[Storage] Support isSmbOauthEnabled when creating and updating storage accounts (#28573)

Author: yifanz7

src/Storage/Storage.Management.Sdk/Generated/IManagementPoliciesOperations.cs

@@ -59,7 +59,7 @@ public partial interface IManagementPoliciesOperations
         /// </param>
         /// <param name='policy'>
         /// The Storage Account ManagementPolicy, in JSON format. See more details in:
-        /// https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts.
+        /// https://learn.microsoft.com/azure/storage/blobs/lifecycle-management-overview.
         /// </param>
         /// <param name='customHeaders'>
         /// The headers that will be added to request.

src/Storage/Storage.Management.Sdk/Generated/IStorageAccountsOperations.cs

@@ -386,7 +386,7 @@ public partial interface IStorageAccountsOperations
         /// Failover is disaster recovery testing drills. This type of failover is
         /// invoked by setting FailoverType parameter to 'Planned'. Learn more about
         /// the failover options here-
-        /// https://learn.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance
+        /// https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance
         /// </summary>
         /// <remarks>
         /// A failover request can be triggered for a storage account in the event a
@@ -401,7 +401,7 @@ public partial interface IStorageAccountsOperations
         /// Failover is disaster recovery testing drills. This type of failover is
         /// invoked by setting FailoverType parameter to &#39;Planned&#39;. Learn more about
         /// the failover options here-
-        /// https://learn.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance
+        /// https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance
         /// </remarks>
         /// <param name='resourceGroupName'>
         /// The name of the resource group within the user&#39;s subscription. The name is
@@ -668,7 +668,7 @@ public partial interface IStorageAccountsOperations
         /// Failover is disaster recovery testing drills. This type of failover is
         /// invoked by setting FailoverType parameter to &#39;Planned&#39;. Learn more about
         /// the failover options here-
-        /// https://learn.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance
+        /// https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance
         /// </summary>
         /// <remarks>
         /// A failover request can be triggered for a storage account in the event a
@@ -683,7 +683,7 @@ public partial interface IStorageAccountsOperations
         /// Failover is disaster recovery testing drills. This type of failover is
         /// invoked by setting FailoverType parameter to &#39;Planned&#39;. Learn more about
         /// the failover options here-
-        /// https://learn.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance
+        /// https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance
         /// </remarks>
         /// <param name='resourceGroupName'>
         /// The name of the resource group within the user&#39;s subscription. The name is

src/Storage/Storage.Management.Sdk/Generated/ManagementPoliciesOperations.cs

@@ -305,7 +305,7 @@ internal ManagementPoliciesOperations (StorageManagementClient client)
         /// </param>
         /// <param name='policy'>
         /// The Storage Account ManagementPolicy, in JSON format. See more details in:
-        /// https://docs.microsoft.com/en-us/azure/storage/common/storage-lifecycle-managment-concepts.
+        /// https://learn.microsoft.com/azure/storage/blobs/lifecycle-management-overview.
         /// </param>
         /// <param name='customHeaders'>
         /// Headers that will be added to request.

src/Storage/Storage.Management.Sdk/Generated/Models/ActiveDirectoryProperties.cs

@@ -25,29 +25,58 @@ public ActiveDirectoryProperties()
         /// </summary>
 
         /// <param name="domainName">Specifies the primary domain that the AD DNS server is authoritative for.
+        /// This property is required if directoryServiceOptions is set to AD (AD DS
+        /// authentication). If directoryServiceOptions is set to AADDS (Entra DS
+        /// authentication), providing this property is optional, as it will be
+        /// inferred automatically if omitted. If directoryServiceOptions is set to
+        /// AADKERB (Entra authentication), this property is optional; it is needed to
+        /// support configuration of directory- and file-level permissions via Windows
+        /// File Explorer, but is not required for authentication.
         /// </param>
 
-        /// <param name="netBiosDomainName">Specifies the NetBIOS domain name.
+        /// <param name="netBiosDomainName">Specifies the NetBIOS domain name. If directoryServiceOptions is set to AD
+        /// (AD DS authentication), this property is required. Otherwise, it can be
+        /// omitted.
         /// </param>
 
