diff --git a/console/src/app/pages/apps/app-detail/app-detail.component.html b/console/src/app/pages/apps/app-detail/app-detail.component.html
index 84b640b8b4..5c73128a3e 100644
--- a/console/src/app/pages/apps/app-detail/app-detail.component.html
+++ b/console/src/app/pages/apps/app-detail/app-detail.component.html
@@ -6,6 +6,8 @@
         <h1>{{ 'APP.PAGES.TITLE' | translate }} {{app?.name}}</h1>
 
         <p class="desc">{{ 'APP.PAGES.DESCRIPTION' | translate }}</p>
+        <p *ngIf="isZitadel" class="zitadel-warning">This belongs to Zitadel project. If you change something, Zitadel
+            may not behave as intended!</p>
     </div>
 
     <span *ngIf="errorMessage" class="err-container">{{errorMessage}}</span>
@@ -86,7 +88,7 @@
 
                 <mat-form-field class="full-width" appearance="outline">
                     <mat-label>{{ 'APP.OIDC.REDIRECT' | translate }}</mat-label>
-                    <mat-chip-list #chipRedirectList [disabled]="isZitadel">
+                    <mat-chip-list #chipRedirectList>
                         <mat-chip *ngFor="let redirect of redirectUrisList" [selectable]="selectable"
                             (removed)="remove(redirect, RedirectType.REDIRECT)">
                             {{redirect}}
@@ -100,7 +102,7 @@
 
                 <mat-form-field class="full-width" appearance="outline">
                     <mat-label>{{ 'APP.OIDC.POSTLOGOUTREDIRECT' | translate }}</mat-label>
-                    <mat-chip-list #chipPostRedirectList [disabled]="isZitadel">
+                    <mat-chip-list #chipPostRedirectList>
                         <mat-chip *ngFor="let redirect of postLogoutRedirectUrisList" [selectable]="selectable"
                             (removed)="remove(redirect, RedirectType.POSTREDIRECT)">
                             {{redirect}}
diff --git a/console/src/app/pages/apps/app-detail/app-detail.component.scss b/console/src/app/pages/apps/app-detail/app-detail.component.scss
index 666ca08bc8..7fa5a94d6e 100644
--- a/console/src/app/pages/apps/app-detail/app-detail.component.scss
+++ b/console/src/app/pages/apps/app-detail/app-detail.component.scss
@@ -21,6 +21,11 @@
         font-size: .9rem;
         color: #81868a;
     }
+
+    .zitadel-warning {
+        font-size: 14px;
+        color: rgb(201,51,71);
+    }
   }
 
   .err-container {
diff --git a/console/src/app/pages/apps/app-detail/app-detail.component.ts b/console/src/app/pages/apps/app-detail/app-detail.component.ts
index 649112b9eb..31b287393c 100644
--- a/console/src/app/pages/apps/app-detail/app-detail.component.ts
+++ b/console/src/app/pages/apps/app-detail/app-detail.component.ts
@@ -18,6 +18,7 @@ import {
     OIDCResponseType,
 } from 'src/app/proto/generated/management_pb';
 import { GrpcService } from 'src/app/services/grpc.service';
+import { OrgService } from 'src/app/services/org.service';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -84,6 +85,7 @@ export class AppDetailComponent implements OnInit, OnDestroy {
         private _location: Location,
         private dialog: MatDialog,
         private grpcService: GrpcService,
+        private orgService: OrgService,
     ) {
         this.appNameForm = this.fb.group({
             state: ['', []],
@@ -108,12 +110,8 @@ export class AppDetailComponent implements OnInit, OnDestroy {
 
     private async getData({ projectid, id }: Params): Promise<void> {
         this.projectId = projectid;
-        this.projectService.GetProjectById(this.projectId).then(project => {
-            this.isZitadel = project.toObject().name === 'Zitadel';
-            if (this.isZitadel) {
-                this.appNameForm.disable();
-                this.appForm.disable();
-            }
+        this.orgService.GetIam().then(iam => {
+            this.isZitadel = iam.toObject().iamProjectId === this.projectId;
         });
 
