@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-discoveryengine</artifactId>
-      <version>v1-rev20261102-2.9.2</version>
+      <version>v1-rev20261106-2.9.2</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-discoveryengine:v1-rev20261102-2.9.2'
+  implementation 'com.google.apis:google-api-services-discoveryengine:v1-rev20261106-2.9.2'
 }
 ```
 
 
@@ -146,6 +146,15 @@ public final class GoogleCloudDiscoveryengineV1Engine extends com.google.api.cli
   @com.google.api.client.util.Key
   private java.util.Map<String, java.lang.String> effectiveFeatures;
 
+  /**
+   * Optional. Per-feature access policies, keyed by feature toggle name (see `features`). A feature
+   * with no entry is available to every user when it is on. Only features that support access
+   * policies are accepted.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, GoogleCloudDiscoveryengineV1EngineFeaturePolicy> featurePolicies;
+
   /**
    * Optional. Feature config for the engine to opt in or opt out of features. Supported keys: *
    * `*`: all features, if it's present, all other feature state settings are ignored. * `agent-
@@ -156,11 +165,11 @@ public final class GoogleCloudDiscoveryengineV1Engine extends com.google.api.cli
    * `disable-video-generation` * `music-generation` * `speech-generation` * `disable-onedrive-
    * upload` * `disable-talk-to-content` * `disable-google-drive-upload` * `disable-welcome-emails`
    * * `disable-canvas` * `canvas-workspace` * `canvas-app-builder` * `skills` * `skill-sharing` *
-   * `skill-sharing-without-admin-approval` * `disable-projects` * `sobi` * `enable-end-user-
-   * sharing-with-groups` * `single-agent-orchestration` * `multi-agent-orchestration` * `cross-
-   * product-intelligence` * `workflow-agents` * `in-app-notifications` * `code-extraction` *
-   * `remote-vm` * `license-tier-badge` * `agent-marketplace` * `agent-scheduling` * `preview-
-   * agents`
+   * `skill-sharing-without-admin-approval` * `skill-security-scan` * `disable-projects` * `sobi` *
+   * `enable-end-user-sharing-with-groups` * `single-agent-orchestration` * `multi-agent-
+   * orchestration` * `cross-product-intelligence` * `workflow-agents` * `in-app-notifications` *
+   * `code-extraction` * `remote-vm` * `license-tier-badge` * `canvas-app-sharing` * `agent-
+   * marketplace` * `agent-scheduling` * `preview-agents` * `plugins`
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -549,6 +558,27 @@ public GoogleCloudDiscoveryengineV1Engine setEffectiveFeatures(java.util.Map<Str
     return this;
   }
 
+  /**
+   * Optional. Per-feature access policies, keyed by feature toggle name (see `features`). A feature
+   * with no entry is available to every user when it is on. Only features that support access
+   * policies are accepted.
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, GoogleCloudDiscoveryengineV1EngineFeaturePolicy> getFeaturePolicies() {
+    return featurePolicies;
+  }
+
+  /**
+   * Optional. Per-feature access policies, keyed by feature toggle name (see `features`). A feature
+   * with no entry is available to every user when it is on. Only features that support access
+   * policies are accepted.
