diff --git a/api_names_out.yaml b/api_names_out.yaml
index aaa6bc0c3d0..144a5f2734f 100644
--- a/api_names_out.yaml
+++ b/api_names_out.yaml
@@ -77124,12 +77124,17 @@
 "/cloudidentity:v1beta1/cloudidentity.orgUnits.memberships.list/parent": parent
 "/cloudidentity:v1beta1/cloudidentity.orgUnits.memberships.move": move_org_membership
 "/cloudidentity:v1beta1/cloudidentity.orgUnits.memberships.move/name": name
+"/cloudidentity:v1beta1/cloudidentity.policies.create": create_policy
+"/cloudidentity:v1beta1/cloudidentity.policies.delete": delete_policy
+"/cloudidentity:v1beta1/cloudidentity.policies.delete/name": name
 "/cloudidentity:v1beta1/cloudidentity.policies.get": get_policy
 "/cloudidentity:v1beta1/cloudidentity.policies.get/name": name
 "/cloudidentity:v1beta1/cloudidentity.policies.list": list_policies
 "/cloudidentity:v1beta1/cloudidentity.policies.list/filter": filter
 "/cloudidentity:v1beta1/cloudidentity.policies.list/pageSize": page_size
 "/cloudidentity:v1beta1/cloudidentity.policies.list/pageToken": page_token
+"/cloudidentity:v1beta1/cloudidentity.policies.patch": patch_policy
+"/cloudidentity:v1beta1/cloudidentity.policies.patch/name": name
 "/cloudidentity:v1beta1/fields": fields
 "/cloudidentity:v1beta1/key": key
 "/cloudidentity:v1beta1/quotaUser": quota_user
diff --git a/generated/google-apis-cloudidentity_v1beta1/CHANGELOG.md b/generated/google-apis-cloudidentity_v1beta1/CHANGELOG.md
index 41c76c14825..07cae9d0f2f 100644
--- a/generated/google-apis-cloudidentity_v1beta1/CHANGELOG.md
+++ b/generated/google-apis-cloudidentity_v1beta1/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Release history for google-apis-cloudidentity_v1beta1
 
+### v0.58.0 (2025-11-02)
+
+* Regenerated from discovery document revision 20251027
+
 ### v0.57.0 (2025-10-26)
 
 * Regenerated from discovery document revision 20251021
diff --git a/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/gem_version.rb b/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/gem_version.rb
index 09b4a7798bc..de9fd4e00fc 100644
--- a/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/gem_version.rb
+++ b/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/gem_version.rb
@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudidentityV1beta1
       # Version of the google-apis-cloudidentity_v1beta1 gem
-      GEM_VERSION = "0.57.0"
+      GEM_VERSION = "0.58.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20251021"
+      REVISION = "20251027"
     end
   end
 end
diff --git a/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/service.rb b/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/service.rb
index 4b6acca814d..515caf41ed5 100644
--- a/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/service.rb
+++ b/generated/google-apis-cloudidentity_v1beta1/lib/google/apis/cloudidentity_v1beta1/service.rb
@@ -2592,6 +2592,66 @@ def move_org_membership(name, move_org_membership_request_object = nil, fields:
           execute_or_queue_command(command, &block)
         end
         
+        # Create a policy.
+        # @param [Google::Apis::CloudidentityV1beta1::Policy] policy_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_policy(policy_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1beta1/policies', options)
+          command.request_representation = Google::Apis::CloudidentityV1beta1::Policy::Representation
+          command.request_object = policy_object
+          command.response_representation = Google::Apis::CloudidentityV1beta1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::Operation
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Delete a policy.
+        # @param [String] name
+        #   Required. The name of the policy to retrieve. Format: "policies/`policy`".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_policy(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1beta1/{+name}', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Get a policy.
         # @param [String] name
         #   Required. The name of the policy to retrieve. Format: "policies/`policy`".
@@ -2674,6 +2734,40 @@ def list_policies(filter: nil, page_size: nil, page_token: nil, fields: nil, quo
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Update a policy.
+        # @param [String] name
+        #   Output only. Identifier. The [resource name](https://cloud.google.com/apis/
+        #   design/resource_names) of the Policy. Format: policies/`policy`.
+        # @param [Google::Apis::CloudidentityV1beta1::Policy] policy_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_policy(name, policy_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1beta1/{+name}', options)
+          command.request_representation = Google::Apis::CloudidentityV1beta1::Policy::Representation
+          command.request_object = policy_object
+          command.response_representation = Google::Apis::CloudidentityV1beta1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected