{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/mongodb/main/json-schema/mongodb-org-paginated-event-view-schema.json",
  "title": "OrgPaginatedEventView",
  "x-generated": "2026-10-03",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/mongodb-events-api-openapi.yml#/components/schemas/OrgPaginatedEventView",
  "properties": {
    "links": {
      "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
      "items": {
        "$ref": "#/$defs/Link"
      },
      "readOnly": true,
      "type": "array"
    },
    "results": {
      "description": "List of returned documents that MongoDB Cloud provides when completing this request.",
      "items": {
        "$ref": "#/$defs/EventViewForOrg"
      },
      "readOnly": true,
      "type": "array"
    },
    "totalCount": {
      "description": "Total number of documents available. MongoDB Cloud omits this value if `includeCount` is set to `false`. The total number is an estimate and may not be exact.",
      "format": "int32",
      "minimum": 0,
      "readOnly": true,
      "type": "integer"
    }
  },
  "required": [
    "results"
  ],
  "type": "object",
  "$defs": {
    "AlertAudit": {
      "description": "Alert audit indicates acknowledgement status of an alert.",
      "properties": {
        "alertId": {
          "description": "Unique 24-hexadecimal digit string that identifies the alert associated with the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/AlertAuditTypeView"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Alert Audits",
      "type": "object"
    },
    "AlertAuditTypeView": {
      "description": "Unique identifier of event type.",
      "enum": [
        "ALERT_ACKNOWLEDGED_AUDIT",
        "ALERT_UNACKNOWLEDGED_AUDIT"
      ],
      "title": "Alert Audit Types",
      "type": "string"
    },
    "AlertConfigAudit": {
      "description": "Alert configuration audit indicates any activities around alert settings.",
      "properties": {
        "alertConfigId": {
          "description": "Unique 24-hexadecimal digit string that identifies the alert configuration associated with the `alertId`.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/AlertConfigAuditTypeView"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Alert Config Audits",
      "type": "object"
    },
    "AlertConfigAuditTypeView": {
      "description": "Unique identifier of event type.",
      "enum": [
        "ALERT_CONFIG_DISABLED_AUDIT",
        "ALERT_CONFIG_ENABLED_AUDIT",
        "ALERT_CONFIG_ADDED_AUDIT",
        "ALERT_CONFIG_DELETED_AUDIT",
        "ALERT_CONFIG_CHANGED_AUDIT"
      ],
      "title": "Alert Audit Types",
      "type": "string"
    },
    "ApiUserEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "API_KEY_CREATED",
        "API_KEY_DELETED",
        "API_KEY_ACCESS_LIST_ENTRY_ADDED",
        "API_KEY_ACCESS_LIST_ENTRY_DELETED",
        "API_KEY_ROLES_CHANGED",
        "API_KEY_DESCRIPTION_CHANGED",
        "API_KEY_ADDED_TO_GROUP",
        "API_KEY_REMOVED_FROM_GROUP",
        "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED",
        "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED"
      ],
      "title": "API User Event Types",
      "type": "string"
    },
    "ApiUserEventViewForOrg": {
      "description": "API User event identifies different activities around user API keys.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/ApiUserEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "targetPublicKey": {
          "description": "Public part of the API key that this event targets.",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        },
        "whitelistEntry": {
          "description": "Entry in the list of source host addresses that the API key accepts and this event targets.",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "API User Events",
