diff --git a/console/src/app/guards/auth.guard.ts b/console/src/app/guards/auth.guard.ts
index f95cd6a9ca..867443becb 100644
--- a/console/src/app/guards/auth.guard.ts
+++ b/console/src/app/guards/auth.guard.ts
@@ -16,6 +16,7 @@ export class AuthGuard implements CanActivate {
         state: RouterStateSnapshot,
     ): Observable<boolean> | Promise<boolean> | boolean {
         if (!this.auth.authenticated) {
+            console.log('authenticate');
             return this.auth.authenticate();
         }
         return this.auth.authenticated;
diff --git a/console/src/app/modules/search-project-autocomplete/search-project-autocomplete.component.ts b/console/src/app/modules/search-project-autocomplete/search-project-autocomplete.component.ts
index 6a2bf065a5..8368672cea 100644
--- a/console/src/app/modules/search-project-autocomplete/search-project-autocomplete.component.ts
+++ b/console/src/app/modules/search-project-autocomplete/search-project-autocomplete.component.ts
@@ -5,7 +5,12 @@ import { MatAutocomplete, MatAutocompleteSelectedEvent } from '@angular/material
 import { MatChipInputEvent } from '@angular/material/chips';
 import { from } from 'rxjs';
 import { debounceTime, switchMap, tap } from 'rxjs/operators';
-import { Project, ProjectSearchKey, ProjectSearchQuery, SearchMethod } from 'src/app/proto/generated/management_pb';
+import {
+    GrantedProjectSearchKey,
+    GrantedProjectSearchQuery,
+    Project,
+    SearchMethod,
+} from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -34,11 +39,11 @@ export class SearchProjectAutocompleteComponent {
                 debounceTime(200),
                 tap(() => this.isLoading = true),
                 switchMap(value => {
-                    const query = new ProjectSearchQuery();
-                    query.setKey(ProjectSearchKey.PROJECTSEARCHKEY_PROJECT_NAME);
+                    const query = new GrantedProjectSearchQuery();
+                    query.setKey(GrantedProjectSearchKey.PROJECTSEARCHKEY_PROJECT_NAME);
                     query.setValue(value);
                     query.setMethod(SearchMethod.SEARCHMETHOD_CONTAINS);
-                    return from(this.projectService.SearchProjects(10, 0, [query]));
+                    return from(this.projectService.SearchGrantedProjects(10, 0, [query]));
                 }),
                 // finalize(() => this.isLoading = false),
             ).subscribe((projects) => {
diff --git a/console/src/app/pages/orgs/org-create/org-create.component.ts b/console/src/app/pages/orgs/org-create/org-create.component.ts
index 7e9ae553ab..1f43c04bcc 100644
--- a/console/src/app/pages/orgs/org-create/org-create.component.ts
+++ b/console/src/app/pages/orgs/org-create/org-create.component.ts
@@ -3,7 +3,7 @@ import { Location } from '@angular/common';
 import { Component } from '@angular/core';
 import { AbstractControl, FormBuilder, FormGroup, Validators } from '@angular/forms';
 import { Router } from '@angular/router';
-import { CreateOrgRequest, Gender, OrgSetUpResponse, RegisterUserRequest } from 'src/app/proto/generated/admin_pb';
+import { CreateOrgRequest, CreateUserRequest, Gender, OrgSetUpResponse } from 'src/app/proto/generated/admin_pb';
 import { AdminService } from 'src/app/services/admin.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -77,7 +77,7 @@ export class OrgCreateComponent {
         createOrgRequest.setName(this.name?.value);
         createOrgRequest.setDomain(this.domain?.value);
 
-        const registerUserRequest: RegisterUserRequest = new RegisterUserRequest();
+        const registerUserRequest: CreateUserRequest = new CreateUserRequest();
         registerUserRequest.setEmail(this.email?.value);
         registerUserRequest.setFirstName(this.firstName?.value);
         registerUserRequest.setLastName(this.lastName?.value);
diff --git a/console/src/app/pages/projects/project-contributors/project-contributors.component.ts b/console/src/app/pages/projects/project-contributors/project-contributors.component.ts
index ace5abcd3e..ffc9552841 100644
--- a/console/src/app/pages/projects/project-contributors/project-contributors.component.ts
+++ b/console/src/app/pages/projects/project-contributors/project-contributors.component.ts
@@ -5,7 +5,7 @@ import { BehaviorSubject, from, of } from 'rxjs';
 import { catchError, finalize, map } from 'rxjs/operators';
 import { User } from 'src/app/proto/generated/auth_pb';
 import {
-    Project,
+    GrantedProject,
     ProjectMember,
     ProjectMemberSearchResponse,
     ProjectState,
@@ -25,7 +25,7 @@ import {
     styleUrls: ['./project-contributors.component.scss'],
 })
 export class ProjectContributorsComponent implements OnInit {
-    @Input() public project!: Project.AsObject;
+    @Input() public project!: GrantedProject.AsObject;
     @Input() public disabled: boolean = false;
 
     public totalResult: number = 0;
@@ -40,7 +40,7 @@ export class ProjectContributorsComponent implements OnInit {
 
     public ngOnInit(): void {
         const promise: Promise<ProjectMemberSearchResponse> | undefined =
-            this.project.type === ProjectType.PROJECTTYPE_SELF ?
+            this.project.type === ProjectType.PROJECTTYPE_OWNED ?
                 this.projectService.SearchProjectMembers(this.project.id, 100, 0) :
                 this.project.type === ProjectType.PROJECTTYPE_GRANTED ?
                     this.projectService.SearchProjectGrantMembers(this.project.id, this.project.grantId, 100, 0) : undefined;
@@ -64,7 +64,7 @@ export class ProjectContributorsComponent implements OnInit {
             data: {
                 creationType: this.project.type ===
                     ProjectType.PROJECTTYPE_GRANTED ? CreationType.PROJECT_GRANTED :
-                    ProjectType.PROJECTTYPE_SELF ? CreationType.PROJECT_OWNED : undefined,
+                    ProjectType.PROJECTTYPE_OWNED ? CreationType.PROJECT_OWNED : undefined,
                 projectId: this.project.id,
             },
             width: '400px',
diff --git a/console/src/app/pages/projects/project-detail/project-detail.component.html b/console/src/app/pages/projects/project-detail/project-detail.component.html
index ac77f5ae5b..7bba334666 100644
--- a/console/src/app/pages/projects/project-detail/project-detail.component.html
+++ b/console/src/app/pages/projects/project-detail/project-detail.component.html
@@ -6,11 +6,11 @@
             </a>
             <h1>{{ 'PROJECT.PAGES.TITLE' | translate }} {{project?.name}}</h1>
             <ng-template appHasRole [appHasRole]="['project.write:'+projectId, 'project.write']">
-                <button *ngIf="project?.type == ProjectType.PROJECTTYPE_SELF" mat-icon-button
+                <!-- <button *ngIf="project?.type == ProjectType.PROJECTTYPE_OWNED" mat-icon-button
                     (click)="editstate = !editstate" aria-label="Edit project name">
                     <mat-icon *ngIf="!editstate">edit</mat-icon>
                     <mat-icon *ngIf="editstate">close</mat-icon>
-                </button>
+                </button> -->
             </ng-template>
 
             <div class="full-width">
@@ -35,7 +35,7 @@
         </div>
 
         <!-- show only on owned projects-->
-        <ng-container *ngIf="project?.type === ProjectType.PROJECTTYPE_SELF; else granteddetail">
+        <ng-container *ngIf="project && projectType == ProjectType.PROJECTTYPE_OWNED; else granteddetail">
             <ng-template appHasRole [appHasRole]="['project.app.read:' + project.id, 'project.app.read']">
                 <app-project-application-grid *ngIf="grid"
                     [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE" (changeView)="grid = false"
@@ -65,7 +65,7 @@
                     <app-card title="{{ 'PROJECT.ROLE.TITLE' | translate }}"
                         description="{{ 'PROJECT.ROLE.DESCRIPTION' | translate }}">
                         <app-project-roles [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE"
-                            [actionsVisible]="project?.type == ProjectType.PROJECTTYPE_SELF" [projectId]="projectId">
+                            [actionsVisible]="true" [projectId]="projectId">
                         </app-project-roles>
                     </app-card>
                 </ng-template>
@@ -85,7 +85,7 @@
         <div class="details">
             <div class="row">
                 <span class="first">{{'PROJECT.TYPE.TITLE' | translate}}:</span>
-                <span class="second" *ngIf="project?.type">{{'PROJECT.TYPE.'+ project.type | translate}}</span>
+                <span class="second" *ngIf="projectType">{{'PROJECT.TYPE.'+ projectType | translate}}</span>
             </div>
             <div class="row">
                 <span class="first">{{'PROJECT.STATE.TITLE' | translate}}:</span>
@@ -94,7 +94,7 @@
             </div>
         </div>
 
-        <ng-container *ngIf="project?.type === ProjectType.PROJECTTYPE_SELF; else grantedmeta">
+        <ng-container *ngIf="projectType === ProjectType.PROJECTTYPE_OWNED; else grantedmeta">
             <mat-tab-group mat-stretch-tabs class="tab-group" disablePagination="true">
                 <mat-tab label="Details">
                     <app-project-contributors *ngIf="project"
diff --git a/console/src/app/pages/projects/project-detail/project-detail.component.ts b/console/src/app/pages/projects/project-detail/project-detail.component.ts
index 362d7fef6d..2876f694da 100644
--- a/console/src/app/pages/projects/project-detail/project-detail.component.ts
+++ b/console/src/app/pages/projects/project-detail/project-detail.component.ts
@@ -29,7 +29,9 @@ import { ToastService } from 'src/app/services/toast.service';
 })
 export class ProjectDetailComponent implements OnInit, OnDestroy {
     public projectId: string = '';
-    public project!: Project.AsObject;
+    public grantId: string = '';
+    public project!: Project.AsObject; // ProjectGrant.AsObject;
+    public projectType: ProjectType = ProjectType.PROJECTTYPE_OWNED;
 
     public pageSizeRoles: number = 10;
     public roleDataSource: MatTableDataSource<ProjectRole.AsObject> = new MatTableDataSource<ProjectRole.AsObject>();
@@ -75,26 +77,40 @@ export class ProjectDetailComponent implements OnInit, OnDestroy {
         this.subscription?.unsubscribe();
     }
 
-    private async getData({ id }: Params): Promise<void> {
+    private async getData({ id, grantId }: Params): Promise<void> {
         this.projectId = id;
-        this.projectService.GetProjectById(id).then(proj => {
-            this.project = proj.toObject();
-            if (this.project.type !== ProjectType.PROJECTTYPE_SELF ||
-                this.project.state === ProjectState.PROJECTSTATE_INACTIVE ||
-                this.project.state === ProjectState.PROJECTSTATE_UNSPECIFIED) {
-            }
+        this.grantId = grantId;
 
-            this.isZitadel$ = from(this.projectService.SearchApplications(this.project.id, 100, 0).then(appsResp => {
-                const ret = appsResp.toObject().resultList
-                    .filter(app => app.oidcConfig?.clientId === this.grpcService.clientid).length > 0;
-                return ret;
-            })); // TODO: replace with prettier thing
-        }).catch(error => {
-            this.toast.showError(error.message);
-        });
+        if (grantId) {
+            // this.projectService.GetGrantedProjectGrantByID(id, this.grantId).then(proj => {
+            //     this.projectGrant = proj.toObject();
+            //     this.isZitadel$ = from(this.projectService.SearchApplications(this.project.id, 100, 0).then(appsResp => {
+            //         const ret = appsResp.toObject().resultList
+            //             .filter(app => app.oidcConfig?.clientId === this.grpcService.clientid).length > 0;
+            //         return ret;
+            //     })); // TODO: replace with prettier thing
+            // }).catch(error => {
+            //     this.toast.showError(error.message);
+            // });
+        } else {
+            this.projectService.GetProjectById(id).then(proj => {
+                this.project = proj.toObject();
+                // if (this.project.type !== ProjectType.PROJECTTYPE_SELF ||
+                //     this.project.state === ProjectState.PROJECTSTATE_INACTIVE ||
+                //     this.project.state === ProjectState.PROJECTSTATE_UNSPECIFIED) {
+                // }
+
+                this.isZitadel$ = from(this.projectService.SearchApplications(this.project.id, 100, 0).then(appsResp => {
+                    const ret = appsResp.toObject().resultList
+                        .filter(app => app.oidcConfig?.clientId === this.grpcService.clientid).length > 0;
+                    return ret;
+                })); // TODO: replace with prettier thing
+            }).catch(error => {
+                this.toast.showError(error.message);
+            });
+        }
     }
 
-
     public changeState(newState: ProjectState): void {
         if (newState === ProjectState.PROJECTSTATE_ACTIVE) {
             this.projectService.ReactivateProject(this.projectId).then(() => {
diff --git a/console/src/app/pages/projects/project-grant-members/project-grant-members-datasource.ts b/console/src/app/pages/projects/project-grant-members/project-grant-members-datasource.ts
index 1b0247c376..0955a30ec9 100644
--- a/console/src/app/pages/projects/project-grant-members/project-grant-members-datasource.ts
+++ b/console/src/app/pages/projects/project-grant-members/project-grant-members-datasource.ts
@@ -1,7 +1,7 @@
 import { DataSource } from '@angular/cdk/collections';
 import { BehaviorSubject, from, Observable, of } from 'rxjs';
 import { catchError, finalize, map } from 'rxjs/operators';
-import { Project, ProjectMember } from 'src/app/proto/generated/management_pb';
+import { GrantedProject, ProjectMember } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 
 /**
@@ -19,7 +19,7 @@ export class ProjectGrantMembersDataSource extends DataSource<ProjectMember.AsOb
         super();
     }
 
-    public loadMembers(project: Project.AsObject, pageIndex: number, pageSize: number, sortDirection?: string): void {
+    public loadMembers(project: GrantedProject.AsObject, pageIndex: number, pageSize: number, sortDirection?: string): void {
         const offset = pageIndex * pageSize;
 
         this.loadingSubject.next(true);
diff --git a/console/src/app/pages/projects/project-grant-members/project-grant-members.component.ts b/console/src/app/pages/projects/project-grant-members/project-grant-members.component.ts
index 878d786558..3d0428fdf5 100644
--- a/console/src/app/pages/projects/project-grant-members/project-grant-members.component.ts
+++ b/console/src/app/pages/projects/project-grant-members/project-grant-members.component.ts
@@ -5,7 +5,7 @@ import { MatPaginator } from '@angular/material/paginator';
 import { MatTable } from '@angular/material/table';
 import { ActivatedRoute } from '@angular/router';
 import { tap } from 'rxjs/operators';
-import { Project, ProjectMember, User } from 'src/app/proto/generated/management_pb';
+import { GrantedProject, ProjectMember, User } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -21,7 +21,7 @@ import { ProjectGrantMembersDataSource } from './project-grant-members-datasourc
     styleUrls: ['./project-grant-members.component.scss'],
 })
 export class ProjectGrantMembersComponent implements AfterViewInit, OnInit {
-    @Input() public project!: Project.AsObject;
+    @Input() public project!: GrantedProject.AsObject;
     public disabled: boolean = false;
     @ViewChild(MatPaginator) public paginator!: MatPaginator;
     @ViewChild(MatTable) public table!: MatTable<ProjectMember.AsObject>;
diff --git a/console/src/app/pages/projects/project-grid/project-grid.component.html b/console/src/app/pages/projects/project-grid/project-grid.component.html
index 84b1bc9898..4f0f834332 100644
--- a/console/src/app/pages/projects/project-grid/project-grid.component.html
+++ b/console/src/app/pages/projects/project-grid/project-grid.component.html
@@ -23,16 +23,14 @@
         <mat-icon matTooltip="select item" (click)="selection.toggle(item)" class="selection-icon">
             check_circle</mat-icon>
         <div class="text-part">
-            <!-- <span *ngIf="item?.creationDate"
-                class="top">{{item?.creationDate?.toDate() | date: 'dd. MMM, HH:mm'}}</span> -->
             <span *ngIf="item.changeDate" class="top">last modified on
                 {{
                         dateFromTimestamp(item.changeDate) | date: 'EEE dd. MMM, HH:mm'
             }}</span>
             <span class="name" *ngIf="item.name">{{ item.name }}</span>
             <span class="description" *ngIf="item.state">{{'PROJECT.STATE.'+item.state | translate}}</span>
-            <span class="description" *ngIf="item.type">{{'PROJECT.TYPE.TITLE' | translate}}:
-                {{'PROJECT.TYPE.'+item.type | translate}}</span>
+            <!-- <span class="description" *ngIf="item.type">{{'PROJECT.TYPE.TITLE' | translate}}:
+                {{'PROJECT.TYPE.'+item.type | translate}}</span> -->
             <span *ngIf="item.changeDate" class="created">created on
                 {{
                         dateFromTimestamp(item.creationDate) | date: 'EEE dd. MMM, HH:mm'
diff --git a/console/src/app/pages/projects/project-grid/project-grid.component.ts b/console/src/app/pages/projects/project-grid/project-grid.component.ts
index bc80cd3a86..084a878ca8 100644
--- a/console/src/app/pages/projects/project-grid/project-grid.component.ts
+++ b/console/src/app/pages/projects/project-grid/project-grid.component.ts
@@ -3,7 +3,7 @@ import { SelectionModel } from '@angular/cdk/collections';
 import { Component, EventEmitter, Input, Output } from '@angular/core';
 import { Router } from '@angular/router';
 import { Timestamp } from 'google-protobuf/google/protobuf/timestamp_pb';
-import { Project, ProjectState } from 'src/app/proto/generated/management_pb';
+import { GrantedProject, Project, ProjectState } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -45,9 +45,13 @@ export class ProjectGridComponent {
 
     constructor(private router: Router, private projectService: ProjectService, private toast: ToastService) { }
 
-    public selectItem(item: Project.AsObject, event?: any): void {
+    public selectItem(item: GrantedProject.AsObject, event?: any): void {
         if (event && !event.target.classList.contains('mat-icon')) {
-            this.router.navigate(['/projects', item.id]);
+            if (item.grantId) {
+                this.router.navigate(['/project-grant', `${item.id}:${item.grantId}`]);
+            } else {
+                this.router.navigate(['/projects', item.id]);
+            }
         } else if (!event) {
             this.router.navigate(['/projects', item.id]);
         }
diff --git a/console/src/app/pages/projects/project-list/project-list.component.ts b/console/src/app/pages/projects/project-list/project-list.component.ts
index 3559c90f29..1ded5612d3 100644
--- a/console/src/app/pages/projects/project-list/project-list.component.ts
+++ b/console/src/app/pages/projects/project-list/project-list.component.ts
@@ -7,7 +7,7 @@ import { ActivatedRoute, Router } from '@angular/router';
 import { TranslateService } from '@ngx-translate/core';
 import { Timestamp } from 'google-protobuf/google/protobuf/timestamp_pb';
 import { BehaviorSubject, Observable, Subscription } from 'rxjs';
-import { Project } from 'src/app/proto/generated/management_pb';
+import { GrantedProject, Project } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -37,8 +37,8 @@ import { ToastService } from 'src/app/services/toast.service';
 })
 export class ProjectListComponent implements OnInit {
     public totalResult: number = 0;
-    public dataSource: MatTableDataSource<Project.AsObject> = new MatTableDataSource<Project.AsObject>();
-    public projectList: Project.AsObject[] = [];
+    public dataSource: MatTableDataSource<GrantedProject.AsObject> = new MatTableDataSource<GrantedProject.AsObject>();
+    public projectList: GrantedProject.AsObject[] = [];
     public displayedColumns: string[] = ['select', 'name', 'orgName', 'orgDomain', 'type', 'state', 'creationDate', 'changeDate'];
     public selection: SelectionModel<Project.AsObject> = new SelectionModel<Project.AsObject>(true, []);
     private loadingSubject: BehaviorSubject<boolean> = new BehaviorSubject<boolean>(false);
@@ -79,13 +79,16 @@ export class ProjectListComponent implements OnInit {
     }
 
     private async getData(limit: number, offset: number): Promise<void> {
+        console.log('getprojects');
         this.loadingSubject.next(true);
-        this.projectService.SearchProjects(limit, offset).then(res => {
+        this.projectService.SearchGrantedProjects(limit, offset).then(res => {
             this.projectList = res.toObject().resultList;
             this.totalResult = res.toObject().totalResult;
             this.dataSource.data = this.projectList;
             this.loadingSubject.next(false);
+            console.log(this.projectList);
         }).catch(error => {
+            console.error(error);
             this.toast.showError(error.message);
             this.loadingSubject.next(false);
         });
diff --git a/console/src/app/pages/projects/project-members/project-members-datasource.ts b/console/src/app/pages/projects/project-members/project-members-datasource.ts
index d1d8b2170e..859580c395 100644
--- a/console/src/app/pages/projects/project-members/project-members-datasource.ts
+++ b/console/src/app/pages/projects/project-members/project-members-datasource.ts
@@ -1,7 +1,6 @@
 import { DataSource } from '@angular/cdk/collections';
-import { BehaviorSubject, from, Observable, of } from 'rxjs';
-import { catchError, finalize, map } from 'rxjs/operators';
-import { Project, ProjectMember, ProjectMemberSearchResponse, ProjectType } from 'src/app/proto/generated/management_pb';
+import { BehaviorSubject, Observable } from 'rxjs';
+import { Project, ProjectMember } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 
 /**
@@ -23,24 +22,25 @@ export class ProjectMembersDataSource extends DataSource<ProjectMember.AsObject>
         const offset = pageIndex * pageSize;
 
         this.loadingSubject.next(true);
-
-        const promise: Promise<ProjectMemberSearchResponse> | undefined =
-            project.type === ProjectType.PROJECTTYPE_SELF ?
-                this.projectService.SearchProjectMembers(project.id, pageSize, offset) :
-                project.type === ProjectType.PROJECTTYPE_GRANTED ?
-                    this.projectService.SearchProjectGrantMembers(project.id, project.grantId, pageSize, offset) : undefined;
-        if (promise) {
-            from(promise).pipe(
-                map(resp => {
-                    this.totalResult = resp.toObject().totalResult;
-                    return resp.toObject().resultList;
-                }),
-                catchError(() => of([])),
-                finalize(() => this.loadingSubject.next(false)),
-            ).subscribe(members => {
-                this.membersSubject.next(members);
-            });
-        }
+        // TODO
+        // const promise: Promise<ProjectMemberSearchResponse> | undefined =
+        //     project.type === ProjectType.PROJECTTYPE_OWNED ?
+        //         this.projectService.SearchProjectMembers(project.id, pageSize, offset) :
+        //         project.type === ProjectType.PROJECTTYPE_GRANTED ?
+        //             this.projectService.SearchProjectGrantMembers(project.id,
+        // project.grantId, pageSize, offset) : undefined;
+        // if (promise) {
+        //     from(promise).pipe(
+        //         map(resp => {
+        //             this.totalResult = resp.toObject().totalResult;
+        //             return resp.toObject().resultList;
+        //         }),
+        //         catchError(() => of([])),
+        //         finalize(() => this.loadingSubject.next(false)),
+        //     ).subscribe(members => {
+        //         this.membersSubject.next(members);
+        //     });
+        // }
     }
 
 
diff --git a/console/src/app/pages/projects/project-members/project-members.component.ts b/console/src/app/pages/projects/project-members/project-members.component.ts
index 0f38a89914..54c4b686f7 100644
--- a/console/src/app/pages/projects/project-members/project-members.component.ts
+++ b/console/src/app/pages/projects/project-members/project-members.component.ts
@@ -5,14 +5,10 @@ import { MatPaginator } from '@angular/material/paginator';
 import { MatTable } from '@angular/material/table';
 import { ActivatedRoute } from '@angular/router';
 import { tap } from 'rxjs/operators';
-import { Project, ProjectMember, ProjectType, User } from 'src/app/proto/generated/management_pb';
+import { Project, ProjectMember } from 'src/app/proto/generated/management_pb';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
-import {
-    CreationType,
-    ProjectMemberCreateDialogComponent,
-} from '../../../modules/add-member-dialog/project-member-create-dialog.component';
 import { ProjectMembersDataSource } from './project-members-datasource';
 
 @Component({
@@ -92,31 +88,33 @@ export class ProjectMembersComponent implements AfterViewInit {
     }
 
     public openAddMember(): void {
-        const dialogRef = this.dialog.open(ProjectMemberCreateDialogComponent, {
-            data: {
-                creationType: this.project.type ===
-                    ProjectType.PROJECTTYPE_GRANTED ? CreationType.PROJECT_GRANTED :
-                    ProjectType.PROJECTTYPE_SELF ? CreationType.PROJECT_OWNED : undefined,
-                projectId: this.project.id,
-            },
-            width: '400px',
-        });
 
-        dialogRef.afterClosed().subscribe(resp => {
-            if (resp) {
-                const users: User.AsObject[] = resp.users;
-                const roles: string[] = resp.roles;
+        // TODO
+        // const dialogRef = this.dialog.open(ProjectMemberCreateDialogComponent, {
+        //     data: {
+        //         creationType: this.project.type ===
+        //             ProjectType.PROJECTTYPE_GRANTED ? CreationType.PROJECT_GRANTED :
+        //             ProjectType.PROJECTTYPE_OWNED ? CreationType.PROJECT_OWNED : undefined,
+        //         projectId: this.project.id,
+        //     },
+        //     width: '400px',
+        // });
 
-                if (users && users.length && roles && roles.length) {
-                    Promise.all(users.map(user => {
-                        return this.projectService.AddProjectMember(this.project.id, user.id, roles);
-                    })).then(() => {
-                        this.toast.showError('members added');
-                    }).catch(error => {
-                        this.toast.showError(error.message);
-                    });
-                }
-            }
-        });
+        // dialogRef.afterClosed().subscribe(resp => {
+        //     if (resp) {
+        //         const users: User.AsObject[] = resp.users;
+        //         const roles: string[] = resp.roles;
+
+        //         if (users && users.length && roles && roles.length) {
+        //             Promise.all(users.map(user => {
+        //                 return this.projectService.AddProjectMember(this.project.id, user.id, roles);
+        //             })).then(() => {
+        //                 this.toast.showError('members added');
+        //             }).catch(error => {
+        //                 this.toast.showError(error.message);
+        //             });
+        //         }
+        //     }
+        // });
     }
 }
diff --git a/console/src/app/pages/projects/projects-routing.module.ts b/console/src/app/pages/projects/projects-routing.module.ts
index d93703e921..d003c96ef3 100644
--- a/console/src/app/pages/projects/projects-routing.module.ts
+++ b/console/src/app/pages/projects/projects-routing.module.ts
@@ -14,6 +14,11 @@ const routes: Routes = [
         path: 'create',
         loadChildren: () => import('../project-create/project-create.module').then(m => m.ProjectCreateModule),
     },
+    {
+        path: ':id/grant/:grantId',
+        component: ProjectDetailComponent,
+        data: { animation: 'HomePage' },
+    },
     {
         path: ':id',
         component: ProjectDetailComponent,
diff --git a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
index 4e35c0e127..6cae22da97 100644
--- a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
+++ b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
@@ -125,9 +125,11 @@ export class AuthUserDetailComponent implements OnDestroy {
     }
 
     public setPassword(): void {
-        if (this.passwordForm.valid && this.newPassword && this.newPassword.value && this.newPassword.valid) {
+        if (this.passwordForm.valid && this.currentPassword &&
+            this.currentPassword.value &&
+            this.newPassword && this.newPassword.value && this.newPassword.valid) {
             this.userService
-                .SetMyPassword(this.newPassword.value).then((data: any) => {
+                .ChangeMyPassword(this.currentPassword.value, this.newPassword.value).then((data: any) => {
                     this.toast.showInfo('Password Set');
                     this.email = data.toObject();
                 }).catch(data => {
diff --git a/console/src/app/proto/generated/admin_grpc_web_pb.js b/console/src/app/proto/generated/admin_grpc_web_pb.js
index 661541389d..785a9e5446 100644
--- a/console/src/app/proto/generated/admin_grpc_web_pb.js
+++ b/console/src/app/proto/generated/admin_grpc_web_pb.js
@@ -1,5 +1,5 @@
 /**
- * @fileoverview gRPC-Web generated client stub for zitadel.admin.api.v1
+ * @fileoverview gRPC-Web generated client stub for caos.zitadel.admin.api.v1
  * @enhanceable
  * @public
  */
@@ -26,10 +26,11 @@ var protoc$gen$swagger_options_annotations_pb = require('./protoc-gen-swagger/op
 
 var authoption_options_pb = require('./authoption/options_pb.js')
 const proto = {};
-proto.zitadel = {};
-proto.zitadel.admin = {};
-proto.zitadel.admin.api = {};
-proto.zitadel.admin.api.v1 = require('./admin_pb.js');
+proto.caos = {};
+proto.caos.zitadel = {};
+proto.caos.zitadel.admin = {};
+proto.caos.zitadel.admin.api = {};
+proto.caos.zitadel.admin.api.v1 = require('./admin_pb.js');
 
 /**
  * @param {string} hostname
@@ -39,7 +40,7 @@ proto.zitadel.admin.api.v1 = require('./admin_pb.js');
  * @struct
  * @final
  */
-proto.zitadel.admin.api.v1.AdminServiceClient =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient =
     function(hostname, credentials, options) {
   if (!options) options = {};
   options['format'] = 'binary';
@@ -65,7 +66,7 @@ proto.zitadel.admin.api.v1.AdminServiceClient =
  * @struct
  * @final
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient =
     function(hostname, credentials, options) {
   if (!options) options = {};
   options['format'] = 'binary';
@@ -90,7 +91,7 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AdminService_Healthz = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/Healthz',
+  '/caos.zitadel.admin.api.v1.AdminService/Healthz',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -134,10 +135,10 @@ const methodInfo_AdminService_Healthz = new grpc.web.AbstractClientBase.MethodIn
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.healthz =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.healthz =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Healthz',
+      '/caos.zitadel.admin.api.v1.AdminService/Healthz',
       request,
       metadata || {},
       methodDescriptor_AdminService_Healthz,
@@ -153,10 +154,10 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.healthz =
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.healthz =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.healthz =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Healthz',
+      '/caos.zitadel.admin.api.v1.AdminService/Healthz',
       request,
       metadata || {},
       methodDescriptor_AdminService_Healthz);
@@ -170,7 +171,7 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.healthz =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AdminService_Ready = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/Ready',
+  '/caos.zitadel.admin.api.v1.AdminService/Ready',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -214,10 +215,10 @@ const methodInfo_AdminService_Ready = new grpc.web.AbstractClientBase.MethodInfo
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.ready =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.ready =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Ready',
+      '/caos.zitadel.admin.api.v1.AdminService/Ready',
       request,
       metadata || {},
       methodDescriptor_AdminService_Ready,
@@ -233,10 +234,10 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.ready =
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.ready =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.ready =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Ready',
+      '/caos.zitadel.admin.api.v1.AdminService/Ready',
       request,
       metadata || {},
       methodDescriptor_AdminService_Ready);
@@ -250,7 +251,7 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.ready =
  *   !proto.google.protobuf.Struct>}
  */
 const methodDescriptor_AdminService_Validate = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/Validate',
+  '/caos.zitadel.admin.api.v1.AdminService/Validate',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_struct_pb.Struct,
@@ -294,10 +295,10 @@ const methodInfo_AdminService_Validate = new grpc.web.AbstractClientBase.MethodI
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Struct>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.validate =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.validate =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Validate',
+      '/caos.zitadel.admin.api.v1.AdminService/Validate',
       request,
       metadata || {},
       methodDescriptor_AdminService_Validate,
@@ -313,10 +314,10 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.validate =
  * @return {!Promise<!proto.google.protobuf.Struct>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.validate =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.validate =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/Validate',
+      '/caos.zitadel.admin.api.v1.AdminService/Validate',
       request,
       metadata || {},
       methodDescriptor_AdminService_Validate);
@@ -326,58 +327,58 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.validate =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.admin.api.v1.UniqueOrgRequest,
- *   !proto.zitadel.admin.api.v1.UniqueOrgResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.UniqueOrgRequest,
+ *   !proto.caos.zitadel.admin.api.v1.UniqueOrgResponse>}
  */
 const methodDescriptor_AdminService_IsOrgUnique = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/IsOrgUnique',
+  '/caos.zitadel.admin.api.v1.AdminService/IsOrgUnique',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.admin.api.v1.UniqueOrgRequest,
-  proto.zitadel.admin.api.v1.UniqueOrgResponse,
+  proto.caos.zitadel.admin.api.v1.UniqueOrgRequest,
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.admin.api.v1.UniqueOrgRequest,
- *   !proto.zitadel.admin.api.v1.UniqueOrgResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.UniqueOrgRequest,
+ *   !proto.caos.zitadel.admin.api.v1.UniqueOrgResponse>}
  */
 const methodInfo_AdminService_IsOrgUnique = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.admin.api.v1.UniqueOrgResponse,
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.admin.api.v1.UniqueOrgResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.UniqueOrgResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.admin.api.v1.UniqueOrgResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.isOrgUnique =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.isOrgUnique =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/IsOrgUnique',
+      '/caos.zitadel.admin.api.v1.AdminService/IsOrgUnique',
       request,
       metadata || {},
       methodDescriptor_AdminService_IsOrgUnique,
@@ -386,17 +387,17 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.isOrgUnique =
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.admin.api.v1.UniqueOrgResponse>}
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.isOrgUnique =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.isOrgUnique =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/IsOrgUnique',
+      '/caos.zitadel.admin.api.v1.AdminService/IsOrgUnique',
       request,
       metadata || {},
       methodDescriptor_AdminService_IsOrgUnique);
@@ -406,58 +407,58 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.isOrgUnique =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.admin.api.v1.OrgID,
- *   !proto.zitadel.admin.api.v1.Org>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgID,
+ *   !proto.caos.zitadel.admin.api.v1.Org>}
  */
 const methodDescriptor_AdminService_GetOrgByID = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/GetOrgByID',
+  '/caos.zitadel.admin.api.v1.AdminService/GetOrgByID',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.admin.api.v1.OrgID,
-  proto.zitadel.admin.api.v1.Org,
+  proto.caos.zitadel.admin.api.v1.OrgID,
+  proto.caos.zitadel.admin.api.v1.Org,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgID} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgID} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.Org.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.Org.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.admin.api.v1.OrgID,
- *   !proto.zitadel.admin.api.v1.Org>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgID,
+ *   !proto.caos.zitadel.admin.api.v1.Org>}
  */
 const methodInfo_AdminService_GetOrgByID = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.admin.api.v1.Org,
+  proto.caos.zitadel.admin.api.v1.Org,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgID} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgID} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.Org.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.Org.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgID} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgID} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.admin.api.v1.Org)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.Org)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.admin.api.v1.Org>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.Org>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.getOrgByID =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.getOrgByID =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/GetOrgByID',
+      '/caos.zitadel.admin.api.v1.AdminService/GetOrgByID',
       request,
       metadata || {},
       methodDescriptor_AdminService_GetOrgByID,
@@ -466,17 +467,17 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.getOrgByID =
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgID} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgID} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.admin.api.v1.Org>}
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.Org>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.getOrgByID =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.getOrgByID =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/GetOrgByID',
+      '/caos.zitadel.admin.api.v1.AdminService/GetOrgByID',
       request,
       metadata || {},
       methodDescriptor_AdminService_GetOrgByID);
@@ -486,58 +487,58 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.getOrgByID =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.admin.api.v1.OrgSearchRequest,
- *   !proto.zitadel.admin.api.v1.OrgSearchResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgSearchRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgSearchResponse>}
  */
 const methodDescriptor_AdminService_SearchOrgs = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/SearchOrgs',
+  '/caos.zitadel.admin.api.v1.AdminService/SearchOrgs',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.admin.api.v1.OrgSearchRequest,
-  proto.zitadel.admin.api.v1.OrgSearchResponse,
+  proto.caos.zitadel.admin.api.v1.OrgSearchRequest,
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.admin.api.v1.OrgSearchRequest,
- *   !proto.zitadel.admin.api.v1.OrgSearchResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgSearchRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgSearchResponse>}
  */
 const methodInfo_AdminService_SearchOrgs = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.admin.api.v1.OrgSearchResponse,
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.admin.api.v1.OrgSearchResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.OrgSearchResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.admin.api.v1.OrgSearchResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.OrgSearchResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.searchOrgs =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.searchOrgs =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/SearchOrgs',
+      '/caos.zitadel.admin.api.v1.AdminService/SearchOrgs',
       request,
       metadata || {},
       methodDescriptor_AdminService_SearchOrgs,
@@ -546,17 +547,17 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.searchOrgs =
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.admin.api.v1.OrgSearchResponse>}
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.OrgSearchResponse>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.searchOrgs =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.searchOrgs =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/SearchOrgs',
+      '/caos.zitadel.admin.api.v1.AdminService/SearchOrgs',
       request,
       metadata || {},
       methodDescriptor_AdminService_SearchOrgs);
@@ -566,58 +567,58 @@ proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.searchOrgs =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.admin.api.v1.OrgSetUpRequest,
- *   !proto.zitadel.admin.api.v1.OrgSetUpResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgSetUpRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgSetUpResponse>}
  */
 const methodDescriptor_AdminService_SetUpOrg = new grpc.web.MethodDescriptor(
-  '/zitadel.admin.api.v1.AdminService/SetUpOrg',
+  '/caos.zitadel.admin.api.v1.AdminService/SetUpOrg',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.admin.api.v1.OrgSetUpRequest,
-  proto.zitadel.admin.api.v1.OrgSetUpResponse,
+  proto.caos.zitadel.admin.api.v1.OrgSetUpRequest,
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.admin.api.v1.OrgSetUpRequest,
- *   !proto.zitadel.admin.api.v1.OrgSetUpResponse>}
+ *   !proto.caos.zitadel.admin.api.v1.OrgSetUpRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgSetUpResponse>}
  */
 const methodInfo_AdminService_SetUpOrg = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.admin.api.v1.OrgSetUpResponse,
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse,
   /**
-   * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} request
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.admin.api.v1.OrgSetUpResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.OrgSetUpResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.admin.api.v1.OrgSetUpResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.admin.api.v1.AdminServiceClient.prototype.setUpOrg =
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.setUpOrg =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/SetUpOrg',
+      '/caos.zitadel.admin.api.v1.AdminService/SetUpOrg',
       request,
       metadata || {},
       methodDescriptor_AdminService_SetUpOrg,
@@ -626,22 +627,22 @@ proto.zitadel.admin.api.v1.AdminServiceClient.prototype.setUpOrg =
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} request The
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.admin.api.v1.OrgSetUpResponse>}
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.setUpOrg =
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.setUpOrg =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.admin.api.v1.AdminService/SetUpOrg',
+      '/caos.zitadel.admin.api.v1.AdminService/SetUpOrg',
       request,
       metadata || {},
       methodDescriptor_AdminService_SetUpOrg);
 };
 
 
-module.exports = proto.zitadel.admin.api.v1;
+module.exports = proto.caos.zitadel.admin.api.v1;
 
diff --git a/console/src/app/proto/generated/admin_pb.d.ts b/console/src/app/proto/generated/admin_pb.d.ts
index 49e41bdc68..2be0777135 100644
--- a/console/src/app/proto/generated/admin_pb.d.ts
+++ b/console/src/app/proto/generated/admin_pb.d.ts
@@ -208,8 +208,8 @@ export class OrgSetUpRequest extends jspb.Message {
   hasOrg(): boolean;
   clearOrg(): void;
 
-  getUser(): RegisterUserRequest | undefined;
-  setUser(value?: RegisterUserRequest): void;
+  getUser(): CreateUserRequest | undefined;
+  setUser(value?: CreateUserRequest): void;
   hasUser(): boolean;
   clearUser(): void;
 
@@ -224,7 +224,7 @@ export class OrgSetUpRequest extends jspb.Message {
 export namespace OrgSetUpRequest {
   export type AsObject = {
     org?: CreateOrgRequest.AsObject,
-    user?: RegisterUserRequest.AsObject,
+    user?: CreateUserRequest.AsObject,
   }
 }
 
@@ -254,9 +254,9 @@ export namespace OrgSetUpResponse {
   }
 }
 
-export class RegisterUserRequest extends jspb.Message {
-  getEmail(): string;
-  setEmail(value: string): void;
+export class CreateUserRequest extends jspb.Message {
+  getUserName(): string;
+  setUserName(value: string): void;
 
   getFirstName(): string;
   setFirstName(value: string): void;
@@ -276,31 +276,63 @@ export class RegisterUserRequest extends jspb.Message {
   getGender(): Gender;
   setGender(value: Gender): void;
 
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getIsEmailVerified(): boolean;
+  setIsEmailVerified(value: boolean): void;
+
+  getPhone(): string;
+  setPhone(value: string): void;
+
+  getIsPhoneVerified(): boolean;
+  setIsPhoneVerified(value: boolean): void;
+
+  getCountry(): string;
+  setCountry(value: string): void;
+
+  getLocality(): string;
+  setLocality(value: string): void;
+
+  getPostalCode(): string;
+  setPostalCode(value: string): void;
+
+  getRegion(): string;
+  setRegion(value: string): void;
+
+  getStreetAddress(): string;
+  setStreetAddress(value: string): void;
+
   getPassword(): string;
   setPassword(value: string): void;
 
-  getOrgId(): string;
-  setOrgId(value: string): void;
-
   serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): RegisterUserRequest.AsObject;
-  static toObject(includeInstance: boolean, msg: RegisterUserRequest): RegisterUserRequest.AsObject;
-  static serializeBinaryToWriter(message: RegisterUserRequest, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): RegisterUserRequest;
-  static deserializeBinaryFromReader(message: RegisterUserRequest, reader: jspb.BinaryReader): RegisterUserRequest;
+  toObject(includeInstance?: boolean): CreateUserRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: CreateUserRequest): CreateUserRequest.AsObject;
+  static serializeBinaryToWriter(message: CreateUserRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): CreateUserRequest;
+  static deserializeBinaryFromReader(message: CreateUserRequest, reader: jspb.BinaryReader): CreateUserRequest;
 }
 
-export namespace RegisterUserRequest {
+export namespace CreateUserRequest {
   export type AsObject = {
-    email: string,
+    userName: string,
     firstName: string,
     lastName: string,
     nickName: string,
     displayName: string,
     preferredLanguage: string,
     gender: Gender,
+    email: string,
+    isEmailVerified: boolean,
+    phone: string,
+    isPhoneVerified: boolean,
+    country: string,
+    locality: string,
+    postalCode: string,
+    region: string,
+    streetAddress: string,
     password: string,
-    orgId: string,
   }
 }
 
@@ -369,6 +401,9 @@ export class User extends jspb.Message {
   getStreetAddress(): string;
   setStreetAddress(value: string): void;
 
+  getSequence(): number;
+  setSequence(value: number): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): User.AsObject;
   static toObject(includeInstance: boolean, msg: User): User.AsObject;
@@ -399,6 +434,7 @@ export namespace User {
     postalCode: string,
     region: string,
     streetAddress: string,
+    sequence: number,
   }
 }
 
diff --git a/console/src/app/proto/generated/admin_pb.js b/console/src/app/proto/generated/admin_pb.js
index 4b2e48b32f..fbf3ef52d9 100644
--- a/console/src/app/proto/generated/admin_pb.js
+++ b/console/src/app/proto/generated/admin_pb.js
@@ -25,23 +25,23 @@ var protoc$gen$swagger_options_annotations_pb = require('./protoc-gen-swagger/op
 goog.object.extend(proto, protoc$gen$swagger_options_annotations_pb);
 var authoption_options_pb = require('./authoption/options_pb.js');
 goog.object.extend(proto, authoption_options_pb);
-goog.exportSymbol('proto.zitadel.admin.api.v1.CreateOrgRequest', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.Gender', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.Org', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgID', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSearchKey', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSearchMethod', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSearchQuery', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSearchRequest', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSearchResponse', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSetUpRequest', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgSetUpResponse', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.OrgState', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.RegisterUserRequest', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.UniqueOrgRequest', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.UniqueOrgResponse', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.User', null, global);
-goog.exportSymbol('proto.zitadel.admin.api.v1.UserState', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.CreateOrgRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.CreateUserRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.Gender', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.Org', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgID', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchKey', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchMethod', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchQuery', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSetUpRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSetUpResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgState', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.UniqueOrgRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.UniqueOrgResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.User', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.UserState', null, global);
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -52,16 +52,16 @@ goog.exportSymbol('proto.zitadel.admin.api.v1.UserState', null, global);
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgID = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.OrgID = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgID, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgID, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgID.displayName = 'proto.zitadel.admin.api.v1.OrgID';
+  proto.caos.zitadel.admin.api.v1.OrgID.displayName = 'proto.caos.zitadel.admin.api.v1.OrgID';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -73,16 +73,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.UniqueOrgRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.UniqueOrgRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.UniqueOrgRequest.displayName = 'proto.zitadel.admin.api.v1.UniqueOrgRequest';
+  proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.displayName = 'proto.caos.zitadel.admin.api.v1.UniqueOrgRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -94,16 +94,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.UniqueOrgResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.UniqueOrgResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.UniqueOrgResponse.displayName = 'proto.zitadel.admin.api.v1.UniqueOrgResponse';
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.displayName = 'proto.caos.zitadel.admin.api.v1.UniqueOrgResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -115,16 +115,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.Org = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.Org = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.Org, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.Org, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.Org.displayName = 'proto.zitadel.admin.api.v1.Org';
+  proto.caos.zitadel.admin.api.v1.Org.displayName = 'proto.caos.zitadel.admin.api.v1.Org';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -136,16 +136,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.admin.api.v1.OrgSearchRequest.repeatedFields_, null);
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.admin.api.v1.OrgSearchRequest.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgSearchRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgSearchRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgSearchRequest.displayName = 'proto.zitadel.admin.api.v1.OrgSearchRequest';
+  proto.caos.zitadel.admin.api.v1.OrgSearchRequest.displayName = 'proto.caos.zitadel.admin.api.v1.OrgSearchRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -157,16 +157,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgSearchQuery, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgSearchQuery, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgSearchQuery.displayName = 'proto.zitadel.admin.api.v1.OrgSearchQuery';
+  proto.caos.zitadel.admin.api.v1.OrgSearchQuery.displayName = 'proto.caos.zitadel.admin.api.v1.OrgSearchQuery';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -178,16 +178,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.admin.api.v1.OrgSearchResponse.repeatedFields_, null);
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.admin.api.v1.OrgSearchResponse.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgSearchResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgSearchResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgSearchResponse.displayName = 'proto.zitadel.admin.api.v1.OrgSearchResponse';
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse.displayName = 'proto.caos.zitadel.admin.api.v1.OrgSearchResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -199,16 +199,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgSetUpRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgSetUpRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgSetUpRequest.displayName = 'proto.zitadel.admin.api.v1.OrgSetUpRequest';
+  proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.displayName = 'proto.caos.zitadel.admin.api.v1.OrgSetUpRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -220,16 +220,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.OrgSetUpResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgSetUpResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.OrgSetUpResponse.displayName = 'proto.zitadel.admin.api.v1.OrgSetUpResponse';
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.displayName = 'proto.caos.zitadel.admin.api.v1.OrgSetUpResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -241,16 +241,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.RegisterUserRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.CreateUserRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.RegisterUserRequest.displayName = 'proto.zitadel.admin.api.v1.RegisterUserRequest';
+  proto.caos.zitadel.admin.api.v1.CreateUserRequest.displayName = 'proto.caos.zitadel.admin.api.v1.CreateUserRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -262,16 +262,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.User = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.User = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.User, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.User, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.User.displayName = 'proto.zitadel.admin.api.v1.User';
+  proto.caos.zitadel.admin.api.v1.User.displayName = 'proto.caos.zitadel.admin.api.v1.User';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -283,16 +283,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest = function(opt_data) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.admin.api.v1.CreateOrgRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.admin.api.v1.CreateOrgRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.admin.api.v1.CreateOrgRequest.displayName = 'proto.zitadel.admin.api.v1.CreateOrgRequest';
+  proto.caos.zitadel.admin.api.v1.CreateOrgRequest.displayName = 'proto.caos.zitadel.admin.api.v1.CreateOrgRequest';
 }
 