+   * @param featurePolicies featurePolicies or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1Engine setFeaturePolicies(java.util.Map<String, GoogleCloudDiscoveryengineV1EngineFeaturePolicy> featurePolicies) {
+    this.featurePolicies = featurePolicies;
+    return this;
+  }
+
   /**
    * Optional. Feature config for the engine to opt in or opt out of features. Supported keys: *
    * `*`: all features, if it's present, all other feature state settings are ignored. * `agent-
@@ -559,11 +589,11 @@ public GoogleCloudDiscoveryengineV1Engine setEffectiveFeatures(java.util.Map<Str
    * `disable-video-generation` * `music-generation` * `speech-generation` * `disable-onedrive-
    * upload` * `disable-talk-to-content` * `disable-google-drive-upload` * `disable-welcome-emails`
    * * `disable-canvas` * `canvas-workspace` * `canvas-app-builder` * `skills` * `skill-sharing` *
-   * `skill-sharing-without-admin-approval` * `disable-projects` * `sobi` * `enable-end-user-
-   * sharing-with-groups` * `single-agent-orchestration` * `multi-agent-orchestration` * `cross-
-   * product-intelligence` * `workflow-agents` * `in-app-notifications` * `code-extraction` *
-   * `remote-vm` * `license-tier-badge` * `agent-marketplace` * `agent-scheduling` * `preview-
-   * agents`
+   * `skill-sharing-without-admin-approval` * `skill-security-scan` * `disable-projects` * `sobi` *
+   * `enable-end-user-sharing-with-groups` * `single-agent-orchestration` * `multi-agent-
+   * orchestration` * `cross-product-intelligence` * `workflow-agents` * `in-app-notifications` *
+   * `code-extraction` * `remote-vm` * `license-tier-badge` * `canvas-app-sharing` * `agent-
+   * marketplace` * `agent-scheduling` * `preview-agents` * `plugins`
    * @return value or {@code null} for none
    */
   public java.util.Map<String, java.lang.String> getFeatures() {
@@ -580,11 +610,11 @@ public java.util.Map<String, java.lang.String> getFeatures() {
    * `disable-video-generation` * `music-generation` * `speech-generation` * `disable-onedrive-
    * upload` * `disable-talk-to-content` * `disable-google-drive-upload` * `disable-welcome-emails`
    * * `disable-canvas` * `canvas-workspace` * `canvas-app-builder` * `skills` * `skill-sharing` *
-   * `skill-sharing-without-admin-approval` * `disable-projects` * `sobi` * `enable-end-user-
-   * sharing-with-groups` * `single-agent-orchestration` * `multi-agent-orchestration` * `cross-
-   * product-intelligence` * `workflow-agents` * `in-app-notifications` * `code-extraction` *
-   * `remote-vm` * `license-tier-badge` * `agent-marketplace` * `agent-scheduling` * `preview-
-   * agents`
+   * `skill-sharing-without-admin-approval` * `skill-security-scan` * `disable-projects` * `sobi` *
+   * `enable-end-user-sharing-with-groups` * `single-agent-orchestration` * `multi-agent-
+   * orchestration` * `cross-product-intelligence` * `workflow-agents` * `in-app-notifications` *
+   * `code-extraction` * `remote-vm` * `license-tier-badge` * `canvas-app-sharing` * `agent-
+   * marketplace` * `agent-scheduling` * `preview-agents` * `plugins`
    * @param features features or {@code null} for none
    */
   public GoogleCloudDiscoveryengineV1Engine setFeatures(java.util.Map<String, java.lang.String> features) {
 
@@ -0,0 +1,114 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.discoveryengine.v1.model;
+
+/**
+ * Restricts which users may use a feature that is turned on in `features`.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Discovery Engine API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class GoogleCloudDiscoveryengineV1EngineFeaturePolicy extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Optional. Members who may use the feature.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> allowedMembers;
+
+  /**
+   * Optional. Access for users who match neither list.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String defaultAccess;
+
+  /**
+   * Optional. Members who may not use the feature. Takes precedence over `allowed_members`.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> deniedMembers;
+
+  /**
+   * Optional. Members who may use the feature.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> getAllowedMembers() {
+    return allowedMembers;
+  }
+
+  /**
+   * Optional. Members who may use the feature.
+   * @param allowedMembers allowedMembers or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicy setAllowedMembers(java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> allowedMembers) {
+    this.allowedMembers = allowedMembers;
+    return this;
+  }
+
+  /**
+   * Optional. Access for users who match neither list.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getDefaultAccess() {
+    return defaultAccess;
+  }
+
+  /**
+   * Optional. Access for users who match neither list.
+   * @param defaultAccess defaultAccess or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicy setDefaultAccess(java.lang.String defaultAccess) {
+    this.defaultAccess = defaultAccess;
+    return this;
+  }
+
+  /**
+   * Optional. Members who may not use the feature. Takes precedence over `allowed_members`.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> getDeniedMembers() {
+    return deniedMembers;
+  }
+
+  /**
+   * Optional. Members who may not use the feature. Takes precedence over `allowed_members`.