      "type": "object"
    },
    "AtlasResourcePolicyAuditForOrg": {
      "description": "Atlas resource policy audits indicate organization level changes to resource policies.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "description": "Unique identifier of event type.",
          "enum": [
            "RESOURCE_POLICY_CREATED",
            "RESOURCE_POLICY_MODIFIED",
            "RESOURCE_POLICY_DELETED",
            "RESOURCE_POLICY_VIOLATED"
          ],
          "title": "Atlas Resource Policy Audit Types",
          "type": "string"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "resourcePolicyId": {
          "description": "Unique 24-hexadecimal character string that identifies the resource policy.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Atlas Resource Policy Audits",
      "type": "object"
    },
    "BillingEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "AWS_PAYMENT_PAID",
        "CHARGE_SUCCEEDED",
        "CHARGE_FAILED",
        "CHARGE_PROCESSING",
        "CHARGE_PENDING_REVERSAL",
        "BRAINTREE_CHARGE_FAILED",
        "INVOICE_CLOSED",
        "CHECK_PAYMENT_RECEIVED",
        "WIRE_TRANSFER_PAYMENT_RECEIVED",
        "DISCOUNT_APPLIED",
        "CREDIT_ISSUED",
        "CREDIT_PULLED_FWD",
        "CREDIT_END_DATE_MODIFIED",
        "PROMO_CODE_APPLIED",
        "PAYMENT_FORGIVEN",
        "REFUND_ISSUED",
        "ACCOUNT_DOWNGRADED",
        "ACCOUNT_UPGRADED",
        "ACCOUNT_MODIFIED",
        "SUPPORT_PLAN_ACTIVATED",
        "SUPPORT_PLAN_CANCELLED",
        "SUPPORT_PLAN_CANCELLATION_SCHEDULED",
        "INITIATE_SALESFORCE_SERVICE_CLOUD_SYNC",
        "INVOICE_ADDRESS_CHANGED",
        "INVOICE_ADDRESS_ADDED",
        "PREPAID_PLAN_ACTIVATED",
        "ELASTIC_INVOICING_MODE_ACTIVATED",
        "ELASTIC_INVOICING_MODE_DEACTIVATED",
        "TERMINATE_PAID_SERVICES",
        "BILLING_EMAIL_ADDRESS_ADDED",
        "BILLING_EMAIL_ADDRESS_CHANGED",
        "BILLING_EMAIL_ADDRESS_REMOVED",
        "AWS_BILLING_ACCOUNT_CREDIT_ISSUED",
        "GCP_BILLING_ACCOUNT_CREDIT_ISSUED",
        "CREDIT_SFOLID_MODIFIED",
        "PREPAID_PLAN_MODIFIED",
        "AWS_USAGE_REPORTED",
        "AZURE_USAGE_REPORTED",
        "GCP_USAGE_REPORTED",
        "VERCEL_USAGE_REPORTED",
        "BECAME_PAYING_ORG",
        "BECAME_LINKED_ORG",
        "NEW_LINKED_ORG",
        "UNLINKED_ORG",
        "ORG_LINKED_TO_PAYING_ORG",
        "ORG_UNLINKED_FROM_PAYING_ORG",
        "ORG_UNLINK_REQUESTED",
        "ORG_UNLINK_CANCELLED",
        "PAYMENT_UPDATED_THROUGH_API",
        "AZURE_BILLING_ACCOUNT_CREDIT_ISSUED",
        "CREDIT_START_DATE_MODIFIED",
        "CREDIT_ELASTIC_INVOICING_MODIFIED",
        "CREDIT_TYPE_MODIFIED",
        "CREDIT_AMOUNT_CENTS_MODIFIED",
        "CREDIT_AMOUNT_REMAINING_CENTS_MODIFIED",
        "CREDIT_TOTAL_BILLED_CENTS_MODIFIED",
        "CREDIT_AWS_CUSTOMER_ID_MODIFIED",
        "CREDIT_AWS_PRODUCT_CODE_MODIFIED",
        "CREDIT_GCP_MARKETPLACE_ENTITLEMENT_ID_MODIFIED",
        "CREDIT_AZURE_SUBSCRIPTION_ID_MODIFIED",
        "CREDIT_AZURE_PRIVATE_PLAN_ID_MODIFIED",
        "TARGETED_REBILL_EXECUTED",
        "LEGACY_REBILL_EXECUTED",
        "EVERGREEN_DEAL_CANCELLED",
        "GRACE_PERIOD_ACTIVATED",
        "GRACE_PERIOD_NO_LONGER_IN_EFFECT",
        "PENDING_DEAL_ACTIVATION_ADDED",
        "PENDING_DEAL_ACTIVATION_CANCELED",
        "PENDING_DEAL_APPLIED",
        "PENDING_DEAL_ACTIVATION_FAILED",
        "EVERGREEN_PRIORITY_MODIFIED",
        "CROSS_ORG_OPERATION_TICKET_TRACKING",
        "ADMIN_OVERRIDE_PAYMENT_METHOD_DELETED",
        "ADMIN_OVERRIDE_PAYMENT_METHOD_EXPIRED",
        "PAYMENT_METHOD_FLAGGED",