-        /// <param name="forestName">Specifies the Active Directory forest to get.
+        /// <param name="forestName">Specifies the Active Directory forest to get. If directoryServiceOptions is
+        /// set to AD (AD DS authentication), this property is required. Otherwise, it
+        /// can be omitted.
         /// </param>
 
-        /// <param name="domainGuid">Specifies the domain GUID.
+        /// <param name="domainGuid">Specifies the domain GUID. If directoryServiceOptions is set to AD (AD DS
+        /// authentication), this property is required. If directoryServiceOptions is
+        /// set to AADDS (Entra DS authentication), this property can be omitted. If
+        /// directoryServiceOptions is set to AADKERB (Entra authentication), this
+        /// property is optional; it is needed to support configuration of directory-
+        /// and file-level permissions via Windows File Explorer, but is not required
+        /// for authentication.
         /// </param>
 
-        /// <param name="domainSid">Specifies the security identifier (SID).
+        /// <param name="domainSid">Specifies the security identifier (SID) of the AD domain. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is required. Otherwise, it can be omitted.
         /// </param>
 
-        /// <param name="azureStorageSid">Specifies the security identifier (SID) for Azure Storage.
+        /// <param name="azureStorageSid">Specifies the security identifier (SID) for Azure Storage. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is required. Otherwise, it can be omitted.
         /// </param>
 
-        /// <param name="samAccountName">Specifies the Active Directory SAMAccountName for Azure Storage.
+        /// <param name="samAccountName">Specifies the Active Directory SAMAccountName for Azure Storage. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is optional. If provided, accountType should also be provided. For
+        /// directoryServiceOptions AADDS (Entra DS authentication) or AADKERB (Entra
+        /// authentication), this property can be omitted.
         /// </param>
 
-        /// <param name="accountType">Specifies the Active Directory account type for Azure Storage.
+        /// <param name="accountType">Specifies the Active Directory account type for Azure Storage. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is optional. If provided, samAccountName should also be provided. For
+        /// directoryServiceOptions AADDS (Entra DS authentication) or AADKERB (Entra
+        /// authentication), this property can be omitted.
         /// Possible values include: &#39;User&#39;, &#39;Computer&#39;</param>
-        public ActiveDirectoryProperties(string domainName, string domainGuid, string netBiosDomainName = default(string), string forestName = default(string), string domainSid = default(string), string azureStorageSid = default(string), string samAccountName = default(string), string accountType = default(string))
+        public ActiveDirectoryProperties(string domainName = default(string), string netBiosDomainName = default(string), string forestName = default(string), string domainGuid = default(string), string domainSid = default(string), string azureStorageSid = default(string), string samAccountName = default(string), string accountType = default(string))
 
         {
             this.DomainName = domainName;
@@ -69,77 +98,79 @@ public ActiveDirectoryProperties()
 
         /// <summary>
         /// Gets or sets specifies the primary domain that the AD DNS server is
-        /// authoritative for.
+        /// authoritative for. This property is required if directoryServiceOptions is
+        /// set to AD (AD DS authentication). If directoryServiceOptions is set to
+        /// AADDS (Entra DS authentication), providing this property is optional, as it
+        /// will be inferred automatically if omitted. If directoryServiceOptions is
+        /// set to AADKERB (Entra authentication), this property is optional; it is
+        /// needed to support configuration of directory- and file-level permissions
+        /// via Windows File Explorer, but is not required for authentication.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "domainName")]
         public string DomainName {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the NetBIOS domain name.
+        /// Gets or sets specifies the NetBIOS domain name. If directoryServiceOptions
+        /// is set to AD (AD DS authentication), this property is required. Otherwise,
+        /// it can be omitted.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "netBiosDomainName")]
         public string NetBiosDomainName {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the Active Directory forest to get.
+        /// Gets or sets specifies the Active Directory forest to get. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is required. Otherwise, it can be omitted.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "forestName")]
         public string ForestName {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the domain GUID.
+        /// Gets or sets specifies the domain GUID. If directoryServiceOptions is set
+        /// to AD (AD DS authentication), this property is required. If
+        /// directoryServiceOptions is set to AADDS (Entra DS authentication), this
+        /// property can be omitted. If directoryServiceOptions is set to AADKERB
+        /// (Entra authentication), this property is optional; it is needed to support
+        /// configuration of directory- and file-level permissions via Windows File
+        /// Explorer, but is not required for authentication.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "domainGuid")]
         public string DomainGuid {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the security identifier (SID).
+        /// Gets or sets specifies the security identifier (SID) of the AD domain. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is required. Otherwise, it can be omitted.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "domainSid")]
         public string DomainSid {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the security identifier (SID) for Azure Storage.
+        /// Gets or sets specifies the security identifier (SID) for Azure Storage. If
+        /// directoryServiceOptions is set to AD (AD DS authentication), this property
+        /// is required. Otherwise, it can be omitted.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "azureStorageSid")]
         public string AzureStorageSid {get; set; }
 
