{"resources":{"bitwarden":{"id":"bitwarden","name":"bitwarden","fields":{"collection":{"name":"collection","type":"\u001bbitwarden.collection","title":"Bitwarden collection","desc":"A named grouping of vault items shared with specific members and groups. Only the sharing structure is exposed here (which groups and members can reach the collection, and with what permissions); the items inside a collection are not.","provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"collectionGroupAccess":{"name":"collectionGroupAccess","type":"\u001bbitwarden.collectionGroupAccess","title":"Bitwarden collection permission grant for a group","desc":"The permission a single group holds on a single collection: the readOnly, hidePasswords, and manage flags the organization API records for that group-to-collection grant, with typed references to both the collection and the group. Every member of the group inherits this permission on the collection.","is_private":true,"provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"collectionMemberAccess":{"name":"collectionMemberAccess","type":"\u001bbitwarden.collectionMemberAccess","title":"Bitwarden collection permission grant for a member","desc":"The permission a single member holds on a single collection: the readOnly, hidePasswords, and manage flags the organization API records for that member-to-collection grant, with typed references to both the collection and the member. Use it to audit who can manage a collection, or which members can read a sensitive collection's item passwords.","is_private":true,"provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"collections":{"name":"collections","type":"\u0019\u001bbitwarden.collection","title":"Collections used to group and share vault items","provider":"go.mondoo.com/mql/providers/bitwarden"},"group":{"name":"group","type":"\u001bbitwarden.group","title":"Bitwarden group","desc":"A named set of members used to assign collection access in bulk, as an alternative to granting each member individually. The `name` field is the natural selection key, for example `bitwarden.groups.where(name == \"Engineering\")`.","provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"groups":{"name":"groups","type":"\u0019\u001bbitwarden.group","title":"Groups used to assign collection access to multiple members at once","provider":"go.mondoo.com/mql/providers/bitwarden"},"member":{"name":"member","type":"\u001bbitwarden.member","title":"Bitwarden organization member","desc":"A user's membership in the organization: their role, invitation status, and security posture. The `email` field is the member's invited or confirmed email address and is the natural selection key, for example `bitwarden.members.where(email == \"user@example.com\")`.","provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"members":{"name":"members","type":"\u0019\u001bbitwarden.member","title":"Members of the organization","provider":"go.mondoo.com/mql/providers/bitwarden"},"organization":{"name":"organization","type":"\u001bbitwarden.organization","title":"Bitwarden organization","desc":"Account-level settings for the organization the connection authenticates as: its name, seat allocation, and whether single sign-on or two-step login are available to it. The `id` field is the organization's UUID, the same value embedded in the `organization.\u003cuuid\u003e` client ID used to authenticate.","provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"},"policies":{"name":"policies","type":"\u0019\u001bbitwarden.policy","title":"Security policies configured for the organization","provider":"go.mondoo.com/mql/providers/bitwarden"},"policy":{"name":"policy","type":"\u001bbitwarden.policy","title":"Bitwarden organization security policy","desc":"A single organization-wide security policy as exposed by the Bitwarden Public API. The `policyType` field selects which control this policy enforces, for example `masterPassword`, `twoFactorAuthentication`, `requireSso`, `singleOrg`, `organizationDataOwnership` (personal-vault-ownership restriction), `sendOptions`, `passwordGenerator`, or `disablePersonalVaultExport`. The `enabled` field is the on/off switch; `data` carries the policy-specific configuration, whose shape depends on `policyType`: `masterPassword` carries `minComplexity`, `minLength`, `requireUpper`, `requireLower`, `requireNumbers`, and `requireSpecial`; `sendOptions` carries `disableHideEmail`; `resetPassword` carries `autoEnrollEnabled`; other types carry an empty object.","provider":"go.mondoo.com/mql/providers/bitwarden","is_implicit_resource":true,"maturity":"experimental"}},"title":"Bitwarden organization","desc":"The root resource for a Bitwarden Teams or Enterprise organization, reached through an organization API key. It exposes governance state only: the organization's own settings, its security policies, its members, and the collections and groups used to structure vault access. Vault item contents, folders, and Send payloads are never read by this provider; the Bitwarden Public API this provider talks to has no endpoint for them.