        "PAYMENT_METHOD_UNFLAGGED",
        "MARKETPLACE_REFUND_ISSUED",
        "PAYMENT_DUE_DATE_EXTENDED"
      ],
      "title": "Billing Event Types",
      "type": "string"
    },
    "BillingEventViewForOrg": {
      "description": "Billing event identifies different activities related to billing, payment or financial status change of an organization.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/BillingEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "invoiceId": {
          "description": "Unique 24-hexadecimal digit string that identifies of the invoice associated with the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "paymentId": {
          "description": "Unique 24-hexadecimal digit string that identifies the invoice payment associated with this event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Billing Events",
      "type": "object"
    },
    "DefaultEventViewForOrg": {
      "description": "Other events which don't have extra details beside of basic one.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "description": "Unique identifier of event type.",
          "oneOf": [
            {
              "enum": [
                "FEDERATION_SETTINGS_CREATED",
                "FEDERATION_SETTINGS_DELETED",
                "FEDERATION_SETTINGS_UPDATED",
                "IDENTITY_PROVIDER_CREATED",
                "IDENTITY_PROVIDER_UPDATED",
                "IDENTITY_PROVIDER_DELETED",
                "IDENTITY_PROVIDER_ACTIVATED",
                "OIDC_IDENTITY_PROVIDER_UPDATED",
                "IDENTITY_PROVIDER_DEACTIVATED",
                "IDENTITY_PROVIDER_JWKS_REVOKED",
                "OIDC_IDENTITY_PROVIDER_ENABLED",
                "OIDC_IDENTITY_PROVIDER_DISABLED",
                "DOMAINS_ASSOCIATED",
                "DOMAIN_CREATED",
                "DOMAIN_DELETED",
                "DOMAIN_VERIFIED",
                "ORG_SETTINGS_CONFIGURED",
                "ORG_SETTINGS_UPDATED",
                "ORG_SETTINGS_DELETED",
                "RESTRICT_ORG_MEMBERSHIP_ENABLED",
                "RESTRICT_ORG_MEMBERSHIP_DISABLED",
                "ROLE_MAPPING_CREATED",
                "ROLE_MAPPING_UPDATED",
                "ROLE_MAPPING_DELETED"
              ],
              "title": "Federation Settings Event Types",
              "type": "string"
            },
            {
              "enum": [
                "GROUP_DELETED",
                "GROUP_CREATED",
                "GROUP_MOVED"
              ],
              "title": "Group Audit Types",
              "type": "string"
            },
            {
              "enum": [
                "MLAB_MIGRATION_COMPLETED",
                "MLAB_MIGRATION_TARGET_CLUSTER_CREATED",
                "MLAB_MIGRATION_DATABASE_USERS_IMPORTED",
                "MLAB_MIGRATION_IP_WHITELIST_IMPORTED",
                "MLAB_MIGRATION_TARGET_CLUSTER_SET",
                "MLAB_MIGRATION_DATABASE_RENAMED",
                "MLAB_MIGRATION_LIVE_IMPORT_STARTED",
                "MLAB_MIGRATION_LIVE_IMPORT_READY_FOR_CUTOVER",
                "MLAB_MIGRATION_LIVE_IMPORT_CUTOVER_COMPLETE",
                "MLAB_MIGRATION_LIVE_IMPORT_ERROR",
                "MLAB_MIGRATION_LIVE_IMPORT_CANCELLED",
                "MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_STARTED",
                "MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_SKIPPED",
                "MLAB_MIGRATION_DUMP_AND_RESTORE_STARTED",
                "MLAB_MIGRATION_SUPPORT_PLAN_SELECTED",
                "MLAB_MIGRATION_SUPPORT_PLAN_OPTED_OUT"
              ],
              "title": "Mlab Migration Audit Types",
              "type": "string"
            },
            {
              "enum": [
                "AWS_SELF_SERVE_ACCOUNT_LINKED",
                "AWS_SELF_SERVE_ACCOUNT_LINK_PENDING",
                "AWS_SELF_SERVE_ACCOUNT_CANCELLED",
                "AWS_SELF_SERVE_ACCOUNT_LINK_FAILED",
                "GCP_SELF_SERVE_ACCOUNT_LINK_PENDING",
                "GCP_SELF_SERVE_ACCOUNT_LINK_FAILED",
                "AZURE_SELF_SERVE_ACCOUNT_LINKED",
                "AZURE_SELF_SERVE_ACCOUNT_LINK_PENDING",
                "AZURE_SELF_SERVE_ACCOUNT_CANCELLED",
                "AZURE_SELF_SERVE_ACCOUNT_LINK_FAILED",
                "GCP_SELF_SERVE_ACCOUNT_LINKED",
                "GCP_SELF_SERVE_ACCOUNT_CANCELLED",
                "VERCEL_SELF_SERVE_ACCOUNT_LINKED",
                "VERCEL_SELF_SERVE_ACCOUNT_LINK_PENDING",
                "VERCEL_SELF_SERVE_ACCOUNT_CANCELLED",
                "VERCEL_SELF_SERVE_ACCOUNT_LINK_FAILED",
                "VERCEL_INVOICE_CREATED",
                "VERCEL_INVOICE_NOT_PAID",
                "VERCEL_INVOICE_OVERDUE",
                "VERCEL_INVOICE_PAID",
                "VERCEL_INVOICE_REFUNDED"
              ],
              "title": "Partner Event Types",
              "type": "string"
            },
            {
              "enum": [
                "SUPPORT_EMAILS_SENT_SUCCESSFULLY",
                "SUPPORT_EMAILS_SENT_FAILURE"
              ],
              "title": "Support Event Types",
              "type": "string"
            },
            {
              "enum": [
                "AI_MODELS_USAGE_TIER_UPDATED"
              ],
              "title": "Ai Models Event Types",
              "type": "string"
            }
          ],
          "type": "object"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Any Other Events",
      "type": "object"
    },
    "EventViewForOrg": {
      "oneOf": [
        {
          "$ref": "#/$defs/DefaultEventViewForOrg"
        },
        {
          "$ref": "#/$defs/AlertAudit"
        },
        {
          "$ref": "#/$defs/AlertConfigAudit"
        },
        {
          "$ref": "#/$defs/ApiUserEventViewForOrg"
        },
        {
          "$ref": "#/$defs/ServiceAccountOrgEvents"
        },
        {
          "$ref": "#/$defs/BillingEventViewForOrg"
        },
        {
          "$ref": "#/$defs/NDSAuditViewForOrg"
        },
        {
          "$ref": "#/$defs/OrgEventViewForOrg"
        },
        {
          "$ref": "#/$defs/TeamEvent"
        },
        {
          "$ref": "#/$defs/UserEventViewForOrg"
        },
        {
          "$ref": "#/$defs/ResourceEventViewForOrg"
        },
        {
          "$ref": "#/$defs/AtlasResourcePolicyAuditForOrg"
        }
      ],
      "type": "object"
    },
    "Link": {
      "properties": {
        "href": {
          "description": "Uniform Resource Locator (URL) that points another API resource to which this response has some relationship. This URL often begins with `https://cloud.mongodb.com/api/atlas`.",
          "type": "string"
        },
        "rel": {
          "description": "Uniform Resource Locator (URL) that defines the semantic relationship between this resource and another API resource. This URL often begins with `https://cloud.mongodb.com/api/atlas`.",
          "type": "string"
        }
      },
      "type": "object"
    },
    "NDSAuditTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "ORG_LIMIT_UPDATED",
        "SHADOW_CLUSTER_ORG_OPT_IN",
        "SHADOW_CLUSTER_ORG_OPT_OUT"
      ],
      "title": "Atlas Audit Types",
      "type": "string"
    },
    "NDSAuditViewForOrg": {
      "description": "Audit saving information about Atlas cloud provider and other Atlas related details.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "dbUserUsername": {
