feat(admin): update the API

#### admin:directory_v1

The following keys were added:
- schemas.ByteUsage.description
- schemas.ByteUsage.id
- schemas.ByteUsage.properties.capacityBytes.description
- schemas.ByteUsage.properties.capacityBytes.format
- schemas.ByteUsage.properties.capacityBytes.readOnly
- schemas.ByteUsage.properties.capacityBytes.type
- schemas.ByteUsage.properties.usedBytes.description
- schemas.ByteUsage.properties.usedBytes.format
- schemas.ByteUsage.properties.usedBytes.readOnly
- schemas.ByteUsage.properties.usedBytes.type
- schemas.ByteUsage.type
- schemas.ChromeOsDevice.properties.diskSpaceUsage.$ref
- schemas.ChromeOsDevice.properties.diskSpaceUsage.description
- schemas.ChromeOsDevice.properties.diskSpaceUsage.readOnly
- schemas.RoleAssignment.properties.condition.description
- schemas.RoleAssignment.properties.condition.type

The following keys were changed:
- schemas.OrgUnit.properties.blockInheritance.description

Author: yoshi-automation

discovery/admin-directory_v1.json

@@ -4671,7 +4671,7 @@
       }
     }
   },
-  "revision": "20240924",
+  "revision": "20241210",
   "rootUrl": "https://admin.googleapis.com/",
   "schemas": {
     "Alias": {
@@ -5184,6 +5184,25 @@
       },
       "type": "object"
     },
+    "ByteUsage": {
+      "description": "Represents a data capacity with some amount of current usage in bytes.",
+      "id": "ByteUsage",
+      "properties": {
+        "capacityBytes": {
+          "description": "Output only. The total capacity value, in bytes.",
+          "format": "int64",
+          "readOnly": true,
+          "type": "string"
+        },
+        "usedBytes": {
+          "description": "Output only. The current usage value, in bytes.",
+          "format": "int64",
+          "readOnly": true,
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "CalendarResource": {
       "description": "Public API: Resources.calendars",
       "id": "CalendarResource",
@@ -5640,6 +5659,11 @@
           "readOnly": true,
           "type": "string"
         },
+        "diskSpaceUsage": {
+          "$ref": "ByteUsage",
+          "description": "Output only. How much disk space the device has available and is currently using.",
+          "readOnly": true
+        },
         "diskVolumeReports": {
           "description": "Reports of disk space and other info about mounted/connected volumes.",
           "items": {
@@ -7046,7 +7070,7 @@
       "properties": {
         "blockInheritance": {
           "deprecated": true,
-          "description": "Determines if a sub-organizational unit can inherit the settings of the parent organization. The default value is `false`, meaning a sub-organizational unit inherits the settings of the nearest parent organizational unit. This field is deprecated. Setting it to `true` is no longer supported and can have _unintended consequences_. For more information about inheritance and users in an organization structure, see the [administration help center](https://support.google.com/a/answer/4352075).",
+          "description": "This field is deprecated and setting its value has no effect.",
           "type": "boolean"
         },
         "description": {
@@ -7469,6 +7493,10 @@
           "readOnly": true,
           "type": "string"
         },
+        "condition": {
+          "description": "Optional. The condition associated with this role assignment. Note: Feature is available to Enterprise Standard, Enterprise Plus, Google Workspace for Education Plus and Cloud Identity Premium customers. A `RoleAssignment` with the `condition` field set will only take effect when the resource being accessed meets the condition. If `condition` is empty, the role (`role_id`) is applied to the actor (`assigned_to`) at the scope (`scope_type`) unconditionally. Currently, the following conditions are supported: - To make the `RoleAssignment` only applicable to [Security Groups](https://cloud.google.com/identity/docs/groups#group_types): `api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.security']) && resource.type == 'cloudidentity.googleapis.com/Group'` - To make the `RoleAssignment` not applicable to [Security Groups](https://cloud.google.com/identity/docs/groups#group_types): `!api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.security']) && resource.type == 'cloudidentity.googleapis.com/Group'` Currently, the condition strings have to be verbatim and they only work with the following [pre-built administrator roles](https://support.google.com/a/answer/2405986): - Groups Editor - Groups Reader The condition follows [Cloud IAM condition syntax](https://cloud.google.com/iam/docs/conditions-overview). Additional conditions related to Locked Groups are available under Open Beta. - To make the `RoleAssignment` not applicable to [Locked Groups](https://cloud.google.com/identity/docs/groups#group_types): `!api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.locked']) && resource.type == 'cloudidentity.googleapis.com/Group'` This condition can also be used in conjunction with a Security-related condition.",
+          "type": "string"
+        },
         "etag": {
           "description": "ETag of the resource.",
           "type": "string"