 
@@ -122,8 +120,7 @@ export class AppDetailComponent implements OnInit, OnDestroy {
             this.appNameForm.patchValue(this.app);
             console.log(this.grpcService.clientid, this.app.oidcConfig?.clientId);
 
-            console.log(this.isZitadel);
-            if (this.app.state !== AppState.APPSTATE_ACTIVE || this.isZitadel) {
+            if (this.app.state !== AppState.APPSTATE_ACTIVE) {
                 this.appNameForm.controls['name'].disable();
                 this.appForm.disable();
             } else {
diff --git a/console/src/app/pages/orgs/org-create/org-create.component.html b/console/src/app/pages/orgs/org-create/org-create.component.html
index f800631cc1..5832704b32 100644
--- a/console/src/app/pages/orgs/org-create/org-create.component.html
+++ b/console/src/app/pages/orgs/org-create/org-create.component.html
@@ -74,13 +74,6 @@
                             {{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
                     </mat-form-field>
-                    <mat-form-field class="formfield">
-                        <mat-label>{{ 'USER.PROFILE.DISPLAYNAME' | translate }}</mat-label>
-                        <input matInput formControlName="displayName" />
-                        <mat-error *ngIf="displayName?.invalid && displayName?.errors?.required">
-                            {{ 'USER.VALIDATION.REQUIRED' | translate }}
-                        </mat-error>
-                    </mat-form-field>
 
                     <p class="section">{{ 'USER.CREATE.GENDERLANGSECTION' | translate }}</p>
 
@@ -115,7 +108,10 @@
                             type="password" />
                         <mat-error *ngIf="password?.errors?.required">{{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
-                        <mat-error *ngIf="password?.errors?.pattern">{{ 'USER.VALIDATION.INVALIDPATTERN' | translate }}
+                        <mat-error *ngIf="password?.errors?.pattern">{{ policy | passwordPattern | translate }}
+                        </mat-error>
+                        <mat-error *ngIf="password?.errors?.minlength">
+                            {{ 'USER.VALIDATION.MINLENGTH' | translate:policy }}
                         </mat-error>
                     </mat-form-field>
                     <mat-form-field class="formfield">
@@ -125,6 +121,11 @@
                         <mat-error *ngIf="confirmPassword?.errors?.required">
                             {{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
+                        <mat-error *ngIf="password?.errors?.pattern">{{ policy | passwordPattern | translate }}
+                        </mat-error>
+                        <mat-error *ngIf="password?.errors?.minlength">
+                            {{ 'USER.VALIDATION.MINLENGTH' | translate:policy }}
+                        </mat-error>
                     </mat-form-field>
 
                 </div>
diff --git a/console/src/app/pages/orgs/org-create/org-create.component.ts b/console/src/app/pages/orgs/org-create/org-create.component.ts
index 1f43c04bcc..26f15b18e5 100644
--- a/console/src/app/pages/orgs/org-create/org-create.component.ts
+++ b/console/src/app/pages/orgs/org-create/org-create.component.ts
@@ -4,7 +4,9 @@ import { Component } from '@angular/core';
 import { AbstractControl, FormBuilder, FormGroup, Validators } from '@angular/forms';
 import { Router } from '@angular/router';
 import { CreateOrgRequest, CreateUserRequest, Gender, OrgSetUpResponse } from 'src/app/proto/generated/admin_pb';
+import { PasswordComplexityPolicy } from 'src/app/proto/generated/management_pb';
 import { AdminService } from 'src/app/services/admin.service';
+import { OrgService } from 'src/app/services/org.service';
 import { ToastService } from 'src/app/services/toast.service';
 