          "description": "The username of the MongoDB User that was created, deleted, or edited.",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/NDSAuditTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        },
        "whitelistEntry": {
          "description": "Entry in the list of source host addresses that the API key accepts and this event targets.",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Atlas Organization Audits",
      "type": "object"
    },
    "OrgEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "ORG_CREATED",
        "CUSTOM_SESSION_TIMEOUT_MODIFIED",
        "SECURITY_CONTACT_MODIFIED",
        "ORG_CREDIT_CARD_ADDED",
        "ORG_CREDIT_CARD_UPDATED",
        "ORG_CREDIT_CARD_CURRENT",
        "ORG_CREDIT_CARD_ABOUT_TO_EXPIRE",
        "ORG_PAYPAL_LINKED",
        "ORG_PAYPAL_UPDATED",
        "ORG_PAYPAL_CANCELLED",
        "ORG_OVERRIDE_PAYMENT_METHOD_ADDED",
        "ORG_BANK_ACCOUNT_ADDED",
        "ORG_BANK_ACCOUNT_UPDATED",
        "ORG_WALLET_ADDED",
        "ORG_WALLET_UPDATED",
        "ORG_ACTIVATED",
        "ORG_TEMPORARILY_ACTIVATED",
        "ORG_SUSPENSION_DATE_CHANGED",
        "ORG_SUSPENDED",
        "ORG_ADMIN_SUSPENDED",
        "ORG_ADMIN_LOCKED",
        "ORG_CLUSTERS_DELETED",
        "ORG_CLUSTERS_PAUSED",
        "ORG_LOCKED",
        "ORG_LOCKED_ACCELERATED",
        "ORG_UNDER_FINANCIAL_PROTECTION",
        "ORG_NO_FINANCIAL_PROTECTION",
        "ORG_RENAMED",
        "ALL_ORG_USERS_HAVE_MFA",
        "ORG_USERS_WITHOUT_MFA",
        "ORG_INVOICE_UNDER_THRESHOLD",
        "ORG_INVOICE_OVER_THRESHOLD",
        "ORG_DAILY_BILL_UNDER_THRESHOLD",
        "ORG_DAILY_BILL_OVER_THRESHOLD",
        "ORG_DAILY_BILLING_CHANGE_NORMAL",
        "ORG_DAILY_BILLING_CHANGE_OVER_THRESHOLD",
        "ORG_WEEKLY_BILLING_CHANGE_NORMAL",
        "ORG_WEEKLY_BILLING_CHANGE_OVER_THRESHOLD",
        "ORG_MONTHLY_BILLING_CHANGE_NORMAL",
        "ORG_MONTHLY_BILLING_CHANGE_OVER_THRESHOLD",
        "ORG_GROUP_CHARGES_UNDER_THRESHOLD",
        "ORG_GROUP_CHARGES_OVER_THRESHOLD",
        "ORG_TWO_FACTOR_AUTH_REQUIRED",
        "ORG_TWO_FACTOR_AUTH_OPTIONAL",
        "ORG_PUBLIC_API_ACCESS_LIST_REQUIRED",
        "ORG_PUBLIC_API_ACCESS_LIST_NOT_REQUIRED",
        "ORG_EMPLOYEE_ACCESS_RESTRICTED",
        "ORG_EMPLOYEE_ACCESS_UNRESTRICTED",
        "ORG_CONNECTED_TO_MLAB",
        "ORG_DISCONNECTED_FROM_MLAB",
        "ORG_IDP_CERTIFICATE_CURRENT",
        "ORG_IDP_CERTIFICATE_ABOUT_TO_EXPIRE",
        "ORG_CONNECTED_TO_VERCEL",
        "ORG_DISCONNECTED_TO_VERCEL",
        "ORG_CONNECTION_UNINSTALLED_FROM_VERCEL",
        "ORG_UI_IP_ACCESS_LIST_ENABLED",
        "ORG_UI_IP_ACCESS_LIST_DISABLED",
        "ORG_EDITED_UI_IP_ACCESS_LIST_ENTRIES",
        "ORG_SERVICE_ACCOUNT_MAX_SECRET_VALIDITY_EDITED",
        "ORG_SERVICE_ACCOUNT_SECRETS_EXPIRED",
        "ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED",
        "ORG_SERVICE_ACCOUNT_SECRETS_EXPIRING",
        "ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING",
        "ORG_MONGODB_VERSION_EOL_EXTENSION_ACCEPTED",
        "ORG_MONGODB_VERSION_EOL_EXTENSION_PENDING",
        "ORG_MONGODB_VERSION_EOL_EXTENSION_CANCELLED",
        "ORG_BAAS_EOL_EXTENSION_ACCEPTED",
        "ORG_BAAS_EOL_EXTENSION_PENDING",
        "ORG_BAAS_EOL_EXTENSION_CANCELED",
        "GROUP_MOVED_FROM_ORG",
        "SANDBOX_ENABLED_FOR_ORG",
        "SANDBOX_DISABLED_FOR_ORG",
        "SANDBOX_CONFIG_DELETED",
        "SANDBOX_TEMPLATE_UPDATED",
        "ORGANIZATION_VOYAGE_SETTINGS_CREATED",
        "ORGANIZATION_VOYAGE_SETTINGS_DELETED",
        "PROJECT_CREATED_VIA_ANIS"
      ],
      "title": "Org Event Types",
      "type": "string"
    },
    "OrgEventViewForOrg": {
      "description": "Organization event identifies different activities and changes in an organization settings.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/OrgEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "invoiceId": {