+   * @param deniedMembers deniedMembers or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicy setDeniedMembers(java.util.List<GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember> deniedMembers) {
+    this.deniedMembers = deniedMembers;
+    return this;
+  }
+
+  @Override
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicy set(String fieldName, Object value) {
+    return (GoogleCloudDiscoveryengineV1EngineFeaturePolicy) super.set(fieldName, value);
+  }
+
+  @Override
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicy clone() {
+    return (GoogleCloudDiscoveryengineV1EngineFeaturePolicy) super.clone();
+  }
+
+}
@@ -0,0 +1,156 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.discoveryengine.v1.model;
+
+/**
+ * A user or group the policy refers to.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Discovery Engine API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Optional. Label shown in the console. Never used for evaluation.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String displayName;
+
+  /**
+   * Required. Identifier evaluated at serving time. Its format depends on the project's identity
+   * provider: * Google identity (`GSUITE`): the group or user email. For groups, the server
+   * resolves the email to a group ID on write and returns the email on read. * Workforce Identity
+   * Federation (`THIRD_PARTY`), groups: the value the provider emits in `google.groups`. With SCIM
+   * this is the SCIM group ID; without SCIM and with the default Microsoft Entra mapping it is the
+   * Entra group object ID. * Workforce Identity Federation, users: the user's workforce identity
+   * subject.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String id;
+
+  /**
+   * Required. Kind of member.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String type;
+
+  /**
+   * Output only. Result of the server's directory check when the member was saved.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String verification;
+
+  /**
+   * Optional. Label shown in the console. Never used for evaluation.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getDisplayName() {
+    return displayName;
+  }
+
+  /**
+   * Optional. Label shown in the console. Never used for evaluation.
+   * @param displayName displayName or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember setDisplayName(java.lang.String displayName) {
+    this.displayName = displayName;
+    return this;
+  }
+
+  /**
+   * Required. Identifier evaluated at serving time. Its format depends on the project's identity
+   * provider: * Google identity (`GSUITE`): the group or user email. For groups, the server
+   * resolves the email to a group ID on write and returns the email on read. * Workforce Identity
+   * Federation (`THIRD_PARTY`), groups: the value the provider emits in `google.groups`. With SCIM
+   * this is the SCIM group ID; without SCIM and with the default Microsoft Entra mapping it is the
+   * Entra group object ID. * Workforce Identity Federation, users: the user's workforce identity
+   * subject.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getId() {
+    return id;
+  }
+
+  /**
+   * Required. Identifier evaluated at serving time. Its format depends on the project's identity
+   * provider: * Google identity (`GSUITE`): the group or user email. For groups, the server
+   * resolves the email to a group ID on write and returns the email on read. * Workforce Identity
+   * Federation (`THIRD_PARTY`), groups: the value the provider emits in `google.groups`. With SCIM
+   * this is the SCIM group ID; without SCIM and with the default Microsoft Entra mapping it is the
+   * Entra group object ID. * Workforce Identity Federation, users: the user's workforce identity
+   * subject.
+   * @param id id or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember setId(java.lang.String id) {
+    this.id = id;
+    return this;
+  }
+
+  /**
+   * Required. Kind of member.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getType() {
+    return type;
+  }
+
+  /**
+   * Required. Kind of member.
+   * @param type type or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember setType(java.lang.String type) {
+    this.type = type;
+    return this;
+  }
+
+  /**
+   * Output only. Result of the server's directory check when the member was saved.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getVerification() {
+    return verification;
+  }
+
+  /**
+   * Output only. Result of the server's directory check when the member was saved.
+   * @param verification verification or {@code null} for none
+   */
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember setVerification(java.lang.String verification) {
+    this.verification = verification;
+    return this;
+  }
+
+  @Override
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember set(String fieldName, Object value) {
+    return (GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember) super.set(fieldName, value);
+  }
+
+  @Override
+  public GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember clone() {
+    return (GoogleCloudDiscoveryengineV1EngineFeaturePolicyMember) super.clone();
+  }
+
+}