chore: regens API reference docs (#889)

diff --git a/docs/dyn/androidmanagement_v1.enterprises.devices.html b/docs/dyn/androidmanagement_v1.enterprises.devices.html
index 2e721a0..80d64a0 100644
--- a/docs/dyn/androidmanagement_v1.enterprises.devices.html
+++ b/docs/dyn/androidmanagement_v1.enterprises.devices.html
@@ -80,13 +80,13 @@
 <p class="firstline">Returns the operations Resource.</p>
 
 <p class="toc_element">
-  <code><a href="#delete">delete(name, wipeDataFlags=None, x__xgafv=None)</a></code></p>
+  <code><a href="#delete">delete(name, wipeDataFlags=None, wipeReasonMessage=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Deletes a device. This operation wipes the device.</p>
 <p class="toc_element">
   <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
 <p class="firstline">Gets a device.</p>
 <p class="toc_element">
-  <code><a href="#issueCommand">issueCommand(name, body, x__xgafv=None)</a></code></p>
+  <code><a href="#issueCommand">issueCommand(name, body=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Issues a command to a device. The Operation resource returned contains a Command in its metadata field. Use the get operation method to get the status of the command.</p>
 <p class="toc_element">
   <code><a href="#list">list(parent, pageToken=None, x__xgafv=None, pageSize=None)</a></code></p>
@@ -95,16 +95,17 @@
   <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
 <p class="firstline">Retrieves the next page of results.</p>
 <p class="toc_element">
-  <code><a href="#patch">patch(name, body, updateMask=None, x__xgafv=None)</a></code></p>
+  <code><a href="#patch">patch(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Updates a device.</p>
 <h3>Method Details</h3>
 <div class="method">
-    <code class="details" id="delete">delete(name, wipeDataFlags=None, x__xgafv=None)</code>
+    <code class="details" id="delete">delete(name, wipeDataFlags=None, wipeReasonMessage=None, x__xgafv=None)</code>
   <pre>Deletes a device. This operation wipes the device.
 
 Args:
   name: string, The name of the device in the form enterprises/{enterpriseId}/devices/{deviceId}. (required)
   wipeDataFlags: string, Optional flags that control the device wiping behavior. (repeated)
+  wipeReasonMessage: string, Optional. A short message displayed to the user before wiping the work profile on personal devices. This has no effect on company owned devices. The maximum message length is 200 characters.
   x__xgafv: string, V1 error format.
     Allowed values
       1 - v1 error format
@@ -160,12 +161,7 @@
       ],
       "apiLevel": 42, # The API level of the Android platform version running on the device.
       "policyName": "A String", # The name of the policy applied to the device, in the form enterprises/{enterpriseId}/policies/{policyId}. If not specified, the policy_name for the device's user is applied. This field can be modified by a patch request. You can specify only the policyId when calling enterprises.devices.patch, as long as the policyId doesn’t contain any slashes. The rest of the policy name is inferred.
-      "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
-        "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
-        "localizedMessages": { # A map containing <locale, message> pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
-          "a_key": "A String",
-        },
-      },
+      "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
       "enrollmentTokenData": "A String", # If the device was enrolled with an enrollment token with additional data provided, this field contains that data.
       "softwareInfo": { # Information about device software. # Detailed information about the device software. This information is only available if softwareInfoEnabled is true in the device's policy.
         "primaryLanguageCode": "A String", # An IETF BCP 47 language code for the primary locale on the device.
@@ -202,7 +198,7 @@
               "lastUpdateTime": "A String", # The time the app state was most recently updated.
               "key": "A String", # The key for the app state. Acts as a point of reference for what the app is providing state for. For example, when providing managed configuration feedback, this key could be the managed configuration key.
               "message": "A String", # Optionally, a free-form message string to explain the app state. If the state was triggered by a particular value (e.g. a managed configuration value), it should be included in the message.
-              "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data < 10”).
+              "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data &lt; 10”).
               "createTime": "A String", # The creation time of the app state on the device.
             },
           ],
@@ -255,13 +251,34 @@
         "brand": "A String", # Brand of the device. For example, Google.
         "manufacturer": "A String", # Manufacturer. For example, Motorola.
       },
+      "securityPosture": { # The security posture of the device, as determined by the current device state and the policies applied. # Device's security posture value that reflects how secure the device is.
+        "devicePosture": "A String", # Device's security posture value.
+        "postureDetails": [ # Additional details regarding the security posture of the device.
+          { # Additional details regarding the security posture of the device.
+            "advice": [ # Corresponding admin-facing advice to mitigate this security risk and improve the security posture of the device.
+              { # Provides a user-facing message with locale info. The maximum message length is 4096 characters.
+                "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+                "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+                  "a_key": "A String",
+                },
+              },
+            ],
+            "securityRisk": "A String", # A specific security risk that negatively affects the security posture of the device.
+          },
+        ],
+      },
       "networkInfo": { # Device network info. # Device network information. This information is only available if networkInfoEnabled is true in the device's policy.
         "imei": "A String", # IMEI number of the GSM device. For example, A1000031212.
         "networkOperatorName": "A String", # Alphabetic name of current registered operator. For example, Vodafone.
         "meid": "A String", # MEID number of the CDMA device. For example, A00000292788E1.
         "wifiMacAddress": "A String", # Wi-Fi MAC address of the device. For example, 7c:11:11:11:11:11.
       },
-      "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
+      "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
+        "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+        "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+          "a_key": "A String",
+        },
+      },
       "memoryEvents": [ # Events related to memory and storage measurements in chronological order. This information is only available if memoryInfoEnabled is true in the device's policy.
         { # An event related to memory and storage measurements.
           "eventType": "A String", # Event type.
@@ -292,10 +309,10 @@
             3.14,
           ],
           "createTime": "A String", # The time the measurements were taken.
-          "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
+          "skinTemperatures": [ # Current device skin temperatures in Celsius.
             3.14,
           ],
-          "skinTemperatures": [ # Current device skin temperatures in Celsius.
+          "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
             3.14,
           ],
           "batteryTemperatures": [ # Current battery temperatures in Celsius for each battery on the device.
@@ -311,7 +328,7 @@
       ],
       "lastPolicySyncTime": "A String", # The last time the device fetched its policy.
       "appliedState": "A String", # The state currently applied to the device.
-      "systemProperties": { # Map of selected system properties name and value related to the device.
+      "systemProperties": { # Map of selected system properties name and value related to the device. This information is only available if systemPropertiesEnabled is true in the device's policy.
         "a_key": "A String",
       },
       "memoryInfo": { # Information about device memory and storage. # Memory information. This information is only available if memoryInfoEnabled is true in the device's policy.
@@ -323,12 +340,12 @@
 </div>
 