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.collection":{"id":"bitwarden.collection","name":"bitwarden.collection","fields":{"externalId":{"name":"externalId","type":"\u0007","is_mandatory":true,"title":"External identifier from a directory sync (SCIM) integration","provider":"go.mondoo.com/mql/providers/bitwarden"},"groupAccess":{"name":"groupAccess","type":"\u0019\u001bbitwarden.collectionGroupAccess","title":"Per-group permission grants on this collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"groups":{"name":"groups","type":"\u0019\u001bbitwarden.group","title":"Groups granted access to this collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Collection UUID","provider":"go.mondoo.com/mql/providers/bitwarden"},"memberAccess":{"name":"memberAccess","type":"\u0019\u001bbitwarden.collectionMemberAccess","title":"Per-member permission grants on this collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"members":{"name":"members","type":"\u0019\u001bbitwarden.member","title":"Members granted explicit access to this collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Collection name","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden collection","desc":"A named grouping of vault items shared with specific members and groups. Only the sharing structure is exposed here (which groups and members can reach the collection, and with what permissions); the items inside a collection are not.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.collectionGroupAccess":{"id":"bitwarden.collectionGroupAccess","name":"bitwarden.collectionGroupAccess","fields":{"collection":{"name":"collection","type":"\u001bbitwarden.collection","title":"Collection the grant applies to","provider":"go.mondoo.com/mql/providers/bitwarden"},"group":{"name":"group","type":"\u001bbitwarden.group","title":"Group the grant is for","provider":"go.mondoo.com/mql/providers/bitwarden"},"hidePasswords":{"name":"hidePasswords","type":"\u0004","is_mandatory":true,"title":"Whether item passwords are hidden from the group's members","provider":"go.mondoo.com/mql/providers/bitwarden"},"manage":{"name":"manage","type":"\u0004","is_mandatory":true,"title":"Whether the group can manage access to the collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the group has read-only access and cannot edit items","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden collection permission grant for a group","desc":"The permission a single group holds on a single collection: the readOnly, hidePasswords, and manage flags the organization API records for that group-to-collection grant, with typed references to both the collection and the group. Every member of the group inherits this permission on the collection.","private":true,"min_provider_version":"13.0.0","defaults":"readOnly hidePasswords manage","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.collectionMemberAccess":{"id":"bitwarden.collectionMemberAccess","name":"bitwarden.collectionMemberAccess","fields":{"collection":{"name":"collection","type":"\u001bbitwarden.collection","title":"Collection the grant applies to","provider":"go.mondoo.com/mql/providers/bitwarden"},"hidePasswords":{"name":"hidePasswords","type":"\u0004","is_mandatory":true,"title":"Whether item passwords are hidden from the member","provider":"go.mondoo.com/mql/providers/bitwarden"},"manage":{"name":"manage","type":"\u0004","is_mandatory":true,"title":"Whether the member can manage access to the collection","provider":"go.mondoo.com/mql/providers/bitwarden"},"member":{"name":"member","type":"\u001bbitwarden.member","title":"Member the grant is for","provider":"go.mondoo.com/mql/providers/bitwarden"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the member has read-only access and cannot edit items","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden collection permission grant for a member","desc":"The permission a single member holds on a single collection: the readOnly, hidePasswords, and manage flags the organization API records for that member-to-collection grant, with typed references to both the collection and the member. Use it to audit who can manage a collection, or which members can read a sensitive collection's item passwords.","private":true,"min_provider_version":"13.0.0","defaults":"readOnly hidePasswords manage","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.group":{"id":"bitwarden.group","name":"bitwarden.group","fields":{"accessAll":{"name":"accessAll","type":"\u0004","is_mandatory":true,"title":"Whether members of this group have access to all collections","provider":"go.mondoo.com/mql/providers/bitwarden"},"collectionAccess":{"name":"collectionAccess","type":"\u0019\u001bbitwarden.collectionGroupAccess","title":"Per-collection permission grants held by this