         /// <summary>
         /// Gets or sets specifies the Active Directory SAMAccountName for Azure
-        /// Storage.
+        /// Storage. If directoryServiceOptions is set to AD (AD DS authentication),
+        /// this property is optional. If provided, accountType should also be
+        /// provided. For directoryServiceOptions AADDS (Entra DS authentication) or
+        /// AADKERB (Entra authentication), this property can be omitted.
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "samAccountName")]
         public string SamAccountName {get; set; }
 
         /// <summary>
-        /// Gets or sets specifies the Active Directory account type for Azure Storage. Possible values include: &#39;User&#39;, &#39;Computer&#39;
+        /// Gets or sets specifies the Active Directory account type for Azure Storage.
+        /// If directoryServiceOptions is set to AD (AD DS authentication), this
+        /// property is optional. If provided, samAccountName should also be provided.
+        /// For directoryServiceOptions AADDS (Entra DS authentication) or AADKERB
+        /// (Entra authentication), this property can be omitted. Possible values include: &#39;User&#39;, &#39;Computer&#39;
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "accountType")]
         public string AccountType {get; set; }
-        /// <summary>
-        /// Validate the object.
-        /// </summary>
-        /// <exception cref="Microsoft.Rest.ValidationException">
-        /// Thrown if validation fails
-        /// </exception>
-        public virtual void Validate()
-        {
-            if (this.DomainName == null)
-            {
-                throw new Microsoft.Rest.ValidationException(Microsoft.Rest.ValidationRules.CannotBeNull, "DomainName");
-            }
-            if (this.DomainGuid == null)
-            {
-                throw new Microsoft.Rest.ValidationException(Microsoft.Rest.ValidationRules.CannotBeNull, "DomainGuid");
-            }
-
-
-
-
-
-
-
-
-        }
     }
 }

src/Storage/Storage.Management.Sdk/Generated/Models/AzureFilesIdentityBasedAuthentication.cs

@@ -28,20 +28,27 @@ public AzureFilesIdentityBasedAuthentication()
         /// in the future.
         /// Possible values include: &#39;None&#39;, &#39;AADDS&#39;, &#39;AD&#39;, &#39;AADKERB&#39;</param>
 
-        /// <param name="activeDirectoryProperties">Required if directoryServiceOptions are AD, optional if they are AADKERB.
+        /// <param name="activeDirectoryProperties">Additional information about the directory service. Required if
+        /// directoryServiceOptions is AD (AD DS authentication). Optional for
+        /// directoryServiceOptions AADDS (Entra DS authentication) and AADKERB (Entra
+        /// authentication).
         /// </param>
 
         /// <param name="defaultSharePermission">Default share permission for users using Kerberos authentication if RBAC
         /// role is not assigned.
         /// Possible values include: &#39;None&#39;, &#39;StorageFileDataSmbShareReader&#39;,
         /// &#39;StorageFileDataSmbShareContributor&#39;,
         /// &#39;StorageFileDataSmbShareElevatedContributor&#39;</param>
-        public AzureFilesIdentityBasedAuthentication(string directoryServiceOptions, ActiveDirectoryProperties activeDirectoryProperties = default(ActiveDirectoryProperties), string defaultSharePermission = default(string))
+
+        /// <param name="smbOAuthSettings">Required for Managed Identities access using OAuth over SMB.
+        /// </param>
+        public AzureFilesIdentityBasedAuthentication(string directoryServiceOptions, ActiveDirectoryProperties activeDirectoryProperties = default(ActiveDirectoryProperties), string defaultSharePermission = default(string), SmbOAuthSettings smbOAuthSettings = default(SmbOAuthSettings))
 