 <div class="method">
-    <code class="details" id="issueCommand">issueCommand(name, body, x__xgafv=None)</code>
+    <code class="details" id="issueCommand">issueCommand(name, body=None, x__xgafv=None)</code>
   <pre>Issues a command to a device. The Operation resource returned contains a Command in its metadata field. Use the get operation method to get the status of the command.
 
 Args:
   name: string, The name of the device in the form enterprises/{enterpriseId}/devices/{deviceId}. (required)
-  body: object, The request body. (required)
+  body: object, The request body.
     The object takes the form of:
 
 { # A command.
@@ -355,6 +372,11 @@
     "metadata": { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
       "a_key": "", # Properties of the object. Contains field @type with type URL.
     },
+    "done": True or False, # If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.
+    "response": { # The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is google.protobuf.Empty. If the original method is standard Get/Create/Update, the response should be the resource. For other methods, the response should have the type XxxResponse, where Xxx is the original method name. For example, if the original method name is TakeSnapshot(), the inferred response type is TakeSnapshotResponse.
+      "a_key": "", # Properties of the object. Contains field @type with type URL.
+    },
+    "name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id}.
     "error": { # The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC (https://github.com/grpc). Each Status message contains three pieces of data: error code, error message, and error details.You can find out more about this error model and how to work with it in the API Design Guide (https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
       "message": "A String", # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
       "code": 42, # The status code, which should be an enum value of google.rpc.Code.
@@ -364,11 +386,6 @@
         },
       ],
     },
-    "done": True or False, # If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.
-    "response": { # The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is google.protobuf.Empty. If the original method is standard Get/Create/Update, the response should be the resource. For other methods, the response should have the type XxxResponse, where Xxx is the original method name. For example, if the original method name is TakeSnapshot(), the inferred response type is TakeSnapshotResponse.
-      "a_key": "", # Properties of the object. Contains field @type with type URL.
-    },
-    "name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id}.
   }</pre>
 </div>
 