group","provider":"go.mondoo.com/mql/providers/bitwarden"},"collections":{"name":"collections","type":"\u0019\u001bbitwarden.collection","title":"Collections this group has access to","provider":"go.mondoo.com/mql/providers/bitwarden"},"externalId":{"name":"externalId","type":"\u0007","is_mandatory":true,"title":"External identifier from a directory sync (SCIM) integration","provider":"go.mondoo.com/mql/providers/bitwarden"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Group UUID","provider":"go.mondoo.com/mql/providers/bitwarden"},"members":{"name":"members","type":"\u0019\u001bbitwarden.member","title":"Members belonging to this group","provider":"go.mondoo.com/mql/providers/bitwarden"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Group name","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden group","desc":"A named set of members used to assign collection access in bulk, as an alternative to granting each member individually. The `name` field is the natural selection key, for example `bitwarden.groups.where(name == \"Engineering\")`.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.member":{"id":"bitwarden.member","name":"bitwarden.member","fields":{"accessAllCollections":{"name":"accessAllCollections","type":"\u0004","is_mandatory":true,"title":"Whether the member has access to all collections","provider":"go.mondoo.com/mql/providers/bitwarden"},"collectionAccess":{"name":"collectionAccess","type":"\u0019\u001bbitwarden.collectionMemberAccess","title":"Per-collection permission grants held by this member","provider":"go.mondoo.com/mql/providers/bitwarden"},"collections":{"name":"collections","type":"\u0019\u001bbitwarden.collection","title":"Collections the member has explicit access to","provider":"go.mondoo.com/mql/providers/bitwarden"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Email address","provider":"go.mondoo.com/mql/providers/bitwarden"},"externalId":{"name":"externalId","type":"\u0007","is_mandatory":true,"title":"External identifier from a directory sync (SCIM) integration","provider":"go.mondoo.com/mql/providers/bitwarden"},"groups":{"name":"groups","type":"\u0019\u001bbitwarden.group","title":"Groups the member belongs to","provider":"go.mondoo.com/mql/providers/bitwarden"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Member UUID","provider":"go.mondoo.com/mql/providers/bitwarden"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/mql/providers/bitwarden"},"resetPasswordEnrolled":{"name":"resetPasswordEnrolled","type":"\u0004","is_mandatory":true,"title":"Whether the member is enrolled in admin password reset","provider":"go.mondoo.com/mql/providers/bitwarden"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Organization role","desc":"One of owner, admin, user, manager, or custom.","provider":"go.mondoo.com/mql/providers/bitwarden"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Invitation and confirmation status","desc":"One of invited, accepted, confirmed, staged, or revoked. Only confirmed members have completed enrollment and hold working access to shared collections; invited and accepted members are mid-onboarding.","provider":"go.mondoo.com/mql/providers/bitwarden"},"twoFactorEnabled":{"name":"twoFactorEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the member has two-factor authentication enabled","provider":"go.mondoo.com/mql/providers/bitwarden"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"Underlying Bitwarden user ID, null until the invitation is accepted","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden organization member","desc":"A user's membership in the organization: their role, invitation status, and security posture. The `email` field is the member's invited or confirmed email address and is the natural selection key, for example `bitwarden.members.where(email == \"user@example.com\")`.","min_provider_version":"13.0.0","defaults":"email role status","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.organization":{"id":"bitwarden.organization","name":"bitwarden.organization","fields":{"businessName":{"name":"businessName","type":"\u0007","is_mandatory":true,"title":"Business name shown on the subscription","provider":"go.mondoo.com/mql/providers/bitwarden"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the organization is enabled (not suspended or disabled)","provider":"go.mondoo.com/mql/providers/bitwarden"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Organization UUID","provider":"go.mondoo.com/mql/providers/bitwarden"},"maxCollections":{"name":"maxCollections","type":"\u0005","is_mandatory":true,"title":"Maximum number of collections allowed, or null if unlimited","provider":"go.mondoo.com/mql/providers/bitwarden"},"maxStorageGb":{"name":"maxStorageGb","type":"\u0005","is_mandatory":true,"title":"Maximum storage in gigabytes allowed, or null if