = 'NOT_MANAGEMENT_AUTHENTICATION_CONTEXT', /** The %s is missing required properties: %s. */ OBJECT_IS_MISSING_PROPERTIES = 'OBJECT_IS_MISSING_PROPERTIES', /** The user [%s] can only use Single Sign-On mode for tenant [%s]. */ ONLY_SSO_ALLOWED = 'ONLY_SSO_ALLOWED', /** The environment's first orchestration step must have message-params. */ ORCHESTRATION_PARAMS_MISSING = 'ORCHESTRATION_PARAMS_MISSING', /** Dynamic orchestration step resolution failed. */ ORCHESTRATION_STEP_RESOLUTION_FAILED = 'ORCHESTRATION_STEP_RESOLUTION_FAILED', /** Error generating the password. */ PASSWORD_GENEARTION_ERROR = 'PASSWORD_GENEARTION_ERROR', /** The new password does not meet the minimum policy requirements. */ PASSWORD_POLICY_MISMATCH = 'PASSWORD_POLICY_MISMATCH', /** Payload not found in pg-notification. */ PAYLOAD_NOT_FOUND = 'PAYLOAD_NOT_FOUND', /** Error occurred trying to purge permissions. */ PERMISSION_PURGE_ERROR = 'PERMISSION_PURGE_ERROR', /** Purging permissions for Service IDs that start with `ax-` is not allowed. */ PERMISSION_PURGE_NOT_ALLOWED_FOR_AX_SERVICES = 'PERMISSION_PURGE_NOT_ALLOWED_FOR_AX_SERVICES', /** Error occurred trying to synchronize permissions. */ PERMISSION_SYNC_ERROR = 'PERMISSION_SYNC_ERROR', /** Permissions with the `usedByManagedServiceOnly` flag set can only be synchronized by a Managed Service. */ PERMISSION_USED_BY_MANAGED_SERVICE_ONLY = 'PERMISSION_USED_BY_MANAGED_SERVICE_ONLY', /** Root environment not found. */ ROOT_ENV_NOT_FOUND = 'ROOT_ENV_NOT_FOUND', /** Root Environment not found. */ ROOT_ENVIRONMENT_NOT_FOUND = 'ROOT_ENVIRONMENT_NOT_FOUND', /** Root Tenant not found. */ ROOT_TENANT_NOT_FOUND = 'ROOT_TENANT_NOT_FOUND', /** No Service Account exists for Client ID [%s]. */ SERVICE_ACCOUNT_DOES_NOT_EXIST = 'SERVICE_ACCOUNT_DOES_NOT_EXIST', /** Service Account does not exist. */ SERVICE_ACCOUNT_NOT_EXISTS = 'SERVICE_ACCOUNT_NOT_EXISTS', /** The service-id is required for service-state-change-events. */ SERVICE_ID_NOT_FOUND = 'SERVICE_ID_NOT_FOUND', /** Sign in with credentials failed with an error message: [%s]. */ SIGN_IN_WITH_CREDENTIALS_AUTH_FLOW_ERROR = 'SIGN_IN_WITH_CREDENTIALS_AUTH_FLOW_ERROR', /** Sign In With Credentials call failed. */ SIGN_IN_WITH_CREDENTIALS_FAILED = 'SIGN_IN_WITH_CREDENTIALS_FAILED', /** Invalid username or password. Please try again. */ SIGN_IN_WITH_CREDENTIALS_INVALID_CREDENTIALS = 'SIGN_IN_WITH_CREDENTIALS_INVALID_CREDENTIALS', /** Could not find a matching signing key to verify the access token. The signing key used to create the token may have been revoked or the Tenant/Environment/Application configuration is erroneous. */ SIGNING_KEY_NOT_FOUND = 'SIGNING_KEY_NOT_FOUND', /** An error occurred while rotating signing keys. */ SIGNING_KEY_ROTATE_ERROR = 'SIGNING_KEY_ROTATE_ERROR', /** We encountered an error while validating your SSO token with the Axinom Portal. Please try again in a few seconds. If the problem persists, please contact Axinom Support. */ SSO_TOKEN_VALIDATION_ERROR = 'SSO_TOKEN_VALIDATION_ERROR', /** An application startup error has occurred. The actual message will have more information. */ STARTUP_ERROR = 'STARTUP_ERROR', /** Orchestration error. Step function [%s] not found. */ STEP_FUNC_NOT_FOUND = 'STEP_FUNC_NOT_FOUND', /** Step function [%s] is not found in the mapping. */ STEP_FUNCTION_NOT_FOUND_IN_MAPPING = 'STEP_FUNCTION_NOT_FOUND_IN_MAPPING', /** User is authenticated, but subject information was not found. Please contact Axinom Support. */ SUBJECT_NOT_FOUND = 'SUBJECT_NOT_FOUND', /** Could not complete authentication. targetTenantId is missing. */ TARGET_TENANT_MISSING = 'TARGET_TENANT_MISSING', /** The linked Environment Administration Portal account [%s] is not active. Please contact Axinom Support. */ TENANT_ADMIN_NOT_ACTIVE = 'TENANT_ADMIN_NOT_ACTIVE', /** Tenant Admin does not exist. */ TENANT_ADMIN_NOT_EXISTS = 'TENANT_ADMIN_NOT_EXISTS', /** Tenant Admin [%s] not found. */ TENANT_ADMIN_NOT_FOUND = 'TENANT_ADMIN_NOT_FOUND', /** The Environment Administration Portal is not linked to your Axinom Portal account [%s]. Please contact Axinom Support. */ TENANT_ADMIN_NOT_LINKED_TO_AX_PORTAL = 'TENANT_ADMIN_NOT_LINKED_TO_AX_PORTAL', /** The tenant [%s] is not active. Please contact Axinom Support. */ TENANT_NOT_ACTIVE = 'TENANT_NOT_ACTIVE', /** Tenant does not exist. */ TENANT_NOT_EXISTS = 'TENANT_NOT_EXISTS', /** Tenant [%s] not found. */ TENANT_NOT_FOUND = 'TENANT_NOT_FOUND', /** Token validity duration cannot exceed [%s] seconds. */ TOKEN_VALIDITY_DURATION_EXCEEDED = 'TOKEN_VALIDITY_DURATION_EXCEEDED', /** Could not decode User Token in generateLongLivedToken. */ UNABLE_TO_DECODE_JWT = 'UNABLE_TO_DECODE_JWT', /** The subject has no permissions. */ UNAUTHORIZED = 'UNAUTHORIZED', /** Unexpected null or undefined value received. */ UNEXPECTED_NULL_UNDEFINED = 'UNEXPECTED_NULL_UNDEFINED', /** Unhandled Axios error. */ UNHANDLED_AXIOS_ERROR = 'UNHANDLED_AXIOS_ERROR', /** An unhandled database-related error has occurred. Please contact the service support. */ UNHANDLED_DATABASE_ERROR = 'UNHANDLED_DATABASE_ERROR', /** An unhandled error has occurred. Please contact the service support. */ UNHANDLED_ERROR = 'UNHANDLED_ERROR', /** Attempt to create or update an element failed, as it would have resulted in a duplicate element. */ UNIQUE_CONSTRAINT_ERROR = 'UNIQUE_CONSTRAINT_ERROR', /** Environment created with an unsupported template [%s]. */ UNSUPPORTED_TEMPLATE = 'UNSUPPORTED_TEMPLATE', /** Unsupported token type received to generateLongLivedToken. The token must be a JWT type. */ UNSUPPORTED_TOKEN_TYPE = 'UNSUPPORTED_TOKEN_TYPE', /** User with [%s] does not exist. Please ensure an user account exists for the given email. */ USER_DOES_NOT_EXIST = 'USER_DOES_NOT_EXIST', /** User is not authorized to access the operation. */ USER_NOT_AUTHORIZED = 'USER_NOT_AUTHORIZED', /** The User service is not accessible. Please contact Axinom support. */ USER_SERVICE_NOT_ACCESSIBLE = 'USER_SERVICE_NOT_ACCESSIBLE', /** The %s is not an object. */ VALUE_IS_NOT_OBJECT = 'VALUE_IS_NOT_OBJECT', /** Websocket not found in ExtendedGraphQLContext. This is a development time issue. A reference to the websocket must be included in Postgraphile build options. */ WEBSOCKET_NOT_FOUND = 'WEBSOCKET_NOT_FOUND', /** An error occurred while resolving the well-known-config URLs. */ WELL_KNOWN_CONFIG_URL_RESOLVE_ERROR = 'WELL_KNOWN_CONFIG_URL_RESOLVE_ERROR' } export type GenerateDevAccessTokenInput = { /** Optional Environment ID to use for service account. If not specified will default to configured dev value. */ environmentId?: Maybe; /** * Example: * * permissionStructure: [ * { * serviceId: "media-service", * permissions: ["ADMIN", "MOVIES_EDIT"] * }, * { * serviceId: "ax-video-service", * permissions: ["ADMIN", "VIDEOS_EDIT"] * } * ] */ permissionStructure?: Maybe>>; /** * Example: * * tags: ["LK_MANAGER", "DE_MANAGER"] */ tags?: Maybe>>; /** Optional tenant ID to use for service account. If not specified will default to configured dev value. */ tenantId?: Maybe; }; export type GenerateDevAccessTokenPayload = { __typename?: 'GenerateDevAccessTokenPayload'; accessToken: Scalars['String']; expiresInSeconds: Scalars['Int']; tokenType: Scalars['String']; }; export type GenerateLongLivedTokenInput = { /** User access token to extend the validity period for. */ userToken: Scalars['String']; /** Validity duration from time of invocation. Defaults to 30 days if unspecified. */ validityDurationInSeconds?: Maybe; }; export type