 
@@ -308,8 +308,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgID.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgID.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgID.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgID.toObject(opt_includeInstance, this);
 };
 
 
@@ -318,11 +318,11 @@ proto.zitadel.admin.api.v1.OrgID.prototype.toObject = function(opt_includeInstan
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgID} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgID} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgID.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgID.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -338,23 +338,23 @@ proto.zitadel.admin.api.v1.OrgID.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgID}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgID}
  */
-proto.zitadel.admin.api.v1.OrgID.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgID.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgID;
-  return proto.zitadel.admin.api.v1.OrgID.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgID;
+  return proto.caos.zitadel.admin.api.v1.OrgID.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgID} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgID} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgID}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgID}
  */
-proto.zitadel.admin.api.v1.OrgID.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgID.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -378,9 +378,9 @@ proto.zitadel.admin.api.v1.OrgID.deserializeBinaryFromReader = function(msg, rea
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgID.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgID.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgID.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgID.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -388,11 +388,11 @@ proto.zitadel.admin.api.v1.OrgID.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgID} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgID} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgID.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgID.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -408,13 +408,13 @@ proto.zitadel.admin.api.v1.OrgID.serializeBinaryToWriter = function(message, wri
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.OrgID.prototype.getId = function() {
+proto.caos.zitadel.admin.api.v1.OrgID.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.OrgID.prototype.setId = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgID.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -433,8 +433,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.UniqueOrgRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -443,11 +443,11 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.toObject = function(opt_in
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     name: jspb.Message.getFieldWithDefault(msg, 1, ""),
     domain: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -464,23 +464,23 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.UniqueOrgRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.UniqueOrgRequest;
-  return proto.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.UniqueOrgRequest;
+  return proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.UniqueOrgRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -508,9 +508,9 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.deserializeBinaryFromReader = functi
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.UniqueOrgRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -518,11 +518,11 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.serializeBinary = function
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgRequest} message
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getName();
   if (f.length > 0) {
@@ -545,13 +545,13 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.serializeBinaryToWriter = function(m
  * optional string name = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.getName = function() {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.getName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.setName = function(value) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.setName = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -560,13 +560,13 @@ proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.setName = function(value)
  * optional string domain = 2;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.getDomain = function() {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.getDomain = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.UniqueOrgRequest.prototype.setDomain = function(value) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgRequest.prototype.setDomain = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -585,8 +585,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.UniqueOrgResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -595,11 +595,11 @@ proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.toObject = function(opt_i
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
     isUnique: jspb.Message.getFieldWithDefault(msg, 1, false)
   };
@@ -615,23 +615,23 @@ proto.zitadel.admin.api.v1.UniqueOrgResponse.toObject = function(includeInstance
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.UniqueOrgResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse}
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.UniqueOrgResponse;
-  return proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.UniqueOrgResponse;
+  return proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.UniqueOrgResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse}
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -655,9 +655,9 @@ proto.zitadel.admin.api.v1.UniqueOrgResponse.deserializeBinaryFromReader = funct
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.UniqueOrgResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -665,11 +665,11 @@ proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.serializeBinary = functio
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.UniqueOrgResponse} message
+ * @param {!proto.caos.zitadel.admin.api.v1.UniqueOrgResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getIsUnique();
   if (f) {
@@ -687,13 +687,13 @@ proto.zitadel.admin.api.v1.UniqueOrgResponse.serializeBinaryToWriter = function(
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.getIsUnique = function() {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.prototype.getIsUnique = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 1, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.admin.api.v1.UniqueOrgResponse.prototype.setIsUnique = function(value) {
+proto.caos.zitadel.admin.api.v1.UniqueOrgResponse.prototype.setIsUnique = function(value) {
   jspb.Message.setProto3BooleanField(this, 1, value);
 };
 
@@ -712,8 +712,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.Org.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.Org.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.Org.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.Org.toObject(opt_includeInstance, this);
 };
 
 
@@ -722,11 +722,11 @@ proto.zitadel.admin.api.v1.Org.prototype.toObject = function(opt_includeInstance
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.Org} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.Org} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.Org.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.Org.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     state: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -747,23 +747,23 @@ proto.zitadel.admin.api.v1.Org.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.Org}
+ * @return {!proto.caos.zitadel.admin.api.v1.Org}
  */
-proto.zitadel.admin.api.v1.Org.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.Org.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.Org;
-  return proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.Org;
+  return proto.caos.zitadel.admin.api.v1.Org.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.Org} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.Org} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.Org}
+ * @return {!proto.caos.zitadel.admin.api.v1.Org}
  */
-proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.Org.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -775,7 +775,7 @@ proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader = function(msg, reade
       msg.setId(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.admin.api.v1.OrgState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.OrgState} */ (reader.readEnum());
       msg.setState(value);
       break;
     case 3:
@@ -809,9 +809,9 @@ proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader = function(msg, reade
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.Org.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.Org.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.Org.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -819,11 +819,11 @@ proto.zitadel.admin.api.v1.Org.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.Org} message
+ * @param {!proto.caos.zitadel.admin.api.v1.Org} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.Org.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.Org.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -876,28 +876,28 @@ proto.zitadel.admin.api.v1.Org.serializeBinaryToWriter = function(message, write
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getId = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.Org.prototype.setId = function(value) {
+proto.caos.zitadel.admin.api.v1.Org.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
 
 /**
  * optional OrgState state = 2;
- * @return {!proto.zitadel.admin.api.v1.OrgState}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgState}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getState = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.OrgState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.admin.api.v1.Org.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.OrgState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.OrgState} value */
-proto.zitadel.admin.api.v1.Org.prototype.setState = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.OrgState} value */
+proto.caos.zitadel.admin.api.v1.Org.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -906,14 +906,14 @@ proto.zitadel.admin.api.v1.Org.prototype.setState = function(value) {
  * optional google.protobuf.Timestamp creation_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.admin.api.v1.Org.prototype.setCreationDate = function(value) {
+proto.caos.zitadel.admin.api.v1.Org.prototype.setCreationDate = function(value) {
   jspb.Message.setWrapperField(this, 3, value);
 };
 
@@ -921,7 +921,7 @@ proto.zitadel.admin.api.v1.Org.prototype.setCreationDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.Org.prototype.clearCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.clearCreationDate = function() {
   this.setCreationDate(undefined);
 };
 
@@ -930,7 +930,7 @@ proto.zitadel.admin.api.v1.Org.prototype.clearCreationDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.Org.prototype.hasCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.hasCreationDate = function() {
   return jspb.Message.getField(this, 3) != null;
 };
 
@@ -939,14 +939,14 @@ proto.zitadel.admin.api.v1.Org.prototype.hasCreationDate = function() {
  * optional google.protobuf.Timestamp change_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.admin.api.v1.Org.prototype.setChangeDate = function(value) {
+proto.caos.zitadel.admin.api.v1.Org.prototype.setChangeDate = function(value) {
   jspb.Message.setWrapperField(this, 4, value);
 };
 
@@ -954,7 +954,7 @@ proto.zitadel.admin.api.v1.Org.prototype.setChangeDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.Org.prototype.clearChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.clearChangeDate = function() {
   this.setChangeDate(undefined);
 };
 
@@ -963,7 +963,7 @@ proto.zitadel.admin.api.v1.Org.prototype.clearChangeDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.Org.prototype.hasChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.hasChangeDate = function() {
   return jspb.Message.getField(this, 4) != null;
 };
 
@@ -972,13 +972,13 @@ proto.zitadel.admin.api.v1.Org.prototype.hasChangeDate = function() {
  * optional string name = 5;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getName = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.getName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.Org.prototype.setName = function(value) {
+proto.caos.zitadel.admin.api.v1.Org.prototype.setName = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -987,13 +987,13 @@ proto.zitadel.admin.api.v1.Org.prototype.setName = function(value) {
  * optional string domain = 6;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.Org.prototype.getDomain = function() {
+proto.caos.zitadel.admin.api.v1.Org.prototype.getDomain = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.Org.prototype.setDomain = function(value) {
+proto.caos.zitadel.admin.api.v1.Org.prototype.setDomain = function(value) {
   jspb.Message.setProto3StringField(this, 6, value);
 };
 
@@ -1004,7 +1004,7 @@ proto.zitadel.admin.api.v1.Org.prototype.setDomain = function(value) {
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.repeatedFields_ = [5];
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.repeatedFields_ = [5];
 
 
 
@@ -1019,8 +1019,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgSearchRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgSearchRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -1029,18 +1029,18 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.toObject = function(opt_in
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     sortingColumn: jspb.Message.getFieldWithDefault(msg, 3, 0),
     asc: jspb.Message.getFieldWithDefault(msg, 4, false),
     queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
-    proto.zitadel.admin.api.v1.OrgSearchQuery.toObject, includeInstance)
+    proto.caos.zitadel.admin.api.v1.OrgSearchQuery.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -1054,23 +1054,23 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgSearchRequest;
-  return proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgSearchRequest;
+  return proto.caos.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1086,7 +1086,7 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader = functi
       msg.setLimit(value);
       break;
     case 3:
-      var value = /** @type {!proto.zitadel.admin.api.v1.OrgSearchKey} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} */ (reader.readEnum());
       msg.setSortingColumn(value);
       break;
     case 4:
@@ -1094,8 +1094,8 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader = functi
       msg.setAsc(value);
       break;
     case 5:
-      var value = new proto.zitadel.admin.api.v1.OrgSearchQuery;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.OrgSearchQuery;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader);
       msg.addQueries(value);
       break;
     default:
@@ -1111,9 +1111,9 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.deserializeBinaryFromReader = functi
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1121,11 +1121,11 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.serializeBinary = function
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchRequest} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -1160,7 +1160,7 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter = function(m
     writer.writeRepeatedMessage(
       5,
       f,
-      proto.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter
     );
   }
 };
@@ -1170,13 +1170,13 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.serializeBinaryToWriter = function(m
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.getOffset = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setOffset = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -1185,28 +1185,28 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setOffset = function(value
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.getLimit = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setLimit = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
 
 /**
  * optional OrgSearchKey sorting_column = 3;
- * @return {!proto.zitadel.admin.api.v1.OrgSearchKey}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchKey}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.getSortingColumn = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.OrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.getSortingColumn = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.OrgSearchKey} value */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setSortingColumn = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} value */
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.setSortingColumn = function(value) {
   jspb.Message.setProto3EnumField(this, 3, value);
 };
 
@@ -1217,47 +1217,47 @@ proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setSortingColumn = functio
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.getAsc = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.getAsc = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 4, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setAsc = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.setAsc = function(value) {
   jspb.Message.setProto3BooleanField(this, 4, value);
 };
 
 
 /**
  * repeated OrgSearchQuery queries = 5;
- * @return {!Array<!proto.zitadel.admin.api.v1.OrgSearchQuery>}
+ * @return {!Array<!proto.caos.zitadel.admin.api.v1.OrgSearchQuery>}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.getQueriesList = function() {
-  return /** @type{!Array<!proto.zitadel.admin.api.v1.OrgSearchQuery>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.admin.api.v1.OrgSearchQuery, 5));
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.getQueriesList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.admin.api.v1.OrgSearchQuery>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.admin.api.v1.OrgSearchQuery, 5));
 };
 
 
-/** @param {!Array<!proto.zitadel.admin.api.v1.OrgSearchQuery>} value */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.setQueriesList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.admin.api.v1.OrgSearchQuery>} value */
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.setQueriesList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 5, value);
 };
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.OrgSearchQuery=} opt_value
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.admin.api.v1.OrgSearchQuery}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery}
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 5, opt_value, proto.zitadel.admin.api.v1.OrgSearchQuery, opt_index);
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 5, opt_value, proto.caos.zitadel.admin.api.v1.OrgSearchQuery, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.admin.api.v1.OrgSearchRequest.prototype.clearQueriesList = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchRequest.prototype.clearQueriesList = function() {
   this.setQueriesList([]);
 };
 
@@ -1276,8 +1276,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgSearchQuery.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgSearchQuery.toObject(opt_includeInstance, this);
 };
 
 
@@ -1286,11 +1286,11 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.toObject = function(opt_incl
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgSearchQuery} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.toObject = function(includeInstance, msg) {
   var f, obj = {
     key: jspb.Message.getFieldWithDefault(msg, 1, 0),
     method: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -1308,23 +1308,23 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.toObject = function(includeInstance, m
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchQuery}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgSearchQuery;
-  return proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgSearchQuery;
+  return proto.caos.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchQuery} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchQuery}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1332,11 +1332,11 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader = function
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = /** @type {!proto.zitadel.admin.api.v1.OrgSearchKey} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} */ (reader.readEnum());
       msg.setKey(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.admin.api.v1.OrgSearchMethod} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchMethod} */ (reader.readEnum());
       msg.setMethod(value);
       break;
     case 3:
@@ -1356,9 +1356,9 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.deserializeBinaryFromReader = function
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1366,11 +1366,11 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchQuery} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchQuery} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getKey();
   if (f !== 0.0) {
@@ -1398,30 +1398,30 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.serializeBinaryToWriter = function(mes
 
 /**
  * optional OrgSearchKey key = 1;
- * @return {!proto.zitadel.admin.api.v1.OrgSearchKey}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchKey}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.getKey = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.OrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.getKey = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.OrgSearchKey} value */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.setKey = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.OrgSearchKey} value */
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.setKey = function(value) {
   jspb.Message.setProto3EnumField(this, 1, value);
 };
 
 
 /**
  * optional OrgSearchMethod method = 2;
- * @return {!proto.zitadel.admin.api.v1.OrgSearchMethod}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchMethod}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.getMethod = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.OrgSearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.getMethod = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.OrgSearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.OrgSearchMethod} value */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.setMethod = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.OrgSearchMethod} value */
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.setMethod = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -1430,13 +1430,13 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.setMethod = function(value)
  * optional string value = 3;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.getValue = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.getValue = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.setValue = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchQuery.prototype.setValue = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -1447,7 +1447,7 @@ proto.zitadel.admin.api.v1.OrgSearchQuery.prototype.setValue = function(value) {
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.repeatedFields_ = [4];
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.repeatedFields_ = [4];
 
 
 
@@ -1462,8 +1462,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgSearchResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgSearchResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -1472,17 +1472,17 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.toObject = function(opt_i
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgSearchResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
     offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.zitadel.admin.api.v1.Org.toObject, includeInstance)
+    proto.caos.zitadel.admin.api.v1.Org.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -1496,23 +1496,23 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.toObject = function(includeInstance
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchResponse}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgSearchResponse;
-  return proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgSearchResponse;
+  return proto.caos.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgSearchResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSearchResponse}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1532,8 +1532,8 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader = funct
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.zitadel.admin.api.v1.Org;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.Org;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.Org.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -1549,9 +1549,9 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.deserializeBinaryFromReader = funct
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1559,11 +1559,11 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.serializeBinary = functio
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgSearchResponse} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSearchResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -1591,7 +1591,7 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter = function(
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.zitadel.admin.api.v1.Org.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.Org.serializeBinaryToWriter
     );
   }
 };
@@ -1601,13 +1601,13 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.serializeBinaryToWriter = function(
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.getOffset = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setOffset = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -1616,13 +1616,13 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setOffset = function(valu
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.getLimit = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setLimit = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
@@ -1631,47 +1631,47 @@ proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setLimit = function(value
  * optional uint64 total_result = 3;
  * @return {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.getTotalResult = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.getTotalResult = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setTotalResult = function(value) {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.setTotalResult = function(value) {
   jspb.Message.setProto3IntField(this, 3, value);
 };
 
 
 /**
  * repeated Org result = 4;
- * @return {!Array<!proto.zitadel.admin.api.v1.Org>}
+ * @return {!Array<!proto.caos.zitadel.admin.api.v1.Org>}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.zitadel.admin.api.v1.Org>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.admin.api.v1.Org, 4));
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.getResultList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.admin.api.v1.Org>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.admin.api.v1.Org, 4));
 };
 
 
-/** @param {!Array<!proto.zitadel.admin.api.v1.Org>} value */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.setResultList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.admin.api.v1.Org>} value */
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.zitadel.admin.api.v1.Org=} opt_value
+ * @param {!proto.caos.zitadel.admin.api.v1.Org=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.admin.api.v1.Org}
+ * @return {!proto.caos.zitadel.admin.api.v1.Org}
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.zitadel.admin.api.v1.Org, opt_index);
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.addResult = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.admin.api.v1.Org, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.admin.api.v1.OrgSearchResponse.prototype.clearResultList = function() {
+proto.caos.zitadel.admin.api.v1.OrgSearchResponse.prototype.clearResultList = function() {
   this.setResultList([]);
 };
 
@@ -1690,8 +1690,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgSetUpRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -1700,14 +1700,14 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.toObject = function(opt_inc
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
-    org: (f = msg.getOrg()) && proto.zitadel.admin.api.v1.CreateOrgRequest.toObject(includeInstance, f),
-    user: (f = msg.getUser()) && proto.zitadel.admin.api.v1.RegisterUserRequest.toObject(includeInstance, f)
+    org: (f = msg.getOrg()) && proto.caos.zitadel.admin.api.v1.CreateOrgRequest.toObject(includeInstance, f),
+    user: (f = msg.getUser()) && proto.caos.zitadel.admin.api.v1.CreateUserRequest.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -1721,23 +1721,23 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgSetUpRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgSetUpRequest;
-  return proto.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgSetUpRequest;
+  return proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgSetUpRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1745,13 +1745,13 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader = functio
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = new proto.zitadel.admin.api.v1.CreateOrgRequest;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.CreateOrgRequest;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader);
       msg.setOrg(value);
       break;
     case 2:
-      var value = new proto.zitadel.admin.api.v1.RegisterUserRequest;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.CreateUserRequest;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.CreateUserRequest.deserializeBinaryFromReader);
       msg.setUser(value);
       break;
     default:
@@ -1767,9 +1767,9 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.deserializeBinaryFromReader = functio
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1777,18 +1777,18 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.serializeBinary = function(
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpRequest} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOrg();
   if (f != null) {
     writer.writeMessage(
       1,
       f,
-      proto.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter
     );
   }
   f = message.getUser();
@@ -1796,7 +1796,7 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter = function(me
     writer.writeMessage(
       2,
       f,
-      proto.zitadel.admin.api.v1.RegisterUserRequest.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.CreateUserRequest.serializeBinaryToWriter
     );
   }
 };
@@ -1804,16 +1804,16 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.serializeBinaryToWriter = function(me
 
 /**
  * optional CreateOrgRequest org = 1;
- * @return {?proto.zitadel.admin.api.v1.CreateOrgRequest}
+ * @return {?proto.caos.zitadel.admin.api.v1.CreateOrgRequest}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.getOrg = function() {
-  return /** @type{?proto.zitadel.admin.api.v1.CreateOrgRequest} */ (
-    jspb.Message.getWrapperField(this, proto.zitadel.admin.api.v1.CreateOrgRequest, 1));
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.getOrg = function() {
+  return /** @type{?proto.caos.zitadel.admin.api.v1.CreateOrgRequest} */ (
+    jspb.Message.getWrapperField(this, proto.caos.zitadel.admin.api.v1.CreateOrgRequest, 1));
 };
 
 
-/** @param {?proto.zitadel.admin.api.v1.CreateOrgRequest|undefined} value */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setOrg = function(value) {
+/** @param {?proto.caos.zitadel.admin.api.v1.CreateOrgRequest|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setOrg = function(value) {
   jspb.Message.setWrapperField(this, 1, value);
 };
 
@@ -1821,7 +1821,7 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setOrg = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearOrg = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearOrg = function() {
   this.setOrg(undefined);
 };
 
@@ -1830,23 +1830,23 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearOrg = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.hasOrg = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.hasOrg = function() {
   return jspb.Message.getField(this, 1) != null;
 };
 
 
 /**
- * optional RegisterUserRequest user = 2;
- * @return {?proto.zitadel.admin.api.v1.RegisterUserRequest}
+ * optional CreateUserRequest user = 2;
+ * @return {?proto.caos.zitadel.admin.api.v1.CreateUserRequest}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.getUser = function() {
-  return /** @type{?proto.zitadel.admin.api.v1.RegisterUserRequest} */ (
-    jspb.Message.getWrapperField(this, proto.zitadel.admin.api.v1.RegisterUserRequest, 2));
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.getUser = function() {
+  return /** @type{?proto.caos.zitadel.admin.api.v1.CreateUserRequest} */ (
+    jspb.Message.getWrapperField(this, proto.caos.zitadel.admin.api.v1.CreateUserRequest, 2));
 };
 
 
-/** @param {?proto.zitadel.admin.api.v1.RegisterUserRequest|undefined} value */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setUser = function(value) {
+/** @param {?proto.caos.zitadel.admin.api.v1.CreateUserRequest|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setUser = function(value) {
   jspb.Message.setWrapperField(this, 2, value);
 };
 
@@ -1854,7 +1854,7 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.setUser = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearUser = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearUser = function() {
   this.setUser(undefined);
 };
 
@@ -1863,7 +1863,7 @@ proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.clearUser = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.OrgSetUpRequest.prototype.hasUser = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpRequest.prototype.hasUser = function() {
   return jspb.Message.getField(this, 2) != null;
 };
 
@@ -1882,8 +1882,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.OrgSetUpResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -1892,14 +1892,14 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.toObject = function(opt_in
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
-    org: (f = msg.getOrg()) && proto.zitadel.admin.api.v1.Org.toObject(includeInstance, f),
-    user: (f = msg.getUser()) && proto.zitadel.admin.api.v1.User.toObject(includeInstance, f)
+    org: (f = msg.getOrg()) && proto.caos.zitadel.admin.api.v1.Org.toObject(includeInstance, f),
+    user: (f = msg.getUser()) && proto.caos.zitadel.admin.api.v1.User.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -1913,23 +1913,23 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.OrgSetUpResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.OrgSetUpResponse;
-  return proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgSetUpResponse;
+  return proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.OrgSetUpResponse}
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1937,13 +1937,13 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader = functi
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = new proto.zitadel.admin.api.v1.Org;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.Org.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.Org;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.Org.deserializeBinaryFromReader);
       msg.setOrg(value);
       break;
     case 2:
-      var value = new proto.zitadel.admin.api.v1.User;
-      reader.readMessage(value,proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.admin.api.v1.User;
+      reader.readMessage(value,proto.caos.zitadel.admin.api.v1.User.deserializeBinaryFromReader);
       msg.setUser(value);
       break;
     default:
@@ -1959,9 +1959,9 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.deserializeBinaryFromReader = functi
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1969,18 +1969,18 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.serializeBinary = function
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.OrgSetUpResponse} message
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgSetUpResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOrg();
   if (f != null) {
     writer.writeMessage(
       1,
       f,
-      proto.zitadel.admin.api.v1.Org.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.Org.serializeBinaryToWriter
     );
   }
   f = message.getUser();
@@ -1988,7 +1988,7 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter = function(m
     writer.writeMessage(
       2,
       f,
-      proto.zitadel.admin.api.v1.User.serializeBinaryToWriter
+      proto.caos.zitadel.admin.api.v1.User.serializeBinaryToWriter
     );
   }
 };
@@ -1996,16 +1996,16 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.serializeBinaryToWriter = function(m
 
 /**
  * optional Org org = 1;
- * @return {?proto.zitadel.admin.api.v1.Org}
+ * @return {?proto.caos.zitadel.admin.api.v1.Org}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.getOrg = function() {
-  return /** @type{?proto.zitadel.admin.api.v1.Org} */ (
-    jspb.Message.getWrapperField(this, proto.zitadel.admin.api.v1.Org, 1));
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.getOrg = function() {
+  return /** @type{?proto.caos.zitadel.admin.api.v1.Org} */ (
+    jspb.Message.getWrapperField(this, proto.caos.zitadel.admin.api.v1.Org, 1));
 };
 
 
-/** @param {?proto.zitadel.admin.api.v1.Org|undefined} value */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setOrg = function(value) {
+/** @param {?proto.caos.zitadel.admin.api.v1.Org|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setOrg = function(value) {
   jspb.Message.setWrapperField(this, 1, value);
 };
 
@@ -2013,7 +2013,7 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setOrg = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearOrg = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearOrg = function() {
   this.setOrg(undefined);
 };
 
@@ -2022,23 +2022,23 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearOrg = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.hasOrg = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.hasOrg = function() {
   return jspb.Message.getField(this, 1) != null;
 };
 
 
 /**
  * optional User user = 2;
- * @return {?proto.zitadel.admin.api.v1.User}
+ * @return {?proto.caos.zitadel.admin.api.v1.User}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.getUser = function() {
-  return /** @type{?proto.zitadel.admin.api.v1.User} */ (
-    jspb.Message.getWrapperField(this, proto.zitadel.admin.api.v1.User, 2));
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.getUser = function() {
+  return /** @type{?proto.caos.zitadel.admin.api.v1.User} */ (
+    jspb.Message.getWrapperField(this, proto.caos.zitadel.admin.api.v1.User, 2));
 };
 
 
-/** @param {?proto.zitadel.admin.api.v1.User|undefined} value */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setUser = function(value) {
+/** @param {?proto.caos.zitadel.admin.api.v1.User|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setUser = function(value) {
   jspb.Message.setWrapperField(this, 2, value);
 };
 
@@ -2046,7 +2046,7 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.setUser = function(value)
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearUser = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearUser = function() {
   this.setUser(undefined);
 };
 
@@ -2055,7 +2055,7 @@ proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.clearUser = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.OrgSetUpResponse.prototype.hasUser = function() {
+proto.caos.zitadel.admin.api.v1.OrgSetUpResponse.prototype.hasUser = function() {
   return jspb.Message.getField(this, 2) != null;
 };
 
@@ -2074,8 +2074,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.RegisterUserRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.CreateUserRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -2084,21 +2084,29 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.toObject = function(opt
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.RegisterUserRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateUserRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
-    email: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    userName: jspb.Message.getFieldWithDefault(msg, 1, ""),
     firstName: jspb.Message.getFieldWithDefault(msg, 2, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 3, ""),
     nickName: jspb.Message.getFieldWithDefault(msg, 4, ""),
     displayName: jspb.Message.getFieldWithDefault(msg, 5, ""),
     preferredLanguage: jspb.Message.getFieldWithDefault(msg, 6, ""),
     gender: jspb.Message.getFieldWithDefault(msg, 7, 0),
-    password: jspb.Message.getFieldWithDefault(msg, 8, ""),
-    orgId: jspb.Message.getFieldWithDefault(msg, 9, "")
+    email: jspb.Message.getFieldWithDefault(msg, 8, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 9, false),
+    phone: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 12, false),
+    country: jspb.Message.getFieldWithDefault(msg, 13, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 15, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 16, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 17, ""),
+    password: jspb.Message.getFieldWithDefault(msg, 18, "")
   };
 
   if (includeInstance) {
@@ -2112,23 +2120,23 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.toObject = function(includeInstan
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.RegisterUserRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.CreateUserRequest}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.RegisterUserRequest;
-  return proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.CreateUserRequest;
+  return proto.caos.zitadel.admin.api.v1.CreateUserRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.RegisterUserRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateUserRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.RegisterUserRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.CreateUserRequest}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2137,7 +2145,7 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader = fun
     switch (field) {
     case 1:
       var value = /** @type {string} */ (reader.readString());
-      msg.setEmail(value);
+      msg.setUserName(value);
       break;
     case 2:
       var value = /** @type {string} */ (reader.readString());
@@ -2160,16 +2168,48 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader = fun
       msg.setPreferredLanguage(value);
       break;
     case 7:
-      var value = /** @type {!proto.zitadel.admin.api.v1.Gender} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
     case 8:
       var value = /** @type {string} */ (reader.readString());
-      msg.setPassword(value);
+      msg.setEmail(value);
       break;
     case 9:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsEmailVerified(value);
+      break;
+    case 11:
       var value = /** @type {string} */ (reader.readString());
-      msg.setOrgId(value);
+      msg.setPhone(value);
+      break;
+    case 12:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsPhoneVerified(value);
+      break;
+    case 13:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setCountry(value);
+      break;
+    case 14:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLocality(value);
+      break;
+    case 15:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPostalCode(value);
+      break;
+    case 16:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setRegion(value);
+      break;
+    case 17:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setStreetAddress(value);
+      break;
+    case 18:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPassword(value);
       break;
     default:
       reader.skipField();
@@ -2184,9 +2224,9 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.deserializeBinaryFromReader = fun
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.RegisterUserRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.CreateUserRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2194,13 +2234,13 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.serializeBinary = funct
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.RegisterUserRequest} message
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateUserRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
-  f = message.getEmail();
+  f = message.getUserName();
   if (f.length > 0) {
     writer.writeString(
       1,
@@ -2249,17 +2289,73 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.serializeBinaryToWriter = functio
       f
     );
   }
-  f = message.getPassword();
+  f = message.getEmail();
   if (f.length > 0) {
     writer.writeString(
       8,
       f
     );
   }
-  f = message.getOrgId();
+  f = message.getIsEmailVerified();
+  if (f) {
+    writer.writeBool(
+      9,
+      f
+    );
+  }
+  f = message.getPhone();
   if (f.length > 0) {
     writer.writeString(
-      9,
+      11,
+      f
+    );
+  }
+  f = message.getIsPhoneVerified();
+  if (f) {
+    writer.writeBool(
+      12,
+      f
+    );
+  }
+  f = message.getCountry();
+  if (f.length > 0) {
+    writer.writeString(
+      13,
+      f
+    );
+  }
+  f = message.getLocality();
+  if (f.length > 0) {
+    writer.writeString(
+      14,
+      f
+    );
+  }
+  f = message.getPostalCode();
+  if (f.length > 0) {
+    writer.writeString(
+      15,
+      f
+    );
+  }
+  f = message.getRegion();
+  if (f.length > 0) {
+    writer.writeString(
+      16,
+      f
+    );
+  }
+  f = message.getStreetAddress();
+  if (f.length > 0) {
+    writer.writeString(
+      17,
+      f
+    );
+  }
+  f = message.getPassword();
+  if (f.length > 0) {
+    writer.writeString(
+      18,
       f
     );
   }
@@ -2267,16 +2363,16 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.serializeBinaryToWriter = functio
 
 
 /**
- * optional string email = 1;
+ * optional string user_name = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getEmail = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setEmail = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -2285,13 +2381,13 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setEmail = function(val
  * optional string first_name = 2;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getFirstName = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setFirstName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -2300,13 +2396,13 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setFirstName = function
  * optional string last_name = 3;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getLastName = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setLastName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -2315,13 +2411,13 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setLastName = function(
  * optional string nick_name = 4;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getNickName = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setNickName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -2330,13 +2426,13 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setNickName = function(
  * optional string display_name = 5;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -2345,59 +2441,183 @@ proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setDisplayName = functi
  * optional string preferred_language = 6;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 6, value);
 };
 
 
 /**
  * optional Gender gender = 7;
- * @return {!proto.zitadel.admin.api.v1.Gender}
+ * @return {!proto.caos.zitadel.admin.api.v1.Gender}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getGender = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.Gender} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setGender = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.Gender} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 7, value);
 };
 
 
 /**
- * optional string password = 8;
+ * optional string email = 8;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getPassword = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setPassword = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 8, value);
 };
 
 
 /**
- * optional string org_id = 9;
+ * optional bool is_email_verified = 9;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getIsEmailVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 9, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setIsEmailVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 9, value);
+};
+
+
+/**
+ * optional string phone = 11;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.getOrgId = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPhone = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.RegisterUserRequest.prototype.setOrgId = function(value) {
-  jspb.Message.setProto3StringField(this, 9, value);
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPhone = function(value) {
+  jspb.Message.setProto3StringField(this, 11, value);
+};
+
+
+/**
+ * optional bool is_phone_verified = 12;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getIsPhoneVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 12, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setIsPhoneVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 12, value);
+};
+
+
+/**
+ * optional string country = 13;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getCountry = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setCountry = function(value) {
+  jspb.Message.setProto3StringField(this, 13, value);
+};
+
+
+/**
+ * optional string locality = 14;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getLocality = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setLocality = function(value) {
+  jspb.Message.setProto3StringField(this, 14, value);
+};
+
+
+/**
+ * optional string postal_code = 15;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPostalCode = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPostalCode = function(value) {
+  jspb.Message.setProto3StringField(this, 15, value);
+};
+
+
+/**
+ * optional string region = 16;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getRegion = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setRegion = function(value) {
+  jspb.Message.setProto3StringField(this, 16, value);
+};
+
+
+/**
+ * optional string street_address = 17;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getStreetAddress = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setStreetAddress = function(value) {
+  jspb.Message.setProto3StringField(this, 17, value);
+};
+
+
+/**
+ * optional string password = 18;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPassword = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPassword = function(value) {
+  jspb.Message.setProto3StringField(this, 18, value);
 };
 
 
@@ -2415,8 +2635,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.User.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.User.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.User.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.User.toObject(opt_includeInstance, this);
 };
 
 
@@ -2425,11 +2645,11 @@ proto.zitadel.admin.api.v1.User.prototype.toObject = function(opt_includeInstanc
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.User} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.User} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.User.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.User.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     state: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -2450,7 +2670,8 @@ proto.zitadel.admin.api.v1.User.toObject = function(includeInstance, msg) {
     locality: jspb.Message.getFieldWithDefault(msg, 17, ""),
     postalCode: jspb.Message.getFieldWithDefault(msg, 18, ""),
     region: jspb.Message.getFieldWithDefault(msg, 19, ""),
-    streetAddress: jspb.Message.getFieldWithDefault(msg, 20, "")
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 20, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 21, 0)
   };
 
   if (includeInstance) {
@@ -2464,23 +2685,23 @@ proto.zitadel.admin.api.v1.User.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.User}
+ * @return {!proto.caos.zitadel.admin.api.v1.User}
  */
-proto.zitadel.admin.api.v1.User.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.User.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.User;
-  return proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.User;
+  return proto.caos.zitadel.admin.api.v1.User.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.User} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.User} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.User}
+ * @return {!proto.caos.zitadel.admin.api.v1.User}
  */
-proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2492,7 +2713,7 @@ proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, read
       msg.setId(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.admin.api.v1.UserState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.UserState} */ (reader.readEnum());
       msg.setState(value);
       break;
     case 3:
@@ -2530,7 +2751,7 @@ proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, read
       msg.setPreferredLanguage(value);
       break;
     case 11:
-      var value = /** @type {!proto.zitadel.admin.api.v1.Gender} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
     case 12:
@@ -2569,6 +2790,10 @@ proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, read
       var value = /** @type {string} */ (reader.readString());
       msg.setStreetAddress(value);
       break;
+    case 21:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -2582,9 +2807,9 @@ proto.zitadel.admin.api.v1.User.deserializeBinaryFromReader = function(msg, read
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.User.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.User.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.User.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2592,11 +2817,11 @@ proto.zitadel.admin.api.v1.User.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.User} message
+ * @param {!proto.caos.zitadel.admin.api.v1.User} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.User.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.User.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -2740,6 +2965,13 @@ proto.zitadel.admin.api.v1.User.serializeBinaryToWriter = function(message, writ
       f
     );
   }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      21,
+      f
+    );
+  }
 };
 
 
@@ -2747,28 +2979,28 @@ proto.zitadel.admin.api.v1.User.serializeBinaryToWriter = function(message, writ
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getId = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setId = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
 
 /**
  * optional UserState state = 2;
- * @return {!proto.zitadel.admin.api.v1.UserState}
+ * @return {!proto.caos.zitadel.admin.api.v1.UserState}
  */
-proto.zitadel.admin.api.v1.User.prototype.getState = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.admin.api.v1.User.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.UserState} value */
-proto.zitadel.admin.api.v1.User.prototype.setState = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.UserState} value */
+proto.caos.zitadel.admin.api.v1.User.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -2777,14 +3009,14 @@ proto.zitadel.admin.api.v1.User.prototype.setState = function(value) {
  * optional google.protobuf.Timestamp creation_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.admin.api.v1.User.prototype.getCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.admin.api.v1.User.prototype.setCreationDate = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setCreationDate = function(value) {
   jspb.Message.setWrapperField(this, 3, value);
 };
 
@@ -2792,7 +3024,7 @@ proto.zitadel.admin.api.v1.User.prototype.setCreationDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.User.prototype.clearCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.clearCreationDate = function() {
   this.setCreationDate(undefined);
 };
 
@@ -2801,7 +3033,7 @@ proto.zitadel.admin.api.v1.User.prototype.clearCreationDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.User.prototype.hasCreationDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.hasCreationDate = function() {
   return jspb.Message.getField(this, 3) != null;
 };
 
@@ -2810,14 +3042,14 @@ proto.zitadel.admin.api.v1.User.prototype.hasCreationDate = function() {
  * optional google.protobuf.Timestamp change_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.admin.api.v1.User.prototype.getChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.admin.api.v1.User.prototype.setChangeDate = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setChangeDate = function(value) {
   jspb.Message.setWrapperField(this, 4, value);
 };
 
@@ -2825,7 +3057,7 @@ proto.zitadel.admin.api.v1.User.prototype.setChangeDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.admin.api.v1.User.prototype.clearChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.clearChangeDate = function() {
   this.setChangeDate(undefined);
 };
 
@@ -2834,7 +3066,7 @@ proto.zitadel.admin.api.v1.User.prototype.clearChangeDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.User.prototype.hasChangeDate = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.hasChangeDate = function() {
   return jspb.Message.getField(this, 4) != null;
 };
 
@@ -2843,13 +3075,13 @@ proto.zitadel.admin.api.v1.User.prototype.hasChangeDate = function() {
  * optional string user_name = 5;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getUserName = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setUserName = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -2858,13 +3090,13 @@ proto.zitadel.admin.api.v1.User.prototype.setUserName = function(value) {
  * optional string first_name = 6;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getFirstName = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setFirstName = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 6, value);
 };
 
@@ -2873,13 +3105,13 @@ proto.zitadel.admin.api.v1.User.prototype.setFirstName = function(value) {
  * optional string last_name = 7;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getLastName = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setLastName = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 7, value);
 };
 
@@ -2888,13 +3120,13 @@ proto.zitadel.admin.api.v1.User.prototype.setLastName = function(value) {
  * optional string nick_name = 8;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getNickName = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setNickName = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 8, value);
 };
 
@@ -2903,13 +3135,13 @@ proto.zitadel.admin.api.v1.User.prototype.setNickName = function(value) {
  * optional string display_name = 9;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getDisplayName = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 9, value);
 };
 
@@ -2918,28 +3150,28 @@ proto.zitadel.admin.api.v1.User.prototype.setDisplayName = function(value) {
  * optional string preferred_language = 10;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 10, value);
 };
 
 
 /**
  * optional Gender gender = 11;
- * @return {!proto.zitadel.admin.api.v1.Gender}
+ * @return {!proto.caos.zitadel.admin.api.v1.Gender}
  */
-proto.zitadel.admin.api.v1.User.prototype.getGender = function() {
-  return /** @type {!proto.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 11, 0));
+proto.caos.zitadel.admin.api.v1.User.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 11, 0));
 };
 
 
-/** @param {!proto.zitadel.admin.api.v1.Gender} value */
-proto.zitadel.admin.api.v1.User.prototype.setGender = function(value) {
+/** @param {!proto.caos.zitadel.admin.api.v1.Gender} value */
+proto.caos.zitadel.admin.api.v1.User.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 11, value);
 };
 
@@ -2948,13 +3180,13 @@ proto.zitadel.admin.api.v1.User.prototype.setGender = function(value) {
  * optional string email = 12;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getEmail = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setEmail = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 12, value);
 };
 
@@ -2965,13 +3197,13 @@ proto.zitadel.admin.api.v1.User.prototype.setEmail = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.User.prototype.getIsemailverified = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getIsemailverified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 13, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.admin.api.v1.User.prototype.setIsemailverified = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setIsemailverified = function(value) {
   jspb.Message.setProto3BooleanField(this, 13, value);
 };
 
@@ -2980,13 +3212,13 @@ proto.zitadel.admin.api.v1.User.prototype.setIsemailverified = function(value) {
  * optional string phone = 14;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getPhone = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getPhone = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setPhone = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setPhone = function(value) {
   jspb.Message.setProto3StringField(this, 14, value);
 };
 
@@ -2997,13 +3229,13 @@ proto.zitadel.admin.api.v1.User.prototype.setPhone = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.admin.api.v1.User.prototype.getIsphoneverified = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getIsphoneverified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 15, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.admin.api.v1.User.prototype.setIsphoneverified = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setIsphoneverified = function(value) {
   jspb.Message.setProto3BooleanField(this, 15, value);
 };
 
@@ -3012,13 +3244,13 @@ proto.zitadel.admin.api.v1.User.prototype.setIsphoneverified = function(value) {
  * optional string country = 16;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getCountry = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getCountry = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setCountry = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setCountry = function(value) {
   jspb.Message.setProto3StringField(this, 16, value);
 };
 
@@ -3027,13 +3259,13 @@ proto.zitadel.admin.api.v1.User.prototype.setCountry = function(value) {
  * optional string locality = 17;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getLocality = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getLocality = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setLocality = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setLocality = function(value) {
   jspb.Message.setProto3StringField(this, 17, value);
 };
 
@@ -3042,13 +3274,13 @@ proto.zitadel.admin.api.v1.User.prototype.setLocality = function(value) {
  * optional string postal_code = 18;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getPostalCode = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getPostalCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setPostalCode = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setPostalCode = function(value) {
   jspb.Message.setProto3StringField(this, 18, value);
 };
 
@@ -3057,13 +3289,13 @@ proto.zitadel.admin.api.v1.User.prototype.setPostalCode = function(value) {
  * optional string region = 19;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getRegion = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getRegion = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 19, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setRegion = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setRegion = function(value) {
   jspb.Message.setProto3StringField(this, 19, value);
 };
 
@@ -3072,17 +3304,32 @@ proto.zitadel.admin.api.v1.User.prototype.setRegion = function(value) {
  * optional string street_address = 20;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.User.prototype.getStreetAddress = function() {
+proto.caos.zitadel.admin.api.v1.User.prototype.getStreetAddress = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 20, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.User.prototype.setStreetAddress = function(value) {
+proto.caos.zitadel.admin.api.v1.User.prototype.setStreetAddress = function(value) {
   jspb.Message.setProto3StringField(this, 20, value);
 };
 
 
+/**
+ * optional uint64 sequence = 21;
+ * @return {number}
+ */
+proto.caos.zitadel.admin.api.v1.User.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 21, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.admin.api.v1.User.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 21, value);
+};
+
+
 
 
 
@@ -3097,8 +3344,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.admin.api.v1.CreateOrgRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.CreateOrgRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -3107,11 +3354,11 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.toObject = function(opt_in
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.admin.api.v1.CreateOrgRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateOrgRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     name: jspb.Message.getFieldWithDefault(msg, 1, ""),
     domain: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -3128,23 +3375,23 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.admin.api.v1.CreateOrgRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.CreateOrgRequest}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.admin.api.v1.CreateOrgRequest;
-  return proto.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.admin.api.v1.CreateOrgRequest;
+  return proto.caos.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.admin.api.v1.CreateOrgRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateOrgRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.admin.api.v1.CreateOrgRequest}
+ * @return {!proto.caos.zitadel.admin.api.v1.CreateOrgRequest}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3172,9 +3419,9 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.deserializeBinaryFromReader = functi
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3182,11 +3429,11 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.serializeBinary = function
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.admin.api.v1.CreateOrgRequest} message
+ * @param {!proto.caos.zitadel.admin.api.v1.CreateOrgRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getName();
   if (f.length > 0) {
@@ -3209,13 +3456,13 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.serializeBinaryToWriter = function(m
  * optional string name = 1;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.getName = function() {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.getName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.setName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.setName = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3224,13 +3471,13 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.setName = function(value)
  * optional string domain = 2;
  * @return {string}
  */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.getDomain = function() {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.getDomain = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.setDomain = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.setDomain = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -3238,7 +3485,7 @@ proto.zitadel.admin.api.v1.CreateOrgRequest.prototype.setDomain = function(value
 /**
  * @enum {number}
  */
-proto.zitadel.admin.api.v1.OrgState = {
+proto.caos.zitadel.admin.api.v1.OrgState = {
   ORGSTATE_UNSPECIFIED: 0,
   ORGSTATE_ACTIVE: 1,
   ORGSTATE_INACTIVE: 2
@@ -3247,7 +3494,7 @@ proto.zitadel.admin.api.v1.OrgState = {
 /**
  * @enum {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchKey = {
+proto.caos.zitadel.admin.api.v1.OrgSearchKey = {
   ORGSEARCHKEY_UNSPECIFIED: 0,
   ORGSEARCHKEY_ORG_NAME: 1,
   ORGSEARCHKEY_DOMAIN: 2,
@@ -3257,7 +3504,7 @@ proto.zitadel.admin.api.v1.OrgSearchKey = {
 /**
  * @enum {number}
  */
-proto.zitadel.admin.api.v1.OrgSearchMethod = {
+proto.caos.zitadel.admin.api.v1.OrgSearchMethod = {
   ORGSEARCHMETHOD_EQUALS: 0,
   ORGSEARCHMETHOD_STARTS_WITH: 1,
   ORGSEARCHMETHOD_CONTAINS: 2
@@ -3266,7 +3513,7 @@ proto.zitadel.admin.api.v1.OrgSearchMethod = {
 /**
  * @enum {number}
  */
-proto.zitadel.admin.api.v1.UserState = {
+proto.caos.zitadel.admin.api.v1.UserState = {
   USERSTATE_UNSPECIFIED: 0,
   USERSTATE_ACTIVE: 1,
   USERSTATE_INACTIVE: 2,
@@ -3279,11 +3526,11 @@ proto.zitadel.admin.api.v1.UserState = {
 /**
  * @enum {number}
  */
-proto.zitadel.admin.api.v1.Gender = {
+proto.caos.zitadel.admin.api.v1.Gender = {
   GENDER_UNSPECIFIED: 0,
   GENDER_FEMALE: 1,
   GENDER_MALE: 2,
   GENDER_DIVERSE: 3
 };
 