          "description": "Unique 24-hexadecimal digit string that identifies of the invoice associated with the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Organization Events",
      "type": "object"
    },
    "ResourceEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "TAGS_MODIFIED",
        "GROUP_TAGS_MODIFIED"
      ],
      "title": "Resource Event Types",
      "type": "string"
    },
    "ResourceEventViewForOrg": {
      "description": "Resource event reflects different activities about resources.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/ResourceEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "resourceId": {
          "description": "Unique 24-hexadecimal digit string that identifies the resource associated with the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "resourceType": {
          "description": "Unique identifier of resource type.",
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id",
        "resourceType"
      ],
      "title": "Resource Events",
      "type": "object"
    },
    "ServiceAccountEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "SERVICE_ACCOUNT_CREATED",
        "SERVICE_ACCOUNT_DELETED",
        "SERVICE_ACCOUNT_ROLES_CHANGED",
        "SERVICE_ACCOUNT_DETAILS_CHANGED",
        "SERVICE_ACCOUNT_ADDED_TO_GROUP",
        "SERVICE_ACCOUNT_REMOVED_FROM_GROUP",
        "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_ADDED",
        "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_DELETED",
        "SERVICE_ACCOUNT_SECRET_ADDED",
        "SERVICE_ACCOUNT_SECRET_DELETED",
        "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED",
        "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED"
      ],
      "title": "Service Account Event Types",
      "type": "string"
    },
    "ServiceAccountOrgEvents": {
      "description": "Service Account event identifies different activities around user API keys.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/ServiceAccountEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "ServiceAccount Events",
      "type": "object"
    },
    "TeamEvent": {
      "description": "Team event identifies different activities around organization teams.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/TeamEventTypeView"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "teamId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization team associated with this event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "Team Events",
      "type": "object"
    },
    "TeamEventTypeView": {
      "description": "Unique identifier of event type.",
      "enum": [
        "TEAM_CREATED",
        "TEAM_DELETED",
        "TEAM_UPDATED",
        "TEAM_NAME_CHANGED",
        "TEAM_ADDED_TO_GROUP",
        "TEAM_REMOVED_FROM_GROUP",
        "TEAM_ROLES_MODIFIED"
      ],
      "title": "Team Event Types",
      "type": "string"
    },
    "UserEventTypeViewForOrg": {
      "description": "Unique identifier of event type.",
      "enum": [
        "JOINED_ORG",
        "JOINED_TEAM",
        "INVITED_TO_ORG",
        "ORG_INVITATION_DELETED",
        "REMOVED_FROM_ORG",
        "REMOVED_FROM_TEAM",
        "USER_ROLES_CHANGED_AUDIT",
        "ORG_FLEX_CONSULTING_PURCHASED",
        "ORG_FLEX_CONSULTING_PURCHASE_FAILED",
        "INVITED_TO_TEAM"
      ],
      "title": "User Event Types",
      "type": "string"
    },
    "UserEventViewForOrg": {
      "description": "User event reflects different activities about the atlas user.",
      "properties": {
        "apiKeyId": {
          "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "created": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "eventTypeName": {