GenerateLongLivedTokenPayload = { __typename?: 'GenerateLongLivedTokenPayload'; /** Long lived access token */ accessToken: Scalars['String']; /** Access Token expiration timeout in seconds */ expiresInSeconds: Scalars['Int']; /** Access Token type to use when making client requests */ tokenType: Scalars['String']; }; /** A `String` edge in the connection. */ export type GetUserRoleTagValueEdge = { __typename?: 'GetUserRoleTagValueEdge'; /** A cursor for use in pagination. */ cursor?: Maybe; /** The `String` at the end of the edge. */ node?: Maybe; }; /** A connection to a list of `String` values. */ export type GetUserRoleTagValuesConnection = { __typename?: 'GetUserRoleTagValuesConnection'; /** A list of edges which contains the `String` and cursor to aid in pagination. */ edges: Array; /** A list of `String` objects. */ nodes: Array>; /** The count of *all* `String` you could get from the connection. */ totalCount: Scalars['Int']; }; /** The root mutation type which contains root level fields which mutate data. */ export type Mutation = { __typename?: 'Mutation'; /** Creates a development-time service account with SYNCHRONIZE_PERMISSIONS granted. */ _DEV_createServiceAccount?: Maybe; /** Generates development-time user access tokens with specified PERMISSIONS. */ _DEV_generateUserAccessToken?: Maybe; /** Creates development-time tenant, environment & idp-configuration basic data. Re-running will reset all data. */ _DEV_setupIdBasicData?: Maybe; /** Authenticates a Managed Service Account */ authenticateManagedServiceAccount: AuthenticateManagedServiceAccountPayload; /** * Authenticates a Managed Service Account With the Environment Scope. * This mutation will validate the management JWT and then derive the * Environment ID to scope the Managed Service Account Token. */ authenticateManagedServiceAccountWithEnvironmentScope: AuthenticateManagedServiceAccountPayload; /** Authenticates a Service Account */ authenticateServiceAccount: AuthenticateServiceAccountPayload; /** Creates a single `User`. */ createUser?: Maybe; /** Creates a single `UserRole`. */ createUserRole?: Maybe; /** Creates a single `UserRoleAssignment`. */ createUserRoleAssignment?: Maybe; /** Creates a single `UserRoleParentAssignment`. */ createUserRoleParentAssignment?: Maybe; /** Creates a single `UserRolePermissionAssignment`. */ createUserRolePermissionAssignment?: Maybe; /** Creates a single `UserRoleTagAssignment`. */ createUserRoleTagAssignment?: Maybe; /** Deletes a single `User` using a unique key. */ deleteUser?: Maybe; /** Deletes a single `UserRole` using a unique key. */ deleteUserRole?: Maybe; /** Deletes a single `UserRoleAssignment` using a unique key. */ deleteUserRoleAssignment?: Maybe; /** Deletes a single `UserRoleParentAssignment` using a unique key. */ deleteUserRoleParentAssignment?: Maybe; /** Deletes a single `UserRolePermissionAssignment` using a unique key. */ deleteUserRolePermissionAssignment?: Maybe; deleteUserRoles?: Maybe; /** Deletes a single `UserRoleTagAssignment` using a unique key. */ deleteUserRoleTagAssignment?: Maybe; deleteUsers?: Maybe; /** Delete a Service Account */ devDeleteServiceAccount: DevDeleteServiceAccountPayload; /** Setup a Service Account with the given permission structure. */ devGenerateUserAccessTokenWithPermissions?: Maybe; /** Setup a Service Account with the given permission structure. */ devSetupServiceAccountWithPermissions?: Maybe; /** Update the Permission Structure of an existing Service Account. */ devUpdateServiceAccountPermissionStructure?: Maybe; /** Generate a long lived access token for a user access token */ generateLongLivedToken: GenerateLongLivedTokenPayload; /** Purges permissions for a given Service ID. */ purgePermissions?: Maybe; /** Adds a custom mutation