-goog.object.extend(exports, proto.zitadel.admin.api.v1);
+goog.object.extend(exports, proto.caos.zitadel.admin.api.v1);
diff --git a/console/src/app/proto/generated/auth_grpc_web_pb.d.ts b/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
index 48b26da69d..5fb89b8330 100644
--- a/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
+++ b/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
@@ -9,20 +9,20 @@ import * as protoc$gen$swagger_options_annotations_pb from './protoc-gen-swagger
 import * as authoption_options_pb from './authoption/options_pb';
 
 import {
-  IsAdminResponse,
   MfaOtpResponse,
   MultiFactors,
   MyPermissions,
   MyProjectOrgSearchRequest,
   MyProjectOrgSearchResponse,
   PasswordChange,
-  PasswordRequest,
   UpdateUserAddressRequest,
   UpdateUserEmailRequest,
   UpdateUserPhoneRequest,
   UpdateUserProfileRequest,
   UserAddress,
   UserEmail,
+  UserGrantSearchRequest,
+  UserGrantSearchResponse,
   UserPhone,
   UserProfile,
   UserSessionViews,
@@ -154,13 +154,6 @@ export class AuthServiceClient {
                response: MultiFactors) => void
   ): grpcWeb.ClientReadableStream<MultiFactors>;
 
-  setMyPassword(
-    request: PasswordRequest,
-    metadata: grpcWeb.Metadata | undefined,
-    callback: (err: grpcWeb.Error,
-               response: google_protobuf_empty_pb.Empty) => void
-  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
-
   changeMyPassword(
     request: PasswordChange,
     metadata: grpcWeb.Metadata | undefined,
@@ -179,8 +172,8 @@ export class AuthServiceClient {
     request: VerifyMfaOtp,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: MfaOtpResponse) => void
-  ): grpcWeb.ClientReadableStream<MfaOtpResponse>;
+               response: google_protobuf_empty_pb.Empty) => void
+  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
 
   removeMfaOTP(
     request: google_protobuf_empty_pb.Empty,
@@ -189,6 +182,13 @@ export class AuthServiceClient {
                response: google_protobuf_empty_pb.Empty) => void
   ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
 
+  searchMyUserGrant(
+    request: UserGrantSearchRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: UserGrantSearchResponse) => void
+  ): grpcWeb.ClientReadableStream<UserGrantSearchResponse>;
+
   searchMyProjectOrgs(
     request: MyProjectOrgSearchRequest,
     metadata: grpcWeb.Metadata | undefined,
@@ -196,13 +196,6 @@ export class AuthServiceClient {
                response: MyProjectOrgSearchResponse) => void
   ): grpcWeb.ClientReadableStream<MyProjectOrgSearchResponse>;
 
-  isIamAdmin(
-    request: google_protobuf_empty_pb.Empty,
-    metadata: grpcWeb.Metadata | undefined,
-    callback: (err: grpcWeb.Error,
-               response: IsAdminResponse) => void
-  ): grpcWeb.ClientReadableStream<IsAdminResponse>;
-
   getMyZitadelPermissions(
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
@@ -302,11 +295,6 @@ export class AuthServicePromiseClient {
     metadata?: grpcWeb.Metadata
   ): Promise<MultiFactors>;
 
-  setMyPassword(
-    request: PasswordRequest,
-    metadata?: grpcWeb.Metadata
-  ): Promise<google_protobuf_empty_pb.Empty>;
-
   changeMyPassword(
     request: PasswordChange,
     metadata?: grpcWeb.Metadata
@@ -320,23 +308,23 @@ export class AuthServicePromiseClient {
   verifyMfaOTP(
     request: VerifyMfaOtp,
     metadata?: grpcWeb.Metadata
-  ): Promise<MfaOtpResponse>;
+  ): Promise<google_protobuf_empty_pb.Empty>;
 
   removeMfaOTP(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
   ): Promise<google_protobuf_empty_pb.Empty>;
 
+  searchMyUserGrant(
+    request: UserGrantSearchRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<UserGrantSearchResponse>;
+
   searchMyProjectOrgs(
     request: MyProjectOrgSearchRequest,
     metadata?: grpcWeb.Metadata
   ): Promise<MyProjectOrgSearchResponse>;
 
-  isIamAdmin(
-    request: google_protobuf_empty_pb.Empty,
-    metadata?: grpcWeb.Metadata
-  ): Promise<IsAdminResponse>;
-
   getMyZitadelPermissions(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
diff --git a/console/src/app/proto/generated/auth_grpc_web_pb.js b/console/src/app/proto/generated/auth_grpc_web_pb.js
index 455226f248..be00dbe385 100644
--- a/console/src/app/proto/generated/auth_grpc_web_pb.js
+++ b/console/src/app/proto/generated/auth_grpc_web_pb.js
@@ -1,5 +1,5 @@
 /**
- * @fileoverview gRPC-Web generated client stub for zitadel.auth.api.v1
+ * @fileoverview gRPC-Web generated client stub for caos.zitadel.auth.api.v1
  * @enhanceable
  * @public
  */
@@ -26,10 +26,11 @@ var protoc$gen$swagger_options_annotations_pb = require('./protoc-gen-swagger/op
 
 var authoption_options_pb = require('./authoption/options_pb.js')
 const proto = {};
-proto.zitadel = {};
-proto.zitadel.auth = {};
-proto.zitadel.auth.api = {};
-proto.zitadel.auth.api.v1 = require('./auth_pb.js');
+proto.caos = {};
+proto.caos.zitadel = {};
+proto.caos.zitadel.auth = {};
+proto.caos.zitadel.auth.api = {};
+proto.caos.zitadel.auth.api.v1 = require('./auth_pb.js');
 
 /**
  * @param {string} hostname
@@ -39,7 +40,7 @@ proto.zitadel.auth.api.v1 = require('./auth_pb.js');
  * @struct
  * @final
  */
-proto.zitadel.auth.api.v1.AuthServiceClient =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient =
     function(hostname, credentials, options) {
   if (!options) options = {};
   options['format'] = 'binary';
@@ -65,7 +66,7 @@ proto.zitadel.auth.api.v1.AuthServiceClient =
  * @struct
  * @final
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient =
     function(hostname, credentials, options) {
   if (!options) options = {};
   options['format'] = 'binary';
@@ -90,7 +91,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_Healthz = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/Healthz',
+  '/caos.zitadel.auth.api.v1.AuthService/Healthz',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -134,10 +135,10 @@ const methodInfo_AuthService_Healthz = new grpc.web.AbstractClientBase.MethodInf
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.healthz =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.healthz =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Healthz',
+      '/caos.zitadel.auth.api.v1.AuthService/Healthz',
       request,
       metadata || {},
       methodDescriptor_AuthService_Healthz,
@@ -153,10 +154,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.healthz =
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.healthz =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.healthz =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Healthz',
+      '/caos.zitadel.auth.api.v1.AuthService/Healthz',
       request,
       metadata || {},
       methodDescriptor_AuthService_Healthz);
@@ -170,7 +171,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.healthz =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_Ready = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/Ready',
+  '/caos.zitadel.auth.api.v1.AuthService/Ready',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -214,10 +215,10 @@ const methodInfo_AuthService_Ready = new grpc.web.AbstractClientBase.MethodInfo(
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.ready =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.ready =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Ready',
+      '/caos.zitadel.auth.api.v1.AuthService/Ready',
       request,
       metadata || {},
       methodDescriptor_AuthService_Ready,
@@ -233,10 +234,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.ready =
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.ready =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.ready =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Ready',
+      '/caos.zitadel.auth.api.v1.AuthService/Ready',
       request,
       metadata || {},
       methodDescriptor_AuthService_Ready);
@@ -250,7 +251,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.ready =
  *   !proto.google.protobuf.Struct>}
  */
 const methodDescriptor_AuthService_Validate = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/Validate',
+  '/caos.zitadel.auth.api.v1.AuthService/Validate',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_struct_pb.Struct,
@@ -294,10 +295,10 @@ const methodInfo_AuthService_Validate = new grpc.web.AbstractClientBase.MethodIn
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Struct>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.validate =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.validate =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Validate',
+      '/caos.zitadel.auth.api.v1.AuthService/Validate',
       request,
       metadata || {},
       methodDescriptor_AuthService_Validate,
@@ -313,10 +314,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.validate =
  * @return {!Promise<!proto.google.protobuf.Struct>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.validate =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.validate =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/Validate',
+      '/caos.zitadel.auth.api.v1.AuthService/Validate',
       request,
       metadata || {},
       methodDescriptor_AuthService_Validate);
@@ -327,13 +328,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.validate =
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserSessionViews>}
+ *   !proto.caos.zitadel.auth.api.v1.UserSessionViews>}
  */
 const methodDescriptor_AuthService_GetMyUserSessions = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyUserSessions',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyUserSessions',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.UserSessionViews,
+  proto.caos.zitadel.auth.api.v1.UserSessionViews,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -341,7 +342,7 @@ const methodDescriptor_AuthService_GetMyUserSessions = new grpc.web.MethodDescri
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserSessionViews.deserializeBinary
 );
 
 
@@ -349,10 +350,10 @@ const methodDescriptor_AuthService_GetMyUserSessions = new grpc.web.MethodDescri
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserSessionViews>}
+ *   !proto.caos.zitadel.auth.api.v1.UserSessionViews>}
  */
 const methodInfo_AuthService_GetMyUserSessions = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserSessionViews,
+  proto.caos.zitadel.auth.api.v1.UserSessionViews,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -360,7 +361,7 @@ const methodInfo_AuthService_GetMyUserSessions = new grpc.web.AbstractClientBase
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserSessionViews.deserializeBinary
 );
 
 
@@ -369,15 +370,15 @@ const methodInfo_AuthService_GetMyUserSessions = new grpc.web.AbstractClientBase
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserSessionViews)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserSessionViews)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserSessionViews>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserSessionViews>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserSessions =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserSessions =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserSessions',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserSessions',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserSessions,
@@ -390,13 +391,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserSessions =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserSessionViews>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserSessionViews>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserSessions =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserSessions =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserSessions',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserSessions',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserSessions);
@@ -407,13 +408,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserSessions =
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
  */
 const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyUserProfile',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyUserProfile',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UserProfile,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -421,7 +422,7 @@ const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescrip
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
 );
 
 
@@ -429,10 +430,10 @@ const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescrip
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
  */
 const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UserProfile,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -440,7 +441,7 @@ const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
 );
 
 
@@ -449,15 +450,15 @@ const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserProfile)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserProfile)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserProfile>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserProfile>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserProfile =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserProfile =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserProfile',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserProfile',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserProfile,
@@ -470,13 +471,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserProfile =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserProfile>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserProfile>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserProfile =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserProfile =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserProfile',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserProfile',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserProfile);
@@ -486,58 +487,58 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserProfile =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.UpdateUserProfileRequest,
- *   !proto.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
  */
 const methodDescriptor_AuthService_UpdateMyUserProfile = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
+  '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.UpdateUserProfileRequest,
-  proto.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest,
+  proto.caos.zitadel.auth.api.v1.UserProfile,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.UpdateUserProfileRequest,
- *   !proto.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
  */
 const methodInfo_AuthService_UpdateMyUserProfile = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UserProfile,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserProfile)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserProfile)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserProfile>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserProfile>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserProfile =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserProfile =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
+      '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
       request,
       metadata || {},
       methodDescriptor_AuthService_UpdateMyUserProfile,
@@ -546,17 +547,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserProfile =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserProfile>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserProfile>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserProfile =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserProfile =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
+      '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserProfile',
       request,
       metadata || {},
       methodDescriptor_AuthService_UpdateMyUserProfile);
@@ -567,13 +568,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserProfile
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
  */
 const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyUserEmail',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyUserEmail',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UserEmail,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -581,7 +582,7 @@ const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescripto
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
 );
 
 
@@ -589,10 +590,10 @@ const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescripto
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
  */
 const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UserEmail,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -600,7 +601,7 @@ const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.Me
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
 );
 
 
@@ -609,15 +610,15 @@ const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.Me
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserEmail)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserEmail)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserEmail>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserEmail>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserEmail =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserEmail,
@@ -630,13 +631,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserEmail =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserEmail>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserEmail>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserEmail =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserEmail);
@@ -646,58 +647,58 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserEmail =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.UpdateUserEmailRequest,
- *   !proto.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
  */
 const methodDescriptor_AuthService_ChangeMyUserEmail = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
+  '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.UpdateUserEmailRequest,
-  proto.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest,
+  proto.caos.zitadel.auth.api.v1.UserEmail,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.UpdateUserEmailRequest,
- *   !proto.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
  */
 const methodInfo_AuthService_ChangeMyUserEmail = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UserEmail,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserEmail)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserEmail)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserEmail>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserEmail>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserEmail =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyUserEmail,
@@ -706,17 +707,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserEmail =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserEmail>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserEmail>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserEmail =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyUserEmail);
@@ -726,16 +727,16 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserEmail =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
+ *   !proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_VerifyMyUserEmail = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
+  '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
+  proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -748,13 +749,13 @@ const methodDescriptor_AuthService_VerifyMyUserEmail = new grpc.web.MethodDescri
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
+ *   !proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest,
  *   !proto.google.protobuf.Empty>}
  */
 const methodInfo_AuthService_VerifyMyUserEmail = new grpc.web.AbstractClientBase.MethodInfo(
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -765,7 +766,7 @@ const methodInfo_AuthService_VerifyMyUserEmail = new grpc.web.AbstractClientBase
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
@@ -774,10 +775,10 @@ const methodInfo_AuthService_VerifyMyUserEmail = new grpc.web.AbstractClientBase
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserEmail =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMyUserEmail,
@@ -786,17 +787,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserEmail =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserEmail =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserEmail =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserEmail',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMyUserEmail);
@@ -810,7 +811,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserEmail =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_ResendMyEmailVerificationMail = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
+  '/caos.zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -854,10 +855,10 @@ const methodInfo_AuthService_ResendMyEmailVerificationMail = new grpc.web.Abstra
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyEmailVerificationMail =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyEmailVerificationMail =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
+      '/caos.zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
       request,
       metadata || {},
       methodDescriptor_AuthService_ResendMyEmailVerificationMail,
@@ -873,10 +874,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyEmailVerificationM
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyEmailVerificationMail =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyEmailVerificationMail =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
+      '/caos.zitadel.auth.api.v1.AuthService/ResendMyEmailVerificationMail',
       request,
       metadata || {},
       methodDescriptor_AuthService_ResendMyEmailVerificationMail);
@@ -887,13 +888,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyEmailVerifi
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
  */
 const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyUserPhone',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyUserPhone',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UserPhone,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -901,7 +902,7 @@ const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescripto
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
 );
 
 
@@ -909,10 +910,10 @@ const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescripto
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
  */
 const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UserPhone,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -920,7 +921,7 @@ const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.Me
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
 );
 
 
@@ -929,15 +930,15 @@ const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.Me
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserPhone)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserPhone)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserPhone>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserPhone>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserPhone =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserPhone,
@@ -950,13 +951,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserPhone =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserPhone>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserPhone>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserPhone =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserPhone);
@@ -966,58 +967,58 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserPhone =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.UpdateUserPhoneRequest,
- *   !proto.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
  */
 const methodDescriptor_AuthService_ChangeMyUserPhone = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
+  '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.UpdateUserPhoneRequest,
-  proto.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest,
+  proto.caos.zitadel.auth.api.v1.UserPhone,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.UpdateUserPhoneRequest,
- *   !proto.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
  */
 const methodInfo_AuthService_ChangeMyUserPhone = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UserPhone,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserPhone)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserPhone)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserPhone>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserPhone>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserPhone =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyUserPhone,
@@ -1026,17 +1027,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyUserPhone =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserPhone>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserPhone>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserPhone =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyUserPhone);
@@ -1046,16 +1047,16 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyUserPhone =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.VerifyUserPhoneRequest,
+ *   !proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest,
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_VerifyMyUserPhone = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
+  '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.VerifyUserPhoneRequest,
+  proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest,
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -1068,13 +1069,13 @@ const methodDescriptor_AuthService_VerifyMyUserPhone = new grpc.web.MethodDescri
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.VerifyUserPhoneRequest,
+ *   !proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest,
  *   !proto.google.protobuf.Empty>}
  */
 const methodInfo_AuthService_VerifyMyUserPhone = new grpc.web.AbstractClientBase.MethodInfo(
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -1085,7 +1086,7 @@ const methodInfo_AuthService_VerifyMyUserPhone = new grpc.web.AbstractClientBase
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
@@ -1094,10 +1095,10 @@ const methodInfo_AuthService_VerifyMyUserPhone = new grpc.web.AbstractClientBase
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserPhone =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMyUserPhone,
@@ -1106,17 +1107,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMyUserPhone =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserPhone =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserPhone =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMyUserPhone',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMyUserPhone);
@@ -1130,7 +1131,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMyUserPhone =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_ResendMyPhoneVerificationCode = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
+  '/caos.zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -1174,10 +1175,10 @@ const methodInfo_AuthService_ResendMyPhoneVerificationCode = new grpc.web.Abstra
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyPhoneVerificationCode =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyPhoneVerificationCode =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
+      '/caos.zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
       request,
       metadata || {},
       methodDescriptor_AuthService_ResendMyPhoneVerificationCode,
@@ -1193,10 +1194,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.resendMyPhoneVerificationC
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyPhoneVerificationCode =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyPhoneVerificationCode =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
+      '/caos.zitadel.auth.api.v1.AuthService/ResendMyPhoneVerificationCode',
       request,
       metadata || {},
       methodDescriptor_AuthService_ResendMyPhoneVerificationCode);
@@ -1207,13 +1208,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyPhoneVerifi
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
  */
 const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyUserAddress',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyUserAddress',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UserAddress,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1221,7 +1222,7 @@ const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescrip
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
 );
 
 
@@ -1229,10 +1230,10 @@ const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescrip
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
  */
 const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UserAddress,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1240,7 +1241,7 @@ const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
 );
 
 
@@ -1249,15 +1250,15 @@ const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserAddress)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserAddress)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserAddress>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserAddress>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserAddress =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserAddress =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserAddress',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserAddress',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserAddress,
@@ -1270,13 +1271,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserAddress =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserAddress>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserAddress>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserAddress =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserAddress =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyUserAddress',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyUserAddress',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyUserAddress);
@@ -1286,58 +1287,58 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserAddress =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.UpdateUserAddressRequest,
- *   !proto.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
  */
 const methodDescriptor_AuthService_UpdateMyUserAddress = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
+  '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.UpdateUserAddressRequest,
-  proto.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest,
+  proto.caos.zitadel.auth.api.v1.UserAddress,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.UpdateUserAddressRequest,
- *   !proto.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
  */
 const methodInfo_AuthService_UpdateMyUserAddress = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UserAddress,
   /**
-   * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.UserAddress)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserAddress)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.UserAddress>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserAddress>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserAddress =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserAddress =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
+      '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
       request,
       metadata || {},
       methodDescriptor_AuthService_UpdateMyUserAddress,
@@ -1346,17 +1347,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.updateMyUserAddress =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.UserAddress>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserAddress>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserAddress =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserAddress =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
+      '/caos.zitadel.auth.api.v1.AuthService/UpdateMyUserAddress',
       request,
       metadata || {},
       methodDescriptor_AuthService_UpdateMyUserAddress);
@@ -1367,13 +1368,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserAddress
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MultiFactors>}
+ *   !proto.caos.zitadel.auth.api.v1.MultiFactors>}
  */
 const methodDescriptor_AuthService_GetMyMfas = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyMfas',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyMfas',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.MultiFactors,
+  proto.caos.zitadel.auth.api.v1.MultiFactors,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1381,7 +1382,7 @@ const methodDescriptor_AuthService_GetMyMfas = new grpc.web.MethodDescriptor(
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MultiFactors.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MultiFactors.deserializeBinary
 );
 
 
@@ -1389,10 +1390,10 @@ const methodDescriptor_AuthService_GetMyMfas = new grpc.web.MethodDescriptor(
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MultiFactors>}
+ *   !proto.caos.zitadel.auth.api.v1.MultiFactors>}
  */
 const methodInfo_AuthService_GetMyMfas = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.MultiFactors,
+  proto.caos.zitadel.auth.api.v1.MultiFactors,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1400,7 +1401,7 @@ const methodInfo_AuthService_GetMyMfas = new grpc.web.AbstractClientBase.MethodI
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MultiFactors.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MultiFactors.deserializeBinary
 );
 
 
@@ -1409,15 +1410,15 @@ const methodInfo_AuthService_GetMyMfas = new grpc.web.AbstractClientBase.MethodI
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.MultiFactors)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.MultiFactors)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.MultiFactors>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.MultiFactors>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyMfas =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyMfas =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyMfas',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyMfas',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyMfas,
@@ -1430,13 +1431,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyMfas =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.MultiFactors>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.MultiFactors>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyMfas =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyMfas =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyMfas',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyMfas',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyMfas);
@@ -1446,96 +1447,16 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyMfas =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.PasswordRequest,
- *   !proto.google.protobuf.Empty>}
- */
-const methodDescriptor_AuthService_SetMyPassword = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/SetMyPassword',
-  grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.PasswordRequest,
-  google_protobuf_empty_pb.Empty,
-  /**
-   * @param {!proto.zitadel.auth.api.v1.PasswordRequest} request
-   * @return {!Uint8Array}
-   */
-  function(request) {
-    return request.serializeBinary();
-  },
-  google_protobuf_empty_pb.Empty.deserializeBinary
-);
-
-
-/**
- * @const
- * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.PasswordRequest,
- *   !proto.google.protobuf.Empty>}
- */
-const methodInfo_AuthService_SetMyPassword = new grpc.web.AbstractClientBase.MethodInfo(
-  google_protobuf_empty_pb.Empty,
-  /**
-   * @param {!proto.zitadel.auth.api.v1.PasswordRequest} request
-   * @return {!Uint8Array}
-   */
-  function(request) {
-    return request.serializeBinary();
-  },
-  google_protobuf_empty_pb.Empty.deserializeBinary
-);
-
-
-/**
- * @param {!proto.zitadel.auth.api.v1.PasswordRequest} request The
- *     request proto
- * @param {?Object<string, string>} metadata User defined
- *     call metadata
- * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
- *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
- *     The XHR Node Readable Stream
- */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.setMyPassword =
-    function(request, metadata, callback) {
-  return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/SetMyPassword',
-      request,
-      metadata || {},
-      methodDescriptor_AuthService_SetMyPassword,
-      callback);
-};
-
-
-/**
- * @param {!proto.zitadel.auth.api.v1.PasswordRequest} request The
- *     request proto
- * @param {?Object<string, string>} metadata User defined
- *     call metadata
- * @return {!Promise<!proto.google.protobuf.Empty>}
- *     A native promise that resolves to the response
- */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.setMyPassword =
-    function(request, metadata) {
-  return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/SetMyPassword',
-      request,
-      metadata || {},
-      methodDescriptor_AuthService_SetMyPassword);
-};
-
-
-/**
- * @const
- * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.PasswordChange,
+ *   !proto.caos.zitadel.auth.api.v1.PasswordChange,
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_ChangeMyPassword = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/ChangeMyPassword',
+  '/caos.zitadel.auth.api.v1.AuthService/ChangeMyPassword',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.PasswordChange,
+  proto.caos.zitadel.auth.api.v1.PasswordChange,
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.PasswordChange} request
+   * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -1548,13 +1469,13 @@ const methodDescriptor_AuthService_ChangeMyPassword = new grpc.web.MethodDescrip
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.PasswordChange,
+ *   !proto.caos.zitadel.auth.api.v1.PasswordChange,
  *   !proto.google.protobuf.Empty>}
  */
 const methodInfo_AuthService_ChangeMyPassword = new grpc.web.AbstractClientBase.MethodInfo(
   google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.PasswordChange} request
+   * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -1565,7 +1486,7 @@ const methodInfo_AuthService_ChangeMyPassword = new grpc.web.AbstractClientBase.
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.PasswordChange} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
@@ -1574,10 +1495,10 @@ const methodInfo_AuthService_ChangeMyPassword = new grpc.web.AbstractClientBase.
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyPassword =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyPassword =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyPassword',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyPassword',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyPassword,
@@ -1586,17 +1507,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.changeMyPassword =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.PasswordChange} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyPassword =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyPassword =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/ChangeMyPassword',
+      '/caos.zitadel.auth.api.v1.AuthService/ChangeMyPassword',
       request,
       metadata || {},
       methodDescriptor_AuthService_ChangeMyPassword);
@@ -1607,13 +1528,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.changeMyPassword =
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.MfaOtpResponse>}
  */
 const methodDescriptor_AuthService_AddMfaOTP = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/AddMfaOTP',
+  '/caos.zitadel.auth.api.v1.AuthService/AddMfaOTP',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.MfaOtpResponse,
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1621,7 +1542,7 @@ const methodDescriptor_AuthService_AddMfaOTP = new grpc.web.MethodDescriptor(
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
 );
 
 
@@ -1629,10 +1550,10 @@ const methodDescriptor_AuthService_AddMfaOTP = new grpc.web.MethodDescriptor(
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.MfaOtpResponse>}
  */
 const methodInfo_AuthService_AddMfaOTP = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.MfaOtpResponse,
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1640,7 +1561,7 @@ const methodInfo_AuthService_AddMfaOTP = new grpc.web.AbstractClientBase.MethodI
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
 );
 
 
@@ -1649,15 +1570,15 @@ const methodInfo_AuthService_AddMfaOTP = new grpc.web.AbstractClientBase.MethodI
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.MfaOtpResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.MfaOtpResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.MfaOtpResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.MfaOtpResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.addMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.addMfaOTP =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/AddMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/AddMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_AddMfaOTP,
@@ -1670,13 +1591,13 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.addMfaOTP =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.MfaOtpResponse>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.addMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.addMfaOTP =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/AddMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/AddMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_AddMfaOTP);
@@ -1686,58 +1607,58 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.addMfaOTP =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.VerifyMfaOtp,
- *   !proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.VerifyMfaOtp,
+ *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_VerifyMfaOTP = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
+  '/caos.zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.VerifyMfaOtp,
-  proto.zitadel.auth.api.v1.MfaOtpResponse,
+  proto.caos.zitadel.auth.api.v1.VerifyMfaOtp,
+  google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
+  google_protobuf_empty_pb.Empty.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.VerifyMfaOtp,
- *   !proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.VerifyMfaOtp,
+ *   !proto.google.protobuf.Empty>}
  */
 const methodInfo_AuthService_VerifyMfaOTP = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.MfaOtpResponse,
+  google_protobuf_empty_pb.Empty,
   /**
-   * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} request
+   * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary
+  google_protobuf_empty_pb.Empty.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.MfaOtpResponse)}
+ * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.MfaOtpResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMfaOTP =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMfaOTP,
@@ -1746,17 +1667,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.verifyMfaOTP =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.MfaOtpResponse>}
+ * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMfaOTP =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/VerifyMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_VerifyMfaOTP);
@@ -1770,7 +1691,7 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.verifyMfaOTP =
  *   !proto.google.protobuf.Empty>}
  */
 const methodDescriptor_AuthService_RemoveMfaOTP = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
+  '/caos.zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
   google_protobuf_empty_pb.Empty,
@@ -1814,10 +1735,10 @@ const methodInfo_AuthService_RemoveMfaOTP = new grpc.web.AbstractClientBase.Meth
  * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.removeMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.removeMfaOTP =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_RemoveMfaOTP,
@@ -1833,10 +1754,10 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.removeMfaOTP =
  * @return {!Promise<!proto.google.protobuf.Empty>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.removeMfaOTP =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.removeMfaOTP =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
+      '/caos.zitadel.auth.api.v1.AuthService/RemoveMfaOTP',
       request,
       metadata || {},
       methodDescriptor_AuthService_RemoveMfaOTP);
@@ -1846,58 +1767,138 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.removeMfaOTP =
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
- *   !proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse>}
  */
-const methodDescriptor_AuthService_SearchMyProjectOrgs = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
+const methodDescriptor_AuthService_SearchMyUserGrant = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.auth.api.v1.AuthService/SearchMyUserGrant',
   grpc.web.MethodType.UNARY,
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse,
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest,
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse,
   /**
-   * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
- *   !proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
+ *   !proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest,
+ *   !proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse>}
  */
-const methodInfo_AuthService_SearchMyProjectOrgs = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse,
+const methodInfo_AuthService_SearchMyUserGrant = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse,
   /**
-   * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request
+   * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.deserializeBinary
 );
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.searchMyProjectOrgs =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.searchMyUserGrant =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
+      '/caos.zitadel.auth.api.v1.AuthService/SearchMyUserGrant',
+      request,
+      metadata || {},
+      methodDescriptor_AuthService_SearchMyUserGrant,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.searchMyUserGrant =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.auth.api.v1.AuthService/SearchMyUserGrant',
+      request,
+      metadata || {},
+      methodDescriptor_AuthService_SearchMyUserGrant);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
+ *   !proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
+ */
+const methodDescriptor_AuthService_SearchMyProjectOrgs = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse,
+  /**
+   * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest,
+ *   !proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
+ */
+const methodInfo_AuthService_SearchMyProjectOrgs = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse,
+  /**
+   * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.searchMyProjectOrgs =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
       request,
       metadata || {},
       methodDescriptor_AuthService_SearchMyProjectOrgs,
@@ -1906,17 +1907,17 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.searchMyProjectOrgs =
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request The
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.searchMyProjectOrgs =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.searchMyProjectOrgs =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
+      '/caos.zitadel.auth.api.v1.AuthService/SearchMyProjectOrgs',
       request,
       metadata || {},
       methodDescriptor_AuthService_SearchMyProjectOrgs);
@@ -1927,93 +1928,13 @@ proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.searchMyProjectOrgs
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.IsAdminResponse>}
- */
-const methodDescriptor_AuthService_IsIamAdmin = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/IsIamAdmin',
-  grpc.web.MethodType.UNARY,
-  google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.IsAdminResponse,
-  /**
-   * @param {!proto.google.protobuf.Empty} request
-   * @return {!Uint8Array}
-   */
-  function(request) {
-    return request.serializeBinary();
-  },
-  proto.zitadel.auth.api.v1.IsAdminResponse.deserializeBinary
-);
-
-
-/**
- * @const
- * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.IsAdminResponse>}
- */
-const methodInfo_AuthService_IsIamAdmin = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.IsAdminResponse,
-  /**
-   * @param {!proto.google.protobuf.Empty} request
-   * @return {!Uint8Array}
-   */
-  function(request) {
-    return request.serializeBinary();
-  },
-  proto.zitadel.auth.api.v1.IsAdminResponse.deserializeBinary
-);
-
-
-/**
- * @param {!proto.google.protobuf.Empty} request The
- *     request proto
- * @param {?Object<string, string>} metadata User defined
- *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.IsAdminResponse)}
- *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.IsAdminResponse>|undefined}
- *     The XHR Node Readable Stream
- */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.isIamAdmin =
-    function(request, metadata, callback) {
-  return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/IsIamAdmin',
-      request,
-      metadata || {},
-      methodDescriptor_AuthService_IsIamAdmin,
-      callback);
-};
-
-
-/**
- * @param {!proto.google.protobuf.Empty} request The
- *     request proto
- * @param {?Object<string, string>} metadata User defined
- *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.IsAdminResponse>}
- *     A native promise that resolves to the response
- */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.isIamAdmin =
-    function(request, metadata) {
-  return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/IsIamAdmin',
-      request,
-      metadata || {},
-      methodDescriptor_AuthService_IsIamAdmin);
-};
-
-
-/**
- * @const
- * @type {!grpc.web.MethodDescriptor<
- *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MyPermissions>}
+ *   !proto.caos.zitadel.auth.api.v1.MyPermissions>}
  */
 const methodDescriptor_AuthService_GetMyZitadelPermissions = new grpc.web.MethodDescriptor(
-  '/zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
+  '/caos.zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.zitadel.auth.api.v1.MyPermissions,
+  proto.caos.zitadel.auth.api.v1.MyPermissions,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -2021,7 +1942,7 @@ const methodDescriptor_AuthService_GetMyZitadelPermissions = new grpc.web.Method
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MyPermissions.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MyPermissions.deserializeBinary
 );
 
 
@@ -2029,10 +1950,10 @@ const methodDescriptor_AuthService_GetMyZitadelPermissions = new grpc.web.Method
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.zitadel.auth.api.v1.MyPermissions>}
+ *   !proto.caos.zitadel.auth.api.v1.MyPermissions>}
  */
 const methodInfo_AuthService_GetMyZitadelPermissions = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.zitadel.auth.api.v1.MyPermissions,
+  proto.caos.zitadel.auth.api.v1.MyPermissions,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -2040,7 +1961,7 @@ const methodInfo_AuthService_GetMyZitadelPermissions = new grpc.web.AbstractClie
   function(request) {
     return request.serializeBinary();
   },
-  proto.zitadel.auth.api.v1.MyPermissions.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.MyPermissions.deserializeBinary
 );
 
 
@@ -2049,15 +1970,15 @@ const methodInfo_AuthService_GetMyZitadelPermissions = new grpc.web.AbstractClie
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.zitadel.auth.api.v1.MyPermissions)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.MyPermissions)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.zitadel.auth.api.v1.MyPermissions>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.MyPermissions>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyZitadelPermissions =
+proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyZitadelPermissions =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyZitadelPermissions,
@@ -2070,18 +1991,18 @@ proto.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyZitadelPermissions =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.zitadel.auth.api.v1.MyPermissions>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.MyPermissions>}
  *     A native promise that resolves to the response
  */
-proto.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyZitadelPermissions =
+proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyZitadelPermissions =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
+      '/caos.zitadel.auth.api.v1.AuthService/GetMyZitadelPermissions',
       request,
       metadata || {},
       methodDescriptor_AuthService_GetMyZitadelPermissions);
 };
 
 
-module.exports = proto.zitadel.auth.api.v1;
+module.exports = proto.caos.zitadel.auth.api.v1;
 
diff --git a/console/src/app/proto/generated/auth_pb.d.ts b/console/src/app/proto/generated/auth_pb.d.ts
index 69928b5f88..34cf2c3087 100644
--- a/console/src/app/proto/generated/auth_pb.d.ts
+++ b/console/src/app/proto/generated/auth_pb.d.ts
@@ -218,6 +218,16 @@ export class UserProfile extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserProfile.AsObject;
   static toObject(includeInstance: boolean, msg: UserProfile): UserProfile.AsObject;
@@ -237,6 +247,8 @@ export namespace UserProfile {
     preferredLanguage: string,
     gender: Gender,
     sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
   }
 }
 
@@ -291,6 +303,16 @@ export class UserEmail extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserEmail.AsObject;
   static toObject(includeInstance: boolean, msg: UserEmail): UserEmail.AsObject;
@@ -305,6 +327,8 @@ export namespace UserEmail {
     email: string,
     isemailverified: boolean,
     sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
   }
 }
 
@@ -379,6 +403,16 @@ export class UserPhone extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserPhone.AsObject;
   static toObject(includeInstance: boolean, msg: UserPhone): UserPhone.AsObject;
@@ -393,6 +427,8 @@ export namespace UserPhone {
     phone: string,
     isPhoneVerified: boolean,
     sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
   }
 }
 
@@ -454,6 +490,16 @@ export class UserAddress extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserAddress.AsObject;
   static toObject(includeInstance: boolean, msg: UserAddress): UserAddress.AsObject;
@@ -471,6 +517,8 @@ export namespace UserAddress {
     region: string,
     streetAddress: string,
     sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
   }
 }
 
@@ -678,6 +726,136 @@ export namespace OIDCClientAuth {
   }
 }
 
+export class UserGrantSearchRequest extends jspb.Message {
+  getOffset(): number;
+  setOffset(value: number): void;
+
+  getLimit(): number;
+  setLimit(value: number): void;
+
+  getSortingColumn(): UserGrantSearchKey;
+  setSortingColumn(value: UserGrantSearchKey): void;
+
+  getAsc(): boolean;
+  setAsc(value: boolean): void;
+
+  getQueriesList(): Array<UserGrantSearchQuery>;
+  setQueriesList(value: Array<UserGrantSearchQuery>): void;
+  clearQueriesList(): void;
+  addQueries(value?: UserGrantSearchQuery, index?: number): UserGrantSearchQuery;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserGrantSearchRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: UserGrantSearchRequest): UserGrantSearchRequest.AsObject;
+  static serializeBinaryToWriter(message: UserGrantSearchRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserGrantSearchRequest;
+  static deserializeBinaryFromReader(message: UserGrantSearchRequest, reader: jspb.BinaryReader): UserGrantSearchRequest;
+}
+
+export namespace UserGrantSearchRequest {
+  export type AsObject = {
+    offset: number,
+    limit: number,
+    sortingColumn: UserGrantSearchKey,
+    asc: boolean,
+    queriesList: Array<UserGrantSearchQuery.AsObject>,
+  }
+}
+
+export class UserGrantSearchQuery extends jspb.Message {
+  getKey(): UserGrantSearchKey;
+  setKey(value: UserGrantSearchKey): void;
+
+  getMethod(): SearchMethod;
+  setMethod(value: SearchMethod): void;
+
+  getValue(): string;
+  setValue(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserGrantSearchQuery.AsObject;
+  static toObject(includeInstance: boolean, msg: UserGrantSearchQuery): UserGrantSearchQuery.AsObject;
+  static serializeBinaryToWriter(message: UserGrantSearchQuery, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserGrantSearchQuery;
+  static deserializeBinaryFromReader(message: UserGrantSearchQuery, reader: jspb.BinaryReader): UserGrantSearchQuery;
+}
+
+export namespace UserGrantSearchQuery {
+  export type AsObject = {
+    key: UserGrantSearchKey,
+    method: SearchMethod,
+    value: string,
+  }
+}
+
+export class UserGrantSearchResponse extends jspb.Message {
+  getOffset(): number;
+  setOffset(value: number): void;
+
+  getLimit(): number;
+  setLimit(value: number): void;
+
+  getTotalResult(): number;
+  setTotalResult(value: number): void;
+
+  getResultList(): Array<UserGrantView>;
+  setResultList(value: Array<UserGrantView>): void;
+  clearResultList(): void;
+  addResult(value?: UserGrantView, index?: number): UserGrantView;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserGrantSearchResponse.AsObject;
+  static toObject(includeInstance: boolean, msg: UserGrantSearchResponse): UserGrantSearchResponse.AsObject;
+  static serializeBinaryToWriter(message: UserGrantSearchResponse, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserGrantSearchResponse;
+  static deserializeBinaryFromReader(message: UserGrantSearchResponse, reader: jspb.BinaryReader): UserGrantSearchResponse;
+}
+
+export namespace UserGrantSearchResponse {
+  export type AsObject = {
+    offset: number,
+    limit: number,
+    totalResult: number,
+    resultList: Array<UserGrantView.AsObject>,
+  }
+}
+
+export class UserGrantView extends jspb.Message {
+  getOrgid(): string;
+  setOrgid(value: string): void;
+
+  getProjectid(): string;
+  setProjectid(value: string): void;
+
+  getUserid(): string;
+  setUserid(value: string): void;
+
+  getRolesList(): Array<string>;
+  setRolesList(value: Array<string>): void;
+  clearRolesList(): void;
+  addRoles(value: string, index?: number): void;
+
+  getOrgname(): string;
+  setOrgname(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserGrantView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserGrantView): UserGrantView.AsObject;
+  static serializeBinaryToWriter(message: UserGrantView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserGrantView;
+  static deserializeBinaryFromReader(message: UserGrantView, reader: jspb.BinaryReader): UserGrantView;
+}
+
+export namespace UserGrantView {
+  export type AsObject = {
+    orgid: string,
+    projectid: string,
+    userid: string,
+    rolesList: Array<string>,
+    orgname: string,
+  }
+}
+
 export class MyProjectOrgSearchRequest extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
@@ -768,24 +946,6 @@ export namespace MyProjectOrgSearchResponse {
   }
 }
 
-export class IsAdminResponse extends jspb.Message {
-  getIsAdmin(): boolean;
-  setIsAdmin(value: boolean): void;
-
-  serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): IsAdminResponse.AsObject;
-  static toObject(includeInstance: boolean, msg: IsAdminResponse): IsAdminResponse.AsObject;
-  static serializeBinaryToWriter(message: IsAdminResponse, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): IsAdminResponse;
-  static deserializeBinaryFromReader(message: IsAdminResponse, reader: jspb.BinaryReader): IsAdminResponse;
-}
-
-export namespace IsAdminResponse {
-  export type AsObject = {
-    isAdmin: boolean,
-  }
-}
-
 export class Org extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -864,6 +1024,11 @@ export enum MFAState {
   MFASTATE_READY = 2,
   MFASTATE_REMOVED = 3,
 }
+export enum UserGrantSearchKey { 
+  USERGRANTSEARCHKEY_UNKNOWN = 0,
+  USERGRANTSEARCHKEY_ORG_ID = 1,
+  USERGRANTSEARCHKEY_PROJECT_ID = 2,
+}
 export enum MyProjectOrgSearchKey { 
   MYPROJECTORGSEARCHKEY_UNSPECIFIED = 0,
   MYPROJECTORGSEARCHKEY_ORG_NAME = 1,
@@ -872,4 +1037,7 @@ export enum SearchMethod {
   SEARCHMETHOD_EQUALS = 0,
   SEARCHMETHOD_STARTS_WITH = 1,
   SEARCHMETHOD_CONTAINS = 2,
+  SEARCHMETHOD_EQUALS_IGNORE_CASE = 3,
+  SEARCHMETHOD_STARTS_WITH_IGNORE_CASE = 4,
+  SEARCHMETHOD_CONTAINS_IGNORE_CASE = 5,
 }
diff --git a/console/src/app/proto/generated/auth_pb.js b/console/src/app/proto/generated/auth_pb.js
index 16ea3e39bb..60930f1cdc 100644
--- a/console/src/app/proto/generated/auth_pb.js
+++ b/console/src/app/proto/generated/auth_pb.js
@@ -25,42 +25,46 @@ var protoc$gen$swagger_options_annotations_pb = require('./protoc-gen-swagger/op
 goog.object.extend(proto, protoc$gen$swagger_options_annotations_pb);
 var authoption_options_pb = require('./authoption/options_pb.js');
 goog.object.extend(proto, authoption_options_pb);
-goog.exportSymbol('proto.zitadel.auth.api.v1.Gender', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.IsAdminResponse', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MFAState', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MfaOtpResponse', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MfaType', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MultiFactor', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MultiFactors', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MyPermissions', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MyProjectOrgSearchKey', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.OIDCClientAuth', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.OIDCResponseType', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.Org', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.PasswordChange', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.PasswordID', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.PasswordRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.SearchMethod', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UpdateUserAddressRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UpdateUserEmailRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UpdateUserPhoneRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UpdateUserProfileRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.User', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserAddress', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserEmail', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserPhone', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserProfile', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserSessionState', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserSessionView', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserSessionViews', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.UserState', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.VerifyMfaOtp', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.VerifyUserEmailRequest', null, global);
-goog.exportSymbol('proto.zitadel.auth.api.v1.VerifyUserPhoneRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.Gender', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MFAState', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MfaOtpResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MfaType', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MultiFactor', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MultiFactors', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MyPermissions', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.OIDCClientAuth', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.OIDCResponseType', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.Org', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.PasswordChange', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.PasswordID', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.PasswordRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.SearchMethod', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.User', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserAddress', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserEmail', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchKey', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantView', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserPhone', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserProfile', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionState', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionView', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionViews', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserState', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.VerifyMfaOtp', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest', null, global);
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -71,16 +75,16 @@ goog.exportSymbol('proto.zitadel.auth.api.v1.VerifyUserPhoneRequest', null, glob
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserSessionViews = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.auth.api.v1.UserSessionViews.repeatedFields_, null);
+proto.caos.zitadel.auth.api.v1.UserSessionViews = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.UserSessionViews.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserSessionViews, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserSessionViews, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserSessionViews.displayName = 'proto.zitadel.auth.api.v1.UserSessionViews';
+  proto.caos.zitadel.auth.api.v1.UserSessionViews.displayName = 'proto.caos.zitadel.auth.api.v1.UserSessionViews';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -92,16 +96,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserSessionView = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserSessionView = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserSessionView, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserSessionView, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserSessionView.displayName = 'proto.zitadel.auth.api.v1.UserSessionView';
+  proto.caos.zitadel.auth.api.v1.UserSessionView.displayName = 'proto.caos.zitadel.auth.api.v1.UserSessionView';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -113,16 +117,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.User = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.User = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.User, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.User, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.User.displayName = 'proto.zitadel.auth.api.v1.User';
+  proto.caos.zitadel.auth.api.v1.User.displayName = 'proto.caos.zitadel.auth.api.v1.User';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -134,16 +138,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserProfile = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserProfile = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserProfile, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserProfile, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserProfile.displayName = 'proto.zitadel.auth.api.v1.UserProfile';
+  proto.caos.zitadel.auth.api.v1.UserProfile.displayName = 'proto.caos.zitadel.auth.api.v1.UserProfile';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -155,16 +159,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UpdateUserProfileRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UpdateUserProfileRequest.displayName = 'proto.zitadel.auth.api.v1.UpdateUserProfileRequest';
+  proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.displayName = 'proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -176,16 +180,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserEmail = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserEmail = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserEmail, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserEmail, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserEmail.displayName = 'proto.zitadel.auth.api.v1.UserEmail';
+  proto.caos.zitadel.auth.api.v1.UserEmail.displayName = 'proto.caos.zitadel.auth.api.v1.UserEmail';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -197,16 +201,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.displayName = 'proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest';
+  proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.displayName = 'proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -218,16 +222,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.VerifyUserEmailRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.VerifyUserEmailRequest.displayName = 'proto.zitadel.auth.api.v1.VerifyUserEmailRequest';
+  proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.displayName = 'proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -239,16 +243,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UpdateUserEmailRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UpdateUserEmailRequest.displayName = 'proto.zitadel.auth.api.v1.UpdateUserEmailRequest';
+  proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.displayName = 'proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -260,16 +264,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserPhone = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserPhone = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserPhone, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserPhone, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserPhone.displayName = 'proto.zitadel.auth.api.v1.UserPhone';
+  proto.caos.zitadel.auth.api.v1.UserPhone.displayName = 'proto.caos.zitadel.auth.api.v1.UserPhone';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -281,16 +285,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UpdateUserPhoneRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.displayName = 'proto.zitadel.auth.api.v1.UpdateUserPhoneRequest';
+  proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.displayName = 'proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -302,16 +306,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.VerifyUserPhoneRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.displayName = 'proto.zitadel.auth.api.v1.VerifyUserPhoneRequest';
+  proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.displayName = 'proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -323,16 +327,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UserAddress = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserAddress = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UserAddress, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserAddress, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UserAddress.displayName = 'proto.zitadel.auth.api.v1.UserAddress';
+  proto.caos.zitadel.auth.api.v1.UserAddress.displayName = 'proto.caos.zitadel.auth.api.v1.UserAddress';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -344,16 +348,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.UpdateUserAddressRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.UpdateUserAddressRequest.displayName = 'proto.zitadel.auth.api.v1.UpdateUserAddressRequest';
+  proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.displayName = 'proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -365,16 +369,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.PasswordID = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.PasswordID = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.PasswordID, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.PasswordID, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.PasswordID.displayName = 'proto.zitadel.auth.api.v1.PasswordID';
+  proto.caos.zitadel.auth.api.v1.PasswordID.displayName = 'proto.caos.zitadel.auth.api.v1.PasswordID';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -386,16 +390,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.PasswordRequest = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.PasswordRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.PasswordRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.PasswordRequest.displayName = 'proto.zitadel.auth.api.v1.PasswordRequest';
+  proto.caos.zitadel.auth.api.v1.PasswordRequest.displayName = 'proto.caos.zitadel.auth.api.v1.PasswordRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -407,16 +411,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.PasswordChange = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.PasswordChange = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.PasswordChange, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.PasswordChange, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.PasswordChange.displayName = 'proto.zitadel.auth.api.v1.PasswordChange';
+  proto.caos.zitadel.auth.api.v1.PasswordChange.displayName = 'proto.caos.zitadel.auth.api.v1.PasswordChange';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -428,16 +432,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.VerifyMfaOtp, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.VerifyMfaOtp, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.VerifyMfaOtp.displayName = 'proto.zitadel.auth.api.v1.VerifyMfaOtp';
+  proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.displayName = 'proto.caos.zitadel.auth.api.v1.VerifyMfaOtp';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -449,16 +453,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MultiFactors = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.auth.api.v1.MultiFactors.repeatedFields_, null);
+proto.caos.zitadel.auth.api.v1.MultiFactors = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.MultiFactors.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MultiFactors, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.MultiFactors, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MultiFactors.displayName = 'proto.zitadel.auth.api.v1.MultiFactors';
+  proto.caos.zitadel.auth.api.v1.MultiFactors.displayName = 'proto.caos.zitadel.auth.api.v1.MultiFactors';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -470,16 +474,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MultiFactor = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.MultiFactor = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MultiFactor, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.MultiFactor, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MultiFactor.displayName = 'proto.zitadel.auth.api.v1.MultiFactor';
+  proto.caos.zitadel.auth.api.v1.MultiFactor.displayName = 'proto.caos.zitadel.auth.api.v1.MultiFactor';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -491,16 +495,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MfaOtpResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.MfaOtpResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MfaOtpResponse.displayName = 'proto.zitadel.auth.api.v1.MfaOtpResponse';
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse.displayName = 'proto.caos.zitadel.auth.api.v1.MfaOtpResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -512,16 +516,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.OIDCClientAuth, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.OIDCClientAuth, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.OIDCClientAuth.displayName = 'proto.zitadel.auth.api.v1.OIDCClientAuth';
+  proto.caos.zitadel.auth.api.v1.OIDCClientAuth.displayName = 'proto.caos.zitadel.auth.api.v1.OIDCClientAuth';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -533,16 +537,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.repeatedFields_, null);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.displayName = 'proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest';
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.displayName = 'proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -554,16 +558,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.displayName = 'proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery';
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.displayName = 'proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -575,16 +579,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.repeatedFields_, null);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.displayName = 'proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse';
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.displayName = 'proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -596,16 +600,58 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.IsAdminResponse = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.UserGrantView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.UserGrantView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserGrantView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.UserGrantView.displayName = 'proto.caos.zitadel.auth.api.v1.UserGrantView';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.displayName = 'proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.IsAdminResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.IsAdminResponse.displayName = 'proto.zitadel.auth.api.v1.IsAdminResponse';
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.displayName = 'proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -617,16 +663,37 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.Org = function(opt_data) {
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.displayName = 'proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.Org = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.Org, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.Org, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.Org.displayName = 'proto.zitadel.auth.api.v1.Org';
+  proto.caos.zitadel.auth.api.v1.Org.displayName = 'proto.caos.zitadel.auth.api.v1.Org';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -638,16 +705,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.zitadel.auth.api.v1.MyPermissions = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.zitadel.auth.api.v1.MyPermissions.repeatedFields_, null);
+proto.caos.zitadel.auth.api.v1.MyPermissions = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.MyPermissions.repeatedFields_, null);
 };
-goog.inherits(proto.zitadel.auth.api.v1.MyPermissions, jspb.Message);
+goog.inherits(proto.caos.zitadel.auth.api.v1.MyPermissions, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.zitadel.auth.api.v1.MyPermissions.displayName = 'proto.zitadel.auth.api.v1.MyPermissions';
+  proto.caos.zitadel.auth.api.v1.MyPermissions.displayName = 'proto.caos.zitadel.auth.api.v1.MyPermissions';
 }
 