 function passwordConfirmValidator(c: AbstractControl): any {
@@ -44,28 +46,65 @@ export class OrgCreateComponent {
 
     public genders: Gender[] = [Gender.GENDER_FEMALE, Gender.GENDER_MALE, Gender.GENDER_UNSPECIFIED];
     public languages: string[] = ['de', 'en'];
+
+    public policy!: PasswordComplexityPolicy.AsObject;
+
     constructor(
         private router: Router,
         private toast: ToastService,
         private adminService: AdminService,
         private _location: Location,
         private fb: FormBuilder,
+        private orgService: OrgService,
     ) {
+        const validators: Validators[] = [Validators.required];
+
         this.orgForm = this.fb.group({
             name: ['', [Validators.required]],
             domain: ['', [Validators.required]],
         });
+        this.orgService.GetPasswordComplexityPolicy().then(data => {
+            this.policy = data.toObject();
+            if (this.policy.minLength) {
+                validators.push(Validators.minLength(this.policy.minLength));
+            }
+            if (this.policy.hasLowercase) {
+                validators.push(Validators.pattern(/[a-z]/g));
+            }
+            if (this.policy.hasUppercase) {
+                validators.push(Validators.pattern(/[A-Z]/g));
+            }
+            if (this.policy.hasNumber) {
+                validators.push(Validators.pattern(/[0-9]/g));
+            }
+            if (this.policy.hasSymbol) {
+                // All characters that are not a digit or an English letter \W or a whitespace \S
+                validators.push(Validators.pattern(/[\W\S]/));
+            }
 
-        this.userForm = this.fb.group({
-            firstName: ['', [Validators.required]],
-            lastName: ['', [Validators.required]],
-            displayName: [''],
-            email: ['', [Validators.required]],
-            gender: [''],
-            nickName: [''],
-            preferredLanguage: [''],
-            password: ['', [Validators.required]],
-            confirmPassword: ['', [Validators.required, passwordConfirmValidator]],
+            this.userForm = this.fb.group({
+                firstName: ['', [Validators.required]],
+                lastName: ['', [Validators.required]],
+                email: ['', [Validators.required]],
+                gender: [''],
+                nickName: [''],
+                preferredLanguage: [''],
+                password: ['', validators],
+                confirmPassword: ['', [...validators, passwordConfirmValidator]],
+            });
+        }).catch(error => {
+            console.log('no password complexity policy defined!');
+            console.error(error);
+            this.userForm = this.fb.group({
+                firstName: ['', [Validators.required]],
+                lastName: ['', [Validators.required]],
+                email: ['', [Validators.required]],
+                gender: [''],
+                nickName: [''],
+                preferredLanguage: [''],
+                password: ['', validators],
+                confirmPassword: ['', [...validators, passwordConfirmValidator]],
+            });
         });
     }
 
@@ -82,7 +121,6 @@ export class OrgCreateComponent {
         registerUserRequest.setFirstName(this.firstName?.value);
         registerUserRequest.setLastName(this.lastName?.value);
         registerUserRequest.setNickName(this.nickName?.value);
-        registerUserRequest.setDisplayName(this.displayName?.value);
         registerUserRequest.setGender(this.gender?.value);
         registerUserRequest.setPassword(this.password?.value);
         registerUserRequest.setPreferredLanguage(this.preferredLanguage?.value);
@@ -122,10 +160,6 @@ export class OrgCreateComponent {
         return this.userForm.get('lastName');
     }
 