@@ -416,12 +433,7 @@
           ],
           "apiLevel": 42, # The API level of the Android platform version running on the device.
           "policyName": "A String", # The name of the policy applied to the device, in the form enterprises/{enterpriseId}/policies/{policyId}. If not specified, the policy_name for the device's user is applied. This field can be modified by a patch request. You can specify only the policyId when calling enterprises.devices.patch, as long as the policyId doesn’t contain any slashes. The rest of the policy name is inferred.
-          "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
-            "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
-            "localizedMessages": { # A map containing <locale, message> pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
-              "a_key": "A String",
-            },
-          },
+          "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
           "enrollmentTokenData": "A String", # If the device was enrolled with an enrollment token with additional data provided, this field contains that data.
           "softwareInfo": { # Information about device software. # Detailed information about the device software. This information is only available if softwareInfoEnabled is true in the device's policy.
             "primaryLanguageCode": "A String", # An IETF BCP 47 language code for the primary locale on the device.
@@ -458,7 +470,7 @@
                   "lastUpdateTime": "A String", # The time the app state was most recently updated.
                   "key": "A String", # The key for the app state. Acts as a point of reference for what the app is providing state for. For example, when providing managed configuration feedback, this key could be the managed configuration key.
                   "message": "A String", # Optionally, a free-form message string to explain the app state. If the state was triggered by a particular value (e.g. a managed configuration value), it should be included in the message.
-                  "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data < 10”).
+                  "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data &lt; 10”).
                   "createTime": "A String", # The creation time of the app state on the device.
                 },
               ],
@@ -511,13 +523,34 @@
             "brand": "A String", # Brand of the device. For example, Google.
             "manufacturer": "A String", # Manufacturer. For example, Motorola.
           },
+          "securityPosture": { # The security posture of the device, as determined by the current device state and the policies applied. # Device's security posture value that reflects how secure the device is.
+            "devicePosture": "A String", # Device's security posture value.
+            "postureDetails": [ # Additional details regarding the security posture of the device.
+              { # Additional details regarding the security posture of the device.
+                "advice": [ # Corresponding admin-facing advice to mitigate this security risk and improve the security posture of the device.
+                  { # Provides a user-facing message with locale info. The maximum message length is 4096 characters.
+                    "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+                    "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+                      "a_key": "A String",
+                    },
+                  },
+                ],
+                "securityRisk": "A String", # A specific security risk that negatively affects the security posture of the device.
+              },
+            ],
+          },
           "networkInfo": { # Device network info. # Device network information. This information is only available if networkInfoEnabled is true in the device's policy.
             "imei": "A String", # IMEI number of the GSM device. For example, A1000031212.
             "networkOperatorName": "A String", # Alphabetic name of current registered operator. For example, Vodafone.
             "meid": "A String", # MEID number of the CDMA device. For example, A00000292788E1.
             "wifiMacAddress": "A String", # Wi-Fi MAC address of the device. For example, 7c:11:11:11:11:11.
           },
-          "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
+          "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
+            "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+            "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+              "a_key": "A String",
+            },
+          },
           "memoryEvents": [ # Events related to memory and storage measurements in chronological order. This information is only available if memoryInfoEnabled is true in the device's policy.
             { # An event related to memory and storage measurements.
               "eventType": "A String", # Event type.
@@ -548,10 +581,10 @@
                 3.14,
               ],
               "createTime": "A String", # The time the measurements were taken.
-              "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
+              "skinTemperatures": [ # Current device skin temperatures in Celsius.
                 3.14,
               ],
-              "skinTemperatures": [ # Current device skin temperatures in Celsius.
+              "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
                 3.14,
               ],
               "batteryTemperatures": [ # Current battery temperatures in Celsius for each battery on the device.
@@ -567,7 +600,7 @@
           ],
           "lastPolicySyncTime": "A String", # The last time the device fetched its policy.
           "appliedState": "A String", # The state currently applied to the device.
-          "systemProperties": { # Map of selected system properties name and value related to the device.
+          "systemProperties": { # Map of selected system properties name and value related to the device. This information is only available if systemPropertiesEnabled is true in the device's policy.
             "a_key": "A String",
           },
           "memoryInfo": { # Information about device memory and storage. # Memory information. This information is only available if memoryInfoEnabled is true in the device's policy.
@@ -595,12 +628,12 @@
 </div>
 
 <div class="method">
-    <code class="details" id="patch">patch(name, body, updateMask=None, x__xgafv=None)</code>
+    <code class="details" id="patch">patch(name, body=None, updateMask=None, x__xgafv=None)</code>
   <pre>Updates a device.
 