 /**
@@ -655,7 +722,7 @@ if (goog.DEBUG && !COMPILED) {
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.auth.api.v1.UserSessionViews.repeatedFields_ = [1];
+proto.caos.zitadel.auth.api.v1.UserSessionViews.repeatedFields_ = [1];
 
 
 
@@ -670,8 +737,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserSessionViews.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserSessionViews.toObject(opt_includeInstance, this);
 };
 
 
@@ -680,14 +747,14 @@ proto.zitadel.auth.api.v1.UserSessionViews.prototype.toObject = function(opt_inc
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserSessionViews} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionViews} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserSessionViews.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.toObject = function(includeInstance, msg) {
   var f, obj = {
     userSessionsList: jspb.Message.toObjectList(msg.getUserSessionsList(),
-    proto.zitadel.auth.api.v1.UserSessionView.toObject, includeInstance)
+    proto.caos.zitadel.auth.api.v1.UserSessionView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -701,23 +768,23 @@ proto.zitadel.auth.api.v1.UserSessionViews.toObject = function(includeInstance,
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserSessionViews}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionViews}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserSessionViews;
-  return proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserSessionViews;
+  return proto.caos.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserSessionViews} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionViews} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserSessionViews}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionViews}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -725,8 +792,8 @@ proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader = functio
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = new proto.zitadel.auth.api.v1.UserSessionView;
-      reader.readMessage(value,proto.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.auth.api.v1.UserSessionView;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader);
       msg.addUserSessions(value);
       break;
     default:
@@ -742,9 +809,9 @@ proto.zitadel.auth.api.v1.UserSessionViews.deserializeBinaryFromReader = functio
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserSessionViews.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserSessionViews.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -752,18 +819,18 @@ proto.zitadel.auth.api.v1.UserSessionViews.prototype.serializeBinary = function(
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserSessionViews} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionViews} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserSessionViews.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getUserSessionsList();
   if (f.length > 0) {
     writer.writeRepeatedMessage(
       1,
       f,
-      proto.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter
+      proto.caos.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter
     );
   }
 };
@@ -771,34 +838,34 @@ proto.zitadel.auth.api.v1.UserSessionViews.serializeBinaryToWriter = function(me
 
 /**
  * repeated UserSessionView user_sessions = 1;
- * @return {!Array<!proto.zitadel.auth.api.v1.UserSessionView>}
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.UserSessionView>}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.getUserSessionsList = function() {
-  return /** @type{!Array<!proto.zitadel.auth.api.v1.UserSessionView>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.auth.api.v1.UserSessionView, 1));
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.getUserSessionsList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.UserSessionView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.UserSessionView, 1));
 };
 
 
-/** @param {!Array<!proto.zitadel.auth.api.v1.UserSessionView>} value */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.setUserSessionsList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.UserSessionView>} value */
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.setUserSessionsList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 1, value);
 };
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.UserSessionView=} opt_value
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.auth.api.v1.UserSessionView}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionView}
  */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.addUserSessions = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 1, opt_value, proto.zitadel.auth.api.v1.UserSessionView, opt_index);
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.addUserSessions = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 1, opt_value, proto.caos.zitadel.auth.api.v1.UserSessionView, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.auth.api.v1.UserSessionViews.prototype.clearUserSessionsList = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionViews.prototype.clearUserSessionsList = function() {
   this.setUserSessionsList([]);
 };
 
@@ -817,8 +884,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserSessionView.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserSessionView.toObject(opt_includeInstance, this);
 };
 
 
@@ -827,11 +894,11 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.toObject = function(opt_incl
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserSessionView} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionView} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserSessionView.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     agentId: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -852,23 +919,23 @@ proto.zitadel.auth.api.v1.UserSessionView.toObject = function(includeInstance, m
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserSessionView}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionView}
  */
-proto.zitadel.auth.api.v1.UserSessionView.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserSessionView;
-  return proto.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserSessionView;
+  return proto.caos.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserSessionView} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionView} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserSessionView}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionView}
  */
-proto.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -884,7 +951,7 @@ proto.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader = function
       msg.setAgentId(value);
       break;
     case 3:
-      var value = /** @type {!proto.zitadel.auth.api.v1.UserSessionState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.UserSessionState} */ (reader.readEnum());
       msg.setAuthState(value);
       break;
     case 4:
@@ -912,9 +979,9 @@ proto.zitadel.auth.api.v1.UserSessionView.deserializeBinaryFromReader = function
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -922,11 +989,11 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserSessionView} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserSessionView} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -977,13 +1044,13 @@ proto.zitadel.auth.api.v1.UserSessionView.serializeBinaryToWriter = function(mes
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -992,28 +1059,28 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.setId = function(value) {
  * optional string agent_id = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getAgentId = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getAgentId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setAgentId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setAgentId = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
 
 /**
  * optional UserSessionState auth_state = 3;
- * @return {!proto.zitadel.auth.api.v1.UserSessionState}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserSessionState}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getAuthState = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.UserSessionState} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getAuthState = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.UserSessionState} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.UserSessionState} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setAuthState = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.UserSessionState} value */
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setAuthState = function(value) {
   jspb.Message.setProto3EnumField(this, 3, value);
 };
 
@@ -1022,13 +1089,13 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.setAuthState = function(valu
  * optional string user_id = 4;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getUserId = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getUserId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setUserId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setUserId = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -1037,13 +1104,13 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.setUserId = function(value)
  * optional string user_name = 5;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getUserName = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setUserName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -1052,13 +1119,13 @@ proto.zitadel.auth.api.v1.UserSessionView.prototype.setUserName = function(value
  * optional uint64 sequence = 6;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.getSequence = function() {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.UserSessionView.prototype.setSequence = function(value) {
+proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 6, value);
 };
 
@@ -1077,8 +1144,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.User.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.User.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.User.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.User.toObject(opt_includeInstance, this);
 };
 
 
@@ -1087,11 +1154,11 @@ proto.zitadel.auth.api.v1.User.prototype.toObject = function(opt_includeInstance
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.User} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.User} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.User.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.User.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     state: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -1131,23 +1198,23 @@ proto.zitadel.auth.api.v1.User.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.User}
+ * @return {!proto.caos.zitadel.auth.api.v1.User}
  */
-proto.zitadel.auth.api.v1.User.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.User.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.User;
-  return proto.zitadel.auth.api.v1.User.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.User;
+  return proto.caos.zitadel.auth.api.v1.User.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.User} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.User} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.User}
+ * @return {!proto.caos.zitadel.auth.api.v1.User}
  */
-proto.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -1159,7 +1226,7 @@ proto.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg, reade
       msg.setId(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.auth.api.v1.UserState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.UserState} */ (reader.readEnum());
       msg.setState(value);
       break;
     case 3:
@@ -1212,7 +1279,7 @@ proto.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg, reade
       msg.setPreferredLanguage(value);
       break;
     case 14:
-      var value = /** @type {!proto.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
     case 15:
@@ -1272,9 +1339,9 @@ proto.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg, reade
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.User.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.User.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.User.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -1282,11 +1349,11 @@ proto.zitadel.auth.api.v1.User.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.User} message
+ * @param {!proto.caos.zitadel.auth.api.v1.User} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.User.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.User.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -1475,28 +1542,28 @@ proto.zitadel.auth.api.v1.User.serializeBinaryToWriter = function(message, write
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
 
 /**
  * optional UserState state = 2;
- * @return {!proto.zitadel.auth.api.v1.UserState}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserState}
  */
-proto.zitadel.auth.api.v1.User.prototype.getState = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.auth.api.v1.User.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.UserState} value */
-proto.zitadel.auth.api.v1.User.prototype.setState = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.UserState} value */
+proto.caos.zitadel.auth.api.v1.User.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -1505,14 +1572,14 @@ proto.zitadel.auth.api.v1.User.prototype.setState = function(value) {
  * optional google.protobuf.Timestamp creation_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.auth.api.v1.User.prototype.getCreationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.auth.api.v1.User.prototype.setCreationDate = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setCreationDate = function(value) {
   jspb.Message.setWrapperField(this, 3, value);
 };
 
@@ -1520,7 +1587,7 @@ proto.zitadel.auth.api.v1.User.prototype.setCreationDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.auth.api.v1.User.prototype.clearCreationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.clearCreationDate = function() {
   this.setCreationDate(undefined);
 };
 
@@ -1529,7 +1596,7 @@ proto.zitadel.auth.api.v1.User.prototype.clearCreationDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.hasCreationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.hasCreationDate = function() {
   return jspb.Message.getField(this, 3) != null;
 };
 
@@ -1538,14 +1605,14 @@ proto.zitadel.auth.api.v1.User.prototype.hasCreationDate = function() {
  * optional google.protobuf.Timestamp activation_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.auth.api.v1.User.prototype.getActivationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getActivationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.auth.api.v1.User.prototype.setActivationDate = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setActivationDate = function(value) {
   jspb.Message.setWrapperField(this, 4, value);
 };
 
@@ -1553,7 +1620,7 @@ proto.zitadel.auth.api.v1.User.prototype.setActivationDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.auth.api.v1.User.prototype.clearActivationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.clearActivationDate = function() {
   this.setActivationDate(undefined);
 };
 
@@ -1562,7 +1629,7 @@ proto.zitadel.auth.api.v1.User.prototype.clearActivationDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.hasActivationDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.hasActivationDate = function() {
   return jspb.Message.getField(this, 4) != null;
 };
 
@@ -1571,14 +1638,14 @@ proto.zitadel.auth.api.v1.User.prototype.hasActivationDate = function() {
  * optional google.protobuf.Timestamp change_date = 5;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.auth.api.v1.User.prototype.getChangeDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.auth.api.v1.User.prototype.setChangeDate = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setChangeDate = function(value) {
   jspb.Message.setWrapperField(this, 5, value);
 };
 
@@ -1586,7 +1653,7 @@ proto.zitadel.auth.api.v1.User.prototype.setChangeDate = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.auth.api.v1.User.prototype.clearChangeDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.clearChangeDate = function() {
   this.setChangeDate(undefined);
 };
 
@@ -1595,7 +1662,7 @@ proto.zitadel.auth.api.v1.User.prototype.clearChangeDate = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.hasChangeDate = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.hasChangeDate = function() {
   return jspb.Message.getField(this, 5) != null;
 };
 
@@ -1604,14 +1671,14 @@ proto.zitadel.auth.api.v1.User.prototype.hasChangeDate = function() {
  * optional google.protobuf.Timestamp last_login = 6;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.auth.api.v1.User.prototype.getLastLogin = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getLastLogin = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.auth.api.v1.User.prototype.setLastLogin = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setLastLogin = function(value) {
   jspb.Message.setWrapperField(this, 6, value);
 };
 
@@ -1619,7 +1686,7 @@ proto.zitadel.auth.api.v1.User.prototype.setLastLogin = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.auth.api.v1.User.prototype.clearLastLogin = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.clearLastLogin = function() {
   this.setLastLogin(undefined);
 };
 
@@ -1628,7 +1695,7 @@ proto.zitadel.auth.api.v1.User.prototype.clearLastLogin = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.hasLastLogin = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.hasLastLogin = function() {
   return jspb.Message.getField(this, 6) != null;
 };
 
@@ -1637,14 +1704,14 @@ proto.zitadel.auth.api.v1.User.prototype.hasLastLogin = function() {
  * optional google.protobuf.Timestamp password_changed = 7;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.zitadel.auth.api.v1.User.prototype.getPasswordChanged = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getPasswordChanged = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.zitadel.auth.api.v1.User.prototype.setPasswordChanged = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setPasswordChanged = function(value) {
   jspb.Message.setWrapperField(this, 7, value);
 };
 
@@ -1652,7 +1719,7 @@ proto.zitadel.auth.api.v1.User.prototype.setPasswordChanged = function(value) {
 /**
  * Clears the message field making it undefined.
  */
-proto.zitadel.auth.api.v1.User.prototype.clearPasswordChanged = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.clearPasswordChanged = function() {
   this.setPasswordChanged(undefined);
 };
 
@@ -1661,7 +1728,7 @@ proto.zitadel.auth.api.v1.User.prototype.clearPasswordChanged = function() {
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.hasPasswordChanged = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.hasPasswordChanged = function() {
   return jspb.Message.getField(this, 7) != null;
 };
 
@@ -1670,13 +1737,13 @@ proto.zitadel.auth.api.v1.User.prototype.hasPasswordChanged = function() {
  * optional string user_name = 8;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getUserName = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setUserName = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 8, value);
 };
 
@@ -1685,13 +1752,13 @@ proto.zitadel.auth.api.v1.User.prototype.setUserName = function(value) {
  * optional string first_name = 9;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getFirstName = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setFirstName = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 9, value);
 };
 
@@ -1700,13 +1767,13 @@ proto.zitadel.auth.api.v1.User.prototype.setFirstName = function(value) {
  * optional string last_name = 10;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getLastName = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setLastName = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 10, value);
 };
 
@@ -1715,13 +1782,13 @@ proto.zitadel.auth.api.v1.User.prototype.setLastName = function(value) {
  * optional string nick_name = 11;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getNickName = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setNickName = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 11, value);
 };
 
@@ -1730,13 +1797,13 @@ proto.zitadel.auth.api.v1.User.prototype.setNickName = function(value) {
  * optional string display_name = 12;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getDisplayName = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 12, value);
 };
 
@@ -1745,28 +1812,28 @@ proto.zitadel.auth.api.v1.User.prototype.setDisplayName = function(value) {
  * optional string preferred_language = 13;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 13, value);
 };
 
 
 /**
  * optional Gender gender = 14;
- * @return {!proto.zitadel.auth.api.v1.Gender}
+ * @return {!proto.caos.zitadel.auth.api.v1.Gender}
  */
-proto.zitadel.auth.api.v1.User.prototype.getGender = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 14, 0));
+proto.caos.zitadel.auth.api.v1.User.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 14, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.Gender} value */
-proto.zitadel.auth.api.v1.User.prototype.setGender = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.Gender} value */
+proto.caos.zitadel.auth.api.v1.User.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 14, value);
 };
 
@@ -1775,13 +1842,13 @@ proto.zitadel.auth.api.v1.User.prototype.setGender = function(value) {
  * optional string email = 15;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getEmail = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setEmail = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 15, value);
 };
 
@@ -1792,13 +1859,13 @@ proto.zitadel.auth.api.v1.User.prototype.setEmail = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.getIsEmailVerified = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getIsEmailVerified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 16, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.User.prototype.setIsEmailVerified = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setIsEmailVerified = function(value) {
   jspb.Message.setProto3BooleanField(this, 16, value);
 };
 
@@ -1807,13 +1874,13 @@ proto.zitadel.auth.api.v1.User.prototype.setIsEmailVerified = function(value) {
  * optional string phone = 17;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getPhone = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getPhone = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setPhone = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setPhone = function(value) {
   jspb.Message.setProto3StringField(this, 17, value);
 };
 
@@ -1824,13 +1891,13 @@ proto.zitadel.auth.api.v1.User.prototype.setPhone = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.getIsPhoneVerified = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getIsPhoneVerified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 18, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.User.prototype.setIsPhoneVerified = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setIsPhoneVerified = function(value) {
   jspb.Message.setProto3BooleanField(this, 18, value);
 };
 
@@ -1839,13 +1906,13 @@ proto.zitadel.auth.api.v1.User.prototype.setIsPhoneVerified = function(value) {
  * optional string country = 19;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getCountry = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getCountry = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 19, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setCountry = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setCountry = function(value) {
   jspb.Message.setProto3StringField(this, 19, value);
 };
 
@@ -1854,13 +1921,13 @@ proto.zitadel.auth.api.v1.User.prototype.setCountry = function(value) {
  * optional string locality = 20;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getLocality = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getLocality = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 20, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setLocality = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setLocality = function(value) {
   jspb.Message.setProto3StringField(this, 20, value);
 };
 
@@ -1869,13 +1936,13 @@ proto.zitadel.auth.api.v1.User.prototype.setLocality = function(value) {
  * optional string postal_code = 21;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getPostalCode = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getPostalCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 21, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setPostalCode = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setPostalCode = function(value) {
   jspb.Message.setProto3StringField(this, 21, value);
 };
 
@@ -1884,13 +1951,13 @@ proto.zitadel.auth.api.v1.User.prototype.setPostalCode = function(value) {
  * optional string region = 22;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getRegion = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getRegion = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 22, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setRegion = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setRegion = function(value) {
   jspb.Message.setProto3StringField(this, 22, value);
 };
 
@@ -1899,13 +1966,13 @@ proto.zitadel.auth.api.v1.User.prototype.setRegion = function(value) {
  * optional string street_address = 23;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.User.prototype.getStreetAddress = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getStreetAddress = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 23, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.User.prototype.setStreetAddress = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setStreetAddress = function(value) {
   jspb.Message.setProto3StringField(this, 23, value);
 };
 
@@ -1916,13 +1983,13 @@ proto.zitadel.auth.api.v1.User.prototype.setStreetAddress = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.User.prototype.getPasswordChangeRequired = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getPasswordChangeRequired = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 24, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.User.prototype.setPasswordChangeRequired = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setPasswordChangeRequired = function(value) {
   jspb.Message.setProto3BooleanField(this, 24, value);
 };
 
@@ -1931,13 +1998,13 @@ proto.zitadel.auth.api.v1.User.prototype.setPasswordChangeRequired = function(va
  * optional uint64 sequence = 25;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.User.prototype.getSequence = function() {
+proto.caos.zitadel.auth.api.v1.User.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 25, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.User.prototype.setSequence = function(value) {
+proto.caos.zitadel.auth.api.v1.User.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 25, value);
 };
 
@@ -1956,8 +2023,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserProfile.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserProfile.toObject(opt_includeInstance, this);
 };
 
 
@@ -1966,11 +2033,11 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.toObject = function(opt_includeI
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserProfile} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfile} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserProfile.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserProfile.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -1980,7 +2047,9 @@ proto.zitadel.auth.api.v1.UserProfile.toObject = function(includeInstance, msg)
     displayName: jspb.Message.getFieldWithDefault(msg, 6, ""),
     preferredLanguage: jspb.Message.getFieldWithDefault(msg, 7, ""),
     gender: jspb.Message.getFieldWithDefault(msg, 8, 0),
-    sequence: jspb.Message.getFieldWithDefault(msg, 26, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -1994,23 +2063,23 @@ proto.zitadel.auth.api.v1.UserProfile.toObject = function(includeInstance, msg)
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserProfile}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserProfile}
  */
-proto.zitadel.auth.api.v1.UserProfile.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserProfile;
-  return proto.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserProfile;
+  return proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserProfile} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfile} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserProfile}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserProfile}
  */
-proto.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2046,13 +2115,23 @@ proto.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader = function(msg
       msg.setPreferredLanguage(value);
       break;
     case 8:
-      var value = /** @type {!proto.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
-    case 26:
+    case 9:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 10:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 11:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -2066,9 +2145,9 @@ proto.zitadel.auth.api.v1.UserProfile.deserializeBinaryFromReader = function(msg
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2076,11 +2155,11 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserProfile} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfile} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -2141,10 +2220,26 @@ proto.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter = function(message
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      26,
+      9,
       f
     );
   }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      10,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      11,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
 };
 
 
@@ -2152,13 +2247,13 @@ proto.zitadel.auth.api.v1.UserProfile.serializeBinaryToWriter = function(message
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -2167,13 +2262,13 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setId = function(value) {
  * optional string user_name = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getUserName = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setUserName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -2182,13 +2277,13 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setUserName = function(value) {
  * optional string first_name = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getFirstName = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setFirstName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -2197,13 +2292,13 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setFirstName = function(value) {
  * optional string last_name = 4;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getLastName = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setLastName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -2212,13 +2307,13 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setLastName = function(value) {
  * optional string nick_name = 5;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getNickName = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setNickName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -2227,13 +2322,13 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setNickName = function(value) {
  * optional string display_name = 6;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getDisplayName = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 6, value);
 };
 
@@ -2242,44 +2337,110 @@ proto.zitadel.auth.api.v1.UserProfile.prototype.setDisplayName = function(value)
  * optional string preferred_language = 7;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 7, value);
 };
 
 
 /**
  * optional Gender gender = 8;
- * @return {!proto.zitadel.auth.api.v1.Gender}
+ * @return {!proto.caos.zitadel.auth.api.v1.Gender}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getGender = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 8, 0));
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 8, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.Gender} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setGender = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.Gender} value */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 8, value);
 };
 
 
 /**
- * optional uint64 sequence = 26;
+ * optional uint64 sequence = 9;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.UserProfile.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 26, 0));
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.UserProfile.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 26, value);
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 9, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 10;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 10));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 10, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 10) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 11;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 11));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 11, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfile.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 11) != null;
 };
 
 
@@ -2297,8 +2458,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -2307,11 +2468,11 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.toObject = function
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     firstName: jspb.Message.getFieldWithDefault(msg, 1, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -2332,23 +2493,23 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject = function(includeIn
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UpdateUserProfileRequest;
-  return proto.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest;
+  return proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2376,7 +2537,7 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader =
       msg.setPreferredLanguage(value);
       break;
     case 6:
-      var value = /** @type {!proto.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
     default:
@@ -2392,9 +2553,9 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromReader =
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2402,11 +2563,11 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.serializeBinary = f
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserProfileRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getFirstName();
   if (f.length > 0) {
@@ -2457,13 +2618,13 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter = fun
  * optional string first_name = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getFirstName = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setFirstName = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -2472,13 +2633,13 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setFirstName = func
  * optional string last_name = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getLastName = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setLastName = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -2487,13 +2648,13 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setLastName = funct
  * optional string nick_name = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getNickName = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setNickName = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -2502,13 +2663,13 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setNickName = funct
  * optional string display_name = 4;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -2517,28 +2678,28 @@ proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setDisplayName = fu
  * optional string preferred_language = 5;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
 
 /**
  * optional Gender gender = 6;
- * @return {!proto.zitadel.auth.api.v1.Gender}
+ * @return {!proto.caos.zitadel.auth.api.v1.Gender}
  */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getGender = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.Gender} value */
-proto.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setGender = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.Gender} value */
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 6, value);
 };
 
@@ -2557,8 +2718,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserEmail.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserEmail.toObject(opt_includeInstance, this);
 };
 
 
@@ -2567,16 +2728,18 @@ proto.zitadel.auth.api.v1.UserEmail.prototype.toObject = function(opt_includeIns
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserEmail} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmail} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserEmail.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserEmail.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     email: jspb.Message.getFieldWithDefault(msg, 2, ""),
     isemailverified: jspb.Message.getFieldWithDefault(msg, 3, false),
-    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -2590,23 +2753,23 @@ proto.zitadel.auth.api.v1.UserEmail.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserEmail}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserEmail}
  */
-proto.zitadel.auth.api.v1.UserEmail.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserEmail;
-  return proto.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserEmail;
+  return proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserEmail} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmail} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserEmail}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserEmail}
  */
-proto.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2629,6 +2792,16 @@ proto.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader = function(msg,
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -2642,9 +2815,9 @@ proto.zitadel.auth.api.v1.UserEmail.deserializeBinaryFromReader = function(msg,
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2652,11 +2825,11 @@ proto.zitadel.auth.api.v1.UserEmail.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserEmail} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmail} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -2686,6 +2859,22 @@ proto.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter = function(message,
       f
     );
   }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
 };
 
 
@@ -2693,13 +2882,13 @@ proto.zitadel.auth.api.v1.UserEmail.serializeBinaryToWriter = function(message,
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserEmail.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -2708,13 +2897,13 @@ proto.zitadel.auth.api.v1.UserEmail.prototype.setId = function(value) {
  * optional string email = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.getEmail = function() {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserEmail.prototype.setEmail = function(value) {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -2725,13 +2914,13 @@ proto.zitadel.auth.api.v1.UserEmail.prototype.setEmail = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.getIsemailverified = function() {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getIsemailverified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.UserEmail.prototype.setIsemailverified = function(value) {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setIsemailverified = function(value) {
   jspb.Message.setProto3BooleanField(this, 3, value);
 };
 
@@ -2740,17 +2929,83 @@ proto.zitadel.auth.api.v1.UserEmail.prototype.setIsemailverified = function(valu
  * optional uint64 sequence = 4;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.UserEmail.prototype.getSequence = function() {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.UserEmail.prototype.setSequence = function(value) {
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 4, value);
 };
 
 
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmail.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
 
 
 
@@ -2765,8 +3020,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -2775,11 +3030,11 @@ proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.toObject = function
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     code: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -2795,23 +3050,23 @@ proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.toObject = function(includeIn
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest;
-  return proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest;
+  return proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2835,9 +3090,9 @@ proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.deserializeBinaryFromReader =
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2845,11 +3100,11 @@ proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.serializeBinary = f
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getCode();
   if (f.length > 0) {
@@ -2865,13 +3120,13 @@ proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.serializeBinaryToWriter = fun
  * optional string code = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.getCode = function() {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.getCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.setCode = function(value) {
+proto.caos.zitadel.auth.api.v1.VerifyMyUserEmailRequest.prototype.setCode = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -2890,8 +3145,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.VerifyUserEmailRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -2900,11 +3155,11 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.toObject = function(o
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.VerifyUserEmailRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     code: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -2921,23 +3176,23 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.toObject = function(includeInst
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.VerifyUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.VerifyUserEmailRequest;
-  return proto.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest;
+  return proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.VerifyUserEmailRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.VerifyUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -2965,9 +3220,9 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.deserializeBinaryFromReader = f
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.VerifyUserEmailRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -2975,11 +3230,11 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.serializeBinary = fun
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.VerifyUserEmailRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -3002,13 +3257,13 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.serializeBinaryToWriter = funct
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3017,13 +3272,13 @@ proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.setId = function(valu
  * optional string code = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.getCode = function() {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.getCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.setCode = function(value) {
+proto.caos.zitadel.auth.api.v1.VerifyUserEmailRequest.prototype.setCode = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -3042,8 +3297,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UpdateUserEmailRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -3052,11 +3307,11 @@ proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.toObject = function(o
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     email: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -3072,23 +3327,23 @@ proto.zitadel.auth.api.v1.UpdateUserEmailRequest.toObject = function(includeInst
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UpdateUserEmailRequest;
-  return proto.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest;
+  return proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3112,9 +3367,9 @@ proto.zitadel.auth.api.v1.UpdateUserEmailRequest.deserializeBinaryFromReader = f
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UpdateUserEmailRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3122,11 +3377,11 @@ proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.serializeBinary = fun
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserEmailRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getEmail();
   if (f.length > 0) {
@@ -3142,13 +3397,13 @@ proto.zitadel.auth.api.v1.UpdateUserEmailRequest.serializeBinaryToWriter = funct
  * optional string email = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.getEmail = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.setEmail = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserEmailRequest.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3167,8 +3422,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserPhone.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserPhone.toObject(opt_includeInstance, this);
 };
 
 
@@ -3177,16 +3432,18 @@ proto.zitadel.auth.api.v1.UserPhone.prototype.toObject = function(opt_includeIns
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserPhone} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhone} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserPhone.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserPhone.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     phone: jspb.Message.getFieldWithDefault(msg, 2, ""),
     isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 3, false),
-    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -3200,23 +3457,23 @@ proto.zitadel.auth.api.v1.UserPhone.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserPhone}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserPhone}
  */
-proto.zitadel.auth.api.v1.UserPhone.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserPhone;
-  return proto.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserPhone;
+  return proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserPhone} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhone} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserPhone}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserPhone}
  */
-proto.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3239,6 +3496,16 @@ proto.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader = function(msg,
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -3252,9 +3519,9 @@ proto.zitadel.auth.api.v1.UserPhone.deserializeBinaryFromReader = function(msg,
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3262,11 +3529,11 @@ proto.zitadel.auth.api.v1.UserPhone.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserPhone} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhone} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -3296,6 +3563,22 @@ proto.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter = function(message,
       f
     );
   }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
 };
 
 
@@ -3303,13 +3586,13 @@ proto.zitadel.auth.api.v1.UserPhone.serializeBinaryToWriter = function(message,
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserPhone.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3318,13 +3601,13 @@ proto.zitadel.auth.api.v1.UserPhone.prototype.setId = function(value) {
  * optional string phone = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.getPhone = function() {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getPhone = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserPhone.prototype.setPhone = function(value) {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setPhone = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -3335,13 +3618,13 @@ proto.zitadel.auth.api.v1.UserPhone.prototype.setPhone = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.getIsPhoneVerified = function() {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getIsPhoneVerified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.UserPhone.prototype.setIsPhoneVerified = function(value) {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setIsPhoneVerified = function(value) {
   jspb.Message.setProto3BooleanField(this, 3, value);
 };
 
@@ -3350,17 +3633,83 @@ proto.zitadel.auth.api.v1.UserPhone.prototype.setIsPhoneVerified = function(valu
  * optional uint64 sequence = 4;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.UserPhone.prototype.getSequence = function() {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.UserPhone.prototype.setSequence = function(value) {
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 4, value);
 };
 
 
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhone.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
 
 
 
@@ -3375,8 +3724,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -3385,11 +3734,11 @@ proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.toObject = function(o
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     phone: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -3405,23 +3754,23 @@ proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.toObject = function(includeInst
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UpdateUserPhoneRequest;
-  return proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest;
+  return proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3445,9 +3794,9 @@ proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.deserializeBinaryFromReader = f
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3455,11 +3804,11 @@ proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.serializeBinary = fun
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserPhoneRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getPhone();
   if (f.length > 0) {
@@ -3475,13 +3824,13 @@ proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.serializeBinaryToWriter = funct
  * optional string phone = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.getPhone = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.getPhone = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.setPhone = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest.prototype.setPhone = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3500,8 +3849,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -3510,11 +3859,11 @@ proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.toObject = function(o
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     code: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -3530,23 +3879,23 @@ proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.toObject = function(includeInst
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest}
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.VerifyUserPhoneRequest;
-  return proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest;
+  return proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest}
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3570,9 +3919,9 @@ proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.deserializeBinaryFromReader = f
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3580,11 +3929,11 @@ proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.serializeBinary = fun
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.VerifyUserPhoneRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getCode();
   if (f.length > 0) {
@@ -3600,13 +3949,13 @@ proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.serializeBinaryToWriter = funct
  * optional string code = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.getCode = function() {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.getCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.setCode = function(value) {
+proto.caos.zitadel.auth.api.v1.VerifyUserPhoneRequest.prototype.setCode = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3625,8 +3974,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UserAddress.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserAddress.toObject(opt_includeInstance, this);
 };
 
 
@@ -3635,11 +3984,11 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.toObject = function(opt_includeI
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UserAddress} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddress} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserAddress.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserAddress.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     country: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -3647,7 +3996,9 @@ proto.zitadel.auth.api.v1.UserAddress.toObject = function(includeInstance, msg)
     postalCode: jspb.Message.getFieldWithDefault(msg, 4, ""),
     region: jspb.Message.getFieldWithDefault(msg, 5, ""),
     streetAddress: jspb.Message.getFieldWithDefault(msg, 6, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
   };
 
   if (includeInstance) {
@@ -3661,23 +4012,23 @@ proto.zitadel.auth.api.v1.UserAddress.toObject = function(includeInstance, msg)
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UserAddress}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserAddress}
  */
-proto.zitadel.auth.api.v1.UserAddress.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UserAddress;
-  return proto.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserAddress;
+  return proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UserAddress} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddress} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UserAddress}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserAddress}
  */
-proto.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -3712,6 +4063,16 @@ proto.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader = function(msg
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 9:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -3725,9 +4086,9 @@ proto.zitadel.auth.api.v1.UserAddress.deserializeBinaryFromReader = function(msg
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -3735,11 +4096,11 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UserAddress} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddress} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -3790,6 +4151,22 @@ proto.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter = function(message
       f
     );
   }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      9,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
 };
 
 
@@ -3797,13 +4174,13 @@ proto.zitadel.auth.api.v1.UserAddress.serializeBinaryToWriter = function(message
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -3812,13 +4189,13 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setId = function(value) {
  * optional string country = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getCountry = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getCountry = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setCountry = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setCountry = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -3827,13 +4204,13 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setCountry = function(value) {
  * optional string locality = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getLocality = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getLocality = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setLocality = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setLocality = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -3842,13 +4219,13 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setLocality = function(value) {
  * optional string postal_code = 4;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getPostalCode = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getPostalCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setPostalCode = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setPostalCode = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -3857,13 +4234,13 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setPostalCode = function(value)
  * optional string region = 5;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getRegion = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getRegion = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setRegion = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setRegion = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -3872,13 +4249,13 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setRegion = function(value) {
  * optional string street_address = 6;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getStreetAddress = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getStreetAddress = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setStreetAddress = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setStreetAddress = function(value) {
   jspb.Message.setProto3StringField(this, 6, value);
 };
 
@@ -3887,17 +4264,83 @@ proto.zitadel.auth.api.v1.UserAddress.prototype.setStreetAddress = function(valu
  * optional uint64 sequence = 7;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.UserAddress.prototype.getSequence = function() {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.UserAddress.prototype.setSequence = function(value) {
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 7, value);
 };
 
 
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 9;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 9));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 9, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddress.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 9) != null;
+};
+
+
 
 
 
@@ -3912,8 +4355,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.UpdateUserAddressRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -3922,11 +4365,11 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.toObject = function
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     country: jspb.Message.getFieldWithDefault(msg, 1, ""),
     locality: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -3946,23 +4389,23 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.toObject = function(includeIn
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.UpdateUserAddressRequest;
-  return proto.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest;
+  return proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4002,9 +4445,9 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.deserializeBinaryFromReader =
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.UpdateUserAddressRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4012,11 +4455,11 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.serializeBinary = f
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.UpdateUserAddressRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getCountry();
   if (f.length > 0) {
@@ -4060,13 +4503,13 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.serializeBinaryToWriter = fun
  * optional string country = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getCountry = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getCountry = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setCountry = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setCountry = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -4075,13 +4518,13 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setCountry = functi
  * optional string locality = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getLocality = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getLocality = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setLocality = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setLocality = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -4090,13 +4533,13 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setLocality = funct
  * optional string postal_code = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getPostalCode = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getPostalCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setPostalCode = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setPostalCode = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -4105,13 +4548,13 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setPostalCode = fun
  * optional string region = 4;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getRegion = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getRegion = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setRegion = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setRegion = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
@@ -4120,13 +4563,13 @@ proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setRegion = functio
  * optional string street_address = 5;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getStreetAddress = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.getStreetAddress = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setStreetAddress = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserAddressRequest.prototype.setStreetAddress = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
@@ -4145,8 +4588,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.PasswordID.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.PasswordID.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.PasswordID.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.PasswordID.toObject(opt_includeInstance, this);
 };
 
 
@@ -4155,11 +4598,11 @@ proto.zitadel.auth.api.v1.PasswordID.prototype.toObject = function(opt_includeIn
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.PasswordID} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordID} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordID.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.PasswordID.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -4175,23 +4618,23 @@ proto.zitadel.auth.api.v1.PasswordID.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.PasswordID}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordID}
  */
-proto.zitadel.auth.api.v1.PasswordID.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.PasswordID.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.PasswordID;
-  return proto.zitadel.auth.api.v1.PasswordID.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.PasswordID;
+  return proto.caos.zitadel.auth.api.v1.PasswordID.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.PasswordID} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordID} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.PasswordID}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordID}
  */
-proto.zitadel.auth.api.v1.PasswordID.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.PasswordID.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4215,9 +4658,9 @@ proto.zitadel.auth.api.v1.PasswordID.deserializeBinaryFromReader = function(msg,
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.PasswordID.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.PasswordID.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.PasswordID.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.PasswordID.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4225,11 +4668,11 @@ proto.zitadel.auth.api.v1.PasswordID.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.PasswordID} message
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordID} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordID.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.PasswordID.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -4245,13 +4688,13 @@ proto.zitadel.auth.api.v1.PasswordID.serializeBinaryToWriter = function(message,
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.PasswordID.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.PasswordID.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.PasswordID.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.PasswordID.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -4270,8 +4713,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.PasswordRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.PasswordRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.PasswordRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.PasswordRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -4280,11 +4723,11 @@ proto.zitadel.auth.api.v1.PasswordRequest.prototype.toObject = function(opt_incl
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.PasswordRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     password: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -4300,23 +4743,23 @@ proto.zitadel.auth.api.v1.PasswordRequest.toObject = function(includeInstance, m
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.PasswordRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordRequest}
  */
-proto.zitadel.auth.api.v1.PasswordRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.PasswordRequest;
-  return proto.zitadel.auth.api.v1.PasswordRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.PasswordRequest;
+  return proto.caos.zitadel.auth.api.v1.PasswordRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.PasswordRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.PasswordRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordRequest}
  */
-proto.zitadel.auth.api.v1.PasswordRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4340,9 +4783,9 @@ proto.zitadel.auth.api.v1.PasswordRequest.deserializeBinaryFromReader = function
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.PasswordRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.PasswordRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.PasswordRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4350,11 +4793,11 @@ proto.zitadel.auth.api.v1.PasswordRequest.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.PasswordRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getPassword();
   if (f.length > 0) {
@@ -4370,13 +4813,13 @@ proto.zitadel.auth.api.v1.PasswordRequest.serializeBinaryToWriter = function(mes
  * optional string password = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.PasswordRequest.prototype.getPassword = function() {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.prototype.getPassword = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.PasswordRequest.prototype.setPassword = function(value) {
+proto.caos.zitadel.auth.api.v1.PasswordRequest.prototype.setPassword = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -4395,8 +4838,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.PasswordChange.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.PasswordChange.toObject(opt_includeInstance, this);
 };
 
 
@@ -4405,11 +4848,11 @@ proto.zitadel.auth.api.v1.PasswordChange.prototype.toObject = function(opt_inclu
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.PasswordChange} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordChange.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.toObject = function(includeInstance, msg) {
   var f, obj = {
     oldPassword: jspb.Message.getFieldWithDefault(msg, 1, ""),
     newPassword: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -4426,23 +4869,23 @@ proto.zitadel.auth.api.v1.PasswordChange.toObject = function(includeInstance, ms
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.PasswordChange}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordChange}
  */
-proto.zitadel.auth.api.v1.PasswordChange.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.PasswordChange;
-  return proto.zitadel.auth.api.v1.PasswordChange.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.PasswordChange;
+  return proto.caos.zitadel.auth.api.v1.PasswordChange.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.PasswordChange} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.PasswordChange}
+ * @return {!proto.caos.zitadel.auth.api.v1.PasswordChange}
  */
-proto.zitadel.auth.api.v1.PasswordChange.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4470,9 +4913,9 @@ proto.zitadel.auth.api.v1.PasswordChange.deserializeBinaryFromReader = function(
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.PasswordChange.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.PasswordChange.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4480,11 +4923,11 @@ proto.zitadel.auth.api.v1.PasswordChange.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.PasswordChange} message
+ * @param {!proto.caos.zitadel.auth.api.v1.PasswordChange} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.PasswordChange.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOldPassword();
   if (f.length > 0) {
@@ -4507,13 +4950,13 @@ proto.zitadel.auth.api.v1.PasswordChange.serializeBinaryToWriter = function(mess
  * optional string old_password = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.getOldPassword = function() {
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.getOldPassword = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.setOldPassword = function(value) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.setOldPassword = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -4522,13 +4965,13 @@ proto.zitadel.auth.api.v1.PasswordChange.prototype.setOldPassword = function(val
  * optional string new_password = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.getNewPassword = function() {
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.getNewPassword = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.PasswordChange.prototype.setNewPassword = function(value) {
+proto.caos.zitadel.auth.api.v1.PasswordChange.prototype.setNewPassword = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -4547,8 +4990,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.VerifyMfaOtp.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.toObject(opt_includeInstance, this);
 };
 
 
@@ -4557,11 +5000,11 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.toObject = function(opt_include
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.toObject = function(includeInstance, msg) {
   var f, obj = {
     code: jspb.Message.getFieldWithDefault(msg, 1, "")
   };
@@ -4577,23 +5020,23 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.toObject = function(includeInstance, msg)
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.VerifyMfaOtp}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp}
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.VerifyMfaOtp;
-  return proto.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.VerifyMfaOtp;
+  return proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.VerifyMfaOtp}
+ * @return {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp}
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4617,9 +5060,9 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.deserializeBinaryFromReader = function(ms
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.VerifyMfaOtp.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4627,11 +5070,11 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.VerifyMfaOtp} message
+ * @param {!proto.caos.zitadel.auth.api.v1.VerifyMfaOtp} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getCode();
   if (f.length > 0) {
@@ -4647,13 +5090,13 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.serializeBinaryToWriter = function(messag
  * optional string code = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.getCode = function() {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.prototype.getCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.setCode = function(value) {
+proto.caos.zitadel.auth.api.v1.VerifyMfaOtp.prototype.setCode = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -4664,7 +5107,7 @@ proto.zitadel.auth.api.v1.VerifyMfaOtp.prototype.setCode = function(value) {
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.auth.api.v1.MultiFactors.repeatedFields_ = [1];
+proto.caos.zitadel.auth.api.v1.MultiFactors.repeatedFields_ = [1];
 