-    public get displayName(): AbstractControl | null {
-        return this.userForm.get('displayName');
-    }
-
     public get email(): AbstractControl | null {
         return this.userForm.get('email');
     }
diff --git a/console/src/app/pages/orgs/org-create/org-create.module.ts b/console/src/app/pages/orgs/org-create/org-create.module.ts
index d3c31a43d8..5588b631a3 100644
--- a/console/src/app/pages/orgs/org-create/org-create.module.ts
+++ b/console/src/app/pages/orgs/org-create/org-create.module.ts
@@ -9,6 +9,7 @@ import { MatInputModule } from '@angular/material/input';
 import { MatSelectModule } from '@angular/material/select';
 import { TranslateLoader, TranslateModule } from '@ngx-translate/core';
 import { HttpLoaderFactory } from 'src/app/app.module';
+import { PipesModule } from 'src/app/pipes/pipes.module';
 
 import { OrgCreateRoutingModule } from './org-create-routing.module';
 import { OrgCreateComponent } from './org-create.component';
@@ -25,6 +26,7 @@ import { OrgCreateComponent } from './org-create.component';
         MatButtonModule,
         MatIconModule,
         MatSelectModule,
+        PipesModule,
         TranslateModule.forChild({
             loader: {
                 provide: TranslateLoader,
diff --git a/console/src/app/pages/orgs/org-detail/org-detail.component.html b/console/src/app/pages/orgs/org-detail/org-detail.component.html
index 5267b13bc7..74ae9cdd1f 100644
--- a/console/src/app/pages/orgs/org-detail/org-detail.component.html
+++ b/console/src/app/pages/orgs/org-detail/org-detail.component.html
@@ -11,8 +11,8 @@
     <metainfo class="side">
         <div class="details">
             <div class="row">
-                <span class="first">Domain:</span>
-                <span class="second" *ngIf="org?.domain">{{org.domain}}</span>
+                <span class="first">Domains:</span>
+                <span *ngFor="let domain of domains" class="second">{{domain.domain}}</span>
             </div>
             <div class="row">
                 <span class="first">State:</span>
diff --git a/console/src/app/pages/orgs/org-detail/org-detail.component.ts b/console/src/app/pages/orgs/org-detail/org-detail.component.ts
index c4ab4380bc..b0d4c3ac30 100644
--- a/console/src/app/pages/orgs/org-detail/org-detail.component.ts
+++ b/console/src/app/pages/orgs/org-detail/org-detail.component.ts
@@ -6,7 +6,7 @@ import { ActivatedRoute, Params } from '@angular/router';
 import { TranslateService } from '@ngx-translate/core';
 import { Subscription } from 'rxjs';
 import { ChangeType } from 'src/app/modules/changes/changes.component';
-import { Org, OrgMember, OrgMemberSearchResponse, OrgState } from 'src/app/proto/generated/management_pb';
+import { Org, OrgDomainView, OrgMember, OrgMemberSearchResponse, OrgState } from 'src/app/proto/generated/management_pb';
 import { OrgService } from 'src/app/services/org.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -29,6 +29,8 @@ export class OrgDetailComponent implements OnInit, OnDestroy {
 
     private subscription: Subscription = new Subscription();
 
+    public domains: OrgDomainView.AsObject[] = [];
+
     constructor(
         public translate: TranslateService,
         private route: ActivatedRoute,
@@ -52,6 +54,11 @@ export class OrgDetailComponent implements OnInit, OnDestroy {
         }).catch(error => {
             this.toast.showError(error.message);
         });
+
+        this.orgService.SearchMyOrgDomains(0, 100).then(result => {
+            console.log(result.toObject().resultList);
+            this.domains = result.toObject().resultList;
+        });
     }
 
     public changeState(event: MatButtonToggleChange | any): void {
diff --git a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.html b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.html
index 7711623c86..b16512c721 100644
--- a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.html
+++ b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.html
@@ -8,13 +8,15 @@
 
             <div class="full-width">
                 <p class="desc">{{ 'PROJECT.PAGES.DESCRIPTION' | translate }}</p>
+                <p *ngIf="isZitadel" class="zitadel-warning">This belongs to Zitadel project. If you change something,
+                    Zitadel
+                    may not behave as intended!</p>
             </div>
         </div>
 