 Args:
   name: string, The name of the device in the form enterprises/{enterpriseId}/devices/{deviceId}. (required)
-  body: object, The request body. (required)
+  body: object, The request body.
     The object takes the form of:
 
 { # A device owned by an enterprise. Unless otherwise noted, all fields are read-only and can't be modified by enterprises.devices.patch.
@@ -628,12 +661,7 @@
     ],
     "apiLevel": 42, # The API level of the Android platform version running on the device.
     "policyName": "A String", # The name of the policy applied to the device, in the form enterprises/{enterpriseId}/policies/{policyId}. If not specified, the policy_name for the device's user is applied. This field can be modified by a patch request. You can specify only the policyId when calling enterprises.devices.patch, as long as the policyId doesn’t contain any slashes. The rest of the policy name is inferred.
-    "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
-      "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
-      "localizedMessages": { # A map containing <locale, message> pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
-        "a_key": "A String",
-      },
-    },
+    "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
     "enrollmentTokenData": "A String", # If the device was enrolled with an enrollment token with additional data provided, this field contains that data.
     "softwareInfo": { # Information about device software. # Detailed information about the device software. This information is only available if softwareInfoEnabled is true in the device's policy.
       "primaryLanguageCode": "A String", # An IETF BCP 47 language code for the primary locale on the device.
@@ -670,7 +698,7 @@
             "lastUpdateTime": "A String", # The time the app state was most recently updated.
             "key": "A String", # The key for the app state. Acts as a point of reference for what the app is providing state for. For example, when providing managed configuration feedback, this key could be the managed configuration key.
             "message": "A String", # Optionally, a free-form message string to explain the app state. If the state was triggered by a particular value (e.g. a managed configuration value), it should be included in the message.
-            "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data < 10”).
+            "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data &lt; 10”).
             "createTime": "A String", # The creation time of the app state on the device.
           },
         ],
@@ -723,13 +751,34 @@
       "brand": "A String", # Brand of the device. For example, Google.
       "manufacturer": "A String", # Manufacturer. For example, Motorola.
     },
+    "securityPosture": { # The security posture of the device, as determined by the current device state and the policies applied. # Device's security posture value that reflects how secure the device is.
+      "devicePosture": "A String", # Device's security posture value.
+      "postureDetails": [ # Additional details regarding the security posture of the device.
+        { # Additional details regarding the security posture of the device.
+          "advice": [ # Corresponding admin-facing advice to mitigate this security risk and improve the security posture of the device.
+            { # Provides a user-facing message with locale info. The maximum message length is 4096 characters.
+              "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+              "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+                "a_key": "A String",
+              },
+            },
+          ],
+          "securityRisk": "A String", # A specific security risk that negatively affects the security posture of the device.
+        },
+      ],
+    },
     "networkInfo": { # Device network info. # Device network information. This information is only available if networkInfoEnabled is true in the device's policy.
       "imei": "A String", # IMEI number of the GSM device. For example, A1000031212.
       "networkOperatorName": "A String", # Alphabetic name of current registered operator. For example, Vodafone.
       "meid": "A String", # MEID number of the CDMA device. For example, A00000292788E1.
       "wifiMacAddress": "A String", # Wi-Fi MAC address of the device. For example, 7c:11:11:11:11:11.
     },
-    "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
+    "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
+      "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+      "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+        "a_key": "A String",
+      },
+    },
     "memoryEvents": [ # Events related to memory and storage measurements in chronological order. This information is only available if memoryInfoEnabled is true in the device's policy.
       { # An event related to memory and storage measurements.
         "eventType": "A String", # Event type.
@@ -760,10 +809,10 @@
           3.14,
         ],
         "createTime": "A String", # The time the measurements were taken.
-        "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
+        "skinTemperatures": [ # Current device skin temperatures in Celsius.
           3.14,
         ],
-        "skinTemperatures": [ # Current device skin temperatures in Celsius.
+        "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
           3.14,
         ],
         "batteryTemperatures": [ # Current battery temperatures in Celsius for each battery on the device.
@@ -779,7 +828,7 @@
     ],
     "lastPolicySyncTime": "A String", # The last time the device fetched its policy.
     "appliedState": "A String", # The state currently applied to the device.
-    "systemProperties": { # Map of selected system properties name and value related to the device.
+    "systemProperties": { # Map of selected system properties name and value related to the device. This information is only available if systemPropertiesEnabled is true in the device's policy.
       "a_key": "A String",
     },
     "memoryInfo": { # Information about device memory and storage. # Memory information. This information is only available if memoryInfoEnabled is true in the device's policy.