 
 
@@ -4679,8 +5122,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MultiFactors.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MultiFactors.toObject(opt_includeInstance, this);
 };
 
 
@@ -4689,14 +5132,14 @@ proto.zitadel.auth.api.v1.MultiFactors.prototype.toObject = function(opt_include
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MultiFactors} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactors} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MultiFactors.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.MultiFactors.toObject = function(includeInstance, msg) {
   var f, obj = {
     mfasList: jspb.Message.toObjectList(msg.getMfasList(),
-    proto.zitadel.auth.api.v1.MultiFactor.toObject, includeInstance)
+    proto.caos.zitadel.auth.api.v1.MultiFactor.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -4710,23 +5153,23 @@ proto.zitadel.auth.api.v1.MultiFactors.toObject = function(includeInstance, msg)
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MultiFactors}
+ * @return {!proto.caos.zitadel.auth.api.v1.MultiFactors}
  */
-proto.zitadel.auth.api.v1.MultiFactors.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.MultiFactors.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MultiFactors;
-  return proto.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.MultiFactors;
+  return proto.caos.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MultiFactors} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactors} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MultiFactors}
+ * @return {!proto.caos.zitadel.auth.api.v1.MultiFactors}
  */
-proto.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4734,8 +5177,8 @@ proto.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader = function(ms
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = new proto.zitadel.auth.api.v1.MultiFactor;
-      reader.readMessage(value,proto.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.auth.api.v1.MultiFactor;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader);
       msg.addMfas(value);
       break;
     default:
@@ -4751,9 +5194,9 @@ proto.zitadel.auth.api.v1.MultiFactors.deserializeBinaryFromReader = function(ms
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MultiFactors.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.MultiFactors.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4761,18 +5204,18 @@ proto.zitadel.auth.api.v1.MultiFactors.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MultiFactors} message
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactors} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MultiFactors.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.MultiFactors.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getMfasList();
   if (f.length > 0) {
     writer.writeRepeatedMessage(
       1,
       f,
-      proto.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter
+      proto.caos.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter
     );
   }
 };
@@ -4780,34 +5223,34 @@ proto.zitadel.auth.api.v1.MultiFactors.serializeBinaryToWriter = function(messag
 
 /**
  * repeated MultiFactor mfas = 1;
- * @return {!Array<!proto.zitadel.auth.api.v1.MultiFactor>}
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.MultiFactor>}
  */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.getMfasList = function() {
-  return /** @type{!Array<!proto.zitadel.auth.api.v1.MultiFactor>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.auth.api.v1.MultiFactor, 1));
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.getMfasList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.MultiFactor>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.MultiFactor, 1));
 };
 
 
-/** @param {!Array<!proto.zitadel.auth.api.v1.MultiFactor>} value */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.setMfasList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.MultiFactor>} value */
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.setMfasList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 1, value);
 };
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.MultiFactor=} opt_value
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactor=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.auth.api.v1.MultiFactor}
+ * @return {!proto.caos.zitadel.auth.api.v1.MultiFactor}
  */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.addMfas = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 1, opt_value, proto.zitadel.auth.api.v1.MultiFactor, opt_index);
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.addMfas = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 1, opt_value, proto.caos.zitadel.auth.api.v1.MultiFactor, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.auth.api.v1.MultiFactors.prototype.clearMfasList = function() {
+proto.caos.zitadel.auth.api.v1.MultiFactors.prototype.clearMfasList = function() {
   this.setMfasList([]);
 };
 
@@ -4826,8 +5269,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MultiFactor.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MultiFactor.toObject(opt_includeInstance, this);
 };
 
 
@@ -4836,11 +5279,11 @@ proto.zitadel.auth.api.v1.MultiFactor.prototype.toObject = function(opt_includeI
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MultiFactor} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactor} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MultiFactor.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.MultiFactor.toObject = function(includeInstance, msg) {
   var f, obj = {
     type: jspb.Message.getFieldWithDefault(msg, 1, 0),
     state: jspb.Message.getFieldWithDefault(msg, 2, 0)
@@ -4857,23 +5300,23 @@ proto.zitadel.auth.api.v1.MultiFactor.toObject = function(includeInstance, msg)
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MultiFactor}
+ * @return {!proto.caos.zitadel.auth.api.v1.MultiFactor}
  */
-proto.zitadel.auth.api.v1.MultiFactor.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.MultiFactor.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MultiFactor;
-  return proto.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.MultiFactor;
+  return proto.caos.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MultiFactor} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactor} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MultiFactor}
+ * @return {!proto.caos.zitadel.auth.api.v1.MultiFactor}
  */
-proto.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4881,11 +5324,11 @@ proto.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader = function(msg
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = /** @type {!proto.zitadel.auth.api.v1.MfaType} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.MfaType} */ (reader.readEnum());
       msg.setType(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.auth.api.v1.MFAState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.MFAState} */ (reader.readEnum());
       msg.setState(value);
       break;
     default:
@@ -4901,9 +5344,9 @@ proto.zitadel.auth.api.v1.MultiFactor.deserializeBinaryFromReader = function(msg
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4911,11 +5354,11 @@ proto.zitadel.auth.api.v1.MultiFactor.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MultiFactor} message
+ * @param {!proto.caos.zitadel.auth.api.v1.MultiFactor} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getType();
   if (f !== 0.0) {
@@ -4936,30 +5379,30 @@ proto.zitadel.auth.api.v1.MultiFactor.serializeBinaryToWriter = function(message
 
 /**
  * optional MfaType type = 1;
- * @return {!proto.zitadel.auth.api.v1.MfaType}
+ * @return {!proto.caos.zitadel.auth.api.v1.MfaType}
  */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.getType = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.MfaType} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.getType = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.MfaType} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.MfaType} value */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.setType = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.MfaType} value */
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.setType = function(value) {
   jspb.Message.setProto3EnumField(this, 1, value);
 };
 
 
 /**
  * optional MFAState state = 2;
- * @return {!proto.zitadel.auth.api.v1.MFAState}
+ * @return {!proto.caos.zitadel.auth.api.v1.MFAState}
  */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.getState = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.MFAState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.MFAState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.MFAState} value */
-proto.zitadel.auth.api.v1.MultiFactor.prototype.setState = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.MFAState} value */
+proto.caos.zitadel.auth.api.v1.MultiFactor.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -4978,8 +5421,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MfaOtpResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MfaOtpResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -4988,11 +5431,11 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.toObject = function(opt_inclu
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MfaOtpResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.MfaOtpResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
     userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
     url: jspb.Message.getFieldWithDefault(msg, 2, ""),
@@ -5011,23 +5454,23 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.toObject = function(includeInstance, ms
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MfaOtpResponse}
+ * @return {!proto.caos.zitadel.auth.api.v1.MfaOtpResponse}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MfaOtpResponse;
-  return proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.MfaOtpResponse;
+  return proto.caos.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MfaOtpResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.MfaOtpResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MfaOtpResponse}
+ * @return {!proto.caos.zitadel.auth.api.v1.MfaOtpResponse}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -5047,7 +5490,7 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader = function(
       msg.setSecret(value);
       break;
     case 4:
-      var value = /** @type {!proto.zitadel.auth.api.v1.MFAState} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.MFAState} */ (reader.readEnum());
       msg.setState(value);
       break;
     default:
@@ -5063,9 +5506,9 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.deserializeBinaryFromReader = function(
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MfaOtpResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.MfaOtpResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -5073,11 +5516,11 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MfaOtpResponse} message
+ * @param {!proto.caos.zitadel.auth.api.v1.MfaOtpResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getUserId();
   if (f.length > 0) {
@@ -5114,13 +5557,13 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.serializeBinaryToWriter = function(mess
  * optional string user_id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.getUserId = function() {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.getUserId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUserId = function(value) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUserId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -5129,13 +5572,13 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUserId = function(value) {
  * optional string url = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.getUrl = function() {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.getUrl = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUrl = function(value) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUrl = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -5144,28 +5587,28 @@ proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setUrl = function(value) {
  * optional string secret = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.getSecret = function() {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.getSecret = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setSecret = function(value) {
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.setSecret = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
 
 /**
  * optional MFAState state = 4;
- * @return {!proto.zitadel.auth.api.v1.MFAState}
+ * @return {!proto.caos.zitadel.auth.api.v1.MFAState}
  */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.getState = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.MFAState} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.MFAState} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.MFAState} value */
-proto.zitadel.auth.api.v1.MfaOtpResponse.prototype.setState = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.MFAState} value */
+proto.caos.zitadel.auth.api.v1.MfaOtpResponse.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 4, value);
 };
 
@@ -5184,8 +5627,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.OIDCClientAuth.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.OIDCClientAuth.toObject(opt_includeInstance, this);
 };
 
 
@@ -5194,11 +5637,11 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.toObject = function(opt_inclu
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.OIDCClientAuth} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.OIDCClientAuth} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.toObject = function(includeInstance, msg) {
   var f, obj = {
     clientId: jspb.Message.getFieldWithDefault(msg, 1, ""),
     clientSecret: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -5215,23 +5658,23 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.toObject = function(includeInstance, ms
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.OIDCClientAuth}
+ * @return {!proto.caos.zitadel.auth.api.v1.OIDCClientAuth}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.OIDCClientAuth;
-  return proto.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.OIDCClientAuth;
+  return proto.caos.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.OIDCClientAuth} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.OIDCClientAuth} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.OIDCClientAuth}
+ * @return {!proto.caos.zitadel.auth.api.v1.OIDCClientAuth}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -5259,9 +5702,9 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.deserializeBinaryFromReader = function(
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.OIDCClientAuth.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.OIDCClientAuth.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -5269,11 +5712,11 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.OIDCClientAuth} message
+ * @param {!proto.caos.zitadel.auth.api.v1.OIDCClientAuth} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getClientId();
   if (f.length > 0) {
@@ -5296,13 +5739,13 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.serializeBinaryToWriter = function(mess
  * optional string client_id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.getClientId = function() {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.getClientId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientId = function(value) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -5311,13 +5754,13 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientId = function(value)
  * optional string client_secret = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.getClientSecret = function() {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.getClientSecret = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientSecret = function(value) {
+proto.caos.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientSecret = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -5328,7 +5771,7 @@ proto.zitadel.auth.api.v1.OIDCClientAuth.prototype.setClientSecret = function(va
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.repeatedFields_ = [5];
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.repeatedFields_ = [5];
 
 
 
@@ -5343,8 +5786,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.toObject(opt_includeInstance, this);
 };
 
 
@@ -5353,17 +5796,18 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.toObject = functio
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    sortingColumn: jspb.Message.getFieldWithDefault(msg, 3, 0),
     asc: jspb.Message.getFieldWithDefault(msg, 4, false),
     queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
-    proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject, includeInstance)
+    proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -5377,23 +5821,23 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.toObject = function(includeI
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest;
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest;
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -5408,13 +5852,17 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader
       var value = /** @type {number} */ (reader.readUint64());
       msg.setLimit(value);
       break;
+    case 3:
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} */ (reader.readEnum());
+      msg.setSortingColumn(value);
+      break;
     case 4:
       var value = /** @type {boolean} */ (reader.readBool());
       msg.setAsc(value);
       break;
     case 5:
-      var value = new proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery;
-      reader.readMessage(value,proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.deserializeBinaryFromReader);
       msg.addQueries(value);
       break;
     default:
@@ -5430,9 +5878,9 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -5440,11 +5888,11 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.serializeBinary =
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -5460,6 +5908,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter = fu
       f
     );
   }
+  f = message.getSortingColumn();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      3,
+      f
+    );
+  }
   f = message.getAsc();
   if (f) {
     writer.writeBool(
@@ -5472,7 +5927,7 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter = fu
     writer.writeRepeatedMessage(
       5,
       f,
-      proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter
+      proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.serializeBinaryToWriter
     );
   }
 };
@@ -5482,13 +5937,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter = fu
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getOffset = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setOffset = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -5497,64 +5952,79 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setOffset = functi
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getLimit = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setLimit = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
 
+/**
+ * optional UserGrantSearchKey sorting_column = 3;
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.getSortingColumn = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} value */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.setSortingColumn = function(value) {
+  jspb.Message.setProto3EnumField(this, 3, value);
+};
+
+
 /**
  * optional bool asc = 4;
  * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getAsc = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.getAsc = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 4, false));
 };
 
 
 /** @param {boolean} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setAsc = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.setAsc = function(value) {
   jspb.Message.setProto3BooleanField(this, 4, value);
 };
 
 
 /**
- * repeated MyProjectOrgSearchQuery queries = 5;
- * @return {!Array<!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery>}
+ * repeated UserGrantSearchQuery queries = 5;
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery>}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getQueriesList = function() {
-  return /** @type{!Array<!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery, 5));
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.getQueriesList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery, 5));
 };
 
 
-/** @param {!Array<!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery>} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setQueriesList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery>} value */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.setQueriesList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 5, value);
 };
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery=} opt_value
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 5, opt_value, proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery, opt_index);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 5, opt_value, proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.clearQueriesList = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest.prototype.clearQueriesList = function() {
   this.setQueriesList([]);
 };
 
@@ -5573,8 +6043,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.toObject(opt_includeInstance, this);
 };
 
 
@@ -5583,11 +6053,11 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.toObject = function(
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.toObject = function(includeInstance, msg) {
   var f, obj = {
     key: jspb.Message.getFieldWithDefault(msg, 1, 0),
     method: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -5605,23 +6075,23 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject = function(includeIns
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery;
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery;
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -5629,11 +6099,11 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader =
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = /** @type {!proto.zitadel.auth.api.v1.MyProjectOrgSearchKey} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} */ (reader.readEnum());
       msg.setKey(value);
       break;
     case 2:
-      var value = /** @type {!proto.zitadel.auth.api.v1.SearchMethod} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.SearchMethod} */ (reader.readEnum());
       msg.setMethod(value);
       break;
     case 3:
@@ -5653,9 +6123,9 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader =
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -5663,11 +6133,11 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.serializeBinary = fu
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getKey();
   if (f !== 0.0) {
@@ -5694,31 +6164,31 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter = func
 
 
 /**
- * optional MyProjectOrgSearchKey key = 1;
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchKey}
+ * optional UserGrantSearchKey key = 1;
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getKey = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.MyProjectOrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.getKey = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchKey} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setKey = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchKey} value */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.setKey = function(value) {
   jspb.Message.setProto3EnumField(this, 1, value);
 };
 
 
 /**
  * optional SearchMethod method = 2;
- * @return {!proto.zitadel.auth.api.v1.SearchMethod}
+ * @return {!proto.caos.zitadel.auth.api.v1.SearchMethod}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getMethod = function() {
-  return /** @type {!proto.zitadel.auth.api.v1.SearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.getMethod = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.SearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
-/** @param {!proto.zitadel.auth.api.v1.SearchMethod} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setMethod = function(value) {
+/** @param {!proto.caos.zitadel.auth.api.v1.SearchMethod} value */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.setMethod = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -5727,13 +6197,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setMethod = function
  * optional string value = 3;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getValue = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.getValue = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setValue = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery.prototype.setValue = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -5744,7 +6214,7 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setValue = function(
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.repeatedFields_ = [4];
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.repeatedFields_ = [4];
 
 
 
@@ -5759,8 +6229,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -5769,17 +6239,17 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.toObject = functi
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
     offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.zitadel.auth.api.v1.Org.toObject, includeInstance)
+    proto.caos.zitadel.auth.api.v1.UserGrantView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -5793,23 +6263,23 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.toObject = function(include
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse;
-  return proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse;
+  return proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -5829,8 +6299,8 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.zitadel.auth.api.v1.Org;
-      reader.readMessage(value,proto.zitadel.auth.api.v1.Org.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.auth.api.v1.UserGrantView;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.UserGrantView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -5846,9 +6316,9 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -5856,11 +6326,11 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.serializeBinary =
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse} message
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -5888,7 +6358,7 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter = f
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.zitadel.auth.api.v1.Org.serializeBinaryToWriter
+      proto.caos.zitadel.auth.api.v1.UserGrantView.serializeBinaryToWriter
     );
   }
 };
@@ -5898,13 +6368,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter = f
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getOffset = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setOffset = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -5913,13 +6383,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setOffset = funct
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getLimit = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setLimit = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
@@ -5928,47 +6398,955 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setLimit = functi
  * optional uint64 total_result = 3;
  * @return {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getTotalResult = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.getTotalResult = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
 /** @param {number} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setTotalResult = function(value) {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.setTotalResult = function(value) {
   jspb.Message.setProto3IntField(this, 3, value);
 };
 
 
 /**
- * repeated Org result = 4;
- * @return {!Array<!proto.zitadel.auth.api.v1.Org>}
+ * repeated UserGrantView result = 4;
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.UserGrantView>}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.zitadel.auth.api.v1.Org>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.zitadel.auth.api.v1.Org, 4));
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.getResultList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.UserGrantView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.UserGrantView, 4));
 };
 
 
-/** @param {!Array<!proto.zitadel.auth.api.v1.Org>} value */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setResultList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.UserGrantView>} value */
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.zitadel.auth.api.v1.Org=} opt_value
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.zitadel.auth.api.v1.Org}
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantView}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.zitadel.auth.api.v1.Org, opt_index);
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.addResult = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.auth.api.v1.UserGrantView, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.clearResultList = function() {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse.prototype.clearResultList = function() {
+  this.setResultList([]);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.repeatedFields_ = [4];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserGrantView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgid: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    projectid: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    userid: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    rolesList: jspb.Message.getRepeatedField(msg, 4),
+    orgname: jspb.Message.getFieldWithDefault(msg, 5, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantView}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserGrantView;
+  return proto.caos.zitadel.auth.api.v1.UserGrantView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserGrantView}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgid(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectid(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserid(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addRoles(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgname(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.UserGrantView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserGrantView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgid();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getProjectid();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getUserid();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getRolesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      4,
+      f
+    );
+  }
+  f = message.getOrgname();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string OrgId = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.getOrgid = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.setOrgid = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string ProjectId = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.getProjectid = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.setProjectid = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string UserId = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.getUserid = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.setUserid = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * repeated string Roles = 4;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.getRolesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 4));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.setRolesList = function(value) {
+  jspb.Message.setField(this, 4, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.addRoles = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 4, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.clearRolesList = function() {
+  this.setRolesList([]);
+};
+
+
+/**
+ * optional string OrgName = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.getOrgname = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserGrantView.prototype.setOrgname = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.repeatedFields_ = [5];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    asc: jspb.Message.getFieldWithDefault(msg, 4, false),
+    queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
+    proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest;
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setOffset(value);
+      break;
+    case 2:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setLimit(value);
+      break;
+    case 4:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setAsc(value);
+      break;
+    case 5:
+      var value = new proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader);
+      msg.addQueries(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOffset();
+  if (f !== 0) {
+    writer.writeUint64(
+      1,
+      f
+    );
+  }
+  f = message.getLimit();
+  if (f !== 0) {
+    writer.writeUint64(
+      2,
+      f
+    );
+  }
+  f = message.getAsc();
+  if (f) {
+    writer.writeBool(
+      4,
+      f
+    );
+  }
+  f = message.getQueriesList();
+  if (f.length > 0) {
+    writer.writeRepeatedMessage(
+      5,
+      f,
+      proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional uint64 offset = 1;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getOffset = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setOffset = function(value) {
+  jspb.Message.setProto3IntField(this, 1, value);
+};
+
+
+/**
+ * optional uint64 limit = 2;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getLimit = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setLimit = function(value) {
+  jspb.Message.setProto3IntField(this, 2, value);
+};
+
+
+/**
+ * optional bool asc = 4;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getAsc = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 4, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setAsc = function(value) {
+  jspb.Message.setProto3BooleanField(this, 4, value);
+};
+
+
+/**
+ * repeated MyProjectOrgSearchQuery queries = 5;
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery>}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.getQueriesList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery, 5));
+};
+
+
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery>} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.setQueriesList = function(value) {
+  jspb.Message.setRepeatedWrapperField(this, 5, value);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery=} opt_value
+ * @param {number=} opt_index
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 5, opt_value, proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchRequest.prototype.clearQueriesList = function() {
+  this.setQueriesList([]);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    key: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    method: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    value: jspb.Message.getFieldWithDefault(msg, 3, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery;
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey} */ (reader.readEnum());
+      msg.setKey(value);
+      break;
+    case 2:
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.SearchMethod} */ (reader.readEnum());
+      msg.setMethod(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setValue(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getKey();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      1,
+      f
+    );
+  }
+  f = message.getMethod();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      2,
+      f
+    );
+  }
+  f = message.getValue();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional MyProjectOrgSearchKey key = 1;
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getKey = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setKey = function(value) {
+  jspb.Message.setProto3EnumField(this, 1, value);
+};
+
+
+/**
+ * optional SearchMethod method = 2;
+ * @return {!proto.caos.zitadel.auth.api.v1.SearchMethod}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getMethod = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.SearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.auth.api.v1.SearchMethod} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setMethod = function(value) {
+  jspb.Message.setProto3EnumField(this, 2, value);
+};
+
+
+/**
+ * optional string value = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.getValue = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchQuery.prototype.setValue = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.repeatedFields_ = [4];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
+    resultList: jspb.Message.toObjectList(msg.getResultList(),
+    proto.caos.zitadel.auth.api.v1.Org.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse;
+  return proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setOffset(value);
+      break;
+    case 2:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setLimit(value);
+      break;
+    case 3:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setTotalResult(value);
+      break;
+    case 4:
+      var value = new proto.caos.zitadel.auth.api.v1.Org;
+      reader.readMessage(value,proto.caos.zitadel.auth.api.v1.Org.deserializeBinaryFromReader);
+      msg.addResult(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOffset();
+  if (f !== 0) {
+    writer.writeUint64(
+      1,
+      f
+    );
+  }
+  f = message.getLimit();
+  if (f !== 0) {
+    writer.writeUint64(
+      2,
+      f
+    );
+  }
+  f = message.getTotalResult();
+  if (f !== 0) {
+    writer.writeUint64(
+      3,
+      f
+    );
+  }
+  f = message.getResultList();
+  if (f.length > 0) {
+    writer.writeRepeatedMessage(
+      4,
+      f,
+      proto.caos.zitadel.auth.api.v1.Org.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional uint64 offset = 1;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getOffset = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setOffset = function(value) {
+  jspb.Message.setProto3IntField(this, 1, value);
+};
+
+
+/**
+ * optional uint64 limit = 2;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getLimit = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setLimit = function(value) {
+  jspb.Message.setProto3IntField(this, 2, value);
+};
+
+
+/**
+ * optional uint64 total_result = 3;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getTotalResult = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setTotalResult = function(value) {
+  jspb.Message.setProto3IntField(this, 3, value);
+};
+
+
+/**
+ * repeated Org result = 4;
+ * @return {!Array<!proto.caos.zitadel.auth.api.v1.Org>}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.getResultList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.auth.api.v1.Org>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.auth.api.v1.Org, 4));
+};
+
+
+/** @param {!Array<!proto.caos.zitadel.auth.api.v1.Org>} value */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.setResultList = function(value) {
+  jspb.Message.setRepeatedWrapperField(this, 4, value);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.auth.api.v1.Org=} opt_value
+ * @param {number=} opt_index
+ * @return {!proto.caos.zitadel.auth.api.v1.Org}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.addResult = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.auth.api.v1.Org, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchResponse.prototype.clearResultList = function() {
   this.setResultList([]);
 };
 
@@ -5987,8 +7365,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.IsAdminResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.IsAdminResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.Org.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.Org.toObject(opt_includeInstance, this);
 };
 
 
@@ -5997,138 +7375,11 @@ proto.zitadel.auth.api.v1.IsAdminResponse.prototype.toObject = function(opt_incl
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.IsAdminResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.Org} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.IsAdminResponse.toObject = function(includeInstance, msg) {
-  var f, obj = {
-    isAdmin: jspb.Message.getFieldWithDefault(msg, 1, false)
-  };
-
-  if (includeInstance) {
-    obj.$jspbMessageInstance = msg;
-  }
-  return obj;
-};
-}
-
-
-/**
- * Deserializes binary data (in protobuf wire format).
- * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.IsAdminResponse}
- */
-proto.zitadel.auth.api.v1.IsAdminResponse.deserializeBinary = function(bytes) {
-  var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.IsAdminResponse;
-  return proto.zitadel.auth.api.v1.IsAdminResponse.deserializeBinaryFromReader(msg, reader);
-};
-
-
-/**
- * Deserializes binary data (in protobuf wire format) from the
- * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.IsAdminResponse} msg The message object to deserialize into.
- * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.IsAdminResponse}
- */
-proto.zitadel.auth.api.v1.IsAdminResponse.deserializeBinaryFromReader = function(msg, reader) {
-  while (reader.nextField()) {
-    if (reader.isEndGroup()) {
-      break;
-    }
-    var field = reader.getFieldNumber();
-    switch (field) {
-    case 1:
-      var value = /** @type {boolean} */ (reader.readBool());
-      msg.setIsAdmin(value);
-      break;
-    default:
-      reader.skipField();
-      break;
-    }
-  }
-  return msg;
-};
-
-
-/**
- * Serializes the message to binary data (in protobuf wire format).
- * @return {!Uint8Array}
- */
-proto.zitadel.auth.api.v1.IsAdminResponse.prototype.serializeBinary = function() {
-  var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.IsAdminResponse.serializeBinaryToWriter(this, writer);
-  return writer.getResultBuffer();
-};
-
-
-/**
- * Serializes the given message to binary data (in protobuf wire
- * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.IsAdminResponse} message
- * @param {!jspb.BinaryWriter} writer
- * @suppress {unusedLocalVariables} f is only used for nested messages
- */
-proto.zitadel.auth.api.v1.IsAdminResponse.serializeBinaryToWriter = function(message, writer) {
-  var f = undefined;
-  f = message.getIsAdmin();
-  if (f) {
-    writer.writeBool(
-      1,
-      f
-    );
-  }
-};
-
-
-/**
- * optional bool is_admin = 1;
- * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
- * You should avoid comparisons like {@code val === true/false} in those cases.
- * @return {boolean}
- */
-proto.zitadel.auth.api.v1.IsAdminResponse.prototype.getIsAdmin = function() {
-  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 1, false));
-};
-
-
-/** @param {boolean} value */
-proto.zitadel.auth.api.v1.IsAdminResponse.prototype.setIsAdmin = function(value) {
-  jspb.Message.setProto3BooleanField(this, 1, value);
-};
-
-
-
-
-
-if (jspb.Message.GENERATE_TO_OBJECT) {
-/**
- * Creates an object representation of this proto suitable for use in Soy templates.
- * Field names that are reserved in JavaScript and will be renamed to pb_name.
- * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
- * For the list of reserved names please see:
- *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
- * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
- *     for transitional soy proto support: http://goto/soy-param-migration
- * @return {!Object}
- */
-proto.zitadel.auth.api.v1.Org.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.Org.toObject(opt_includeInstance, this);
-};
-
-
-/**
- * Static version of the {@see toObject} method.
- * @param {boolean|undefined} includeInstance Whether to include the JSPB
- *     instance for transitional soy proto support:
- *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.Org} msg The msg instance to transform.
- * @return {!Object}
- * @suppress {unusedLocalVariables} f is only used for nested messages
- */
-proto.zitadel.auth.api.v1.Org.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.Org.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     name: jspb.Message.getFieldWithDefault(msg, 2, "")
@@ -6145,23 +7396,23 @@ proto.zitadel.auth.api.v1.Org.toObject = function(includeInstance, msg) {
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.Org}
+ * @return {!proto.caos.zitadel.auth.api.v1.Org}
  */
-proto.zitadel.auth.api.v1.Org.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.Org.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.Org;
-  return proto.zitadel.auth.api.v1.Org.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.Org;
+  return proto.caos.zitadel.auth.api.v1.Org.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.Org} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.Org} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.Org}
+ * @return {!proto.caos.zitadel.auth.api.v1.Org}
  */
-proto.zitadel.auth.api.v1.Org.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.Org.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -6189,9 +7440,9 @@ proto.zitadel.auth.api.v1.Org.deserializeBinaryFromReader = function(msg, reader
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.Org.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.Org.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.Org.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.Org.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -6199,11 +7450,11 @@ proto.zitadel.auth.api.v1.Org.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.Org} message
+ * @param {!proto.caos.zitadel.auth.api.v1.Org} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.Org.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.Org.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -6226,13 +7477,13 @@ proto.zitadel.auth.api.v1.Org.serializeBinaryToWriter = function(message, writer
  * optional string id = 1;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.Org.prototype.getId = function() {
+proto.caos.zitadel.auth.api.v1.Org.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.Org.prototype.setId = function(value) {
+proto.caos.zitadel.auth.api.v1.Org.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -6241,13 +7492,13 @@ proto.zitadel.auth.api.v1.Org.prototype.setId = function(value) {
  * optional string name = 2;
  * @return {string}
  */
-proto.zitadel.auth.api.v1.Org.prototype.getName = function() {
+proto.caos.zitadel.auth.api.v1.Org.prototype.getName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
 /** @param {string} value */
-proto.zitadel.auth.api.v1.Org.prototype.setName = function(value) {
+proto.caos.zitadel.auth.api.v1.Org.prototype.setName = function(value) {
   jspb.Message.setProto3StringField(this, 2, value);
 };
 
@@ -6258,7 +7509,7 @@ proto.zitadel.auth.api.v1.Org.prototype.setName = function(value) {
  * @private {!Array<number>}
  * @const
  */
-proto.zitadel.auth.api.v1.MyPermissions.repeatedFields_ = [1];
+proto.caos.zitadel.auth.api.v1.MyPermissions.repeatedFields_ = [1];
 
 
 
@@ -6273,8 +7524,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.toObject = function(opt_includeInstance) {
-  return proto.zitadel.auth.api.v1.MyPermissions.toObject(opt_includeInstance, this);
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.MyPermissions.toObject(opt_includeInstance, this);
 };
 
 
@@ -6283,11 +7534,11 @@ proto.zitadel.auth.api.v1.MyPermissions.prototype.toObject = function(opt_includ
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.zitadel.auth.api.v1.MyPermissions} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyPermissions} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyPermissions.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.toObject = function(includeInstance, msg) {
   var f, obj = {
     permissionsList: jspb.Message.getRepeatedField(msg, 1)
   };
@@ -6303,23 +7554,23 @@ proto.zitadel.auth.api.v1.MyPermissions.toObject = function(includeInstance, msg
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.zitadel.auth.api.v1.MyPermissions}
+ * @return {!proto.caos.zitadel.auth.api.v1.MyPermissions}
  */
-proto.zitadel.auth.api.v1.MyPermissions.deserializeBinary = function(bytes) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.zitadel.auth.api.v1.MyPermissions;
-  return proto.zitadel.auth.api.v1.MyPermissions.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.auth.api.v1.MyPermissions;
+  return proto.caos.zitadel.auth.api.v1.MyPermissions.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.zitadel.auth.api.v1.MyPermissions} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.auth.api.v1.MyPermissions} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.zitadel.auth.api.v1.MyPermissions}
+ * @return {!proto.caos.zitadel.auth.api.v1.MyPermissions}
  */
-proto.zitadel.auth.api.v1.MyPermissions.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -6343,9 +7594,9 @@ proto.zitadel.auth.api.v1.MyPermissions.deserializeBinaryFromReader = function(m
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.serializeBinary = function() {
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.zitadel.auth.api.v1.MyPermissions.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.auth.api.v1.MyPermissions.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -6353,11 +7604,11 @@ proto.zitadel.auth.api.v1.MyPermissions.prototype.serializeBinary = function() {
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.zitadel.auth.api.v1.MyPermissions} message
+ * @param {!proto.caos.zitadel.auth.api.v1.MyPermissions} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.zitadel.auth.api.v1.MyPermissions.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getPermissionsList();
   if (f.length > 0) {
@@ -6373,13 +7624,13 @@ proto.zitadel.auth.api.v1.MyPermissions.serializeBinaryToWriter = function(messa
  * repeated string permissions = 1;
  * @return {!Array<string>}
  */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.getPermissionsList = function() {
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.getPermissionsList = function() {
   return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 1));
 };
 
 
 /** @param {!Array<string>} value */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.setPermissionsList = function(value) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.setPermissionsList = function(value) {
   jspb.Message.setField(this, 1, value || []);
 };
 
@@ -6388,7 +7639,7 @@ proto.zitadel.auth.api.v1.MyPermissions.prototype.setPermissionsList = function(
  * @param {string} value
  * @param {number=} opt_index
  */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.addPermissions = function(value, opt_index) {
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.addPermissions = function(value, opt_index) {
   jspb.Message.addToRepeatedField(this, 1, value, opt_index);
 };
 
@@ -6396,7 +7647,7 @@ proto.zitadel.auth.api.v1.MyPermissions.prototype.addPermissions = function(valu
 /**
  * Clears the list making it empty but non-null.
  */
-proto.zitadel.auth.api.v1.MyPermissions.prototype.clearPermissionsList = function() {
+proto.caos.zitadel.auth.api.v1.MyPermissions.prototype.clearPermissionsList = function() {
   this.setPermissionsList([]);
 };
 
@@ -6404,7 +7655,7 @@ proto.zitadel.auth.api.v1.MyPermissions.prototype.clearPermissionsList = functio
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.UserSessionState = {
+proto.caos.zitadel.auth.api.v1.UserSessionState = {
   USERSESSIONSTATE_UNSPECIFIED: 0,
   USERSESSIONSTATE_ACTIVE: 1,
   USERSESSIONSTATE_TERMINATED: 2
@@ -6413,7 +7664,7 @@ proto.zitadel.auth.api.v1.UserSessionState = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.OIDCResponseType = {
+proto.caos.zitadel.auth.api.v1.OIDCResponseType = {
   OIDCRESPONSETYPE_CODE: 0,
   OIDCRESPONSETYPE_ID_TOKEN: 1,
   OIDCRESPONSETYPE_ID_TOKEN_TOKEN: 2
@@ -6422,7 +7673,7 @@ proto.zitadel.auth.api.v1.OIDCResponseType = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.UserState = {
+proto.caos.zitadel.auth.api.v1.UserState = {
   USERSTATE_UNSPECIEFIED: 0,
   USERSTATE_ACTIVE: 1,
   USERSTATE_INACTIVE: 2,
@@ -6435,7 +7686,7 @@ proto.zitadel.auth.api.v1.UserState = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.Gender = {
+proto.caos.zitadel.auth.api.v1.Gender = {
   GENDER_UNSPECIFIED: 0,
   GENDER_FEMALE: 1,
   GENDER_MALE: 2,
@@ -6445,7 +7696,7 @@ proto.zitadel.auth.api.v1.Gender = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.MfaType = {
+proto.caos.zitadel.auth.api.v1.MfaType = {
   MFATYPE_UNSPECIFIED: 0,
   MFATYPE_SMS: 1,
   MFATYPE_OTP: 2
@@ -6454,7 +7705,7 @@ proto.zitadel.auth.api.v1.MfaType = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.MFAState = {
+proto.caos.zitadel.auth.api.v1.MFAState = {
   MFASTATE_UNSPECIFIED: 0,
   MFASTATE_NOT_READY: 1,
   MFASTATE_READY: 2,
@@ -6464,7 +7715,16 @@ proto.zitadel.auth.api.v1.MFAState = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.MyProjectOrgSearchKey = {
+proto.caos.zitadel.auth.api.v1.UserGrantSearchKey = {
+  USERGRANTSEARCHKEY_UNKNOWN: 0,
+  USERGRANTSEARCHKEY_ORG_ID: 1,
+  USERGRANTSEARCHKEY_PROJECT_ID: 2
+};
+
+/**
+ * @enum {number}
+ */
+proto.caos.zitadel.auth.api.v1.MyProjectOrgSearchKey = {
   MYPROJECTORGSEARCHKEY_UNSPECIFIED: 0,
   MYPROJECTORGSEARCHKEY_ORG_NAME: 1
 };
@@ -6472,10 +7732,13 @@ proto.zitadel.auth.api.v1.MyProjectOrgSearchKey = {
 /**
  * @enum {number}
  */
-proto.zitadel.auth.api.v1.SearchMethod = {
+proto.caos.zitadel.auth.api.v1.SearchMethod = {
   SEARCHMETHOD_EQUALS: 0,
   SEARCHMETHOD_STARTS_WITH: 1,
-  SEARCHMETHOD_CONTAINS: 2
+  SEARCHMETHOD_CONTAINS: 2,
+  SEARCHMETHOD_EQUALS_IGNORE_CASE: 3,
+  SEARCHMETHOD_STARTS_WITH_IGNORE_CASE: 4,
+  SEARCHMETHOD_CONTAINS_IGNORE_CASE: 5
 };
 
-goog.object.extend(exports, proto.zitadel.auth.api.v1);
+goog.object.extend(exports, proto.caos.zitadel.auth.api.v1);
diff --git a/console/src/app/proto/generated/management_grpc_web_pb.d.ts b/console/src/app/proto/generated/management_grpc_web_pb.d.ts
index 3eee5352d3..2f1a4e1cd3 100644
--- a/console/src/app/proto/generated/management_grpc_web_pb.d.ts
+++ b/console/src/app/proto/generated/management_grpc_web_pb.d.ts
@@ -23,7 +23,8 @@ import {
   Changes,
   ClientSecret,
   CreateUserRequest,
-  GrantedGrantID,
+  GrantedProjectSearchRequest,
+  GrantedProjectSearchResponse,
   MultiFactors,
   OIDCApplicationCreate,
   OIDCConfig,
@@ -31,6 +32,7 @@ import {
   Org,
   OrgDomain,
   OrgID,
+  OrgMember,
   OrgMemberRoles,
   OrgMemberSearchRequest,
   OrgMemberSearchResponse,
@@ -80,8 +82,6 @@ import {
   ProjectRoleRemove,
   ProjectRoleSearchRequest,
   ProjectRoleSearchResponse,
-  ProjectSearchRequest,
-  ProjectSearchResponse,
   ProjectUpdateRequest,
   ProjectUserGrantID,
   ProjectUserGrantSearchRequest,
@@ -108,7 +108,8 @@ import {
   UserPhone,
   UserProfile,
   UserSearchRequest,
-  UserSearchResponse} from './management_pb';
+  UserSearchResponse,
+  UserView} from './management_pb';
 
 export class ManagementServiceClient {
   constructor (hostname: string,
@@ -147,8 +148,8 @@ export class ManagementServiceClient {
     request: UserEmailID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: User) => void
-  ): grpcWeb.ClientReadableStream<User>;
+               response: UserView) => void
+  ): grpcWeb.ClientReadableStream<UserView>;
 
   searchUsers(
     request: UserSearchRequest,
@@ -448,15 +449,15 @@ export class ManagementServiceClient {
     request: AddOrgMemberRequest,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: google_protobuf_empty_pb.Empty) => void
-  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
+               response: OrgMember) => void
+  ): grpcWeb.ClientReadableStream<OrgMember>;
 
   changeOrgMember(
     request: ChangeOrgMemberRequest,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: google_protobuf_empty_pb.Empty) => void
-  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
+               response: OrgMember) => void
+  ): grpcWeb.ClientReadableStream<OrgMember>;
 
   removeOrgMember(
     request: RemoveOrgMemberRequest,
@@ -472,12 +473,12 @@ export class ManagementServiceClient {
                response: OrgMemberSearchResponse) => void
   ): grpcWeb.ClientReadableStream<OrgMemberSearchResponse>;
 
-  searchProjects(
-    request: ProjectSearchRequest,
+  searchGrantedProjects(
+    request: GrantedProjectSearchRequest,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: ProjectSearchResponse) => void
-  ): grpcWeb.ClientReadableStream<ProjectSearchResponse>;
+               response: GrantedProjectSearchResponse) => void
+  ): grpcWeb.ClientReadableStream<GrantedProjectSearchResponse>;
 
   projectByID(
     request: ProjectID,
@@ -515,7 +516,7 @@ export class ManagementServiceClient {
   ): grpcWeb.ClientReadableStream<Project>;
 
   getGrantedProjectGrantByID(
-    request: GrantedGrantID,
+    request: ProjectGrantID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
                response: ProjectGrant) => void
@@ -901,7 +902,7 @@ export class ManagementServicePromiseClient {
   getUserByEmailGlobal(
     request: UserEmailID,
     metadata?: grpcWeb.Metadata
-  ): Promise<User>;
+  ): Promise<UserView>;
 
   searchUsers(
     request: UserSearchRequest,
@@ -1116,12 +1117,12 @@ export class ManagementServicePromiseClient {
   addOrgMember(
     request: AddOrgMemberRequest,
     metadata?: grpcWeb.Metadata
-  ): Promise<google_protobuf_empty_pb.Empty>;
+  ): Promise<OrgMember>;
 
   changeOrgMember(
     request: ChangeOrgMemberRequest,
     metadata?: grpcWeb.Metadata
-  ): Promise<google_protobuf_empty_pb.Empty>;
+  ): Promise<OrgMember>;
 
   removeOrgMember(
     request: RemoveOrgMemberRequest,
@@ -1133,10 +1134,10 @@ export class ManagementServicePromiseClient {
     metadata?: grpcWeb.Metadata
   ): Promise<OrgMemberSearchResponse>;
 
-  searchProjects(
-    request: ProjectSearchRequest,
+  searchGrantedProjects(
+    request: GrantedProjectSearchRequest,
     metadata?: grpcWeb.Metadata
-  ): Promise<ProjectSearchResponse>;
+  ): Promise<GrantedProjectSearchResponse>;
 
   projectByID(
     request: ProjectID,
@@ -1164,7 +1165,7 @@ export class ManagementServicePromiseClient {
   ): Promise<Project>;
 
   getGrantedProjectGrantByID(
-    request: GrantedGrantID,
+    request: ProjectGrantID,
     metadata?: grpcWeb.Metadata
   ): Promise<ProjectGrant>;
 
diff --git a/console/src/app/proto/generated/management_grpc_web_pb.js b/console/src/app/proto/generated/management_grpc_web_pb.js
index 1d1a76be66..6f7450d3b4 100644
--- a/console/src/app/proto/generated/management_grpc_web_pb.js
+++ b/console/src/app/proto/generated/management_grpc_web_pb.js
@@ -410,13 +410,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.ge
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserEmailID,
- *   !proto.caos.zitadel.management.api.v1.User>}
+ *   !proto.caos.zitadel.management.api.v1.UserView>}
  */
 const methodDescriptor_ManagementService_GetUserByEmailGlobal = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserByEmailGlobal',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserEmailID,
-  proto.caos.zitadel.management.api.v1.User,
+  proto.caos.zitadel.management.api.v1.UserView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserEmailID} request
    * @return {!Uint8Array}
@@ -424,7 +424,7 @@ const methodDescriptor_ManagementService_GetUserByEmailGlobal = new grpc.web.Met
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.User.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserView.deserializeBinary
 );
 
 
@@ -432,10 +432,10 @@ const methodDescriptor_ManagementService_GetUserByEmailGlobal = new grpc.web.Met
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserEmailID,
- *   !proto.caos.zitadel.management.api.v1.User>}
+ *   !proto.caos.zitadel.management.api.v1.UserView>}
  */
 const methodInfo_ManagementService_GetUserByEmailGlobal = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.User,
+  proto.caos.zitadel.management.api.v1.UserView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserEmailID} request
    * @return {!Uint8Array}
@@ -443,7 +443,7 @@ const methodInfo_ManagementService_GetUserByEmailGlobal = new grpc.web.AbstractC
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.User.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserView.deserializeBinary
 );
 
 
@@ -452,9 +452,9 @@ const methodInfo_ManagementService_GetUserByEmailGlobal = new grpc.web.AbstractC
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.User)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.User>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserByEmailGlobal =
@@ -473,7 +473,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserBy
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.User>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserByEmailGlobal =
@@ -3850,13 +3850,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.ge
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.AddOrgMemberRequest,
- *   !proto.google.protobuf.Empty>}
+ *   !proto.caos.zitadel.management.api.v1.OrgMember>}
  */
 const methodDescriptor_ManagementService_AddOrgMember = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/AddOrgMember',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.AddOrgMemberRequest,
-  google_protobuf_empty_pb.Empty,
+  proto.caos.zitadel.management.api.v1.OrgMember,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.AddOrgMemberRequest} request
    * @return {!Uint8Array}
@@ -3864,7 +3864,7 @@ const methodDescriptor_ManagementService_AddOrgMember = new grpc.web.MethodDescr
   function(request) {
     return request.serializeBinary();
   },
-  google_protobuf_empty_pb.Empty.deserializeBinary
+  proto.caos.zitadel.management.api.v1.OrgMember.deserializeBinary
 );
 
 
@@ -3872,10 +3872,10 @@ const methodDescriptor_ManagementService_AddOrgMember = new grpc.web.MethodDescr
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.AddOrgMemberRequest,
- *   !proto.google.protobuf.Empty>}
+ *   !proto.caos.zitadel.management.api.v1.OrgMember>}
  */
 const methodInfo_ManagementService_AddOrgMember = new grpc.web.AbstractClientBase.MethodInfo(
-  google_protobuf_empty_pb.Empty,
+  proto.caos.zitadel.management.api.v1.OrgMember,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.AddOrgMemberRequest} request
    * @return {!Uint8Array}
@@ -3883,7 +3883,7 @@ const methodInfo_ManagementService_AddOrgMember = new grpc.web.AbstractClientBas
   function(request) {
     return request.serializeBinary();
   },
-  google_protobuf_empty_pb.Empty.deserializeBinary
+  proto.caos.zitadel.management.api.v1.OrgMember.deserializeBinary
 );
 
 
@@ -3892,9 +3892,9 @@ const methodInfo_ManagementService_AddOrgMember = new grpc.web.AbstractClientBas
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.OrgMember)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.OrgMember>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.addOrgMember =
@@ -3913,7 +3913,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.addOrgMem
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.google.protobuf.Empty>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.OrgMember>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.addOrgMember =
@@ -3930,13 +3930,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.ad
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.ChangeOrgMemberRequest,
- *   !proto.google.protobuf.Empty>}
+ *   !proto.caos.zitadel.management.api.v1.OrgMember>}
  */
 const methodDescriptor_ManagementService_ChangeOrgMember = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/ChangeOrgMember',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.ChangeOrgMemberRequest,
-  google_protobuf_empty_pb.Empty,
+  proto.caos.zitadel.management.api.v1.OrgMember,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.ChangeOrgMemberRequest} request
    * @return {!Uint8Array}
@@ -3944,7 +3944,7 @@ const methodDescriptor_ManagementService_ChangeOrgMember = new grpc.web.MethodDe
   function(request) {
     return request.serializeBinary();
   },
-  google_protobuf_empty_pb.Empty.deserializeBinary
+  proto.caos.zitadel.management.api.v1.OrgMember.deserializeBinary
 );
 