         <app-card>
             <app-project-grant-members *ngIf="project && project.projectId && project.id"
-                [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || (isZitadel$ | async)"
-                [project]="project">
+                [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || isZitadel" [project]="project">
             </app-project-grant-members>
         </app-card>
     </div>
diff --git a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.scss b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.scss
index 97eea9d6f8..9b5efd6a5d 100644
--- a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.scss
+++ b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.scss
@@ -33,6 +33,11 @@
             font-size: .9rem;
             color: #81868a;
         }
+
+        .zitadel-warning {
+            font-size: 14px;
+            color: rgb(201,51,71);
+        }
     }
 }
 
diff --git a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.ts b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.ts
index 233babbe85..8adc33d3ec 100644
--- a/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.ts
+++ b/console/src/app/pages/projects/granted-project-detail/granted-project-detail.component.ts
@@ -4,7 +4,7 @@ import { Component, OnDestroy, OnInit } from '@angular/core';
 import { MatTableDataSource } from '@angular/material/table';
 import { ActivatedRoute, Params } from '@angular/router';
 import { TranslateService } from '@ngx-translate/core';
-import { from, Observable, of, Subscription } from 'rxjs';
+import { Subscription } from 'rxjs';
 import { ChangeType } from 'src/app/modules/changes/changes.component';
 import {
     Application,
@@ -17,7 +17,7 @@ import {
     ProjectState,
     ProjectType,
 } from 'src/app/proto/generated/management_pb';
-import { GrpcService } from 'src/app/services/grpc.service';
+import { OrgService } from 'src/app/services/org.service';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -55,8 +55,7 @@ export class GrantedProjectDetailComponent implements OnInit, OnDestroy {
     private subscription?: Subscription;
     public editstate: boolean = false;
 
-    public isZitadel$: Observable<boolean> = of(false);
-    private zitadelsub: Subscription = new Subscription();
+    public isZitadel: boolean = false;
 
     constructor(
         public translate: TranslateService,
@@ -64,7 +63,7 @@ export class GrantedProjectDetailComponent implements OnInit, OnDestroy {
         private toast: ToastService,
         private projectService: ProjectService,
         private _location: Location,
-        private grpcService: GrpcService,
+        private orgService: OrgService,
     ) {
     }
 
@@ -74,28 +73,24 @@ export class GrantedProjectDetailComponent implements OnInit, OnDestroy {
 
     public ngOnDestroy(): void {
         this.subscription?.unsubscribe();
-        this.zitadelsub.unsubscribe();
     }
 
     private async getData({ id, grantId }: Params): Promise<void> {
         this.projectId = id;
         this.grantId = grantId;
 
+        this.orgService.GetIam().then(iam => {
+            this.isZitadel = iam.toObject().iamProjectId === this.projectId;
+        });
+
         if (this.projectId && this.grantId) {
             this.projectService.GetGrantedProjectByID(this.projectId, this.grantId).then(proj => {
                 this.project = proj.toObject();
                 console.log(this.project);
-                this.isZitadel$ = from(this.projectService.SearchApplications(this.project.id, 100, 0).then(appsResp => {
-                    const ret = appsResp.toObject().resultList
-                        .filter(app => app.oidcConfig?.clientId === this.grpcService.clientid).length > 0;
-                    return ret;
-                }));
             }).catch(error => {
                 this.toast.showError(error.message);
             });
         }
-
-        this.zitadelsub = this.isZitadel$.subscribe(isZita => console.log(`zitade: ${isZita}`));
     }
 