unlimited","provider":"go.mondoo.com/mql/providers/bitwarden"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name","provider":"go.mondoo.com/mql/providers/bitwarden"},"occupiedSeats":{"name":"occupiedSeats","type":"\u0005","is_mandatory":true,"title":"Number of seats currently occupied by confirmed or invited members","provider":"go.mondoo.com/mql/providers/bitwarden"},"planName":{"name":"planName","type":"\u0007","is_mandatory":true,"title":"Subscription plan name (e.g. \"Teams (Annually)\", \"Enterprise (Annually)\")","provider":"go.mondoo.com/mql/providers/bitwarden"},"seats":{"name":"seats","type":"\u0005","is_mandatory":true,"title":"Number of seats purchased for the organization","provider":"go.mondoo.com/mql/providers/bitwarden"},"use2fa":{"name":"use2fa","type":"\u0004","is_mandatory":true,"title":"Whether the organization has two-step login (2FA) available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useApi":{"name":"useApi","type":"\u0004","is_mandatory":true,"title":"Whether the organization has API access available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useDirectory":{"name":"useDirectory","type":"\u0004","is_mandatory":true,"title":"Whether the organization has directory sync (SCIM) available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useEvents":{"name":"useEvents","type":"\u0004","is_mandatory":true,"title":"Whether the organization has event logging available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useGroups":{"name":"useGroups","type":"\u0004","is_mandatory":true,"title":"Whether the organization has group-based access management available","provider":"go.mondoo.com/mql/providers/bitwarden"},"usePolicies":{"name":"usePolicies","type":"\u0004","is_mandatory":true,"title":"Whether the organization has policy enforcement available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useResetPassword":{"name":"useResetPassword","type":"\u0004","is_mandatory":true,"title":"Whether reset password enrollment is available for members","provider":"go.mondoo.com/mql/providers/bitwarden"},"useSend":{"name":"useSend","type":"\u0004","is_mandatory":true,"title":"Whether the organization has Bitwarden Send available","provider":"go.mondoo.com/mql/providers/bitwarden"},"useSso":{"name":"useSso","type":"\u0004","is_mandatory":true,"title":"Whether the organization has single sign-on available","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden organization","desc":"Account-level settings for the organization the connection authenticates as: its name, seat allocation, and whether single sign-on or two-step login are available to it. The `id` field is the organization's UUID, the same value embedded in the `organization.\u003cuuid\u003e` client ID used to authenticate.","min_provider_version":"13.0.0","defaults":"name seats useSso use2fa","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"},"bitwarden.policy":{"id":"bitwarden.policy","name":"bitwarden.policy","fields":{"data":{"name":"data","type":"\n","is_mandatory":true,"title":"Policy-specific configuration, shaped by policyType","provider":"go.mondoo.com/mql/providers/bitwarden"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the policy is enabled","provider":"go.mondoo.com/mql/providers/bitwarden"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy UUID","provider":"go.mondoo.com/mql/providers/bitwarden"},"policyType":{"name":"policyType","type":"\u0007","is_mandatory":true,"title":"Policy type","desc":"One of masterPassword, twoFactorAuthentication, passwordGenerator, singleOrg, requireSso, organizationDataOwnership (the current name for what the Bitwarden UI still labels personal ownership), disableSend, sendOptions, resetPassword, maximumVaultTimeout, disablePersonalVaultExport, activateAutofill, automaticAppLogIn, freeFamiliesSponsorshipPolicy, removeUnlockWithPin, restrictedItemTypesPolicy, uriMatchDefaults, autotypeDefaultSetting, automaticUserConfirmation, blockClaimedDomainAccountCreation, organizationUserNotification, sendControls, or fillAssist.","provider":"go.mondoo.com/mql/providers/bitwarden"}},"title":"Bitwarden organization security policy","desc":"A single organization-wide security policy as exposed by the Bitwarden Public API. The `policyType` field selects which control this policy enforces, for example `masterPassword`, `twoFactorAuthentication`, `requireSso`, `singleOrg`, `organizationDataOwnership` (personal-vault-ownership restriction), `sendOptions`, `passwordGenerator`, or `disablePersonalVaultExport`. The `enabled` field is the on/off switch; `data` carries the policy-specific configuration, whose shape depends on `policyType`: `masterPassword` carries `minComplexity`, `minLength`, `requireUpper`, `requireLower`, `requireNumbers`, and `requireSpecial`; `sendOptions` carries `disableHideEmail`; `resetPassword` carries `autoEnrollEnabled`; other types carry an empty object.","min_provider_version":"13.0.0","defaults":"policyType enabled","provider":"go.mondoo.com/mql/providers/bitwarden","maturity":"experimental"}}}