 
@@ -3952,10 +3952,10 @@ const methodDescriptor_ManagementService_ChangeOrgMember = new grpc.web.MethodDe
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.ChangeOrgMemberRequest,
- *   !proto.google.protobuf.Empty>}
+ *   !proto.caos.zitadel.management.api.v1.OrgMember>}
  */
 const methodInfo_ManagementService_ChangeOrgMember = new grpc.web.AbstractClientBase.MethodInfo(
-  google_protobuf_empty_pb.Empty,
+  proto.caos.zitadel.management.api.v1.OrgMember,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.ChangeOrgMemberRequest} request
    * @return {!Uint8Array}
@@ -3963,7 +3963,7 @@ const methodInfo_ManagementService_ChangeOrgMember = new grpc.web.AbstractClient
   function(request) {
     return request.serializeBinary();
   },
-  google_protobuf_empty_pb.Empty.deserializeBinary
+  proto.caos.zitadel.management.api.v1.OrgMember.deserializeBinary
 );
 
 
@@ -3972,9 +3972,9 @@ const methodInfo_ManagementService_ChangeOrgMember = new grpc.web.AbstractClient
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.OrgMember)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.OrgMember>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.changeOrgMember =
@@ -3993,7 +3993,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.changeOrg
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.google.protobuf.Empty>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.OrgMember>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.changeOrgMember =
@@ -4169,80 +4169,80 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.se
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.caos.zitadel.management.api.v1.ProjectSearchRequest,
- *   !proto.caos.zitadel.management.api.v1.ProjectSearchResponse>}
+ *   !proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest,
+ *   !proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse>}
  */
-const methodDescriptor_ManagementService_SearchProjects = new grpc.web.MethodDescriptor(
-  '/caos.zitadel.management.api.v1.ManagementService/SearchProjects',
+const methodDescriptor_ManagementService_SearchGrantedProjects = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.management.api.v1.ManagementService/SearchGrantedProjects',
   grpc.web.MethodType.UNARY,
-  proto.caos.zitadel.management.api.v1.ProjectSearchRequest,
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse,
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest,
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse,
   /**
-   * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} request
+   * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinary
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.deserializeBinary
 );
 
 
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.caos.zitadel.management.api.v1.ProjectSearchRequest,
- *   !proto.caos.zitadel.management.api.v1.ProjectSearchResponse>}
+ *   !proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest,
+ *   !proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse>}
  */
-const methodInfo_ManagementService_SearchProjects = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse,
+const methodInfo_ManagementService_SearchGrantedProjects = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse,
   /**
-   * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} request
+   * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} request
    * @return {!Uint8Array}
    */
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinary
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.deserializeBinary
 );
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} request The
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.ProjectSearchResponse)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.ProjectSearchResponse>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse>|undefined}
  *     The XHR Node Readable Stream
  */
-proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.searchProjects =
+proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.searchGrantedProjects =
     function(request, metadata, callback) {
   return this.client_.rpcCall(this.hostname_ +
-      '/caos.zitadel.management.api.v1.ManagementService/SearchProjects',
+      '/caos.zitadel.management.api.v1.ManagementService/SearchGrantedProjects',
       request,
       metadata || {},
-      methodDescriptor_ManagementService_SearchProjects,
+      methodDescriptor_ManagementService_SearchGrantedProjects,
       callback);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} request The
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.ProjectSearchResponse>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse>}
  *     A native promise that resolves to the response
  */
-proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.searchProjects =
+proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.searchGrantedProjects =
     function(request, metadata) {
   return this.client_.unaryCall(this.hostname_ +
-      '/caos.zitadel.management.api.v1.ManagementService/SearchProjects',
+      '/caos.zitadel.management.api.v1.ManagementService/SearchGrantedProjects',
       request,
       metadata || {},
-      methodDescriptor_ManagementService_SearchProjects);
+      methodDescriptor_ManagementService_SearchGrantedProjects);
 };
 
 
@@ -4649,16 +4649,16 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.re
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
- *   !proto.caos.zitadel.management.api.v1.GrantedGrantID,
+ *   !proto.caos.zitadel.management.api.v1.ProjectGrantID,
  *   !proto.caos.zitadel.management.api.v1.ProjectGrant>}
  */
 const methodDescriptor_ManagementService_GetGrantedProjectGrantByID = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetGrantedProjectGrantByID',
   grpc.web.MethodType.UNARY,
-  proto.caos.zitadel.management.api.v1.GrantedGrantID,
+  proto.caos.zitadel.management.api.v1.ProjectGrantID,
   proto.caos.zitadel.management.api.v1.ProjectGrant,
   /**
-   * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} request
+   * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantID} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -4671,13 +4671,13 @@ const methodDescriptor_ManagementService_GetGrantedProjectGrantByID = new grpc.w
 /**
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
- *   !proto.caos.zitadel.management.api.v1.GrantedGrantID,
+ *   !proto.caos.zitadel.management.api.v1.ProjectGrantID,
  *   !proto.caos.zitadel.management.api.v1.ProjectGrant>}
  */
 const methodInfo_ManagementService_GetGrantedProjectGrantByID = new grpc.web.AbstractClientBase.MethodInfo(
   proto.caos.zitadel.management.api.v1.ProjectGrant,
   /**
-   * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} request
+   * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantID} request
    * @return {!Uint8Array}
    */
   function(request) {
@@ -4688,7 +4688,7 @@ const methodInfo_ManagementService_GetGrantedProjectGrantByID = new grpc.web.Abs
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} request The
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantID} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
@@ -4709,7 +4709,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getGrante
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} request The
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantID} request The
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
diff --git a/console/src/app/proto/generated/management_pb.d.ts b/console/src/app/proto/generated/management_pb.d.ts
index 89463c949f..07d84b8c5e 100644
--- a/console/src/app/proto/generated/management_pb.d.ts
+++ b/console/src/app/proto/generated/management_pb.d.ts
@@ -316,16 +316,6 @@ export class User extends jspb.Message {
   hasChangeDate(): boolean;
   clearChangeDate(): void;
 
-  getLastLogin(): google_protobuf_timestamp_pb.Timestamp | undefined;
-  setLastLogin(value?: google_protobuf_timestamp_pb.Timestamp): void;
-  hasLastLogin(): boolean;
-  clearLastLogin(): void;
-
-  getPasswordChanged(): google_protobuf_timestamp_pb.Timestamp | undefined;
-  setPasswordChanged(value?: google_protobuf_timestamp_pb.Timestamp): void;
-  hasPasswordChanged(): boolean;
-  clearPasswordChanged(): void;
-
   getUserName(): string;
   setUserName(value: string): void;
 
@@ -386,6 +376,121 @@ export class User extends jspb.Message {
 }
 
 export namespace User {
+  export type AsObject = {
+    id: string,
+    state: UserState,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    userName: string,
+    firstName: string,
+    lastName: string,
+    displayName: string,
+    nickName: string,
+    preferredLanguage: string,
+    gender: Gender,
+    email: string,
+    isEmailVerified: boolean,
+    phone: string,
+    isPhoneVerified: boolean,
+    country: string,
+    locality: string,
+    postalCode: string,
+    region: string,
+    streetAddress: string,
+    sequence: number,
+  }
+}
+
+export class UserView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getState(): UserState;
+  setState(value: UserState): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getLastLogin(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setLastLogin(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasLastLogin(): boolean;
+  clearLastLogin(): void;
+
+  getPasswordChanged(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setPasswordChanged(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasPasswordChanged(): boolean;
+  clearPasswordChanged(): void;
+
+  getUserName(): string;
+  setUserName(value: string): void;
+
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getDisplayName(): string;
+  setDisplayName(value: string): void;
+
+  getNickName(): string;
+  setNickName(value: string): void;
+
+  getPreferredLanguage(): string;
+  setPreferredLanguage(value: string): void;
+
+  getGender(): Gender;
+  setGender(value: Gender): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getIsEmailVerified(): boolean;
+  setIsEmailVerified(value: boolean): void;
+
+  getPhone(): string;
+  setPhone(value: string): void;
+
+  getIsPhoneVerified(): boolean;
+  setIsPhoneVerified(value: boolean): void;
+
+  getCountry(): string;
+  setCountry(value: string): void;
+
+  getLocality(): string;
+  setLocality(value: string): void;
+
+  getPostalCode(): string;
+  setPostalCode(value: string): void;
+
+  getRegion(): string;
+  setRegion(value: string): void;
+
+  getStreetAddress(): string;
+  setStreetAddress(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getResourceOwner(): string;
+  setResourceOwner(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserView): UserView.AsObject;
+  static serializeBinaryToWriter(message: UserView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserView;
+  static deserializeBinaryFromReader(message: UserView, reader: jspb.BinaryReader): UserView;
+}
+
+export namespace UserView {
   export type AsObject = {
     id: string,
     state: UserState,
@@ -410,6 +515,7 @@ export namespace User {
     region: string,
     streetAddress: string,
     sequence: number,
+    resourceOwner: string,
   }
 }
 
@@ -485,10 +591,10 @@ export class UserSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<User>;
-  setResultList(value: Array<User>): void;
+  getResultList(): Array<UserView>;
+  setResultList(value: Array<UserView>): void;
   clearResultList(): void;
-  addResult(value?: User, index?: number): User;
+  addResult(value?: UserView, index?: number): UserView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserSearchResponse.AsObject;
@@ -503,7 +609,7 @@ export namespace UserSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<User.AsObject>,
+    resultList: Array<UserView.AsObject>,
   }
 }
 
@@ -1017,6 +1123,9 @@ export class PasswordComplexityPolicy extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getIsDefault(): boolean;
+  setIsDefault(value: boolean): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): PasswordComplexityPolicy.AsObject;
   static toObject(includeInstance: boolean, msg: PasswordComplexityPolicy): PasswordComplexityPolicy.AsObject;
@@ -1038,6 +1147,7 @@ export namespace PasswordComplexityPolicy {
     hasNumber: boolean,
     hasSymbol: boolean,
     sequence: number,
+    isDefault: boolean,
   }
 }
 
@@ -1168,6 +1278,9 @@ export class PasswordAgePolicy extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getIsDefault(): boolean;
+  setIsDefault(value: boolean): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): PasswordAgePolicy.AsObject;
   static toObject(includeInstance: boolean, msg: PasswordAgePolicy): PasswordAgePolicy.AsObject;
@@ -1186,6 +1299,7 @@ export namespace PasswordAgePolicy {
     maxAgeDays: number,
     expireWarnDays: number,
     sequence: number,
+    isDefault: boolean,
   }
 }
 
@@ -1292,6 +1406,9 @@ export class PasswordLockoutPolicy extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getIsDefault(): boolean;
+  setIsDefault(value: boolean): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): PasswordLockoutPolicy.AsObject;
   static toObject(includeInstance: boolean, msg: PasswordLockoutPolicy): PasswordLockoutPolicy.AsObject;
@@ -1310,6 +1427,7 @@ export namespace PasswordLockoutPolicy {
     maxAttempts: number,
     showLockOutFailures: boolean,
     sequence: number,
+    isDefault: boolean,
   }
 }
 
@@ -1475,18 +1593,6 @@ export class OrgMember extends jspb.Message {
   getUserId(): string;
   setUserId(value: string): void;
 
-  getUserName(): string;
-  setUserName(value: string): void;
-
-  getEmail(): string;
-  setEmail(value: string): void;
-
-  getFirstName(): string;
-  setFirstName(value: string): void;
-
-  getLastName(): string;
-  setLastName(value: string): void;
-
   getRolesList(): Array<string>;
   setRolesList(value: Array<string>): void;
   clearRolesList(): void;
@@ -1516,10 +1622,6 @@ export class OrgMember extends jspb.Message {
 export namespace OrgMember {
   export type AsObject = {
     userId: string,
-    userName: string,
-    email: string,
-    firstName: string,
-    lastName: string,
     rolesList: Array<string>,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
@@ -1775,6 +1877,80 @@ export class Project extends jspb.Message {
   hasCreationDate(): boolean;
   clearCreationDate(): void;
 
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): Project.AsObject;
+  static toObject(includeInstance: boolean, msg: Project): Project.AsObject;
+  static serializeBinaryToWriter(message: Project, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): Project;
+  static deserializeBinaryFromReader(message: Project, reader: jspb.BinaryReader): Project;
+}
+
+export namespace Project {
+  export type AsObject = {
+    id: string,
+    name: string,
+    state: ProjectState,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    sequence: number,
+  }
+}
+
+export class GrantedProjectSearchResponse extends jspb.Message {
+  getOffset(): number;
+  setOffset(value: number): void;
+
+  getLimit(): number;
+  setLimit(value: number): void;
+
+  getTotalResult(): number;
+  setTotalResult(value: number): void;
+
+  getResultList(): Array<GrantedProject>;
+  setResultList(value: Array<GrantedProject>): void;
+  clearResultList(): void;
+  addResult(value?: GrantedProject, index?: number): GrantedProject;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): GrantedProjectSearchResponse.AsObject;
+  static toObject(includeInstance: boolean, msg: GrantedProjectSearchResponse): GrantedProjectSearchResponse.AsObject;
+  static serializeBinaryToWriter(message: GrantedProjectSearchResponse, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): GrantedProjectSearchResponse;
+  static deserializeBinaryFromReader(message: GrantedProjectSearchResponse, reader: jspb.BinaryReader): GrantedProjectSearchResponse;
+}
+
+export namespace GrantedProjectSearchResponse {
+  export type AsObject = {
+    offset: number,
+    limit: number,
+    totalResult: number,
+    resultList: Array<GrantedProject.AsObject>,
+  }
+}
+
+export class GrantedProject extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getName(): string;
+  setName(value: string): void;
+
+  getState(): ProjectState;
+  setState(value: ProjectState): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
   getType(): ProjectType;
   setType(value: ProjectType): void;
 
@@ -1797,14 +1973,14 @@ export class Project extends jspb.Message {
   setSequence(value: number): void;
 
   serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): Project.AsObject;
-  static toObject(includeInstance: boolean, msg: Project): Project.AsObject;
-  static serializeBinaryToWriter(message: Project, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): Project;
-  static deserializeBinaryFromReader(message: Project, reader: jspb.BinaryReader): Project;
+  toObject(includeInstance?: boolean): GrantedProject.AsObject;
+  static toObject(includeInstance: boolean, msg: GrantedProject): GrantedProject.AsObject;
+  static serializeBinaryToWriter(message: GrantedProject, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): GrantedProject;
+  static deserializeBinaryFromReader(message: GrantedProject, reader: jspb.BinaryReader): GrantedProject;
 }
 
-export namespace Project {
+export namespace GrantedProject {
   export type AsObject = {
     id: string,
     name: string,
@@ -1821,69 +1997,37 @@ export namespace Project {
   }
 }
 
-export class ProjectSearchResponse extends jspb.Message {
+export class GrantedProjectSearchRequest extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
 
   getLimit(): number;
   setLimit(value: number): void;
 
-  getTotalResult(): number;
-  setTotalResult(value: number): void;
-
-  getResultList(): Array<Project>;
-  setResultList(value: Array<Project>): void;
-  clearResultList(): void;
-  addResult(value?: Project, index?: number): Project;
-
-  serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): ProjectSearchResponse.AsObject;
-  static toObject(includeInstance: boolean, msg: ProjectSearchResponse): ProjectSearchResponse.AsObject;
-  static serializeBinaryToWriter(message: ProjectSearchResponse, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): ProjectSearchResponse;
-  static deserializeBinaryFromReader(message: ProjectSearchResponse, reader: jspb.BinaryReader): ProjectSearchResponse;
-}
-
-export namespace ProjectSearchResponse {
-  export type AsObject = {
-    offset: number,
-    limit: number,
-    totalResult: number,
-    resultList: Array<Project.AsObject>,
-  }
-}
-
-export class ProjectSearchRequest extends jspb.Message {
-  getOffset(): number;
-  setOffset(value: number): void;
-
-  getLimit(): number;
-  setLimit(value: number): void;
-
-  getQueriesList(): Array<ProjectSearchQuery>;
-  setQueriesList(value: Array<ProjectSearchQuery>): void;
+  getQueriesList(): Array<GrantedProjectSearchQuery>;
+  setQueriesList(value: Array<GrantedProjectSearchQuery>): void;
   clearQueriesList(): void;
-  addQueries(value?: ProjectSearchQuery, index?: number): ProjectSearchQuery;
+  addQueries(value?: GrantedProjectSearchQuery, index?: number): GrantedProjectSearchQuery;
 
   serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): ProjectSearchRequest.AsObject;
-  static toObject(includeInstance: boolean, msg: ProjectSearchRequest): ProjectSearchRequest.AsObject;
-  static serializeBinaryToWriter(message: ProjectSearchRequest, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): ProjectSearchRequest;
-  static deserializeBinaryFromReader(message: ProjectSearchRequest, reader: jspb.BinaryReader): ProjectSearchRequest;
+  toObject(includeInstance?: boolean): GrantedProjectSearchRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: GrantedProjectSearchRequest): GrantedProjectSearchRequest.AsObject;
+  static serializeBinaryToWriter(message: GrantedProjectSearchRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): GrantedProjectSearchRequest;
+  static deserializeBinaryFromReader(message: GrantedProjectSearchRequest, reader: jspb.BinaryReader): GrantedProjectSearchRequest;
 }
 
-export namespace ProjectSearchRequest {
+export namespace GrantedProjectSearchRequest {
   export type AsObject = {
     offset: number,
     limit: number,
-    queriesList: Array<ProjectSearchQuery.AsObject>,
+    queriesList: Array<GrantedProjectSearchQuery.AsObject>,
   }
 }
 
-export class ProjectSearchQuery extends jspb.Message {
-  getKey(): ProjectSearchKey;
-  setKey(value: ProjectSearchKey): void;
+export class GrantedProjectSearchQuery extends jspb.Message {
+  getKey(): GrantedProjectSearchKey;
+  setKey(value: GrantedProjectSearchKey): void;
 
   getMethod(): SearchMethod;
   setMethod(value: SearchMethod): void;
@@ -1892,16 +2036,16 @@ export class ProjectSearchQuery extends jspb.Message {
   setValue(value: string): void;
 
   serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): ProjectSearchQuery.AsObject;
-  static toObject(includeInstance: boolean, msg: ProjectSearchQuery): ProjectSearchQuery.AsObject;
-  static serializeBinaryToWriter(message: ProjectSearchQuery, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): ProjectSearchQuery;
-  static deserializeBinaryFromReader(message: ProjectSearchQuery, reader: jspb.BinaryReader): ProjectSearchQuery;
+  toObject(includeInstance?: boolean): GrantedProjectSearchQuery.AsObject;
+  static toObject(includeInstance: boolean, msg: GrantedProjectSearchQuery): GrantedProjectSearchQuery.AsObject;
+  static serializeBinaryToWriter(message: GrantedProjectSearchQuery, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): GrantedProjectSearchQuery;
+  static deserializeBinaryFromReader(message: GrantedProjectSearchQuery, reader: jspb.BinaryReader): GrantedProjectSearchQuery;
 }
 
-export namespace ProjectSearchQuery {
+export namespace GrantedProjectSearchQuery {
   export type AsObject = {
-    key: ProjectSearchKey,
+    key: GrantedProjectSearchKey,
     method: SearchMethod,
     value: string,
   }
@@ -1931,18 +2075,6 @@ export class ProjectMember extends jspb.Message {
   getUserId(): string;
   setUserId(value: string): void;
 
-  getUserName(): string;
-  setUserName(value: string): void;
-
-  getEmail(): string;
-  setEmail(value: string): void;
-
-  getFirstName(): string;
-  setFirstName(value: string): void;
-
-  getLastName(): string;
-  setLastName(value: string): void;
-
   getRolesList(): Array<string>;
   setRolesList(value: Array<string>): void;
   clearRolesList(): void;
@@ -1972,10 +2104,6 @@ export class ProjectMember extends jspb.Message {
 export namespace ProjectMember {
   export type AsObject = {
     userId: string,
-    userName: string,
-    email: string,
-    firstName: string,
-    lastName: string,
     rolesList: Array<string>,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
@@ -2167,6 +2295,46 @@ export namespace ProjectRole {
   }
 }
 
+export class ProjectRoleView extends jspb.Message {
+  getProjectId(): string;
+  setProjectId(value: string): void;
+
+  getKey(): string;
+  setKey(value: string): void;
+
+  getDisplayName(): string;
+  setDisplayName(value: string): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getGroup(): string;
+  setGroup(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): ProjectRoleView.AsObject;
+  static toObject(includeInstance: boolean, msg: ProjectRoleView): ProjectRoleView.AsObject;
+  static serializeBinaryToWriter(message: ProjectRoleView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): ProjectRoleView;
+  static deserializeBinaryFromReader(message: ProjectRoleView, reader: jspb.BinaryReader): ProjectRoleView;
+}
+
+export namespace ProjectRoleView {
+  export type AsObject = {
+    projectId: string,
+    key: string,
+    displayName: string,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    group: string,
+    sequence: number,
+  }
+}
+
 export class ProjectRoleRemove extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -2199,10 +2367,10 @@ export class ProjectRoleSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<ProjectRole>;
-  setResultList(value: Array<ProjectRole>): void;
+  getResultList(): Array<ProjectRoleView>;
+  setResultList(value: Array<ProjectRoleView>): void;
   clearResultList(): void;
-  addResult(value?: ProjectRole, index?: number): ProjectRole;
+  addResult(value?: ProjectRoleView, index?: number): ProjectRoleView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): ProjectRoleSearchResponse.AsObject;
@@ -2217,7 +2385,7 @@ export namespace ProjectRoleSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<ProjectRole.AsObject>,
+    resultList: Array<ProjectRoleView.AsObject>,
   }
 }
 
@@ -2279,6 +2447,62 @@ export namespace ProjectRoleSearchQuery {
   }
 }
 
+export class ProjectMemberView extends jspb.Message {
+  getUserId(): string;
+  setUserId(value: string): void;
+
+  getUserName(): string;
+  setUserName(value: string): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getRolesList(): Array<string>;
+  setRolesList(value: Array<string>): void;
+  clearRolesList(): void;
+  addRoles(value: string, index?: number): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): ProjectMemberView.AsObject;
+  static toObject(includeInstance: boolean, msg: ProjectMemberView): ProjectMemberView.AsObject;
+  static serializeBinaryToWriter(message: ProjectMemberView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): ProjectMemberView;
+  static deserializeBinaryFromReader(message: ProjectMemberView, reader: jspb.BinaryReader): ProjectMemberView;
+}
+
+export namespace ProjectMemberView {
+  export type AsObject = {
+    userId: string,
+    userName: string,
+    email: string,
+    firstName: string,
+    lastName: string,
+    rolesList: Array<string>,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    sequence: number,
+  }
+}
+
 export class ProjectMemberSearchResponse extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
@@ -2289,10 +2513,10 @@ export class ProjectMemberSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<ProjectMember>;
-  setResultList(value: Array<ProjectMember>): void;
+  getResultList(): Array<ProjectMemberView>;
+  setResultList(value: Array<ProjectMemberView>): void;
   clearResultList(): void;
-  addResult(value?: ProjectMember, index?: number): ProjectMember;
+  addResult(value?: ProjectMemberView, index?: number): ProjectMemberView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): ProjectMemberSearchResponse.AsObject;
@@ -2307,7 +2531,7 @@ export namespace ProjectMemberSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<ProjectMember.AsObject>,
+    resultList: Array<ProjectMemberView.AsObject>,
   }
 }
 
@@ -2630,6 +2854,61 @@ export namespace ClientSecret {
   }
 }
 
+export class ApplicationView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getState(): AppState;
+  setState(value: AppState): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getName(): string;
+  setName(value: string): void;
+
+  getOidcConfig(): OIDCConfig | undefined;
+  setOidcConfig(value?: OIDCConfig): void;
+  hasOidcConfig(): boolean;
+  clearOidcConfig(): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getAppConfigCase(): ApplicationView.AppConfigCase;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): ApplicationView.AsObject;
+  static toObject(includeInstance: boolean, msg: ApplicationView): ApplicationView.AsObject;
+  static serializeBinaryToWriter(message: ApplicationView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): ApplicationView;
+  static deserializeBinaryFromReader(message: ApplicationView, reader: jspb.BinaryReader): ApplicationView;
+}
+
+export namespace ApplicationView {
+  export type AsObject = {
+    id: string,
+    state: AppState,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    name: string,
+    oidcConfig?: OIDCConfig.AsObject,
+    sequence: number,
+  }
+
+  export enum AppConfigCase { 
+    APP_CONFIG_NOT_SET = 0,
+    OIDC_CONFIG = 8,
+  }
+}
+
 export class ApplicationSearchResponse extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
@@ -2640,10 +2919,10 @@ export class ApplicationSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<Application>;
-  setResultList(value: Array<Application>): void;
+  getResultList(): Array<ApplicationView>;
+  setResultList(value: Array<ApplicationView>): void;
   clearResultList(): void;
-  addResult(value?: Application, index?: number): Application;
+  addResult(value?: ApplicationView, index?: number): ApplicationView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): ApplicationSearchResponse.AsObject;
@@ -2658,7 +2937,7 @@ export namespace ApplicationSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<Application.AsObject>,
+    resultList: Array<ApplicationView.AsObject>,
   }
 }
 
@@ -2730,12 +3009,6 @@ export class ProjectGrant extends jspb.Message {
   getGrantedOrgId(): string;
   setGrantedOrgId(value: string): void;
 
-  getGrantedOrgName(): string;
-  setGrantedOrgName(value: string): void;
-
-  getGrantedOrgDomain(): string;
-  setGrantedOrgDomain(value: string): void;
-
   getRoleKeysList(): Array<string>;
   setRoleKeysList(value: Array<string>): void;
   clearRoleKeysList(): void;
@@ -2754,9 +3027,6 @@ export class ProjectGrant extends jspb.Message {
   hasChangeDate(): boolean;
   clearChangeDate(): void;
 
-  getProjectName(): string;
-  setProjectName(value: string): void;
-
   getSequence(): number;
   setSequence(value: number): void;
 
@@ -2773,13 +3043,10 @@ export namespace ProjectGrant {
     id: string,
     projectId: string,
     grantedOrgId: string,
-    grantedOrgName: string,
-    grantedOrgDomain: string,
     roleKeysList: Array<string>,
     state: ProjectGrantState,
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
-    projectName: string,
     sequence: number,
   }
 }
@@ -2862,21 +3129,67 @@ export namespace ProjectGrantID {
   }
 }
 
-export class GrantedGrantID extends jspb.Message {
+export class ProjectGrantView extends jspb.Message {
   getId(): string;
   setId(value: string): void;
 
+  getProjectId(): string;
+  setProjectId(value: string): void;
+
+  getGrantedOrgId(): string;
+  setGrantedOrgId(value: string): void;
+
+  getGrantedOrgName(): string;
+  setGrantedOrgName(value: string): void;
+
+  getGrantedOrgDomain(): string;
+  setGrantedOrgDomain(value: string): void;
+
+  getRoleKeysList(): Array<string>;
+  setRoleKeysList(value: Array<string>): void;
+  clearRoleKeysList(): void;
+  addRoleKeys(value: string, index?: number): void;
+
+  getState(): ProjectGrantState;
+  setState(value: ProjectGrantState): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getProjectName(): string;
+  setProjectName(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
   serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): GrantedGrantID.AsObject;
-  static toObject(includeInstance: boolean, msg: GrantedGrantID): GrantedGrantID.AsObject;
-  static serializeBinaryToWriter(message: GrantedGrantID, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): GrantedGrantID;
-  static deserializeBinaryFromReader(message: GrantedGrantID, reader: jspb.BinaryReader): GrantedGrantID;
+  toObject(includeInstance?: boolean): ProjectGrantView.AsObject;
+  static toObject(includeInstance: boolean, msg: ProjectGrantView): ProjectGrantView.AsObject;
+  static serializeBinaryToWriter(message: ProjectGrantView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): ProjectGrantView;
+  static deserializeBinaryFromReader(message: ProjectGrantView, reader: jspb.BinaryReader): ProjectGrantView;
 }
 
-export namespace GrantedGrantID {
+export namespace ProjectGrantView {
   export type AsObject = {
     id: string,
+    projectId: string,
+    grantedOrgId: string,
+    grantedOrgName: string,
+    grantedOrgDomain: string,
+    roleKeysList: Array<string>,
+    state: ProjectGrantState,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    projectName: string,
+    sequence: number,
   }
 }
 
@@ -2890,10 +3203,10 @@ export class ProjectGrantSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<ProjectGrant>;
-  setResultList(value: Array<ProjectGrant>): void;
+  getResultList(): Array<ProjectGrantView>;
+  setResultList(value: Array<ProjectGrantView>): void;
   clearResultList(): void;
-  addResult(value?: ProjectGrant, index?: number): ProjectGrant;
+  addResult(value?: ProjectGrantView, index?: number): ProjectGrantView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): ProjectGrantSearchResponse.AsObject;
@@ -2908,7 +3221,7 @@ export namespace ProjectGrantSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<ProjectGrant.AsObject>,
+    resultList: Array<ProjectGrantView.AsObject>,
   }
 }
 
@@ -2962,18 +3275,6 @@ export class ProjectGrantMember extends jspb.Message {
   getUserId(): string;
   setUserId(value: string): void;
 
-  getUserName(): string;
-  setUserName(value: string): void;
-
-  getEmail(): string;
-  setEmail(value: string): void;
-
-  getFirstName(): string;
-  setFirstName(value: string): void;
-
-  getLastName(): string;
-  setLastName(value: string): void;
-
   getRolesList(): Array<string>;
   setRolesList(value: Array<string>): void;
   clearRolesList(): void;
@@ -3003,10 +3304,6 @@ export class ProjectGrantMember extends jspb.Message {
 export namespace ProjectGrantMember {
   export type AsObject = {
     userId: string,
-    userName: string,
-    email: string,
-    firstName: string,
-    lastName: string,
     rolesList: Array<string>,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
@@ -3104,6 +3401,62 @@ export namespace ProjectGrantMemberRemove {
   }
 }
 
+export class ProjectGrantMemberView extends jspb.Message {
+  getUserId(): string;
+  setUserId(value: string): void;
+
+  getUserName(): string;
+  setUserName(value: string): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getRolesList(): Array<string>;
+  setRolesList(value: Array<string>): void;
+  clearRolesList(): void;
+  addRoles(value: string, index?: number): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): ProjectGrantMemberView.AsObject;
+  static toObject(includeInstance: boolean, msg: ProjectGrantMemberView): ProjectGrantMemberView.AsObject;
+  static serializeBinaryToWriter(message: ProjectGrantMemberView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): ProjectGrantMemberView;
+  static deserializeBinaryFromReader(message: ProjectGrantMemberView, reader: jspb.BinaryReader): ProjectGrantMemberView;
+}
+
+export namespace ProjectGrantMemberView {
+  export type AsObject = {
+    userId: string,
+    userName: string,
+    email: string,
+    firstName: string,
+    lastName: string,
+    rolesList: Array<string>,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    sequence: number,
+  }
+}
+
 export class ProjectGrantMemberSearchResponse extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
@@ -3114,10 +3467,10 @@ export class ProjectGrantMemberSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<ProjectGrantMember>;
-  setResultList(value: Array<ProjectGrantMember>): void;
+  getResultList(): Array<ProjectGrantMemberView>;
+  setResultList(value: Array<ProjectGrantMemberView>): void;
   clearResultList(): void;
-  addResult(value?: ProjectGrantMember, index?: number): ProjectGrantMember;
+  addResult(value?: ProjectGrantMemberView, index?: number): ProjectGrantMemberView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): ProjectGrantMemberSearchResponse.AsObject;
@@ -3132,7 +3485,7 @@ export namespace ProjectGrantMemberSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<ProjectGrantMember.AsObject>,
+    resultList: Array<ProjectGrantMemberView.AsObject>,
   }
 }
 
@@ -3229,27 +3582,6 @@ export class UserGrant extends jspb.Message {
   hasChangeDate(): boolean;
   clearChangeDate(): void;
 
-  getUserName(): string;
-  setUserName(value: string): void;
-
-  getFirstName(): string;
-  setFirstName(value: string): void;
-
-  getLastName(): string;
-  setLastName(value: string): void;
-
-  getEmail(): string;
-  setEmail(value: string): void;
-
-  getOrgName(): string;
-  setOrgName(value: string): void;
-
-  getOrgDomain(): string;
-  setOrgDomain(value: string): void;
-
-  getProjectName(): string;
-  setProjectName(value: string): void;
-
   getSequence(): number;
   setSequence(value: number): void;
 
@@ -3271,13 +3603,6 @@ export namespace UserGrant {
     state: UserGrantState,
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
-    userName: string,
-    firstName: string,
-    lastName: string,
-    email: string,
-    orgName: string,
-    orgDomain: string,
-    projectName: string,
     sequence: number,
   }
 }
@@ -3512,6 +3837,94 @@ export namespace ProjectGrantUserGrantUpdate {
   }
 }
 
+export class UserGrantView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getUserId(): string;
+  setUserId(value: string): void;
+
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  getProjectId(): string;
+  setProjectId(value: string): void;
+
+  getRoleKeysList(): Array<string>;
+  setRoleKeysList(value: Array<string>): void;
+  clearRoleKeysList(): void;
+  addRoleKeys(value: string, index?: number): void;
+
+  getState(): UserGrantState;
+  setState(value: UserGrantState): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getUserName(): string;
+  setUserName(value: string): void;
+
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getOrgName(): string;
+  setOrgName(value: string): void;
+
+  getOrgDomain(): string;
+  setOrgDomain(value: string): void;
+
+  getProjectName(): string;
+  setProjectName(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getResourceOwner(): string;
+  setResourceOwner(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserGrantView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserGrantView): UserGrantView.AsObject;
+  static serializeBinaryToWriter(message: UserGrantView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserGrantView;
+  static deserializeBinaryFromReader(message: UserGrantView, reader: jspb.BinaryReader): UserGrantView;
+}
+
+export namespace UserGrantView {
+  export type AsObject = {
+    id: string,
+    userId: string,
+    orgId: string,
+    projectId: string,
+    roleKeysList: Array<string>,
+    state: UserGrantState,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    userName: string,
+    firstName: string,
+    lastName: string,
+    email: string,
+    orgName: string,
+    orgDomain: string,
+    projectName: string,
+    sequence: number,
+    resourceOwner: string,
+  }
+}
+
 export class UserGrantSearchResponse extends jspb.Message {
   getOffset(): number;
   setOffset(value: number): void;
@@ -3522,10 +3935,10 @@ export class UserGrantSearchResponse extends jspb.Message {
   getTotalResult(): number;
   setTotalResult(value: number): void;
 
-  getResultList(): Array<UserGrant>;
-  setResultList(value: Array<UserGrant>): void;
+  getResultList(): Array<UserGrantView>;
+  setResultList(value: Array<UserGrantView>): void;
   clearResultList(): void;
-  addResult(value?: UserGrant, index?: number): UserGrant;
+  addResult(value?: UserGrantView, index?: number): UserGrantView;
 
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserGrantSearchResponse.AsObject;
@@ -3540,7 +3953,7 @@ export namespace UserGrantSearchResponse {
     offset: number,
     limit: number,
     totalResult: number,
-    resultList: Array<UserGrant.AsObject>,
+    resultList: Array<UserGrantView.AsObject>,
   }
 }
 
@@ -3817,6 +4230,9 @@ export enum SearchMethod {
   SEARCHMETHOD_EQUALS = 0,
   SEARCHMETHOD_STARTS_WITH = 1,
   SEARCHMETHOD_CONTAINS = 2,
+  SEARCHMETHOD_EQUALS_IGNORE_CASE = 3,
+  SEARCHMETHOD_STARTS_WITH_IGNORE_CASE = 4,
+  SEARCHMETHOD_CONTAINS_IGNORE_CASE = 5,
 }
 export enum MfaType { 
   MFATYPE_UNSPECIFIED = 0,
@@ -3857,11 +4273,11 @@ export enum ProjectState {
   PROJECTSTATE_INACTIVE = 2,
 }
 export enum ProjectType { 
-  PROJECTTYPE_UNKNOWN = 0,
-  PROJECTTYPE_SELF = 1,
+  PROJECTTYPE_UNSPECIFIED = 0,
+  PROJECTTYPE_OWNED = 1,
   PROJECTTYPE_GRANTED = 2,
 }
-export enum ProjectSearchKey { 
+export enum GrantedProjectSearchKey { 
   PROJECTSEARCHKEY_UNSPECIFIED = 0,
   PROJECTSEARCHKEY_PROJECT_NAME = 1,
 }
@@ -3876,6 +4292,7 @@ export enum ProjectMemberSearchKey {
   PROJECTMEMBERSEARCHKEY_LAST_NAME = 2,
   PROJECTMEMBERSEARCHKEY_EMAIL = 3,
   PROJECTMEMBERSEARCHKEY_USER_ID = 4,
+  PROJECTMEMBERSEARCHKEY_USER_NAME = 5,
 }
 export enum AppState { 
   APPSTATE_UNSPECIFIED = 0,
@@ -3917,6 +4334,7 @@ export enum ProjectGrantMemberSearchKey {
   PROJECTGRANTMEMBERSEARCHKEY_LAST_NAME = 2,
   PROJECTGRANTMEMBERSEARCHKEY_EMAIL = 3,
   PROJECTGRANTMEMBERSEARCHKEY_USER_ID = 4,
+  PROJECTGRANTMEMBERSEARCHKEY_USER_NAME = 5,
 }
 export enum UserGrantState { 
   USERGRANTSTATE_UNSPECIFIED = 0,
diff --git a/console/src/app/proto/generated/management_pb.js b/console/src/app/proto/generated/management_pb.js
index ffd029ad81..80c9bae60e 100644
--- a/console/src/app/proto/generated/management_pb.js
+++ b/console/src/app/proto/generated/management_pb.js
@@ -36,6 +36,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ApplicationSearchQuery',
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ApplicationSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ApplicationSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ApplicationUpdate', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.ApplicationView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.AuthGrant', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.AuthGrantSearchKey', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.AuthGrantSearchQuery', null, global);
@@ -48,7 +49,11 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.Changes', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ClientSecret', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.CreateUserRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.Gender', null, global);
-goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedGrantID', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProject', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MFAState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MfaType', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MultiFactor', null, global);
@@ -100,6 +105,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearch
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchQuery', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantMemberView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantState', null, global);
@@ -108,6 +114,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantCre
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantID', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantUpdate', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectGrantView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectID', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMember', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberAdd', null, global);
@@ -118,6 +125,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberSearchKey',
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberSearchQuery', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectMemberView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRole', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleAdd', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleChange', null, global);
@@ -126,10 +134,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleSearchKey', n
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleSearchQuery', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse', null, global);
-goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectSearchKey', null, global);
-goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectSearchQuery', null, global);
-goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectSearchRequest', null, global);
-goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectRoleView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectType', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectUpdateRequest', null, global);
@@ -160,6 +165,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantSearchRequest',
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantUpdate', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserID', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserPhone', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserProfile', null, global);
@@ -168,6 +174,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchQuery', null,
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserState', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserView', null, global);
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -399,6 +406,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.User.displayName = 'proto.caos.zitadel.management.api.v1.User';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserView.displayName = 'proto.caos.zitadel.management.api.v1.UserView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1333,16 +1361,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.ProjectSearchResponse.repeatedFields_, null);
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.repeatedFields_, null);
 };
-goog.inherits(proto.caos.zitadel.management.api.v1.ProjectSearchResponse, jspb.Message);
+goog.inherits(proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse.displayName = 'proto.caos.zitadel.management.api.v1.ProjectSearchResponse';
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.displayName = 'proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -1354,37 +1382,58 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.ProjectSearchRequest.repeatedFields_, null);
-};
-goog.inherits(proto.caos.zitadel.management.api.v1.ProjectSearchRequest, jspb.Message);
-if (goog.DEBUG && !COMPILED) {
-  /**
-   * @public
-   * @override
-   */
-  proto.caos.zitadel.management.api.v1.ProjectSearchRequest.displayName = 'proto.caos.zitadel.management.api.v1.ProjectSearchRequest';
-}
-/**
- * Generated by JsPbCodeGenerator.
- * @param {Array=} opt_data Optional initial data array, typically from a
- * server response, or constructed directly in Javascript. The array is used
- * in place and becomes part of the constructed object. It is not cloned.
- * If no data is provided, the constructed object will be empty, but still
- * valid.
- * @extends {jspb.Message}
- * @constructor
- */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery = function(opt_data) {
+proto.caos.zitadel.management.api.v1.GrantedProject = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.caos.zitadel.management.api.v1.ProjectSearchQuery, jspb.Message);
+goog.inherits(proto.caos.zitadel.management.api.v1.GrantedProject, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.caos.zitadel.management.api.v1.ProjectSearchQuery.displayName = 'proto.caos.zitadel.management.api.v1.ProjectSearchQuery';
+  proto.caos.zitadel.management.api.v1.GrantedProject.displayName = 'proto.caos.zitadel.management.api.v1.GrantedProject';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.displayName = 'proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.displayName = 'proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -1554,6 +1603,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.ProjectRole.displayName = 'proto.caos.zitadel.management.api.v1.ProjectRole';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.ProjectRoleView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.ProjectRoleView.displayName = 'proto.caos.zitadel.management.api.v1.ProjectRoleView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1638,6 +1708,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.ProjectRoleSearchQuery.displayName = 'proto.caos.zitadel.management.api.v1.ProjectRoleSearchQuery';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.ProjectMemberView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.ProjectMemberView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.ProjectMemberView.displayName = 'proto.caos.zitadel.management.api.v1.ProjectMemberView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1827,6 +1918,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.ClientSecret.displayName = 'proto.caos.zitadel.management.api.v1.ClientSecret';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, proto.caos.zitadel.management.api.v1.ApplicationView.oneofGroups_);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.ApplicationView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.ApplicationView.displayName = 'proto.caos.zitadel.management.api.v1.ApplicationView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1984,16 +2096,16 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+proto.caos.zitadel.management.api.v1.ProjectGrantView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.ProjectGrantView.repeatedFields_, null);
 };
-goog.inherits(proto.caos.zitadel.management.api.v1.GrantedGrantID, jspb.Message);
+goog.inherits(proto.caos.zitadel.management.api.v1.ProjectGrantView, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.caos.zitadel.management.api.v1.GrantedGrantID.displayName = 'proto.caos.zitadel.management.api.v1.GrantedGrantID';
+  proto.caos.zitadel.management.api.v1.ProjectGrantView.displayName = 'proto.caos.zitadel.management.api.v1.ProjectGrantView';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -2142,6 +2254,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.ProjectGrantMemberRemove.displayName = 'proto.caos.zitadel.management.api.v1.ProjectGrantMemberRemove';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.ProjectGrantMemberView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.displayName = 'proto.caos.zitadel.management.api.v1.ProjectGrantMemberView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -2394,6 +2527,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantUpdate.displayName = 'proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantUpdate';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.UserGrantView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserGrantView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserGrantView.displayName = 'proto.caos.zitadel.management.api.v1.UserGrantView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -4644,25 +4798,23 @@ proto.caos.zitadel.management.api.v1.User.toObject = function(includeInstance, m
     state: jspb.Message.getFieldWithDefault(msg, 2, 0),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    lastLogin: (f = msg.getLastLogin()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    passwordChanged: (f = msg.getPasswordChanged()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    userName: jspb.Message.getFieldWithDefault(msg, 7, ""),
-    firstName: jspb.Message.getFieldWithDefault(msg, 8, ""),
-    lastName: jspb.Message.getFieldWithDefault(msg, 9, ""),
-    displayName: jspb.Message.getFieldWithDefault(msg, 10, ""),
-    nickName: jspb.Message.getFieldWithDefault(msg, 11, ""),
-    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 12, ""),
-    gender: jspb.Message.getFieldWithDefault(msg, 13, 0),
-    email: jspb.Message.getFieldWithDefault(msg, 14, ""),
-    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 15, false),
-    phone: jspb.Message.getFieldWithDefault(msg, 16, ""),
-    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 17, false),
-    country: jspb.Message.getFieldWithDefault(msg, 18, ""),
-    locality: jspb.Message.getFieldWithDefault(msg, 19, ""),
-    postalCode: jspb.Message.getFieldWithDefault(msg, 20, ""),
-    region: jspb.Message.getFieldWithDefault(msg, 21, ""),
-    streetAddress: jspb.Message.getFieldWithDefault(msg, 22, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 23, 0)
+    userName: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    displayName: jspb.Message.getFieldWithDefault(msg, 8, ""),
+    nickName: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 10, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 11, 0),
+    email: jspb.Message.getFieldWithDefault(msg, 12, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 13, false),
+    phone: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 15, false),
+    country: jspb.Message.getFieldWithDefault(msg, 16, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 17, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 18, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 19, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 20, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 21, 0)
   };
 
   if (includeInstance) {
@@ -4693,6 +4845,718 @@ proto.caos.zitadel.management.api.v1.User.deserializeBinary = function(bytes) {
  * @return {!proto.caos.zitadel.management.api.v1.User}
  */
 proto.caos.zitadel.management.api.v1.User.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.UserState} */ (reader.readEnum());
+      msg.setState(value);
+      break;
+    case 3:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 4:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 7:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 8:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDisplayName(value);
+      break;
+    case 9:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setNickName(value);
+      break;
+    case 10:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLanguage(value);
+      break;
+    case 11:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (reader.readEnum());
+      msg.setGender(value);
+      break;
+    case 12:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 13:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsEmailVerified(value);
+      break;
+    case 14:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPhone(value);
+      break;
+    case 15:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsPhoneVerified(value);
+      break;
+    case 16:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setCountry(value);
+      break;
+    case 17:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLocality(value);
+      break;
+    case 18:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPostalCode(value);
+      break;
+    case 19:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setRegion(value);
+      break;
+    case 20:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setStreetAddress(value);
+      break;
+    case 21:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.User} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getState();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      2,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      3,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      4,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      7,
+      f
+    );
+  }
+  f = message.getDisplayName();
+  if (f.length > 0) {
+    writer.writeString(
+      8,
+      f
+    );
+  }
+  f = message.getNickName();
+  if (f.length > 0) {
+    writer.writeString(
+      9,
+      f
+    );
+  }
+  f = message.getPreferredLanguage();
+  if (f.length > 0) {
+    writer.writeString(
+      10,
+      f
+    );
+  }
+  f = message.getGender();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      11,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      12,
+      f
+    );
+  }
+  f = message.getIsEmailVerified();
+  if (f) {
+    writer.writeBool(
+      13,
+      f
+    );
+  }
+  f = message.getPhone();
+  if (f.length > 0) {
+    writer.writeString(
+      14,
+      f
+    );
+  }
+  f = message.getIsPhoneVerified();
+  if (f) {
+    writer.writeBool(
+      15,
+      f
+    );
+  }
+  f = message.getCountry();
+  if (f.length > 0) {
+    writer.writeString(
+      16,
+      f
+    );
+  }
+  f = message.getLocality();
+  if (f.length > 0) {
+    writer.writeString(
+      17,
+      f
+    );
+  }
+  f = message.getPostalCode();
+  if (f.length > 0) {
+    writer.writeString(
+      18,
+      f
+    );
+  }
+  f = message.getRegion();
+  if (f.length > 0) {
+    writer.writeString(
+      19,
+      f
+    );
+  }
+  f = message.getStreetAddress();
+  if (f.length > 0) {
+    writer.writeString(
+      20,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      21,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional UserState state = 2;
+ * @return {!proto.caos.zitadel.management.api.v1.UserState}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.UserState} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setState = function(value) {
+  jspb.Message.setProto3EnumField(this, 2, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 3;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 3, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 3) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 4;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 4, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 4) != null;
+};
+
+
+/**
+ * optional string user_name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional string first_name = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional string last_name = 7;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 7, value);
+};
+
+
+/**
+ * optional string display_name = 8;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getDisplayName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setDisplayName = function(value) {
+  jspb.Message.setProto3StringField(this, 8, value);
+};
+
+
+/**
+ * optional string nick_name = 9;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getNickName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setNickName = function(value) {
+  jspb.Message.setProto3StringField(this, 9, value);
+};
+
+
+/**
+ * optional string preferred_language = 10;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getPreferredLanguage = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setPreferredLanguage = function(value) {
+  jspb.Message.setProto3StringField(this, 10, value);
+};
+
+
+/**
+ * optional Gender gender = 11;
+ * @return {!proto.caos.zitadel.management.api.v1.Gender}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 11, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.Gender} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setGender = function(value) {
+  jspb.Message.setProto3EnumField(this, 11, value);
+};
+
+
+/**
+ * optional string email = 12;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 12, value);
+};
+
+
+/**
+ * optional bool is_email_verified = 13;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getIsEmailVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 13, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setIsEmailVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 13, value);
+};
+
+
+/**
+ * optional string phone = 14;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getPhone = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setPhone = function(value) {
+  jspb.Message.setProto3StringField(this, 14, value);
+};
+
+
+/**
+ * optional bool is_phone_verified = 15;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getIsPhoneVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 15, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setIsPhoneVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 15, value);
+};
+
+
+/**
+ * optional string country = 16;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getCountry = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setCountry = function(value) {
+  jspb.Message.setProto3StringField(this, 16, value);
+};
+
+
+/**
+ * optional string locality = 17;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getLocality = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setLocality = function(value) {
+  jspb.Message.setProto3StringField(this, 17, value);
+};
+
+
+/**
+ * optional string postal_code = 18;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getPostalCode = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setPostalCode = function(value) {
+  jspb.Message.setProto3StringField(this, 18, value);
+};
+
+
+/**
+ * optional string region = 19;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getRegion = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 19, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setRegion = function(value) {
+  jspb.Message.setProto3StringField(this, 19, value);
+};
+
+
+/**
+ * optional string street_address = 20;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getStreetAddress = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 20, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setStreetAddress = function(value) {
+  jspb.Message.setProto3StringField(this, 20, value);
+};
+
+
+/**
+ * optional uint64 sequence = 21;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.User.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 21, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.User.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 21, value);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    state: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    lastLogin: (f = msg.getLastLogin()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    passwordChanged: (f = msg.getPasswordChanged()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    userName: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 8, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    displayName: jspb.Message.getFieldWithDefault(msg, 10, ""),
+    nickName: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 12, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 13, 0),
+    email: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 15, false),
+    phone: jspb.Message.getFieldWithDefault(msg, 16, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 17, false),
+    country: jspb.Message.getFieldWithDefault(msg, 18, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 19, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 20, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 21, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 22, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 23, 0),
+    resourceOwner: jspb.Message.getFieldWithDefault(msg, 24, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserView}
+ */
+proto.caos.zitadel.management.api.v1.UserView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserView;
+  return proto.caos.zitadel.management.api.v1.UserView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserView}
+ */
+proto.caos.zitadel.management.api.v1.UserView.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -4795,6 +5659,10 @@ proto.caos.zitadel.management.api.v1.User.deserializeBinaryFromReader = function
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 24:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setResourceOwner(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -4808,9 +5676,9 @@ proto.caos.zitadel.management.api.v1.User.deserializeBinaryFromReader = function
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.serializeBinary = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.management.api.v1.UserView.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -4818,11 +5686,11 @@ proto.caos.zitadel.management.api.v1.User.prototype.serializeBinary = function()
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.User} message
+ * @param {!proto.caos.zitadel.management.api.v1.UserView} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.management.api.v1.UserView.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -4989,6 +5857,13 @@ proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter = function(mes
       f
     );
   }
+  f = message.getResourceOwner();
+  if (f.length > 0) {
+    writer.writeString(
+      24,
+      f
+    );
+  }
 };
 