@@ -823,12 +872,7 @@
       ],
       "apiLevel": 42, # The API level of the Android platform version running on the device.
       "policyName": "A String", # The name of the policy applied to the device, in the form enterprises/{enterpriseId}/policies/{policyId}. If not specified, the policy_name for the device's user is applied. This field can be modified by a patch request. You can specify only the policyId when calling enterprises.devices.patch, as long as the policyId doesn’t contain any slashes. The rest of the policy name is inferred.
-      "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
-        "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
-        "localizedMessages": { # A map containing <locale, message> pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
-          "a_key": "A String",
-        },
-      },
+      "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
       "enrollmentTokenData": "A String", # If the device was enrolled with an enrollment token with additional data provided, this field contains that data.
       "softwareInfo": { # Information about device software. # Detailed information about the device software. This information is only available if softwareInfoEnabled is true in the device's policy.
         "primaryLanguageCode": "A String", # An IETF BCP 47 language code for the primary locale on the device.
@@ -865,7 +909,7 @@
               "lastUpdateTime": "A String", # The time the app state was most recently updated.
               "key": "A String", # The key for the app state. Acts as a point of reference for what the app is providing state for. For example, when providing managed configuration feedback, this key could be the managed configuration key.
               "message": "A String", # Optionally, a free-form message string to explain the app state. If the state was triggered by a particular value (e.g. a managed configuration value), it should be included in the message.
-              "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data < 10”).
+              "data": "A String", # Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data &lt; 10”).
               "createTime": "A String", # The creation time of the app state on the device.
             },
           ],
@@ -918,13 +962,34 @@
         "brand": "A String", # Brand of the device. For example, Google.
         "manufacturer": "A String", # Manufacturer. For example, Motorola.
       },
+      "securityPosture": { # The security posture of the device, as determined by the current device state and the policies applied. # Device's security posture value that reflects how secure the device is.
+        "devicePosture": "A String", # Device's security posture value.
+        "postureDetails": [ # Additional details regarding the security posture of the device.
+          { # Additional details regarding the security posture of the device.
+            "advice": [ # Corresponding admin-facing advice to mitigate this security risk and improve the security posture of the device.
+              { # Provides a user-facing message with locale info. The maximum message length is 4096 characters.
+                "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+                "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+                  "a_key": "A String",
+                },
+              },
+            ],
+            "securityRisk": "A String", # A specific security risk that negatively affects the security posture of the device.
+          },
+        ],
+      },
       "networkInfo": { # Device network info. # Device network information. This information is only available if networkInfoEnabled is true in the device's policy.
         "imei": "A String", # IMEI number of the GSM device. For example, A1000031212.
         "networkOperatorName": "A String", # Alphabetic name of current registered operator. For example, Vodafone.
         "meid": "A String", # MEID number of the CDMA device. For example, A00000292788E1.
         "wifiMacAddress": "A String", # Wi-Fi MAC address of the device. For example, 7c:11:11:11:11:11.
       },
-      "managementMode": "A String", # The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
+      "disabledReason": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
+        "defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
+        "localizedMessages": { # A map containing &lt;locale, message&gt; pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
+          "a_key": "A String",
+        },
+      },
       "memoryEvents": [ # Events related to memory and storage measurements in chronological order. This information is only available if memoryInfoEnabled is true in the device's policy.
         { # An event related to memory and storage measurements.
           "eventType": "A String", # Event type.
@@ -955,10 +1020,10 @@
             3.14,
           ],
           "createTime": "A String", # The time the measurements were taken.
-          "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
+          "skinTemperatures": [ # Current device skin temperatures in Celsius.
             3.14,
           ],
-          "skinTemperatures": [ # Current device skin temperatures in Celsius.
+          "cpuUsages": [ # CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
             3.14,
           ],
           "batteryTemperatures": [ # Current battery temperatures in Celsius for each battery on the device.
@@ -974,7 +1039,7 @@
       ],
       "lastPolicySyncTime": "A String", # The last time the device fetched its policy.
       "appliedState": "A String", # The state currently applied to the device.
-      "systemProperties": { # Map of selected system properties name and value related to the device.
+      "systemProperties": { # Map of selected system properties name and value related to the device. This information is only available if systemPropertiesEnabled is true in the device's policy.
         "a_key": "A String",
       },
       "memoryInfo": { # Information about device memory and storage. # Memory information. This information is only available if memoryInfoEnabled is true in the device's policy.