to revoke refresh tokens */ revokeRefreshToken: RevokeRefreshTokenPayload; /** Synchronizes permissions from other services. */ synchronizePermissions?: Maybe; /** Update Service Account Name */ updateServiceAccount: UpdateServiceAccountPayload; /** Updates a single `User` using a unique key and a patch. */ updateUser?: Maybe; /** Updates a single `UserRole` using a unique key and a patch. */ updateUserRole?: Maybe; /** * Validate if a role that's being assigned to another role as a parent has a cyclic dependency or not. * If there is a cyclic dependency, the mutation returns false - indicating the validation failed. * If there is no cyclic dependency, the mutation returns true - indicating the validation passed. */ validateCyclicUserRole: Scalars['Boolean']; }; /** The root mutation type which contains root level fields which mutate data. */ export type Mutation_Dev_CreateServiceAccountArgs = { input: CreateDevServiceAccountInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type Mutation_Dev_GenerateUserAccessTokenArgs = { input: GenerateDevAccessTokenInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type Mutation_Dev_SetupIdBasicDataArgs = { input: SetupDevBasicDataInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationAuthenticateManagedServiceAccountArgs = { input?: Maybe; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationAuthenticateManagedServiceAccountWithEnvironmentScopeArgs = { input?: Maybe; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationAuthenticateServiceAccountArgs = { input?: Maybe; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserArgs = { input: CreateUserInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserRoleArgs = { input: CreateUserRoleInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserRoleAssignmentArgs = { input: CreateUserRoleAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserRoleParentAssignmentArgs = { input: CreateUserRoleParentAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserRolePermissionAssignmentArgs = { input: CreateUserRolePermissionAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationCreateUserRoleTagAssignmentArgs = { input: CreateUserRoleTagAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserArgs = { input: DeleteUserInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRoleArgs = { input: DeleteUserRoleInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRoleAssignmentArgs = { input: DeleteUserRoleAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRoleParentAssignmentArgs = { input: DeleteUserRoleParentAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRolePermissionAssignmentArgs = { input: DeleteUserRolePermissionAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRolesArgs = { filter?: Maybe; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUserRoleTagAssignmentArgs = { input: DeleteUserRoleTagAssignmentInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDeleteUsersArgs = { filter?: Maybe; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDevDeleteServiceAccountArgs = { input: DevDeleteServiceAccountInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDevGenerateUserAccessTokenWithPermissionsArgs = { input: DevGenerateUserAccessTokenWithPermissionsInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDevSetupServiceAccountWithPermissionsArgs = { input: DevSetupServiceAccountWithPermissionsInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationDevUpdateServiceAccountPermissionStructureArgs = { input: DevUpdateServiceAccountPermissionStructureInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationGenerateLongLivedTokenArgs = { input: GenerateLongLivedTokenInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationPurgePermissionsArgs = { input: PurgePermissionsInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationRevokeRefreshTokenArgs = { userId: Scalars['UUID']; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationSynchronizePermissionsArgs = { input: SynchronizePermissionsInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationUpdateServiceAccountArgs = { input: UpdateServiceAccountInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationUpdateUserArgs = { input: UpdateUserInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationUpdateUserRoleArgs = { input: UpdateUserRoleInput; }; /** The root mutation type which contains root level fields which mutate data. */ export type MutationValidateCyclicUserRoleArgs = { input?: Maybe; }; /** Information about pagination in a connection. */ export type PageInfo = { __typename?: 'PageInfo'; /** When paginating forwards, the cursor to continue. */ endCursor?: Maybe; /** When paginating forwards, are there more items? */ hasNextPage: Scalars['Boolean']; /** When paginating backwards, are there more items? */ hasPreviousPage: Scalars['Boolean']; /** When paginating backwards, the cursor to continue. */ startCursor?: Maybe; }; export type Permission = { __typename?: 'Permission'; createdAt: Scalars['Datetime']; createdBy: Scalars['String']; environmentId: Scalars['UUID']; fromManagedService: Scalars['Boolean']; id: Scalars['UUID']; name: Scalars['String']; serviceId: Scalars['String']; tenantId: Scalars['UUID']; title: Scalars['String']; updatedAt: Scalars['Datetime']; updatedBy: Scalars['String']; usedByManagedServiceOnly: Scalars['Boolean']; usedForDevelopment: Scalars['Boolean']; /** Reads and enables pagination through a set of `UserRolePermissionAssignment`. */ userRolePermissionAssignments: UserRolePermissionAssignmentsConnection; }; export type PermissionUserRolePermissionAssignmentsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** * A condition to be used against `Permission` object types. All fields are tested * for equality and combined with a logical ‘and.’ */ export type PermissionCondition = { /** Checks for equality with the object’s `createdAt` field. */ createdAt?: Maybe; /** Checks for equality with the object’s `createdBy` field. */ createdBy?: Maybe; /** Checks for equality with the object’s `environmentId` field. */ environmentId?: Maybe; /** Checks for equality with the object’s `fromManagedService` field. */ fromManagedService?: Maybe; /** Checks for equality with the object’s `id` field. */ id?: Maybe; /** Checks for equality with the object’s `name` field. */ name?: Maybe; /** Checks for equality with the object’s `serviceId` field. */ serviceId?: Maybe; /** Checks for equality with the object’s `tenantId` field. */ tenantId?: Maybe; /** Checks for equality with the object’s `title` field. */ title?: Maybe; /** Checks for equality with the object’s `updatedAt` field. */ updatedAt?: Maybe; /** Checks for equality with the object’s `updatedBy` field. */ updatedBy?: Maybe; /** Checks for equality with the object’s `usedByManagedServiceOnly` field. */ usedByManagedServiceOnly?: Maybe; /** Checks for equality with the object’s `usedForDevelopment` field. */ usedForDevelopment?: Maybe; }; /** A filter to be used against `Permission` object types. All fields are combined with a logical ‘and.’ */ export type PermissionFilter = { /** Checks for all expressions in this list. */ and?: Maybe>; /** Filter by the object’s `createdAt` field. */ createdAt?: Maybe; /** Filter by the object’s `createdBy` field. */ createdBy?: Maybe; /** Filter by the object’s `environmentId` field. */ environmentId?: Maybe; /** Filter by the object’s `fromManagedService` field. */ fromManagedService?: Maybe; /** Filter by the object’s `id` field. */ id?: Maybe; /** Filter by the object’s `name` field. */ name?: Maybe; /** Negates the expression. */ not?: Maybe; /** Checks for any expressions in this list. */ or?: Maybe>; /** Filter by the object’s `serviceId` field. */ serviceId?: Maybe; /** Filter by the object’s `tenantId` field. */ tenantId?: Maybe; /** Filter by the object’s `title` field. */ title?: Maybe; /** Filter by the object’s `updatedAt` field. */ updatedAt?: Maybe; /** Filter by the object’s `updatedBy` field. */ updatedBy?: Maybe; /** Filter by the object’s `usedByManagedServiceOnly` field. */ usedByManagedServiceOnly?: Maybe; /** Filter by the object’s `usedForDevelopment` field. */ usedForDevelopment?: Maybe; /** Filter by the object’s `userRolePermissionAssignments` relation. */ userRolePermissionAssignments?: Maybe; /** Some related `userRolePermissionAssignments` exist. */ userRolePermissionAssignmentsExist?: Maybe; }; /** A connection to a list of `Permission` values. */ export type PermissionsConnection = { __typename?: 'PermissionsConnection'; /** A list of edges which contains the `Permission` and cursor to aid in pagination. */ edges: Array; /** A list of `Permission` objects. */ nodes: Array; /** Information to aid in pagination. */ pageInfo: PageInfo; /** The count of *all* `Permission` you could get from the connection. */ totalCount: Scalars['Int']; }; /** A `Permission` edge in the connection. */ export type PermissionsEdge = { __typename?: 'PermissionsEdge'; /** A cursor for use in pagination. */ cursor?: Maybe; /** The `Permission` at the end of the edge. */ node: Permission; }; /** Methods to use when ordering `Permission`. */ export enum PermissionsOrderBy { CREATED_AT_ASC = 'CREATED_AT_ASC', CREATED_AT_DESC = 'CREATED_AT_DESC', CREATED_BY_ASC = 'CREATED_BY_ASC', CREATED_BY_DESC = 'CREATED_BY_DESC', ENVIRONMENT_ID_ASC = 'ENVIRONMENT_ID_ASC', ENVIRONMENT_ID_DESC = 'ENVIRONMENT_ID_DESC', FROM_MANAGED_SERVICE_ASC = 'FROM_MANAGED_SERVICE_ASC', FROM_MANAGED_SERVICE_DESC = 'FROM_MANAGED_SERVICE_DESC', ID_ASC = 'ID_ASC', ID_DESC = 'ID_DESC', NAME_ASC = 'NAME_ASC', NAME_DESC = 'NAME_DESC', NATURAL = 'NATURAL', PRIMARY_KEY_ASC = 'PRIMARY_KEY_ASC', PRIMARY_KEY_DESC = 'PRIMARY_KEY_DESC', SERVICE_ID_ASC = 'SERVICE_ID_ASC', SERVICE_ID_DESC = 'SERVICE_ID_DESC', TENANT_ID_ASC = 'TENANT_ID_ASC', TENANT_ID_DESC = 'TENANT_ID_DESC', TITLE_ASC = 'TITLE_ASC', TITLE_DESC = 'TITLE_DESC', UPDATED_AT_ASC = 'UPDATED_AT_ASC', UPDATED_AT_DESC = 'UPDATED_AT_DESC', UPDATED_BY_ASC = 'UPDATED_BY_ASC', UPDATED_BY_DESC = 'UPDATED_BY_DESC', USED_BY_MANAGED_SERVICE_ONLY_ASC = 'USED_BY_MANAGED_SERVICE_ONLY_ASC', USED_BY_MANAGED_SERVICE_ONLY_DESC = 'USED_BY_MANAGED_SERVICE_ONLY_DESC', USED_FOR_DEVELOPMENT_ASC = 'USED_FOR_DEVELOPMENT_ASC', USED_FOR_DEVELOPMENT_DESC = 'USED_FOR_DEVELOPMENT_DESC' } export type PermissionStructure = { permissions: Array>; serviceId: Scalars['String']; }; /** A filter to be used against many `UserRolePermissionAssignment` object types. All fields are combined with a logical ‘and.’ */ export type PermissionToManyUserRolePermissionAssignmentFilter = { /** Every related `UserRolePermissionAssignment` matches the filter criteria. All fields are combined with a logical ‘and.’ */ every?: Maybe; /** No related `UserRolePermissionAssignment` matches the filter criteria. All fields are combined with a logical ‘and.’ */ none?: Maybe; /** Some related `UserRolePermissionAssignment` matches the filter criteria. All fields are combined with a logical ‘and.’ */ some?: Maybe; }; export type PurgePermissionsInput = { serviceId: Scalars['String']; }; export type PurgePermissionsPayload = { __typename?: 'PurgePermissionsPayload'; purged: Array>; }; /** The root query type which gives access points into the data universe. */ export type Query = { __typename?: 'Query'; /** Reads and enables pagination through a set of `ActivePermission`. */ activePermissions?: Maybe; /** Retrieve enabled managed services for an environment */ enabledManagedServices: Array; getUserRoleTagValues?: Maybe; permission?: Maybe; /** Reads and enables pagination through a set of `Permission`. */ permissions?: Maybe; /** * Exposes the root query type nested one level down. This is helpful for Relay 1 * which can only query top level fields if they are in a particular form. */ query: Query; user?: Maybe; userRole?: Maybe; /** Reads and enables pagination through a set of `UserRoleInheritedPermission`. */ userRoleAllPermissionAssignments?: Maybe; userRoleAssignment?: Maybe; /** Reads and enables pagination through a set of `UserRoleAssignment`. */ userRoleAssignments?: Maybe; userRoleParentAssignment?: Maybe; /** Reads and enables pagination through a set of `UserRoleParentAssignment`. */ userRoleParentAssignments?: Maybe; userRolePermissionAssignment?: Maybe; /** Reads and enables pagination through a set of `UserRolePermissionAssignment`. */ userRolePermissionAssignments?: Maybe; /** Reads and enables pagination through a set of `UserRole`. */ userRoles?: Maybe; userRoleTagAssignment?: Maybe; /** Reads and enables pagination through a set of `UserRoleTagAssignment`. */ userRoleTagAssignments?: Maybe; /** Reads and enables pagination through a set of `User`. */ users?: Maybe; /** Reads and enables pagination through a set of `User`. */ usersWithUserRoleFilter?: Maybe; }; /** The root query type which gives access points into the data universe. */ export type QueryActivePermissionsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryGetUserRoleTagValuesArgs = { after?: Maybe; before?: Maybe; exclusionList?: Maybe>>; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; searchText?: Maybe; }; /** The root query type which gives access points into the data universe. */ export type QueryPermissionArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryPermissionsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUserArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleAllPermissionAssignmentsArgs = { after?: Maybe; before?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; userRoleId?: Maybe; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleAssignmentArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleAssignmentsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleParentAssignmentArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleParentAssignmentsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRolePermissionAssignmentArgs = { id: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRolePermissionAssignmentsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRolesArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleTagAssignmentArgs = { environmentId: Scalars['UUID']; tag: Scalars['String']; tenantId: Scalars['UUID']; userRoleId: Scalars['UUID']; }; /** The root query type which gives access points into the data universe. */ export type QueryUserRoleTagAssignmentsArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUsersArgs = { after?: Maybe; before?: Maybe; condition?: Maybe; filter?: Maybe; first?