 
@@ -4996,13 +5871,13 @@ proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter = function(mes
  * optional string id = 1;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getId = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setId = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
@@ -5011,13 +5886,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setId = function(value) {
  * optional UserState state = 2;
  * @return {!proto.caos.zitadel.management.api.v1.UserState}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getState = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getState = function() {
   return /** @type {!proto.caos.zitadel.management.api.v1.UserState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.UserState} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setState = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setState = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -5026,14 +5901,14 @@ proto.caos.zitadel.management.api.v1.User.prototype.setState = function(value) {
  * optional google.protobuf.Timestamp creation_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getCreationDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setCreationDate = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setCreationDate = function(value) {
   jspb.Message.setWrapperField(this, 3, value);
 };
 
@@ -5041,7 +5916,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.setCreationDate = function(v
 /**
  * Clears the message field making it undefined.
  */
-proto.caos.zitadel.management.api.v1.User.prototype.clearCreationDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.clearCreationDate = function() {
   this.setCreationDate(undefined);
 };
 
@@ -5050,7 +5925,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.clearCreationDate = function
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.hasCreationDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.hasCreationDate = function() {
   return jspb.Message.getField(this, 3) != null;
 };
 
@@ -5059,14 +5934,14 @@ proto.caos.zitadel.management.api.v1.User.prototype.hasCreationDate = function()
  * optional google.protobuf.Timestamp change_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getChangeDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setChangeDate = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setChangeDate = function(value) {
   jspb.Message.setWrapperField(this, 4, value);
 };
 
@@ -5074,7 +5949,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.setChangeDate = function(val
 /**
  * Clears the message field making it undefined.
  */
-proto.caos.zitadel.management.api.v1.User.prototype.clearChangeDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.clearChangeDate = function() {
   this.setChangeDate(undefined);
 };
 
@@ -5083,7 +5958,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.clearChangeDate = function()
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.hasChangeDate = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.hasChangeDate = function() {
   return jspb.Message.getField(this, 4) != null;
 };
 
@@ -5092,14 +5967,14 @@ proto.caos.zitadel.management.api.v1.User.prototype.hasChangeDate = function() {
  * optional google.protobuf.Timestamp last_login = 5;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getLastLogin = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getLastLogin = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setLastLogin = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setLastLogin = function(value) {
   jspb.Message.setWrapperField(this, 5, value);
 };
 
@@ -5107,7 +5982,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.setLastLogin = function(valu
 /**
  * Clears the message field making it undefined.
  */
-proto.caos.zitadel.management.api.v1.User.prototype.clearLastLogin = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.clearLastLogin = function() {
   this.setLastLogin(undefined);
 };
 
@@ -5116,7 +5991,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.clearLastLogin = function()
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.hasLastLogin = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.hasLastLogin = function() {
   return jspb.Message.getField(this, 5) != null;
 };
 
@@ -5125,14 +6000,14 @@ proto.caos.zitadel.management.api.v1.User.prototype.hasLastLogin = function() {
  * optional google.protobuf.Timestamp password_changed = 6;
  * @return {?proto.google.protobuf.Timestamp}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getPasswordChanged = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getPasswordChanged = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
     jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setPasswordChanged = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setPasswordChanged = function(value) {
   jspb.Message.setWrapperField(this, 6, value);
 };
 
@@ -5140,7 +6015,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.setPasswordChanged = functio
 /**
  * Clears the message field making it undefined.
  */
-proto.caos.zitadel.management.api.v1.User.prototype.clearPasswordChanged = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.clearPasswordChanged = function() {
   this.setPasswordChanged(undefined);
 };
 
@@ -5149,7 +6024,7 @@ proto.caos.zitadel.management.api.v1.User.prototype.clearPasswordChanged = funct
  * Returns whether this field is set.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.hasPasswordChanged = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.hasPasswordChanged = function() {
   return jspb.Message.getField(this, 6) != null;
 };
 
@@ -5158,13 +6033,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.hasPasswordChanged = functio
  * optional string user_name = 7;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getUserName = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getUserName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setUserName = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setUserName = function(value) {
   jspb.Message.setProto3StringField(this, 7, value);
 };
 
@@ -5173,13 +6048,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setUserName = function(value
  * optional string first_name = 8;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getFirstName = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getFirstName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setFirstName = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setFirstName = function(value) {
   jspb.Message.setProto3StringField(this, 8, value);
 };
 
@@ -5188,13 +6063,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setFirstName = function(valu
  * optional string last_name = 9;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getLastName = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getLastName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setLastName = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setLastName = function(value) {
   jspb.Message.setProto3StringField(this, 9, value);
 };
 
@@ -5203,13 +6078,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setLastName = function(value
  * optional string display_name = 10;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getDisplayName = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getDisplayName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setDisplayName = function(value) {
   jspb.Message.setProto3StringField(this, 10, value);
 };
 
@@ -5218,13 +6093,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setDisplayName = function(va
  * optional string nick_name = 11;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getNickName = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getNickName = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setNickName = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setNickName = function(value) {
   jspb.Message.setProto3StringField(this, 11, value);
 };
 
@@ -5233,13 +6108,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setNickName = function(value
  * optional string preferred_language = 12;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getPreferredLanguage = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setPreferredLanguage = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 12, value);
 };
 
@@ -5248,13 +6123,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setPreferredLanguage = funct
  * optional Gender gender = 13;
  * @return {!proto.caos.zitadel.management.api.v1.Gender}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getGender = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getGender = function() {
   return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 13, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.Gender} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setGender = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setGender = function(value) {
   jspb.Message.setProto3EnumField(this, 13, value);
 };
 
@@ -5263,13 +6138,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setGender = function(value)
  * optional string email = 14;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getEmail = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getEmail = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setEmail = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setEmail = function(value) {
   jspb.Message.setProto3StringField(this, 14, value);
 };
 
@@ -5280,13 +6155,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setEmail = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getIsEmailVerified = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getIsEmailVerified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 15, false));
 };
 
 
 /** @param {boolean} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setIsEmailVerified = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setIsEmailVerified = function(value) {
   jspb.Message.setProto3BooleanField(this, 15, value);
 };
 
@@ -5295,13 +6170,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setIsEmailVerified = functio
  * optional string phone = 16;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getPhone = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getPhone = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setPhone = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setPhone = function(value) {
   jspb.Message.setProto3StringField(this, 16, value);
 };
 
@@ -5312,13 +6187,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setPhone = function(value) {
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getIsPhoneVerified = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getIsPhoneVerified = function() {
   return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 17, false));
 };
 
 
 /** @param {boolean} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setIsPhoneVerified = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setIsPhoneVerified = function(value) {
   jspb.Message.setProto3BooleanField(this, 17, value);
 };
 
@@ -5327,13 +6202,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setIsPhoneVerified = functio
  * optional string country = 18;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getCountry = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getCountry = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setCountry = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setCountry = function(value) {
   jspb.Message.setProto3StringField(this, 18, value);
 };
 
@@ -5342,13 +6217,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setCountry = function(value)
  * optional string locality = 19;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getLocality = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getLocality = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 19, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setLocality = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setLocality = function(value) {
   jspb.Message.setProto3StringField(this, 19, value);
 };
 
@@ -5357,13 +6232,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setLocality = function(value
  * optional string postal_code = 20;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getPostalCode = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getPostalCode = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 20, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setPostalCode = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setPostalCode = function(value) {
   jspb.Message.setProto3StringField(this, 20, value);
 };
 
@@ -5372,13 +6247,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setPostalCode = function(val
  * optional string region = 21;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getRegion = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getRegion = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 21, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setRegion = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setRegion = function(value) {
   jspb.Message.setProto3StringField(this, 21, value);
 };
 
@@ -5387,13 +6262,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setRegion = function(value)
  * optional string street_address = 22;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getStreetAddress = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getStreetAddress = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 22, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setStreetAddress = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setStreetAddress = function(value) {
   jspb.Message.setProto3StringField(this, 22, value);
 };
 
@@ -5402,17 +6277,32 @@ proto.caos.zitadel.management.api.v1.User.prototype.setStreetAddress = function(
  * optional uint64 sequence = 23;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.User.prototype.getSequence = function() {
+proto.caos.zitadel.management.api.v1.UserView.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 23, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.User.prototype.setSequence = function(value) {
+proto.caos.zitadel.management.api.v1.UserView.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 23, value);
 };
 
 
+/**
+ * optional string resource_owner = 24;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.getResourceOwner = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 24, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserView.prototype.setResourceOwner = function(value) {
+  jspb.Message.setProto3StringField(this, 24, value);
+};
+
+
 
 /**
  * List of repeated fields within this message type.
@@ -5897,7 +6787,7 @@ proto.caos.zitadel.management.api.v1.UserSearchResponse.toObject = function(incl
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.User.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.UserView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -5947,8 +6837,8 @@ proto.caos.zitadel.management.api.v1.UserSearchResponse.deserializeBinaryFromRea
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.User;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.User.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.UserView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.UserView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -6006,7 +6896,7 @@ proto.caos.zitadel.management.api.v1.UserSearchResponse.serializeBinaryToWriter
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.User.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.UserView.serializeBinaryToWriter
     );
   }
 };
@@ -6058,28 +6948,28 @@ proto.caos.zitadel.management.api.v1.UserSearchResponse.prototype.setTotalResult
 
 
 /**
- * repeated User result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.User>}
+ * repeated UserView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.UserView>}
  */
 proto.caos.zitadel.management.api.v1.UserSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.User>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.User, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.UserView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.UserView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.User>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.UserView>} value */
 proto.caos.zitadel.management.api.v1.UserSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.User=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.UserView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.User}
+ * @return {!proto.caos.zitadel.management.api.v1.UserView}
  */
 proto.caos.zitadel.management.api.v1.UserSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.User, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.UserView, opt_index);
 };
 
 
@@ -9445,7 +10335,8 @@ proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.toObject = functio
     hasUppercase: jspb.Message.getFieldWithDefault(msg, 8, false),
     hasNumber: jspb.Message.getFieldWithDefault(msg, 9, false),
     hasSymbol: jspb.Message.getFieldWithDefault(msg, 10, false),
-    sequence: jspb.Message.getFieldWithDefault(msg, 11, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 11, 0),
+    isDefault: jspb.Message.getFieldWithDefault(msg, 12, false)
   };
 
   if (includeInstance) {
@@ -9528,6 +10419,10 @@ proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.deserializeBinaryF
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 12:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsDefault(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -9636,6 +10531,13 @@ proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.serializeBinaryToW
       f
     );
   }
+  f = message.getIsDefault();
+  if (f) {
+    writer.writeBool(
+      12,
+      f
+    );
+  }
 };
 
 
@@ -9848,6 +10750,23 @@ proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.prototype.setSeque
 };
 
 
+/**
+ * optional bool is_default = 12;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.prototype.getIsDefault = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 12, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.PasswordComplexityPolicy.prototype.setIsDefault = function(value) {
+  jspb.Message.setProto3BooleanField(this, 12, value);
+};
+
+
 
 
 
@@ -10573,7 +11492,8 @@ proto.caos.zitadel.management.api.v1.PasswordAgePolicy.toObject = function(inclu
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     maxAgeDays: jspb.Message.getFieldWithDefault(msg, 6, 0),
     expireWarnDays: jspb.Message.getFieldWithDefault(msg, 7, 0),
-    sequence: jspb.Message.getFieldWithDefault(msg, 8, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 8, 0),
+    isDefault: jspb.Message.getFieldWithDefault(msg, 9, false)
   };
 
   if (includeInstance) {
@@ -10644,6 +11564,10 @@ proto.caos.zitadel.management.api.v1.PasswordAgePolicy.deserializeBinaryFromRead
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 9:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsDefault(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -10731,6 +11655,13 @@ proto.caos.zitadel.management.api.v1.PasswordAgePolicy.serializeBinaryToWriter =
       f
     );
   }
+  f = message.getIsDefault();
+  if (f) {
+    writer.writeBool(
+      9,
+      f
+    );
+  }
 };
 
 
@@ -10890,6 +11821,23 @@ proto.caos.zitadel.management.api.v1.PasswordAgePolicy.prototype.setSequence = f
 };
 
 
+/**
+ * optional bool is_default = 9;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.PasswordAgePolicy.prototype.getIsDefault = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 9, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.PasswordAgePolicy.prototype.setIsDefault = function(value) {
+  jspb.Message.setProto3BooleanField(this, 9, value);
+};
+
+
 
 
 
@@ -11437,7 +12385,8 @@ proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.toObject = function(i
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     maxAttempts: jspb.Message.getFieldWithDefault(msg, 6, 0),
     showLockOutFailures: jspb.Message.getFieldWithDefault(msg, 7, false),
-    sequence: jspb.Message.getFieldWithDefault(msg, 8, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 8, 0),
+    isDefault: jspb.Message.getFieldWithDefault(msg, 9, false)
   };
 
   if (includeInstance) {
@@ -11508,6 +12457,10 @@ proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.deserializeBinaryFrom
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 9:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsDefault(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -11595,6 +12548,13 @@ proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.serializeBinaryToWrit
       f
     );
   }
+  f = message.getIsDefault();
+  if (f) {
+    writer.writeBool(
+      9,
+      f
+    );
+  }
 };
 
 
@@ -11756,6 +12716,23 @@ proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.prototype.setSequence
 };
 
 
+/**
+ * optional bool is_default = 9;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.prototype.getIsDefault = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 9, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.PasswordLockoutPolicy.prototype.setIsDefault = function(value) {
+  jspb.Message.setProto3BooleanField(this, 9, value);
+};
+
+
 
 
 
@@ -12877,7 +13854,7 @@ proto.caos.zitadel.management.api.v1.OrgMemberRoles.prototype.clearRolesList = f
  * @private {!Array<number>}
  * @const
  */
-proto.caos.zitadel.management.api.v1.OrgMember.repeatedFields_ = [6];
+proto.caos.zitadel.management.api.v1.OrgMember.repeatedFields_ = [2];
 
 
 
@@ -12909,14 +13886,10 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.toObject = function(opt
 proto.caos.zitadel.management.api.v1.OrgMember.toObject = function(includeInstance, msg) {
   var f, obj = {
     userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
-    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
-    email: jspb.Message.getFieldWithDefault(msg, 3, ""),
-    firstName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    lastName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    rolesList: jspb.Message.getRepeatedField(msg, 6),
+    rolesList: jspb.Message.getRepeatedField(msg, 2),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 5, 0)
   };
 
   if (includeInstance) {
@@ -12958,36 +13931,20 @@ proto.caos.zitadel.management.api.v1.OrgMember.deserializeBinaryFromReader = fun
       msg.setUserId(value);
       break;
     case 2:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setUserName(value);
-      break;
-    case 3:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setEmail(value);
-      break;
-    case 4:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setFirstName(value);
-      break;
-    case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setLastName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.addRoles(value);
       break;
-    case 7:
+    case 3:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setChangeDate(value);
       break;
-    case 8:
+    case 4:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setCreationDate(value);
       break;
-    case 9:
+    case 5:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -13027,45 +13984,17 @@ proto.caos.zitadel.management.api.v1.OrgMember.serializeBinaryToWriter = functio
       f
     );
   }
-  f = message.getUserName();
-  if (f.length > 0) {
-    writer.writeString(
-      2,
-      f
-    );
-  }
-  f = message.getEmail();
-  if (f.length > 0) {
-    writer.writeString(
-      3,
-      f
-    );
-  }
-  f = message.getFirstName();
-  if (f.length > 0) {
-    writer.writeString(
-      4,
-      f
-    );
-  }
-  f = message.getLastName();
-  if (f.length > 0) {
-    writer.writeString(
-      5,
-      f
-    );
-  }
   f = message.getRolesList();
   if (f.length > 0) {
     writer.writeRepeatedString(
-      6,
+      2,
       f
     );
   }
   f = message.getChangeDate();
   if (f != null) {
     writer.writeMessage(
-      7,
+      3,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -13073,7 +14002,7 @@ proto.caos.zitadel.management.api.v1.OrgMember.serializeBinaryToWriter = functio
   f = message.getCreationDate();
   if (f != null) {
     writer.writeMessage(
-      8,
+      4,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -13081,7 +14010,7 @@ proto.caos.zitadel.management.api.v1.OrgMember.serializeBinaryToWriter = functio
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      9,
+      5,
       f
     );
   }
@@ -13104,77 +14033,17 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.setUserId = function(va
 
 
 /**
- * optional string user_name = 2;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.getUserName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.setUserName = function(value) {
-  jspb.Message.setProto3StringField(this, 2, value);
-};
-
-
-/**
- * optional string email = 3;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 3, value);
-};
-
-
-/**
- * optional string first_name = 4;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.getFirstName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.setFirstName = function(value) {
-  jspb.Message.setProto3StringField(this, 4, value);
-};
-
-
-/**
- * optional string last_name = 5;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.getLastName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.OrgMember.prototype.setLastName = function(value) {
-  jspb.Message.setProto3StringField(this, 5, value);
-};
-
-
-/**
- * repeated string roles = 6;
+ * repeated string roles = 2;
  * @return {!Array<string>}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.getRolesList = function() {
-  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 2));
 };
 
 
 /** @param {!Array<string>} value */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.setRolesList = function(value) {
-  jspb.Message.setField(this, 6, value || []);
+  jspb.Message.setField(this, 2, value || []);
 };
 
 
@@ -13183,7 +14052,7 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.setRolesList = function
  * @param {number=} opt_index
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.addRoles = function(value, opt_index) {
-  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+  jspb.Message.addToRepeatedField(this, 2, value, opt_index);
 };
 
 
@@ -13196,18 +14065,18 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.clearRolesList = functi
 
 
 /**
- * optional google.protobuf.Timestamp change_date = 7;
+ * optional google.protobuf.Timestamp change_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.setChangeDate = function(value) {
-  jspb.Message.setWrapperField(this, 7, value);
+  jspb.Message.setWrapperField(this, 3, value);
 };
 
 
@@ -13224,23 +14093,23 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.clearChangeDate = funct
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.hasChangeDate = function() {
-  return jspb.Message.getField(this, 7) != null;
+  return jspb.Message.getField(this, 3) != null;
 };
 
 
 /**
- * optional google.protobuf.Timestamp creation_date = 8;
+ * optional google.protobuf.Timestamp creation_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.setCreationDate = function(value) {
-  jspb.Message.setWrapperField(this, 8, value);
+  jspb.Message.setWrapperField(this, 4, value);
 };
 
 
@@ -13257,22 +14126,22 @@ proto.caos.zitadel.management.api.v1.OrgMember.prototype.clearCreationDate = fun
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.hasCreationDate = function() {
-  return jspb.Message.getField(this, 8) != null;
+  return jspb.Message.getField(this, 4) != null;
 };
 
 
 /**
- * optional uint64 sequence = 9;
+ * optional uint64 sequence = 5;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.OrgMember.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 9, value);
+  jspb.Message.setProto3IntField(this, 5, value);
 };
 
 
@@ -14949,13 +15818,7 @@ proto.caos.zitadel.management.api.v1.Project.toObject = function(includeInstance
     state: jspb.Message.getFieldWithDefault(msg, 3, 0),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    type: jspb.Message.getFieldWithDefault(msg, 6, 0),
-    resourceOwner: jspb.Message.getFieldWithDefault(msg, 7, ""),
-    orgId: jspb.Message.getFieldWithDefault(msg, 8, ""),
-    orgName: jspb.Message.getFieldWithDefault(msg, 9, ""),
-    orgDomain: jspb.Message.getFieldWithDefault(msg, 10, ""),
-    grantId: jspb.Message.getFieldWithDefault(msg, 11, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 12, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 6, 0)
   };
 
   if (includeInstance) {
@@ -15015,30 +15878,6 @@ proto.caos.zitadel.management.api.v1.Project.deserializeBinaryFromReader = funct
       msg.setCreationDate(value);
       break;
     case 6:
-      var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectType} */ (reader.readEnum());
-      msg.setType(value);
-      break;
-    case 7:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setResourceOwner(value);
-      break;
-    case 8:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setOrgId(value);
-      break;
-    case 9:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setOrgName(value);
-      break;
-    case 10:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setOrgDomain(value);
-      break;
-    case 11:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setGrantId(value);
-      break;
-    case 12:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -15108,52 +15947,10 @@ proto.caos.zitadel.management.api.v1.Project.serializeBinaryToWriter = function(
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
   }
-  f = message.getType();
-  if (f !== 0.0) {
-    writer.writeEnum(
-      6,
-      f
-    );
-  }
-  f = message.getResourceOwner();
-  if (f.length > 0) {
-    writer.writeString(
-      7,
-      f
-    );
-  }
-  f = message.getOrgId();
-  if (f.length > 0) {
-    writer.writeString(
-      8,
-      f
-    );
-  }
-  f = message.getOrgName();
-  if (f.length > 0) {
-    writer.writeString(
-      9,
-      f
-    );
-  }
-  f = message.getOrgDomain();
-  if (f.length > 0) {
-    writer.writeString(
-      10,
-      f
-    );
-  }
-  f = message.getGrantId();
-  if (f.length > 0) {
-    writer.writeString(
-      11,
-      f
-    );
-  }
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      12,
+      6,
       f
     );
   }
@@ -15272,107 +16069,17 @@ proto.caos.zitadel.management.api.v1.Project.prototype.hasCreationDate = functio
 
 
 /**
- * optional ProjectType type = 6;
- * @return {!proto.caos.zitadel.management.api.v1.ProjectType}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getType = function() {
-  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectType} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
-};
-
-
-/** @param {!proto.caos.zitadel.management.api.v1.ProjectType} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setType = function(value) {
-  jspb.Message.setProto3EnumField(this, 6, value);
-};
-
-
-/**
- * optional string resource_owner = 7;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getResourceOwner = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setResourceOwner = function(value) {
-  jspb.Message.setProto3StringField(this, 7, value);
-};
-
-
-/**
- * optional string org_id = 8;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getOrgId = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setOrgId = function(value) {
-  jspb.Message.setProto3StringField(this, 8, value);
-};
-
-
-/**
- * optional string org_name = 9;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getOrgName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setOrgName = function(value) {
-  jspb.Message.setProto3StringField(this, 9, value);
-};
-
-
-/**
- * optional string org_domain = 10;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getOrgDomain = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setOrgDomain = function(value) {
-  jspb.Message.setProto3StringField(this, 10, value);
-};
-
-
-/**
- * optional string grant_id = 11;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.Project.prototype.getGrantId = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.Project.prototype.setGrantId = function(value) {
-  jspb.Message.setProto3StringField(this, 11, value);
-};
-
-
-/**
- * optional uint64 sequence = 12;
+ * optional uint64 sequence = 6;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.Project.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 12, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.Project.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 12, value);
+  jspb.Message.setProto3IntField(this, 6, value);
 };
 
 
@@ -15382,7 +16089,7 @@ proto.caos.zitadel.management.api.v1.Project.prototype.setSequence = function(va
  * @private {!Array<number>}
  * @const
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.repeatedFields_ = [4];
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.repeatedFields_ = [4];
 
 
 
@@ -15397,8 +16104,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.toObject = function(opt_includeInstance) {
-  return proto.caos.zitadel.management.api.v1.ProjectSearchResponse.toObject(opt_includeInstance, this);
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.toObject(opt_includeInstance, this);
 };
 
 
@@ -15407,17 +16114,17 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.toObject =
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchResponse} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.toObject = function(includeInstance, msg) {
   var f, obj = {
     offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.Project.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.GrantedProject.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -15431,23 +16138,23 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.toObject = function(i
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchResponse}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinary = function(bytes) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.caos.zitadel.management.api.v1.ProjectSearchResponse;
-  return proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse;
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchResponse} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchResponse}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -15467,8 +16174,8 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinaryFrom
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.Project;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.Project.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.GrantedProject;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.GrantedProject.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -15484,9 +16191,9 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.deserializeBinaryFrom
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.serializeBinary = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.ProjectSearchResponse.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -15494,11 +16201,11 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.serializeBi
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchResponse} message
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -15526,7 +16233,7 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.serializeBinaryToWrit
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.Project.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.GrantedProject.serializeBinaryToWriter
     );
   }
 };
@@ -15536,13 +16243,13 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.serializeBinaryToWrit
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.getOffset = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setOffset = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -15551,13 +16258,13 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setOffset =
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.getLimit = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setLimit = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
@@ -15566,59 +16273,52 @@ proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setLimit =
  * optional uint64 total_result = 3;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.getTotalResult = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.getTotalResult = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setTotalResult = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.setTotalResult = function(value) {
   jspb.Message.setProto3IntField(this, 3, value);
 };
 
 
 /**
- * repeated Project result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.Project>}
+ * repeated GrantedProject result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.GrantedProject>}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.Project>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.Project, 4));
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.getResultList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.GrantedProject>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.GrantedProject, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.Project>} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.setResultList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.GrantedProject>} value */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.Project=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProject=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.Project}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProject}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.Project, opt_index);
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.addResult = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.GrantedProject, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchResponse.prototype.clearResultList = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchResponse.prototype.clearResultList = function() {
   this.setResultList([]);
 };
 
 
 
-/**
- * List of repeated fields within this message type.
- * @private {!Array<number>}
- * @const
- */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.repeatedFields_ = [3];
-
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -15632,8 +16332,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.toObject = function(opt_includeInstance) {
-  return proto.caos.zitadel.management.api.v1.ProjectSearchRequest.toObject(opt_includeInstance, this);
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.GrantedProject.toObject(opt_includeInstance, this);
 };
 
 
@@ -15642,16 +16342,24 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.toObject = f
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProject} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.management.api.v1.GrantedProject.toObject = function(includeInstance, msg) {
   var f, obj = {
-    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
-    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
-    queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
-    proto.caos.zitadel.management.api.v1.ProjectSearchQuery.toObject, includeInstance)
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    name: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    state: jspb.Message.getFieldWithDefault(msg, 3, 0),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    type: jspb.Message.getFieldWithDefault(msg, 6, 0),
+    resourceOwner: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    orgId: jspb.Message.getFieldWithDefault(msg, 8, ""),
+    orgName: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    orgDomain: jspb.Message.getFieldWithDefault(msg, 10, ""),
+    grantId: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 12, 0)
   };
 
   if (includeInstance) {
@@ -15665,23 +16373,484 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.toObject = function(in
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProject}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.deserializeBinary = function(bytes) {
+proto.caos.zitadel.management.api.v1.GrantedProject.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.caos.zitadel.management.api.v1.ProjectSearchRequest;
-  return proto.caos.zitadel.management.api.v1.ProjectSearchRequest.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.management.api.v1.GrantedProject;
+  return proto.caos.zitadel.management.api.v1.GrantedProject.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProject} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProject}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.management.api.v1.GrantedProject.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setName(value);
+      break;
+    case 3:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectState} */ (reader.readEnum());
+      msg.setState(value);
+      break;
+    case 4:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectType} */ (reader.readEnum());
+      msg.setType(value);
+      break;
+    case 7:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setResourceOwner(value);
+      break;
+    case 8:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 9:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgName(value);
+      break;
+    case 10:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgDomain(value);
+      break;
+    case 11:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGrantId(value);
+      break;
+    case 12:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.GrantedProject.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProject} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getName();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getState();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      3,
+      f
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      4,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getType();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      6,
+      f
+    );
+  }
+  f = message.getResourceOwner();
+  if (f.length > 0) {
+    writer.writeString(
+      7,
+      f
+    );
+  }
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      8,
+      f
+    );
+  }
+  f = message.getOrgName();
+  if (f.length > 0) {
+    writer.writeString(
+      9,
+      f
+    );
+  }
+  f = message.getOrgDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      10,
+      f
+    );
+  }
+  f = message.getGrantId();
+  if (f.length > 0) {
+    writer.writeString(
+      11,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      12,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string name = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setName = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional ProjectState state = 3;
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectState}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectState} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.ProjectState} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setState = function(value) {
+  jspb.Message.setProto3EnumField(this, 3, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 4;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 4, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 4) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional ProjectType type = 6;
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectType}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getType = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectType} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.ProjectType} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setType = function(value) {
+  jspb.Message.setProto3EnumField(this, 6, value);
+};
+
+
+/**
+ * optional string resource_owner = 7;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getResourceOwner = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setResourceOwner = function(value) {
+  jspb.Message.setProto3StringField(this, 7, value);
+};
+
+
+/**
+ * optional string org_id = 8;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 8, value);
+};
+
+
+/**
+ * optional string org_name = 9;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getOrgName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setOrgName = function(value) {
+  jspb.Message.setProto3StringField(this, 9, value);
+};
+
+
+/**
+ * optional string org_domain = 10;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getOrgDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setOrgDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 10, value);
+};
+
+
+/**
+ * optional string grant_id = 11;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getGrantId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setGrantId = function(value) {
+  jspb.Message.setProto3StringField(this, 11, value);
+};
+
+
+/**
+ * optional uint64 sequence = 12;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 12, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.GrantedProject.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 12, value);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.repeatedFields_ = [3];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
+    proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest;
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest}
+ */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -15697,8 +16866,8 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.deserializeBinaryFromR
       msg.setLimit(value);
       break;
     case 3:
-      var value = new proto.caos.zitadel.management.api.v1.ProjectSearchQuery;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.deserializeBinaryFromReader);
       msg.addQueries(value);
       break;
     default:
@@ -15714,9 +16883,9 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.deserializeBinaryFromR
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.serializeBinary = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.ProjectSearchRequest.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -15724,11 +16893,11 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.serializeBin
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchRequest} message
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getOffset();
   if (f !== 0) {
@@ -15749,7 +16918,7 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.serializeBinaryToWrite
     writer.writeRepeatedMessage(
       3,
       f,
-      proto.caos.zitadel.management.api.v1.ProjectSearchQuery.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.serializeBinaryToWriter
     );
   }
 };
@@ -15759,13 +16928,13 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.serializeBinaryToWrite
  * optional uint64 offset = 1;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.getOffset = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.getOffset = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.setOffset = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.setOffset = function(value) {
   jspb.Message.setProto3IntField(this, 1, value);
 };
 
@@ -15774,47 +16943,47 @@ proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.setOffset =
  * optional uint64 limit = 2;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.getLimit = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.setLimit = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 2, value);
 };
 
 
 /**
- * repeated ProjectSearchQuery queries = 3;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectSearchQuery>}
+ * repeated GrantedProjectSearchQuery queries = 3;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery>}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.getQueriesList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectSearchQuery>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectSearchQuery, 3));
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.getQueriesList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery, 3));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectSearchQuery>} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.setQueriesList = function(value) {
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery>} value */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.setQueriesList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 3, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 3, opt_value, proto.caos.zitadel.management.api.v1.ProjectSearchQuery, opt_index);
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 3, opt_value, proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery, opt_index);
 };
 
 
 /**
  * Clears the list making it empty but non-null.
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchRequest.prototype.clearQueriesList = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest.prototype.clearQueriesList = function() {
   this.setQueriesList([]);
 };
 
@@ -15833,8 +17002,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.toObject = function(opt_includeInstance) {
-  return proto.caos.zitadel.management.api.v1.ProjectSearchQuery.toObject(opt_includeInstance, this);
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.toObject(opt_includeInstance, this);
 };
 
 
@@ -15843,11 +17012,11 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.toObject = fun
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.toObject = function(includeInstance, msg) {
   var f, obj = {
     key: jspb.Message.getFieldWithDefault(msg, 1, 0),
     method: jspb.Message.getFieldWithDefault(msg, 2, 0),
@@ -15865,23 +17034,23 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.toObject = function(incl
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinary = function(bytes) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.caos.zitadel.management.api.v1.ProjectSearchQuery;
-  return proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery;
+  return proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery}
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -15889,7 +17058,7 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinaryFromRea
     var field = reader.getFieldNumber();
     switch (field) {
     case 1:
-      var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectSearchKey} */ (reader.readEnum());
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey} */ (reader.readEnum());
       msg.setKey(value);
       break;
     case 2:
@@ -15913,9 +17082,9 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.deserializeBinaryFromRea
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.serializeBinary = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.ProjectSearchQuery.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -15923,11 +17092,11 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.serializeBinar
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.ProjectSearchQuery} message
+ * @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getKey();
   if (f !== 0.0) {
@@ -15954,16 +17123,16 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.serializeBinaryToWriter
 
 
 /**
- * optional ProjectSearchKey key = 1;
- * @return {!proto.caos.zitadel.management.api.v1.ProjectSearchKey}
+ * optional GrantedProjectSearchKey key = 1;
+ * @return {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.getKey = function() {
-  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.getKey = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
 };
 
 
-/** @param {!proto.caos.zitadel.management.api.v1.ProjectSearchKey} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.setKey = function(value) {
+/** @param {!proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey} value */
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.setKey = function(value) {
   jspb.Message.setProto3EnumField(this, 1, value);
 };
 
@@ -15972,13 +17141,13 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.setKey = funct
  * optional SearchMethod method = 2;
  * @return {!proto.caos.zitadel.management.api.v1.SearchMethod}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.getMethod = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.getMethod = function() {
   return /** @type {!proto.caos.zitadel.management.api.v1.SearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.SearchMethod} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.setMethod = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.setMethod = function(value) {
   jspb.Message.setProto3EnumField(this, 2, value);
 };
 
@@ -15987,13 +17156,13 @@ proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.setMethod = fu
  * optional string value = 3;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.getValue = function() {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.getValue = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectSearchQuery.prototype.setValue = function(value) {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchQuery.prototype.setValue = function(value) {
   jspb.Message.setProto3StringField(this, 3, value);
 };
 
@@ -16153,7 +17322,7 @@ proto.caos.zitadel.management.api.v1.ProjectMemberRoles.prototype.clearRolesList
  * @private {!Array<number>}
  * @const
  */
-proto.caos.zitadel.management.api.v1.ProjectMember.repeatedFields_ = [6];
+proto.caos.zitadel.management.api.v1.ProjectMember.repeatedFields_ = [2];
 
 
 
@@ -16185,14 +17354,10 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.toObject = function
 proto.caos.zitadel.management.api.v1.ProjectMember.toObject = function(includeInstance, msg) {
   var f, obj = {
     userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
-    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
-    email: jspb.Message.getFieldWithDefault(msg, 3, ""),
-    firstName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    lastName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    rolesList: jspb.Message.getRepeatedField(msg, 6),
+    rolesList: jspb.Message.getRepeatedField(msg, 2),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    sequence: jspb.Message.getFieldWithDefault(msg, 10, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 5, 0)
   };
 
   if (includeInstance) {
@@ -16234,36 +17399,20 @@ proto.caos.zitadel.management.api.v1.ProjectMember.deserializeBinaryFromReader =
       msg.setUserId(value);
       break;
     case 2:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setUserName(value);
-      break;
-    case 3:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setEmail(value);
-      break;
-    case 4:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setFirstName(value);
-      break;
-    case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setLastName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.addRoles(value);
       break;
-    case 7:
+    case 3:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setChangeDate(value);
       break;
-    case 8:
+    case 4:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setCreationDate(value);
       break;
-    case 10:
+    case 5:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -16303,45 +17452,17 @@ proto.caos.zitadel.management.api.v1.ProjectMember.serializeBinaryToWriter = fun
       f
     );
   }
-  f = message.getUserName();
-  if (f.length > 0) {
-    writer.writeString(
-      2,
-      f
-    );
-  }
-  f = message.getEmail();
-  if (f.length > 0) {
-    writer.writeString(
-      3,
-      f
-    );
-  }
-  f = message.getFirstName();
-  if (f.length > 0) {
-    writer.writeString(
-      4,
-      f
-    );
-  }
-  f = message.getLastName();
-  if (f.length > 0) {
-    writer.writeString(
-      5,
-      f
-    );
-  }
   f = message.getRolesList();
   if (f.length > 0) {
     writer.writeRepeatedString(
-      6,
+      2,
       f
     );
   }
   f = message.getChangeDate();
   if (f != null) {
     writer.writeMessage(
-      7,
+      3,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -16349,7 +17470,7 @@ proto.caos.zitadel.management.api.v1.ProjectMember.serializeBinaryToWriter = fun
   f = message.getCreationDate();
   if (f != null) {
     writer.writeMessage(
-      8,
+      4,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -16357,7 +17478,7 @@ proto.caos.zitadel.management.api.v1.ProjectMember.serializeBinaryToWriter = fun
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      10,
+      5,
       f
     );
   }
@@ -16380,77 +17501,17 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setUserId = functio
 
 
 /**
- * optional string user_name = 2;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getUserName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setUserName = function(value) {
-  jspb.Message.setProto3StringField(this, 2, value);
-};
-
-
-/**
- * optional string email = 3;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 3, value);
-};
-
-
-/**
- * optional string first_name = 4;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getFirstName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setFirstName = function(value) {
-  jspb.Message.setProto3StringField(this, 4, value);
-};
-
-
-/**
- * optional string last_name = 5;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getLastName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setLastName = function(value) {
-  jspb.Message.setProto3StringField(this, 5, value);
-};
-
-
-/**
- * repeated string roles = 6;
+ * repeated string roles = 2;
  * @return {!Array<string>}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getRolesList = function() {
-  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 2));
 };
 
 
 /** @param {!Array<string>} value */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setRolesList = function(value) {
-  jspb.Message.setField(this, 6, value || []);
+  jspb.Message.setField(this, 2, value || []);
 };
 
 
@@ -16459,7 +17520,7 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setRolesList = func
  * @param {number=} opt_index
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.addRoles = function(value, opt_index) {
-  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+  jspb.Message.addToRepeatedField(this, 2, value, opt_index);
 };
 
 
@@ -16472,18 +17533,18 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.clearRolesList = fu
 
 
 /**
- * optional google.protobuf.Timestamp change_date = 7;
+ * optional google.protobuf.Timestamp change_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setChangeDate = function(value) {
-  jspb.Message.setWrapperField(this, 7, value);
+  jspb.Message.setWrapperField(this, 3, value);
 };
 
 
@@ -16500,23 +17561,23 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.clearChangeDate = f
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.hasChangeDate = function() {
-  return jspb.Message.getField(this, 7) != null;
+  return jspb.Message.getField(this, 3) != null;
 };
 
 
 /**
- * optional google.protobuf.Timestamp creation_date = 8;
+ * optional google.protobuf.Timestamp creation_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setCreationDate = function(value) {
-  jspb.Message.setWrapperField(this, 8, value);
+  jspb.Message.setWrapperField(this, 4, value);
 };
 
 
@@ -16533,22 +17594,22 @@ proto.caos.zitadel.management.api.v1.ProjectMember.prototype.clearCreationDate =
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.hasCreationDate = function() {
-  return jspb.Message.getField(this, 8) != null;
+  return jspb.Message.getField(this, 4) != null;
 };
 
 
 /**
- * optional uint64 sequence = 10;
+ * optional uint64 sequence = 5;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 10, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.ProjectMember.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 10, value);
+  jspb.Message.setProto3IntField(this, 5, value);
 };
 
 
@@ -17852,6 +18913,286 @@ proto.caos.zitadel.management.api.v1.ProjectRole.prototype.setSequence = functio
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.ProjectRoleView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectRoleView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    projectId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    key: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    displayName: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    group: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectRoleView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.ProjectRoleView;
+  return proto.caos.zitadel.management.api.v1.ProjectRoleView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectRoleView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectRoleView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setKey(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDisplayName(value);
+      break;
+    case 4:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGroup(value);
+      break;
+    case 7:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.ProjectRoleView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectRoleView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getProjectId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getKey();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getDisplayName();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      4,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getGroup();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      7,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string project_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getProjectId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setProjectId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string key = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getKey = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setKey = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string display_name = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getDisplayName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setDisplayName = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 4;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 4, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 4) != null;
+};
+
+
+/**
+ * optional string group = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getGroup = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setGroup = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional uint64 sequence = 7;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ProjectRoleView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 7, value);
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -18042,7 +19383,7 @@ proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.toObject = functi
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.ProjectRole.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.ProjectRoleView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -18092,8 +19433,8 @@ proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.deserializeBinary
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.ProjectRole;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectRole.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.ProjectRoleView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectRoleView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -18151,7 +19492,7 @@ proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.serializeBinaryTo
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.ProjectRole.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.ProjectRoleView.serializeBinaryToWriter
     );
   }
 };
@@ -18203,28 +19544,28 @@ proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.prototype.setTota
 
 
 /**
- * repeated ProjectRole result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectRole>}
+ * repeated ProjectRoleView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectRoleView>}
  */
 proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectRole>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectRole, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectRoleView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectRoleView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectRole>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectRoleView>} value */
 proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectRole=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectRoleView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.ProjectRole}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectRoleView}
  */
 proto.caos.zitadel.management.api.v1.ProjectRoleSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectRole, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectRoleView, opt_index);
 };
 