src/apis/admin/directory_v1.ts

@@ -473,6 +473,19 @@ export namespace admin_directory_v1 {
      */
     nextPageToken?: string | null;
   }
+  /**
+   * Represents a data capacity with some amount of current usage in bytes.
+   */
+  export interface Schema$ByteUsage {
+    /**
+     * Output only. The total capacity value, in bytes.
+     */
+    capacityBytes?: string | null;
+    /**
+     * Output only. The current usage value, in bytes.
+     */
+    usedBytes?: string | null;
+  }
   /**
    * Public API: Resources.calendars
    */
@@ -708,6 +721,10 @@ export namespace admin_directory_v1 {
      * Output only. Device license type.
      */
     deviceLicenseType?: string | null;
+    /**
+     * Output only. How much disk space the device has available and is currently using.
+     */
+    diskSpaceUsage?: Schema$ByteUsage;
     /**
      * Reports of disk space and other info about mounted/connected volumes.
      */
@@ -1651,7 +1668,7 @@ export namespace admin_directory_v1 {
    */
   export interface Schema$OrgUnit {
     /**
-     * Determines if a sub-organizational unit can inherit the settings of the parent organization. The default value is `false`, meaning a sub-organizational unit inherits the settings of the nearest parent organizational unit. This field is deprecated. Setting it to `true` is no longer supported and can have _unintended consequences_. For more information about inheritance and users in an organization structure, see the [administration help center](https://support.google.com/a/answer/4352075).
+     * This field is deprecated and setting its value has no effect.
      */
     blockInheritance?: boolean | null;
     /**
@@ -1936,6 +1953,10 @@ export namespace admin_directory_v1 {
      * Output only. The type of the assignee (`USER` or `GROUP`).
      */
     assigneeType?: string | null;
+    /**
+     * Optional. The condition associated with this role assignment. Note: Feature is available to Enterprise Standard, Enterprise Plus, Google Workspace for Education Plus and Cloud Identity Premium customers. A `RoleAssignment` with the `condition` field set will only take effect when the resource being accessed meets the condition. If `condition` is empty, the role (`role_id`) is applied to the actor (`assigned_to`) at the scope (`scope_type`) unconditionally. Currently, the following conditions are supported: - To make the `RoleAssignment` only applicable to [Security Groups](https://cloud.google.com/identity/docs/groups#group_types): `api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.security']) && resource.type == 'cloudidentity.googleapis.com/Group'` - To make the `RoleAssignment` not applicable to [Security Groups](https://cloud.google.com/identity/docs/groups#group_types): `!api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.security']) && resource.type == 'cloudidentity.googleapis.com/Group'` Currently, the condition strings have to be verbatim and they only work with the following [pre-built administrator roles](https://support.google.com/a/answer/2405986): - Groups Editor - Groups Reader The condition follows [Cloud IAM condition syntax](https://cloud.google.com/iam/docs/conditions-overview). Additional conditions related to Locked Groups are available under Open Beta. - To make the `RoleAssignment` not applicable to [Locked Groups](https://cloud.google.com/identity/docs/groups#group_types): `!api.getAttribute('cloudidentity.googleapis.com/groups.labels', []).hasAny(['groups.locked']) && resource.type == 'cloudidentity.googleapis.com/Group'` This condition can also be used in conjunction with a Security-related condition.
+     */
+    condition?: string | null;
     /**
      * ETag of the resource.
      */