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; /** The root query type which gives access points into the data universe. */ export type QueryUsersWithUserRoleFilterArgs = { after?: Maybe; before?: Maybe; excludeRoles?: Maybe>>; excludeRolesIncludeInherited?: Maybe; filter?: Maybe; first?: Maybe; includeRoles?: Maybe>>; includeRolesIncludeInherited?: Maybe; last?: Maybe; offset?: Maybe; orderBy?: Maybe>; }; export type RevokeRefreshTokenPayload = { __typename?: 'RevokeRefreshTokenPayload'; revokedRefreshTokenCount: Scalars['Int']; }; export type SetupDevBasicDataInput = { /** Email given here will be setup as the tenant administrator email, as well as user administrator email. */ adminEmail: Scalars['String']; /** Password given here will be setup as the tenant administrator password. */ adminPassword: Scalars['String']; /** Optional Environment ID to generate basic data with. If not specified will default to configured dev value. */ environmentId?: Maybe; /** environmentTemplateId */ environmentTemplateId: Scalars['String']; /** Google IDP Configuration - Client ID. */ googleClientId: Scalars['String']; /** Google IDP Configuration - Client Secret. */ googleClientSecret: Scalars['String']; /** Optional tenant ID to generate basic data with. If not specified will default to configured dev value. */ tenantId?: Maybe; }; export type SetupDevBasicDataPayload = { __typename?: 'SetupDevBasicDataPayload'; /** Development Environment ID to be used in ID Service integration. */ environmentId: Scalars['String']; /** Development Tenant ID to be used in ID Service integration. */ tenantId: Scalars['String']; }; /** A filter to be used against String fields. All fields are combined with a logical ‘and.’ */ export type StringFilter = { /** Not equal to the specified value, treating null like an ordinary value. */ distinctFrom?: Maybe; /** Not equal to the specified value, treating null like an ordinary value (case-insensitive). */ distinctFromInsensitive?: Maybe; /** Ends with the specified string (case-sensitive). */ endsWith?: Maybe; /** Ends with the specified string (case-insensitive). */ endsWithInsensitive?: Maybe; /** Equal to the specified value. */ equalTo?: Maybe; /** Equal to the specified value (case-insensitive). */ equalToInsensitive?: Maybe; /** Greater than the specified value. */ greaterThan?: Maybe; /** Greater than the specified value (case-insensitive). */ greaterThanInsensitive?: Maybe; /** Greater than or equal to the specified value. */ greaterThanOrEqualTo?: Maybe; /** Greater than or equal to the specified value (case-insensitive). */ greaterThanOrEqualToInsensitive?: Maybe; /** Included in the specified list. */ in?: Maybe>; /** Contains the specified string (case-sensitive). */ includes?: Maybe; /** Contains the specified string (case-insensitive). */ includesInsensitive?: Maybe; /** Included in the specified list (case-insensitive). */ inInsensitive?: Maybe>; /** Is null (if `true` is specified) or is not null (if `false` is specified). */ isNull?: Maybe; /** Less than the specified value. */ lessThan?: Maybe; /** Less than the specified value (case-insensitive). */ lessThanInsensitive?: Maybe; /** Less than or equal to the specified value. */ lessThanOrEqualTo?: Maybe; /** Less than or equal to the specified value (case-insensitive). */ lessThanOrEqualToInsensitive?: Maybe; /** Matches the specified pattern (case-sensitive). An underscore (_) matches any single character; a percent sign (%) matches any sequence of zero or more characters. */ like?: Maybe; /** Matches the specified pattern (case-insensitive). An underscore (_) matches any single character; a percent sign (%) matches any sequence of zero or more characters. */ likeInsensitive?: Maybe; /** Equal to the specified value, treating null like an ordinary value. */ notDistinctFrom?: Maybe; /** Equal to the specified value, treating null like an ordinary value (case-insensitive). */ notDistinctFromInsensitive?: Maybe; /** Does not end with the specified string (case-sensitive). */ notEndsWith?: Maybe; /** Does not end with the specified string (case-insensitive). */ notEndsWithInsensitive?: Maybe; /** Not equal to the specified value. */ notEqualTo?: Maybe; /** Not equal to the specified value (case-insensitive). */ notEqualToInsensitive?: Maybe