Regenerate client from commit 87e810e of spec repo (#4083)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: dd-octo-sts[bot]

.generator/schemas/v2/openapi.yaml

@@ -198543,18 +198543,9 @@ paths:
       description: |-
         Create a new role for your organization.
 
-        The following read permissions are automatically added to every new role, even if they are not included in the request:
-
-        - Dashboards Read
-        - Notebooks Read
-        - Monitors Read
-        - APM Read
-        - Vulnerability Management Read
-        - RUM Apps Read
-        - Incidents Read
-        - SLOs Read
-        - CI Visibility Read
-        - CD Visibility Read
+        [Restricted permissions](https://docs.datadoghq.com/account_management/rbac/permissions/#restricted-permissions),
+        such as Dashboards Read and Monitors Read, are added to every new role by default, even if they are omitted from
+        the request. To exclude them, set `default_permissions_opt_out` to `true`.
       operationId: CreateRole
       requestBody:
         content:
@@ -198719,6 +198710,10 @@ paths:
     patch:
       description: |-
         Edit a role. Can only be used with application keys belonging to administrators.
+
+        [Restricted permissions](https://docs.datadoghq.com/account_management/rbac/permissions/#restricted-permissions),
+        such as Dashboards Read and Monitors Read, remain on the role by default, even if they are omitted from
+        the request. To exclude them, set `default_permissions_opt_out` to `true`.
       operationId: UpdateRole
       parameters:
         - $ref: "#/components/parameters/RoleID"

src/datadog_api_client/v2/api/roles_api.py

@@ -485,18 +485,9 @@ def create_role(
 
         Create a new role for your organization.
 
-        The following read permissions are automatically added to every new role, even if they are not included in the request:
-
-        * Dashboards Read
-        * Notebooks Read
-        * Monitors Read
-        * APM Read
-        * Vulnerability Management Read
-        * RUM Apps Read
-        * Incidents Read
-        * SLOs Read
-        * CI Visibility Read
-        * CD Visibility Read
+        `Restricted permissions <https://docs.datadoghq.com/account_management/rbac/permissions/#restricted-permissions>`_ ,
+        such as Dashboards Read and Monitors Read, are added to every new role by default, even if they are omitted from
+        the request. To exclude them, set ``default_permissions_opt_out`` to ``true``.
 
         :type body: RoleCreateRequest
         :rtype: RoleCreateResponse
@@ -732,6 +723,10 @@ def update_role(
 
         Edit a role. Can only be used with application keys belonging to administrators.
 
+        `Restricted permissions <https://docs.datadoghq.com/account_management/rbac/permissions/#restricted-permissions>`_ ,
+        such as Dashboards Read and Monitors Read, remain on the role by default, even if they are omitted from
+        the request. To exclude them, set ``default_permissions_opt_out`` to ``true``.
+
         :param role_id: The unique identifier of the role.
         :type role_id: str
         :type body: RoleUpdateRequest