         {
             this.DirectoryServiceOptions = directoryServiceOptions;
             this.ActiveDirectoryProperties = activeDirectoryProperties;
             this.DefaultSharePermission = defaultSharePermission;
+            this.SmbOAuthSettings = smbOAuthSettings;
             CustomInit();
         }
 
@@ -59,8 +66,10 @@ public AzureFilesIdentityBasedAuthentication()
         public string DirectoryServiceOptions {get; set; }
 
         /// <summary>
-        /// Gets or sets required if directoryServiceOptions are AD, optional if they
-        /// are AADKERB.
+        /// Gets or sets additional information about the directory service. Required
+        /// if directoryServiceOptions is AD (AD DS authentication). Optional for
+        /// directoryServiceOptions AADDS (Entra DS authentication) and AADKERB (Entra
+        /// authentication).
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "activeDirectoryProperties")]
         public ActiveDirectoryProperties ActiveDirectoryProperties {get; set; }
@@ -71,6 +80,12 @@ public AzureFilesIdentityBasedAuthentication()
         /// </summary>
         [Newtonsoft.Json.JsonProperty(PropertyName = "defaultSharePermission")]
         public string DefaultSharePermission {get; set; }
+
+        /// <summary>
+        /// Gets or sets required for Managed Identities access using OAuth over SMB.
+        /// </summary>
+        [Newtonsoft.Json.JsonProperty(PropertyName = "smbOAuthSettings")]
+        public SmbOAuthSettings SmbOAuthSettings {get; set; }
         /// <summary>
         /// Validate the object.
         /// </summary>
@@ -84,10 +99,8 @@ public virtual void Validate()
                 throw new Microsoft.Rest.ValidationException(Microsoft.Rest.ValidationRules.CannotBeNull, "DirectoryServiceOptions");
             }
 
-            if (this.ActiveDirectoryProperties != null)
-            {
-                this.ActiveDirectoryProperties.Validate();
-            }
+
+
 
         }
     }

src/Storage/Storage.Management.Sdk/Generated/Models/DualStackEndpointPreference.cs

@@ -0,0 +1,51 @@
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License. See License.txt in the project root for license information.
+// Code generated by Microsoft (R) AutoRest Code Generator.
+// Changes may cause incorrect behavior and will be lost if the code is regenerated.
+
+namespace Microsoft.Azure.Management.Storage.Models
+{
+    using System.Linq;
+
+    /// <summary>
+    /// Dual-stack endpoint preference defines whether IPv6 endpoints are going to
+    /// be published.
+    /// </summary>
+    public partial class DualStackEndpointPreference
+    {
+        /// <summary>
+        /// Initializes a new instance of the DualStackEndpointPreference class.
+        /// </summary>
+        public DualStackEndpointPreference()
+        {
+            CustomInit();
+        }
+
+        /// <summary>
+        /// Initializes a new instance of the DualStackEndpointPreference class.
+        /// </summary>
+
+        /// <param name="publishIpv6Endpoint">A boolean flag which indicates whether IPv6 storage endpoints are to be
+        /// published.
+        /// </param>
+        public DualStackEndpointPreference(bool? publishIpv6Endpoint = default(bool?))
+
+        {
+            this.PublishIpv6Endpoint = publishIpv6Endpoint;
+            CustomInit();
+        }
+
+        /// <summary>
+        /// An initialization method that performs custom operations like setting defaults
+        /// </summary>
+        partial void CustomInit();
+
+
+        /// <summary>
+        /// Gets or sets a boolean flag which indicates whether IPv6 storage endpoints
+        /// are to be published.
+        /// </summary>
+        [Newtonsoft.Json.JsonProperty(PropertyName = "publishIpv6Endpoint")]
+        public bool? PublishIpv6Endpoint {get; set; }
+    }
+}