From bb657d2815d9b8d0a265df9092a4c8b3ddc94695 Mon Sep 17 00:00:00 2001
From: "ci.datadog-api-spec" <packages@datadoghq.com>
Date: Fri, 23 Oct 2026 15:10:10 +0000
Subject: [PATCH] Regenerate client from commit 9144799 of spec repo

---
 .generator/schemas/v2/openapi.yaml                        | 5 +++++
 src/main/java/com/datadog/api/client/v2/api/RolesApi.java | 6 ++++++
 2 files changed, 11 insertions(+)

diff --git a/.generator/schemas/v2/openapi.yaml b/.generator/schemas/v2/openapi.yaml
index 96bcf5becc2..8ccedceb88d 100644
--- a/.generator/schemas/v2/openapi.yaml
+++ b/.generator/schemas/v2/openapi.yaml
@@ -216523,6 +216523,11 @@ paths:
         [Restricted permissions](https://docs.datadoghq.com/account_management/rbac/permissions/#restricted-permissions),
         such as Dashboards Read and Monitors Read, remain on the role by default, even if they are omitted from
         the request. To exclude them, set `default_permissions_opt_out` to `true`.
+
+        Omitting the `permissions` relationship from the request leaves the role's existing permissions
+        unchanged. Sending `"permissions": {"data": []}` removes all permissions except restricted default
+        permissions, which remain unless `default_permissions_opt_out` is `true`. Some restricted permissions
+        can only be excluded after Minimal Access Roles is enabled for the organization.
       operationId: UpdateRole
       parameters:
         - $ref: "#/components/parameters/RoleID"
diff --git a/src/main/java/com/datadog/api/client/v2/api/RolesApi.java b/src/main/java/com/datadog/api/client/v2/api/RolesApi.java
index 32d54be97e9..42964e922e4 100644
--- a/src/main/java/com/datadog/api/client/v2/api/RolesApi.java
+++ b/src/main/java/com/datadog/api/client/v2/api/RolesApi.java
@@ -2185,6 +2185,12 @@ public CompletableFuture<RoleUpdateResponse> updateRoleAsync(
    * if they are omitted from the request. To exclude them, set <code>default_permissions_opt_out
    * </code> to <code>true</code>.
    *
+   * <p>Omitting the <code>permissions</code> relationship from the request leaves the role's
+   * existing permissions unchanged. Sending <code>"permissions": {"data": []}</code> removes all
+   * permissions except restricted default permissions, which remain unless <code>
+   * default_permissions_opt_out</code> is <code>true</code>. Some restricted permissions can only
+   * be excluded after Minimal Access Roles is enabled for the organization.
+   *
    * @param roleId The unique identifier of the role. (required)
    * @param body (required)
    * @return ApiResponse&lt;RoleUpdateResponse&gt;