 
@@ -18651,6 +19992,411 @@ proto.caos.zitadel.management.api.v1.ProjectRoleSearchQuery.prototype.setValue =
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.repeatedFields_ = [6];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.ProjectMemberView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectMemberView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    email: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    rolesList: jspb.Message.getRepeatedField(msg, 6),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    sequence: jspb.Message.getFieldWithDefault(msg, 10, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectMemberView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.ProjectMemberView;
+  return proto.caos.zitadel.management.api.v1.ProjectMemberView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectMemberView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectMemberView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addRoles(value);
+      break;
+    case 7:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 10:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.ProjectMemberView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectMemberView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getUserId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getRolesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      6,
+      f
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      7,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      10,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string user_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getUserId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setUserId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string user_name = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string email = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string first_name = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string last_name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * repeated string roles = 6;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getRolesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setRolesList = function(value) {
+  jspb.Message.setField(this, 6, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.addRoles = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.clearRolesList = function() {
+  this.setRolesList([]);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 7;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 7, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 7) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional uint64 sequence = 10;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 10, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ProjectMemberView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 10, value);
+};
+
+
+
 /**
  * List of repeated fields within this message type.
  * @private {!Array<number>}
@@ -18691,7 +20437,7 @@ proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.toObject = func
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.ProjectMember.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.ProjectMemberView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -18741,8 +20487,8 @@ proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.deserializeBina
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.ProjectMember;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectMember.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.ProjectMemberView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectMemberView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -18800,7 +20546,7 @@ proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.serializeBinary
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.ProjectMember.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.ProjectMemberView.serializeBinaryToWriter
     );
   }
 };
@@ -18852,28 +20598,28 @@ proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.prototype.setTo
 
 
 /**
- * repeated ProjectMember result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectMember>}
+ * repeated ProjectMemberView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectMemberView>}
  */
 proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectMember>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectMember, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectMemberView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectMemberView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectMember>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectMemberView>} value */
 proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectMember=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectMemberView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.ProjectMember}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectMemberView}
  */
 proto.caos.zitadel.management.api.v1.ProjectMemberSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectMember, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectMemberView, opt_index);
 };
 
 
@@ -21143,6 +22889,378 @@ proto.caos.zitadel.management.api.v1.ClientSecret.prototype.setClientSecret = fu
 
 
 
+/**
+ * Oneof group definitions for this message. Each group defines the field
+ * numbers belonging to that group. When of these fields' value is set, all
+ * other fields in the group are cleared. During deserialization, if multiple
+ * fields are encountered for a group, only the last value seen will be kept.
+ * @private {!Array<!Array<number>>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.oneofGroups_ = [[8]];
+
+/**
+ * @enum {number}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.AppConfigCase = {
+  APP_CONFIG_NOT_SET: 0,
+  OIDC_CONFIG: 8
+};
+
+/**
+ * @return {proto.caos.zitadel.management.api.v1.ApplicationView.AppConfigCase}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getAppConfigCase = function() {
+  return /** @type {proto.caos.zitadel.management.api.v1.ApplicationView.AppConfigCase} */(jspb.Message.computeOneofCase(this, proto.caos.zitadel.management.api.v1.ApplicationView.oneofGroups_[0]));
+};
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.ApplicationView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.ApplicationView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    state: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    name: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    oidcConfig: (f = msg.getOidcConfig()) && proto.caos.zitadel.management.api.v1.OIDCConfig.toObject(includeInstance, f),
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.ApplicationView}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.ApplicationView;
+  return proto.caos.zitadel.management.api.v1.ApplicationView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.ApplicationView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.ApplicationView}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.AppState} */ (reader.readEnum());
+      msg.setState(value);
+      break;
+    case 3:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 4:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setName(value);
+      break;
+    case 8:
+      var value = new proto.caos.zitadel.management.api.v1.OIDCConfig;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.OIDCConfig.deserializeBinaryFromReader);
+      msg.setOidcConfig(value);
+      break;
+    case 9:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.ApplicationView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.ApplicationView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getState();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      2,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      3,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      4,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getOidcConfig();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      proto.caos.zitadel.management.api.v1.OIDCConfig.serializeBinaryToWriter
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      9,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional AppState state = 2;
+ * @return {!proto.caos.zitadel.management.api.v1.AppState}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.AppState} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.AppState} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setState = function(value) {
+  jspb.Message.setProto3EnumField(this, 2, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 3;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 3, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 3) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 4;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 4, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 4) != null;
+};
+
+
+/**
+ * optional string name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional OIDCConfig oidc_config = 8;
+ * @return {?proto.caos.zitadel.management.api.v1.OIDCConfig}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getOidcConfig = function() {
+  return /** @type{?proto.caos.zitadel.management.api.v1.OIDCConfig} */ (
+    jspb.Message.getWrapperField(this, proto.caos.zitadel.management.api.v1.OIDCConfig, 8));
+};
+
+
+/** @param {?proto.caos.zitadel.management.api.v1.OIDCConfig|undefined} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setOidcConfig = function(value) {
+  jspb.Message.setOneofWrapperField(this, 8, proto.caos.zitadel.management.api.v1.ApplicationView.oneofGroups_[0], value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.clearOidcConfig = function() {
+  this.setOidcConfig(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.hasOidcConfig = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional uint64 sequence = 9;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ApplicationView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 9, value);
+};
+
+
+
 /**
  * List of repeated fields within this message type.
  * @private {!Array<number>}
@@ -21183,7 +23301,7 @@ proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.toObject = functi
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.Application.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.ApplicationView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -21233,8 +23351,8 @@ proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.deserializeBinary
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.Application;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.Application.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.ApplicationView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ApplicationView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -21292,7 +23410,7 @@ proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.serializeBinaryTo
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.Application.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.ApplicationView.serializeBinaryToWriter
     );
   }
 };
@@ -21344,28 +23462,28 @@ proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.prototype.setTota
 
 
 /**
- * repeated Application result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.Application>}
+ * repeated ApplicationView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.ApplicationView>}
  */
 proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.Application>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.Application, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ApplicationView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ApplicationView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.Application>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.ApplicationView>} value */
 proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.Application=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.ApplicationView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.Application}
+ * @return {!proto.caos.zitadel.management.api.v1.ApplicationView}
  */
 proto.caos.zitadel.management.api.v1.ApplicationSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.Application, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ApplicationView, opt_index);
 };
 
 
@@ -21797,7 +23915,7 @@ proto.caos.zitadel.management.api.v1.ApplicationSearchQuery.prototype.setValue =
  * @private {!Array<number>}
  * @const
  */
-proto.caos.zitadel.management.api.v1.ProjectGrant.repeatedFields_ = [6];
+proto.caos.zitadel.management.api.v1.ProjectGrant.repeatedFields_ = [4];
 
 
 
@@ -21831,14 +23949,11 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.toObject = function(includeIns
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
     projectId: jspb.Message.getFieldWithDefault(msg, 2, ""),
     grantedOrgId: jspb.Message.getFieldWithDefault(msg, 3, ""),
-    grantedOrgName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    grantedOrgDomain: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    roleKeysList: jspb.Message.getRepeatedField(msg, 6),
-    state: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    roleKeysList: jspb.Message.getRepeatedField(msg, 4),
+    state: jspb.Message.getFieldWithDefault(msg, 5, 0),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    projectName: jspb.Message.getFieldWithDefault(msg, 10, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 11, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
   };
 
   if (includeInstance) {
@@ -21888,36 +24003,24 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.deserializeBinaryFromReader =
       msg.setGrantedOrgId(value);
       break;
     case 4:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setGrantedOrgName(value);
-      break;
-    case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setGrantedOrgDomain(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.addRoleKeys(value);
       break;
-    case 7:
+    case 5:
       var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectGrantState} */ (reader.readEnum());
       msg.setState(value);
       break;
-    case 8:
+    case 6:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setCreationDate(value);
       break;
-    case 9:
+    case 7:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setChangeDate(value);
       break;
-    case 10:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setProjectName(value);
-      break;
-    case 11:
+    case 9:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -21971,38 +24074,24 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.serializeBinaryToWriter = func
       f
     );
   }
-  f = message.getGrantedOrgName();
-  if (f.length > 0) {
-    writer.writeString(
-      4,
-      f
-    );
-  }
-  f = message.getGrantedOrgDomain();
-  if (f.length > 0) {
-    writer.writeString(
-      5,
-      f
-    );
-  }
   f = message.getRoleKeysList();
   if (f.length > 0) {
     writer.writeRepeatedString(
-      6,
+      4,
       f
     );
   }
   f = message.getState();
   if (f !== 0.0) {
     writer.writeEnum(
-      7,
+      5,
       f
     );
   }
   f = message.getCreationDate();
   if (f != null) {
     writer.writeMessage(
-      8,
+      6,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -22010,22 +24099,15 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.serializeBinaryToWriter = func
   f = message.getChangeDate();
   if (f != null) {
     writer.writeMessage(
-      9,
+      7,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
   }
-  f = message.getProjectName();
-  if (f.length > 0) {
-    writer.writeString(
-      10,
-      f
-    );
-  }
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      11,
+      9,
       f
     );
   }
@@ -22078,47 +24160,17 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setGrantedOrgId = fu
 
 
 /**
- * optional string granted_org_name = 4;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getGrantedOrgName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setGrantedOrgName = function(value) {
-  jspb.Message.setProto3StringField(this, 4, value);
-};
-
-
-/**
- * optional string granted_org_domain = 5;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getGrantedOrgDomain = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setGrantedOrgDomain = function(value) {
-  jspb.Message.setProto3StringField(this, 5, value);
-};
-
-
-/**
- * repeated string role_keys = 6;
+ * repeated string role_keys = 4;
  * @return {!Array<string>}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getRoleKeysList = function() {
-  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 4));
 };
 
 
 /** @param {!Array<string>} value */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setRoleKeysList = function(value) {
-  jspb.Message.setField(this, 6, value || []);
+  jspb.Message.setField(this, 4, value || []);
 };
 
 
@@ -22127,7 +24179,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setRoleKeysList = fu
  * @param {number=} opt_index
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.addRoleKeys = function(value, opt_index) {
-  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+  jspb.Message.addToRepeatedField(this, 4, value, opt_index);
 };
 
 
@@ -22140,33 +24192,33 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.clearRoleKeysList =
 
 
 /**
- * optional ProjectGrantState state = 7;
+ * optional ProjectGrantState state = 5;
  * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantState}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getState = function() {
-  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectGrantState} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectGrantState} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.ProjectGrantState} value */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setState = function(value) {
-  jspb.Message.setProto3EnumField(this, 7, value);
+  jspb.Message.setProto3EnumField(this, 5, value);
 };
 
 
 /**
- * optional google.protobuf.Timestamp creation_date = 8;
+ * optional google.protobuf.Timestamp creation_date = 6;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setCreationDate = function(value) {
-  jspb.Message.setWrapperField(this, 8, value);
+  jspb.Message.setWrapperField(this, 6, value);
 };
 
 
@@ -22183,23 +24235,23 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.clearCreationDate =
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.hasCreationDate = function() {
-  return jspb.Message.getField(this, 8) != null;
+  return jspb.Message.getField(this, 6) != null;
 };
 
 
 /**
- * optional google.protobuf.Timestamp change_date = 9;
+ * optional google.protobuf.Timestamp change_date = 7;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 9));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setChangeDate = function(value) {
-  jspb.Message.setWrapperField(this, 9, value);
+  jspb.Message.setWrapperField(this, 7, value);
 };
 
 
@@ -22216,37 +24268,22 @@ proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.clearChangeDate = fu
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.hasChangeDate = function() {
-  return jspb.Message.getField(this, 9) != null;
+  return jspb.Message.getField(this, 7) != null;
 };
 
 
 /**
- * optional string project_name = 10;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getProjectName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setProjectName = function(value) {
-  jspb.Message.setProto3StringField(this, 10, value);
-};
-
-
-/**
- * optional uint64 sequence = 11;
+ * optional uint64 sequence = 9;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 11, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.ProjectGrant.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 11, value);
+  jspb.Message.setProto3IntField(this, 9, value);
 };
 
 
@@ -22809,6 +24846,13 @@ proto.caos.zitadel.management.api.v1.ProjectGrantID.prototype.setId = function(v
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.repeatedFields_ = [6];
+
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -22822,8 +24866,8 @@ if (jspb.Message.GENERATE_TO_OBJECT) {
  *     for transitional soy proto support: http://goto/soy-param-migration
  * @return {!Object}
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.toObject = function(opt_includeInstance) {
-  return proto.caos.zitadel.management.api.v1.GrantedGrantID.toObject(opt_includeInstance, this);
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.ProjectGrantView.toObject(opt_includeInstance, this);
 };
 
 
@@ -22832,13 +24876,23 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.toObject = functio
  * @param {boolean|undefined} includeInstance Whether to include the JSPB
  *     instance for transitional soy proto support:
  *     http://goto/soy-param-migration
- * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} msg The msg instance to transform.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantView} msg The msg instance to transform.
  * @return {!Object}
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.toObject = function(includeInstance, msg) {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.toObject = function(includeInstance, msg) {
   var f, obj = {
-    id: jspb.Message.getFieldWithDefault(msg, 1, "")
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    projectId: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    grantedOrgId: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    grantedOrgName: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    grantedOrgDomain: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    roleKeysList: jspb.Message.getRepeatedField(msg, 6),
+    state: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    projectName: jspb.Message.getFieldWithDefault(msg, 10, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 11, 0)
   };
 
   if (includeInstance) {
@@ -22852,23 +24906,23 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.toObject = function(includeI
 /**
  * Deserializes binary data (in protobuf wire format).
  * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.caos.zitadel.management.api.v1.GrantedGrantID}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantView}
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.deserializeBinary = function(bytes) {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.deserializeBinary = function(bytes) {
   var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.caos.zitadel.management.api.v1.GrantedGrantID;
-  return proto.caos.zitadel.management.api.v1.GrantedGrantID.deserializeBinaryFromReader(msg, reader);
+  var msg = new proto.caos.zitadel.management.api.v1.ProjectGrantView;
+  return proto.caos.zitadel.management.api.v1.ProjectGrantView.deserializeBinaryFromReader(msg, reader);
 };
 
 
 /**
  * Deserializes binary data (in protobuf wire format) from the
  * given reader into the given message object.
- * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} msg The message object to deserialize into.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantView} msg The message object to deserialize into.
  * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.caos.zitadel.management.api.v1.GrantedGrantID}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantView}
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.deserializeBinaryFromReader = function(msg, reader) {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.deserializeBinaryFromReader = function(msg, reader) {
   while (reader.nextField()) {
     if (reader.isEndGroup()) {
       break;
@@ -22879,6 +24933,48 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.deserializeBinaryFromReader
       var value = /** @type {string} */ (reader.readString());
       msg.setId(value);
       break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectId(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGrantedOrgId(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGrantedOrgName(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGrantedOrgDomain(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addRoleKeys(value);
+      break;
+    case 7:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.ProjectGrantState} */ (reader.readEnum());
+      msg.setState(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 9:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 10:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectName(value);
+      break;
+    case 11:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -22892,9 +24988,9 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.deserializeBinaryFromReader
  * Serializes the message to binary data (in protobuf wire format).
  * @return {!Uint8Array}
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.serializeBinary = function() {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.serializeBinary = function() {
   var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.GrantedGrantID.serializeBinaryToWriter(this, writer);
+  proto.caos.zitadel.management.api.v1.ProjectGrantView.serializeBinaryToWriter(this, writer);
   return writer.getResultBuffer();
 };
 
@@ -22902,11 +24998,11 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.serializeBinary =
 /**
  * Serializes the given message to binary data (in protobuf wire
  * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.GrantedGrantID} message
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantView} message
  * @param {!jspb.BinaryWriter} writer
  * @suppress {unusedLocalVariables} f is only used for nested messages
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.serializeBinaryToWriter = function(message, writer) {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.serializeBinaryToWriter = function(message, writer) {
   var f = undefined;
   f = message.getId();
   if (f.length > 0) {
@@ -22915,6 +25011,78 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.serializeBinaryToWriter = fu
       f
     );
   }
+  f = message.getProjectId();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getGrantedOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getGrantedOrgName();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getGrantedOrgDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getRoleKeysList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      6,
+      f
+    );
+  }
+  f = message.getState();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      7,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      9,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getProjectName();
+  if (f.length > 0) {
+    writer.writeString(
+      10,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      11,
+      f
+    );
+  }
 };
 
 
@@ -22922,17 +25090,220 @@ proto.caos.zitadel.management.api.v1.GrantedGrantID.serializeBinaryToWriter = fu
  * optional string id = 1;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.getId = function() {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getId = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.GrantedGrantID.prototype.setId = function(value) {
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setId = function(value) {
   jspb.Message.setProto3StringField(this, 1, value);
 };
 
 
+/**
+ * optional string project_id = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getProjectId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setProjectId = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string granted_org_id = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getGrantedOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setGrantedOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string granted_org_name = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getGrantedOrgName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setGrantedOrgName = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string granted_org_domain = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getGrantedOrgDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setGrantedOrgDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * repeated string role_keys = 6;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getRoleKeysList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setRoleKeysList = function(value) {
+  jspb.Message.setField(this, 6, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.addRoleKeys = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.clearRoleKeysList = function() {
+  this.setRoleKeysList([]);
+};
+
+
+/**
+ * optional ProjectGrantState state = 7;
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantState}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.ProjectGrantState} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.ProjectGrantState} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setState = function(value) {
+  jspb.Message.setProto3EnumField(this, 7, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 9;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 9));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 9, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 9) != null;
+};
+
+
+/**
+ * optional string project_name = 10;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getProjectName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setProjectName = function(value) {
+  jspb.Message.setProto3StringField(this, 10, value);
+};
+
+
+/**
+ * optional uint64 sequence = 11;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 11, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 11, value);
+};
+
+
 
 /**
  * List of repeated fields within this message type.
@@ -22974,7 +25345,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.toObject = funct
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.ProjectGrant.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.ProjectGrantView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -23024,8 +25395,8 @@ proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.deserializeBinar
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.ProjectGrant;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectGrant.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.ProjectGrantView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectGrantView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -23083,7 +25454,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.serializeBinaryT
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.ProjectGrant.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.ProjectGrantView.serializeBinaryToWriter
     );
   }
 };
@@ -23135,28 +25506,28 @@ proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.prototype.setTot
 
 
 /**
- * repeated ProjectGrant result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrant>}
+ * repeated ProjectGrantView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantView>}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectGrant>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectGrant, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectGrantView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrant>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantView>} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectGrant=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.ProjectGrant}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantView}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectGrant, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectGrantView, opt_index);
 };
 
 
@@ -23502,7 +25873,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberRoles.prototype.clearRole
  * @private {!Array<number>}
  * @const
  */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.repeatedFields_ = [6];
+proto.caos.zitadel.management.api.v1.ProjectGrantMember.repeatedFields_ = [2];
 
 
 
@@ -23534,14 +25905,10 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.toObject = fun
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.toObject = function(includeInstance, msg) {
   var f, obj = {
     userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
-    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
-    email: jspb.Message.getFieldWithDefault(msg, 3, ""),
-    firstName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    lastName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    rolesList: jspb.Message.getRepeatedField(msg, 6),
+    rolesList: jspb.Message.getRepeatedField(msg, 2),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 5, 0)
   };
 
   if (includeInstance) {
@@ -23583,36 +25950,20 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.deserializeBinaryFromRea
       msg.setUserId(value);
       break;
     case 2:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setUserName(value);
-      break;
-    case 3:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setEmail(value);
-      break;
-    case 4:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setFirstName(value);
-      break;
-    case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setLastName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.addRoles(value);
       break;
-    case 7:
+    case 3:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setChangeDate(value);
       break;
-    case 8:
+    case 4:
       var value = new google_protobuf_timestamp_pb.Timestamp;
       reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
       msg.setCreationDate(value);
       break;
-    case 9:
+    case 5:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -23652,45 +26003,17 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.serializeBinaryToWriter
       f
     );
   }
-  f = message.getUserName();
-  if (f.length > 0) {
-    writer.writeString(
-      2,
-      f
-    );
-  }
-  f = message.getEmail();
-  if (f.length > 0) {
-    writer.writeString(
-      3,
-      f
-    );
-  }
-  f = message.getFirstName();
-  if (f.length > 0) {
-    writer.writeString(
-      4,
-      f
-    );
-  }
-  f = message.getLastName();
-  if (f.length > 0) {
-    writer.writeString(
-      5,
-      f
-    );
-  }
   f = message.getRolesList();
   if (f.length > 0) {
     writer.writeRepeatedString(
-      6,
+      2,
       f
     );
   }
   f = message.getChangeDate();
   if (f != null) {
     writer.writeMessage(
-      7,
+      3,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -23698,7 +26021,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.serializeBinaryToWriter
   f = message.getCreationDate();
   if (f != null) {
     writer.writeMessage(
-      8,
+      4,
       f,
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
@@ -23706,7 +26029,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.serializeBinaryToWriter
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      9,
+      5,
       f
     );
   }
@@ -23729,77 +26052,17 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setUserId = fu
 
 
 /**
- * optional string user_name = 2;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getUserName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setUserName = function(value) {
-  jspb.Message.setProto3StringField(this, 2, value);
-};
-
-
-/**
- * optional string email = 3;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 3, value);
-};
-
-
-/**
- * optional string first_name = 4;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getFirstName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setFirstName = function(value) {
-  jspb.Message.setProto3StringField(this, 4, value);
-};
-
-
-/**
- * optional string last_name = 5;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getLastName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setLastName = function(value) {
-  jspb.Message.setProto3StringField(this, 5, value);
-};
-
-
-/**
- * repeated string roles = 6;
+ * repeated string roles = 2;
  * @return {!Array<string>}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getRolesList = function() {
-  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 2));
 };
 
 
 /** @param {!Array<string>} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setRolesList = function(value) {
-  jspb.Message.setField(this, 6, value || []);
+  jspb.Message.setField(this, 2, value || []);
 };
 
 
@@ -23808,7 +26071,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setRolesList =
  * @param {number=} opt_index
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.addRoles = function(value, opt_index) {
-  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+  jspb.Message.addToRepeatedField(this, 2, value, opt_index);
 };
 
 
@@ -23821,18 +26084,18 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.clearRolesList
 
 
 /**
- * optional google.protobuf.Timestamp change_date = 7;
+ * optional google.protobuf.Timestamp change_date = 3;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getChangeDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setChangeDate = function(value) {
-  jspb.Message.setWrapperField(this, 7, value);
+  jspb.Message.setWrapperField(this, 3, value);
 };
 
 
@@ -23849,23 +26112,23 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.clearChangeDat
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.hasChangeDate = function() {
-  return jspb.Message.getField(this, 7) != null;
+  return jspb.Message.getField(this, 3) != null;
 };
 
 
 /**
- * optional google.protobuf.Timestamp creation_date = 8;
+ * optional google.protobuf.Timestamp creation_date = 4;
  * @return {?proto.google.protobuf.Timestamp}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getCreationDate = function() {
   return /** @type{?proto.google.protobuf.Timestamp} */ (
-    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 4));
 };
 
 
 /** @param {?proto.google.protobuf.Timestamp|undefined} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setCreationDate = function(value) {
-  jspb.Message.setWrapperField(this, 8, value);
+  jspb.Message.setWrapperField(this, 4, value);
 };
 
 
@@ -23882,22 +26145,22 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.clearCreationD
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.hasCreationDate = function() {
-  return jspb.Message.getField(this, 8) != null;
+  return jspb.Message.getField(this, 4) != null;
 };
 
 
 /**
- * optional uint64 sequence = 9;
+ * optional uint64 sequence = 5;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantMember.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 9, value);
+  jspb.Message.setProto3IntField(this, 5, value);
 };
 
 
@@ -24541,6 +26804,411 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberRemove.prototype.setUserI
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.repeatedFields_ = [6];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    userId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    email: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    rolesList: jspb.Message.getRepeatedField(msg, 6),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.ProjectGrantMemberView;
+  return proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addRoles(value);
+      break;
+    case 7:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 9:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getUserId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getRolesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      6,
+      f
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      7,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      9,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string user_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getUserId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setUserId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string user_name = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string email = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string first_name = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string last_name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * repeated string roles = 6;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getRolesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 6));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setRolesList = function(value) {
+  jspb.Message.setField(this, 6, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.addRoles = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 6, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.clearRolesList = function() {
+  this.setRolesList([]);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 7;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 7, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 7) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional uint64 sequence = 9;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 9, value);
+};
+
+
+
 /**
  * List of repeated fields within this message type.
  * @private {!Array<number>}
@@ -24581,7 +27249,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.toObject =
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.ProjectGrantMember.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -24631,8 +27299,8 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.deserializ
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.ProjectGrantMember;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectGrantMember.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.ProjectGrantMemberView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -24690,7 +27358,7 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.serializeB
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.ProjectGrantMember.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.ProjectGrantMemberView.serializeBinaryToWriter
     );
   }
 };
@@ -24742,28 +27410,28 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.prototype.
 
 
 /**
- * repeated ProjectGrantMember result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMember>}
+ * repeated ProjectGrantMemberView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView>}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMember>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectGrantMember, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.ProjectGrantMemberView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMember>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView>} value */
 proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantMember=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantMember}
+ * @return {!proto.caos.zitadel.management.api.v1.ProjectGrantMemberView}
  */
 proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectGrantMember, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.ProjectGrantMemberView, opt_index);
 };
 
 
@@ -25261,14 +27929,7 @@ proto.caos.zitadel.management.api.v1.UserGrant.toObject = function(includeInstan
     state: jspb.Message.getFieldWithDefault(msg, 6, 0),
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
-    userName: jspb.Message.getFieldWithDefault(msg, 9, ""),
-    firstName: jspb.Message.getFieldWithDefault(msg, 10, ""),
-    lastName: jspb.Message.getFieldWithDefault(msg, 11, ""),
-    email: jspb.Message.getFieldWithDefault(msg, 12, ""),
-    orgName: jspb.Message.getFieldWithDefault(msg, 13, ""),
-    orgDomain: jspb.Message.getFieldWithDefault(msg, 14, ""),
-    projectName: jspb.Message.getFieldWithDefault(msg, 15, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 16, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0)
   };
 
   if (includeInstance) {
@@ -25340,34 +28001,6 @@ proto.caos.zitadel.management.api.v1.UserGrant.deserializeBinaryFromReader = fun
       msg.setChangeDate(value);
       break;
     case 9:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setUserName(value);
-      break;
-    case 10:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setFirstName(value);
-      break;
-    case 11:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setLastName(value);
-      break;
-    case 12:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setEmail(value);
-      break;
-    case 13:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setOrgName(value);
-      break;
-    case 14:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setOrgDomain(value);
-      break;
-    case 15:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setProjectName(value);
-      break;
-    case 16:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -25458,59 +28091,10 @@ proto.caos.zitadel.management.api.v1.UserGrant.serializeBinaryToWriter = functio
       google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
     );
   }
-  f = message.getUserName();
-  if (f.length > 0) {
-    writer.writeString(
-      9,
-      f
-    );
-  }
-  f = message.getFirstName();
-  if (f.length > 0) {
-    writer.writeString(
-      10,
-      f
-    );
-  }
-  f = message.getLastName();
-  if (f.length > 0) {
-    writer.writeString(
-      11,
-      f
-    );
-  }
-  f = message.getEmail();
-  if (f.length > 0) {
-    writer.writeString(
-      12,
-      f
-    );
-  }
-  f = message.getOrgName();
-  if (f.length > 0) {
-    writer.writeString(
-      13,
-      f
-    );
-  }
-  f = message.getOrgDomain();
-  if (f.length > 0) {
-    writer.writeString(
-      14,
-      f
-    );
-  }
-  f = message.getProjectName();
-  if (f.length > 0) {
-    writer.writeString(
-      15,
-      f
-    );
-  }
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      16,
+      9,
       f
     );
   }
@@ -25691,122 +28275,17 @@ proto.caos.zitadel.management.api.v1.UserGrant.prototype.hasChangeDate = functio
 
 
 /**
- * optional string user_name = 9;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getUserName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setUserName = function(value) {
-  jspb.Message.setProto3StringField(this, 9, value);
-};
-
-
-/**
- * optional string first_name = 10;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getFirstName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setFirstName = function(value) {
-  jspb.Message.setProto3StringField(this, 10, value);
-};
-
-
-/**
- * optional string last_name = 11;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getLastName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setLastName = function(value) {
-  jspb.Message.setProto3StringField(this, 11, value);
-};
-
-
-/**
- * optional string email = 12;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 12, value);
-};
-
-
-/**
- * optional string org_name = 13;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getOrgName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setOrgName = function(value) {
-  jspb.Message.setProto3StringField(this, 13, value);
-};
-
-
-/**
- * optional string org_domain = 14;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getOrgDomain = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setOrgDomain = function(value) {
-  jspb.Message.setProto3StringField(this, 14, value);
-};
-
-
-/**
- * optional string project_name = 15;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.getProjectName = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UserGrant.prototype.setProjectName = function(value) {
-  jspb.Message.setProto3StringField(this, 15, value);
-};
-
-
-/**
- * optional uint64 sequence = 16;
+ * optional uint64 sequence = 9;
  * @return {number}
  */
 proto.caos.zitadel.management.api.v1.UserGrant.prototype.getSequence = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 16, 0));
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
 };
 
 
 /** @param {number} value */
 proto.caos.zitadel.management.api.v1.UserGrant.prototype.setSequence = function(value) {
-  jspb.Message.setProto3IntField(this, 16, value);
+  jspb.Message.setProto3IntField(this, 9, value);
 };
 
 
@@ -27444,6 +29923,627 @@ proto.caos.zitadel.management.api.v1.ProjectGrantUserGrantUpdate.prototype.clear
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.repeatedFields_ = [5];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserGrantView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserGrantView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    userId: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    orgId: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    projectId: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    roleKeysList: jspb.Message.getRepeatedField(msg, 5),
+    state: jspb.Message.getFieldWithDefault(msg, 6, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    userName: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 10, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    email: jspb.Message.getFieldWithDefault(msg, 12, ""),
+    orgName: jspb.Message.getFieldWithDefault(msg, 13, ""),
+    orgDomain: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    projectName: jspb.Message.getFieldWithDefault(msg, 15, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 16, 0),
+    resourceOwner: jspb.Message.getFieldWithDefault(msg, 17, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserGrantView}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserGrantView;
+  return proto.caos.zitadel.management.api.v1.UserGrantView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserGrantView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserGrantView}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserId(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectId(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addRoleKeys(value);
+      break;
+    case 6:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.UserGrantState} */ (reader.readEnum());
+      msg.setState(value);
+      break;
+    case 7:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 9:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 10:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 11:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 12:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 13:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgName(value);
+      break;
+    case 14:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgDomain(value);
+      break;
+    case 15:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setProjectName(value);
+      break;
+    case 16:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 17:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setResourceOwner(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.UserGrantView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.UserGrantView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getUserId();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getProjectId();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getRoleKeysList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      5,
+      f
+    );
+  }
+  f = message.getState();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      6,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      7,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      9,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      10,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      11,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      12,
+      f
+    );
+  }
+  f = message.getOrgName();
+  if (f.length > 0) {
+    writer.writeString(
+      13,
+      f
+    );
+  }
+  f = message.getOrgDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      14,
+      f
+    );
+  }
+  f = message.getProjectName();
+  if (f.length > 0) {
+    writer.writeString(
+      15,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      16,
+      f
+    );
+  }
+  f = message.getResourceOwner();
+  if (f.length > 0) {
+    writer.writeString(
+      17,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string user_id = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getUserId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setUserId = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string org_id = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string project_id = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getProjectId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setProjectId = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * repeated string role_keys = 5;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getRoleKeysList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 5));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setRoleKeysList = function(value) {
+  jspb.Message.setField(this, 5, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.addRoleKeys = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 5, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.clearRoleKeysList = function() {
+  this.setRoleKeysList([]);
+};
+
+
+/**
+ * optional UserGrantState state = 6;
+ * @return {!proto.caos.zitadel.management.api.v1.UserGrantState}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getState = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.UserGrantState} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.UserGrantState} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setState = function(value) {
+  jspb.Message.setProto3EnumField(this, 6, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 7;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 7, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 7) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional string user_name = 9;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 9, value);
+};
+
+
+/**
+ * optional string first_name = 10;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 10, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 10, value);
+};
+
+
+/**
+ * optional string last_name = 11;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 11, value);
+};
+
+
+/**
+ * optional string email = 12;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 12, value);
+};
+
+
+/**
+ * optional string org_name = 13;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getOrgName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setOrgName = function(value) {
+  jspb.Message.setProto3StringField(this, 13, value);
+};
+
+
+/**
+ * optional string org_domain = 14;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getOrgDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setOrgDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 14, value);
+};
+
+
+/**
+ * optional string project_name = 15;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getProjectName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setProjectName = function(value) {
+  jspb.Message.setProto3StringField(this, 15, value);
+};
+
+
+/**
+ * optional uint64 sequence = 16;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 16, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 16, value);
+};
+
+
+/**
+ * optional string resource_owner = 17;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.getResourceOwner = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserGrantView.prototype.setResourceOwner = function(value) {
+  jspb.Message.setProto3StringField(this, 17, value);
+};
+
+
+
 /**
  * List of repeated fields within this message type.
  * @private {!Array<number>}
@@ -27484,7 +30584,7 @@ proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.toObject = function
     limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
     totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
     resultList: jspb.Message.toObjectList(msg.getResultList(),
-    proto.caos.zitadel.management.api.v1.UserGrant.toObject, includeInstance)
+    proto.caos.zitadel.management.api.v1.UserGrantView.toObject, includeInstance)
   };
 
   if (includeInstance) {
@@ -27534,8 +30634,8 @@ proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.deserializeBinaryFr
       msg.setTotalResult(value);
       break;
     case 4:
-      var value = new proto.caos.zitadel.management.api.v1.UserGrant;
-      reader.readMessage(value,proto.caos.zitadel.management.api.v1.UserGrant.deserializeBinaryFromReader);
+      var value = new proto.caos.zitadel.management.api.v1.UserGrantView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.UserGrantView.deserializeBinaryFromReader);
       msg.addResult(value);
       break;
     default:
@@ -27593,7 +30693,7 @@ proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.serializeBinaryToWr
     writer.writeRepeatedMessage(
       4,
       f,
-      proto.caos.zitadel.management.api.v1.UserGrant.serializeBinaryToWriter
+      proto.caos.zitadel.management.api.v1.UserGrantView.serializeBinaryToWriter
     );
   }
 };
@@ -27645,28 +30745,28 @@ proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.prototype.setTotalR
 
 
 /**
- * repeated UserGrant result = 4;
- * @return {!Array<!proto.caos.zitadel.management.api.v1.UserGrant>}
+ * repeated UserGrantView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.UserGrantView>}
  */
 proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.prototype.getResultList = function() {
-  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.UserGrant>} */ (
-    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.UserGrant, 4));
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.UserGrantView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.UserGrantView, 4));
 };
 
 
-/** @param {!Array<!proto.caos.zitadel.management.api.v1.UserGrant>} value */
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.UserGrantView>} value */
 proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.prototype.setResultList = function(value) {
   jspb.Message.setRepeatedWrapperField(this, 4, value);
 };
 
 
 /**
- * @param {!proto.caos.zitadel.management.api.v1.UserGrant=} opt_value
+ * @param {!proto.caos.zitadel.management.api.v1.UserGrantView=} opt_value
  * @param {number=} opt_index
- * @return {!proto.caos.zitadel.management.api.v1.UserGrant}
+ * @return {!proto.caos.zitadel.management.api.v1.UserGrantView}
  */
 proto.caos.zitadel.management.api.v1.UserGrantSearchResponse.prototype.addResult = function(opt_value, opt_index) {
-  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.UserGrant, opt_index);
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.UserGrantView, opt_index);
 };
 
 
@@ -29486,7 +32586,10 @@ proto.caos.zitadel.management.api.v1.UserSearchKey = {
 proto.caos.zitadel.management.api.v1.SearchMethod = {
   SEARCHMETHOD_EQUALS: 0,
   SEARCHMETHOD_STARTS_WITH: 1,
-  SEARCHMETHOD_CONTAINS: 2
+  SEARCHMETHOD_CONTAINS: 2,
+  SEARCHMETHOD_EQUALS_IGNORE_CASE: 3,
+  SEARCHMETHOD_STARTS_WITH_IGNORE_CASE: 4,
+  SEARCHMETHOD_CONTAINS_IGNORE_CASE: 5
 };
 
 /**
@@ -29559,15 +32662,15 @@ proto.caos.zitadel.management.api.v1.ProjectState = {
  * @enum {number}
  */
 proto.caos.zitadel.management.api.v1.ProjectType = {
-  PROJECTTYPE_UNKNOWN: 0,
-  PROJECTTYPE_SELF: 1,
+  PROJECTTYPE_UNSPECIFIED: 0,
+  PROJECTTYPE_OWNED: 1,
   PROJECTTYPE_GRANTED: 2
 };
 
 /**
  * @enum {number}
  */
-proto.caos.zitadel.management.api.v1.ProjectSearchKey = {
+proto.caos.zitadel.management.api.v1.GrantedProjectSearchKey = {
   PROJECTSEARCHKEY_UNSPECIFIED: 0,
   PROJECTSEARCHKEY_PROJECT_NAME: 1
 };
@@ -29589,7 +32692,8 @@ proto.caos.zitadel.management.api.v1.ProjectMemberSearchKey = {
   PROJECTMEMBERSEARCHKEY_FIRST_NAME: 1,
   PROJECTMEMBERSEARCHKEY_LAST_NAME: 2,
   PROJECTMEMBERSEARCHKEY_EMAIL: 3,
-  PROJECTMEMBERSEARCHKEY_USER_ID: 4
+  PROJECTMEMBERSEARCHKEY_USER_ID: 4,
+  PROJECTMEMBERSEARCHKEY_USER_NAME: 5
 };
 
 /**
@@ -29662,7 +32766,8 @@ proto.caos.zitadel.management.api.v1.ProjectGrantMemberSearchKey = {
   PROJECTGRANTMEMBERSEARCHKEY_FIRST_NAME: 1,
   PROJECTGRANTMEMBERSEARCHKEY_LAST_NAME: 2,
   PROJECTGRANTMEMBERSEARCHKEY_EMAIL: 3,
-  PROJECTGRANTMEMBERSEARCHKEY_USER_ID: 4
+  PROJECTGRANTMEMBERSEARCHKEY_USER_ID: 4,
+  PROJECTGRANTMEMBERSEARCHKEY_USER_NAME: 5
 };
 
 /**
diff --git a/console/src/app/services/admin.service.ts b/console/src/app/services/admin.service.ts
index 7fb8009e15..a8bab965ca 100644
--- a/console/src/app/services/admin.service.ts
+++ b/console/src/app/services/admin.service.ts
@@ -2,7 +2,7 @@ import { Injectable } from '@angular/core';
 import { Metadata } from 'grpc-web';
 
 import { AdminServicePromiseClient } from '../proto/generated/admin_grpc_web_pb';
-import { CreateOrgRequest, OrgSetUpRequest, OrgSetUpResponse, RegisterUserRequest } from '../proto/generated/admin_pb';
+import { CreateOrgRequest, CreateUserRequest, OrgSetUpRequest, OrgSetUpResponse } from '../proto/generated/admin_pb';
 import { GrpcBackendService } from './grpc-backend.service';
 import { GrpcService, RequestFactory, ResponseMapper } from './grpc.service';
 
@@ -29,7 +29,7 @@ export class AdminService {
 
     public async SetUpOrg(
         createOrgRequest: CreateOrgRequest,
-        registerUserRequest: RegisterUserRequest,
+        registerUserRequest: CreateUserRequest,
     ): Promise<OrgSetUpResponse> {
         const req: OrgSetUpRequest = new OrgSetUpRequest();
 
diff --git a/console/src/app/services/auth-interceptor.service.ts b/console/src/app/services/auth-interceptor.service.ts
index 8d0d61ead6..1826bf95a9 100644
--- a/console/src/app/services/auth-interceptor.service.ts
+++ b/console/src/app/services/auth-interceptor.service.ts
@@ -14,5 +14,4 @@ export class AuthInterceptorService implements HttpInterceptor {
 
         return next.handle(req);
     }
-
 }
diff --git a/console/src/app/services/auth-user.service.ts b/console/src/app/services/auth-user.service.ts
index 688bb8ea4b..854154cc53 100644
--- a/console/src/app/services/auth-user.service.ts
+++ b/console/src/app/services/auth-user.service.ts
@@ -12,7 +12,6 @@ import {
     MyProjectOrgSearchRequest,
     MyProjectOrgSearchResponse,
     PasswordChange,
-    PasswordRequest,
     UpdateUserAddressRequest,
     UpdateUserEmailRequest,
     UpdateUserPhoneRequest,
@@ -196,17 +195,6 @@ export class AuthUserService {
         );
     }
 
-    public async SetMyPassword(id: string): Promise<Empty> {
-        const req = new PasswordRequest();
-        req.setPassword(id);
-
-        return await this.request(
-            c => c.setMyPassword,
-            req,
-            f => f,
-        );
-    }
-
     public async ChangeMyPassword(oldPassword: string, newPassword: string): Promise<Empty> {
         const req = new PasswordChange();
         req.setOldPassword(oldPassword);
@@ -234,7 +222,7 @@ export class AuthUserService {
         );
     }
 
-    public async VerifyMfaOTP(code: string): Promise<MfaOtpResponse> {
+    public async VerifyMfaOTP(code: string): Promise<Empty> {
         const req = new VerifyMfaOtp();
         req.setCode(code);
         return await this.request(
diff --git a/console/src/app/services/auth.service.ts b/console/src/app/services/auth.service.ts
index 9bd9556a73..fb81c98cc9 100644
--- a/console/src/app/services/auth.service.ts
+++ b/console/src/app/services/auth.service.ts
@@ -65,6 +65,8 @@ export class AuthService {
         this.config.issuer = config?.issuer || this.grpcService.issuer;
         this.config.clientId = config?.clientId || this.grpcService.clientid;
         this.config.customQueryParams = config?.customQueryParams;
+        console.log(this.config);
+
         this.oauthService.configure(this.config);
         // this.oauthService.setupAutomaticSilentRefresh();
         this.oauthService.strictDiscoveryDocumentValidation = false;
diff --git a/console/src/app/services/grpc-org.interceptor.ts b/console/src/app/services/grpc-org.interceptor.ts
index 9291079bf5..44d312090b 100644
--- a/console/src/app/services/grpc-org.interceptor.ts
+++ b/console/src/app/services/grpc-org.interceptor.ts
@@ -22,6 +22,9 @@ export class GrpcOrgInterceptor implements GrpcInterceptor {
             metadata[orgKey] = org.id ?? '';
         }
 
+        // metadata['x-zitadel-login'] = 'true';
+        // metadata['x-zitadel-userid'] = '58922557365027097';
+        // metadata['x-zitadel-orgid'] = '58922556878487833';
         return await next.handle(req, metadata);
     }
 }
diff --git a/console/src/app/services/grpc.service.ts b/console/src/app/services/grpc.service.ts
index fb18424606..d8cc821431 100644
--- a/console/src/app/services/grpc.service.ts
+++ b/console/src/app/services/grpc.service.ts
@@ -31,6 +31,7 @@ export class GrpcService {
 
                     this.issuer = data.issuer;
                     if (data.clientid) {
+                        console.log(data.clientid);
                         this.clientid = data.clientid;
                     }
                 }
diff --git a/console/src/app/services/project.service.ts b/console/src/app/services/project.service.ts
index 5e9322a548..ea1c859246 100644
--- a/console/src/app/services/project.service.ts
+++ b/console/src/app/services/project.service.ts
@@ -10,7 +10,9 @@ import {
     ApplicationSearchRequest,
     ApplicationSearchResponse,
     ApplicationUpdate,
-    GrantedGrantID,
+    GrantedProjectSearchQuery,
+    GrantedProjectSearchRequest,
+    GrantedProjectSearchResponse,
     OIDCApplicationCreate,
     OIDCConfig,
     OIDCConfigUpdate,
@@ -38,9 +40,6 @@ import {
     ProjectRoleSearchQuery,
     ProjectRoleSearchRequest,
     ProjectRoleSearchResponse,
-    ProjectSearchQuery,
-    ProjectSearchRequest,
-    ProjectSearchResponse,
     ProjectUpdateRequest,
     ProjectUserGrantSearchRequest,
     UserGrant,
@@ -72,21 +71,36 @@ export class ProjectService {
         return responseMapper(response);
     }
 
-    public async SearchProjects(
-        limit: number, offset: number, queryList?: ProjectSearchQuery[]): Promise<ProjectSearchResponse> {
-        const req = new ProjectSearchRequest();
+    public async SearchGrantedProjects(
+        limit: number, offset: number, queryList?: GrantedProjectSearchQuery[]): Promise<GrantedProjectSearchResponse> {
+        const req = new GrantedProjectSearchRequest();
         req.setLimit(limit);
         req.setOffset(offset);
         if (queryList) {
             req.setQueriesList(queryList);
         }
         return await this.request(
-            c => c.searchProjects,
+            c => c.searchGrantedProjects,
             req,
             f => f,
         );
     }
 
+    // public async SearchGrantedProjects(
+    //     limit: number, offset: number, queryList?: GrantedProjectSearchQuery[]): Promise<GrantedProjectSearchResponse> {
+    //     const req = new GrantedProjectSearchRequest();
+    //     req.setLimit(limit);
+    //     req.setOffset(offset);
+    //     if (queryList) {
+    //         req.setQueriesList(queryList);
+    //     }
+    //     return await this.request(
+    //         c => c.search,
+    //         req,
+    //         f => f,
+    //     );
+    // }
+
     public async GetProjectById(projectId: string): Promise<Project> {
         const req = new ProjectID();
         req.setId(projectId);
@@ -97,6 +111,17 @@ export class ProjectService {
         );
     }
 
+    public async GetGrantedProjectGrantByID(projectId: string, id: string): Promise<ProjectGrant> {
+        const req = new ProjectGrantID();
+        req.setId(id);
+        req.setProjectId(projectId);
+        return await this.request(
+            c => c.getGrantedProjectGrantByID,
+            req,
+            f => f,
+        );
+    }
+
     public async CreateProject(project: ProjectCreateRequest.AsObject): Promise<Project> {
         const req = new ProjectCreateRequest();
         req.setName(project.name);
@@ -368,17 +393,6 @@ export class ProjectService {
         );
     }
 
-    // NEW
-    public async GetGrantedProjectGrantByID(id: string): Promise<ProjectGrant> {
-        const req = new GrantedGrantID();
-        req.setId(id);
-        return await this.request(
-            c => c.getGrantedProjectGrantByID,
-            req,
-            f => f,
-        );
-    }
-
     public async GetProjectMemberRoles(): Promise<ProjectMemberRoles> {
         const req = new Empty();
         return await this.request(
diff --git a/console/src/assets/environment.json b/console/src/assets/environment.json
index 8bbe2b78e0..3708749031 100644
--- a/console/src/assets/environment.json
+++ b/console/src/assets/environment.json
@@ -3,5 +3,5 @@
     "mgmtServiceUrl": "https://api.zitadel.dev",
     "adminServiceUrl":"https://api.zitadel.dev",
     "issuer": "https://issuer.zitadel.dev",
-    "clientid": "293876451759882777@Zitadel.DEFAULT"
+    "clientid": "58891550352010481@zitadel"
 }