          "$ref": "#/$defs/UserEventTypeViewForOrg"
        },
        "groupId": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "isGlobalAdmin": {
          "description": "Flag that indicates whether a MongoDB employee triggered the specified event.",
          "readOnly": true,
          "type": "boolean"
        },
        "links": {
          "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.",
          "items": {
            "$ref": "#/$defs/Link"
          },
          "readOnly": true,
          "type": "array"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "publicKey": {
          "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.",
          "readOnly": true,
          "type": "string"
        },
        "raw": {
          "$ref": "#/$defs/raw"
        },
        "remoteAddress": {
          "description": "IPv4 or IPv6 address from which the user triggered this event.",
          "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$",
          "readOnly": true,
          "type": "string"
        },
        "targetUsername": {
          "description": "Email address for the console user that this event targets. The resource returns this parameter when `\"eventTypeName\" : \"USER\"`.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        },
        "userId": {
          "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "username": {
          "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.",
          "format": "email",
          "readOnly": true,
          "type": "string"
        }
      },
      "required": [
        "created",
        "eventTypeName",
        "id"
      ],
      "title": "User Events",
      "type": "object"
    },
    "raw": {
      "description": "Additional meta information captured about this event. The response returns this parameter as a JSON object when the query parameter `includeRaw=true`. The list of fields in the raw document may change. Don't rely on raw values for formal monitoring.",
      "properties": {
        "_t": {
          "description": "Unique identifier of event type.",
          "type": "string"
        },
        "alertConfigId": {
          "description": "Unique 24-hexadecimal digit string that identifies the alert configuration related to the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "cid": {
          "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "cre": {
          "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.",
          "format": "date-time",
          "readOnly": true,
          "type": "string"
        },
        "description": {
          "description": "Description of the event.",
          "type": "string"
        },
        "gn": {
          "description": "Human-readable label that identifies the project.",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "id": {
          "description": "Unique 24-hexadecimal digit string that identifies the event.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "orgId": {
          "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.",
          "pattern": "^([a-f0-9]{24})$",
          "readOnly": true,
          "type": "string"
        },
        "orgName": {
          "description": "Human-readable label that identifies the organization that contains the project.",
          "maxLength": 64,
          "minLength": 1,
          "type": "string"
        },
        "severity": {
          "description": "Severity of the event.",
          "enum": [
            "INFO",
            "WARNING",
            "ERROR",
            "CRITICAL"
          ],
          "type": "string"
        }
      },
      "readOnly": true,
      "type": "object"
    }
  }
}