     public navigateBack(): void {
diff --git a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.html b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.html
index 0835319de0..6b18e135d0 100644
--- a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.html
+++ b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.html
@@ -7,7 +7,7 @@
             <h1>{{ 'PROJECT.PAGES.TITLE' | translate }} {{project?.name}}</h1>
             <ng-template appHasRole [appHasRole]="['project.write:'+projectId, 'project.write']">
                 <button mat-icon-button (click)="editstate = !editstate" aria-label="Edit project name"
-                    *ngIf="(isZitadel$ | async) === false">
+                    *ngIf="isZitadel === false">
                     <mat-icon *ngIf="!editstate">edit</mat-icon>
                     <mat-icon *ngIf="editstate">close</mat-icon>
                 </button>
@@ -23,14 +23,17 @@
                     <button class="icon-button" *ngIf="editstate" mat-icon-button (click)="updateName()">
                         <mat-icon>check</mat-icon>
                     </button>
-                    <button mat-stroked-button color="accent" [disabled]="(isZitadel$ | async)"
+                    <button mat-stroked-button color="accent" [disabled]="isZitadel"
                         *ngIf="project?.state === ProjectState.PROJECTSTATE_ACTIVE" class="second"
                         (click)="changeState(ProjectState.PROJECTSTATE_INACTIVE)">{{'PROJECT.TABLE.DEACTIVATE' | translate}}</button>
-                    <button mat-stroked-button color="accent" [disabled]="(isZitadel$ | async)"
+                    <button mat-stroked-button color="accent" [disabled]="isZitadel"
                         *ngIf="project?.state === ProjectState.PROJECTSTATE_INACTIVE" class="second"
                         (click)="changeState(ProjectState.PROJECTSTATE_ACTIVE)">{{'PROJECT.TABLE.ACTIVATE' | translate}}</button>
                 </ng-container>
                 <p class="desc">{{ 'PROJECT.PAGES.DESCRIPTION' | translate }}</p>
+                <p *ngIf="isZitadel" class="zitadel-warning">This belongs to Zitadel project. If you change something,
+                    Zitadel
+                    may not behave as intended!</p>
             </div>
         </div>
 
@@ -38,7 +41,7 @@
         <ng-container *ngIf="project">
             <ng-template appHasRole [appHasRole]="['project.app.read:' + project.id, 'project.app.read']">
                 <app-project-application-grid *ngIf="grid"
-                    [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || (isZitadel$ | async)"
+                    [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || isZitadel"
                     (changeView)="grid = false" [projectId]="projectId"></app-project-application-grid>
                 <app-card *ngIf="!grid" title="{{ 'PROJECT.APP.TITLE' | translate }}">
                     <card-actions class="card-actions">
@@ -47,12 +50,12 @@
                         </button>
                     </card-actions>
                     <app-project-applications
-                        [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || (isZitadel$ | async)"
+                        [disabled]="project?.state !== ProjectState.PROJECTSTATE_ACTIVE || isZitadel"
                         [projectId]="projectId"></app-project-applications>
                 </app-card>
             </ng-template>
 
-            <ng-container *ngIf="(isZitadel$ | async) == false">
+            <ng-container *ngIf="isZitadel == false">
                 <ng-template appHasRole [appHasRole]="['project.grant.read:' + project.id, 'project.grant.read']">
                     <app-card title="{{ 'PROJECT.GRANT.TITLE' | translate }}"
                         description="{{ 'PROJECT.GRANT.DESCRIPTION' | translate }}">
diff --git a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.scss b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.scss
index 97eea9d6f8..9b5efd6a5d 100644
--- a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.scss
+++ b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.scss
@@ -33,6 +33,11 @@
             font-size: .9rem;
             color: #81868a;
         }
+
+        .zitadel-warning {
+            font-size: 14px;
+            color: rgb(201,51,71);
+        }
     }
 }
 
diff --git a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.ts b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.ts
index 2a389a8123..7fef16031a 100644
--- a/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.ts
+++ b/console/src/app/pages/projects/owned-project-detail/owned-project-detail.component.ts
@@ -4,7 +4,7 @@ import { Component, OnDestroy, OnInit } from '@angular/core';
 import { MatTableDataSource } from '@angular/material/table';
 import { ActivatedRoute, Params } from '@angular/router';
 import { TranslateService } from '@ngx-translate/core';
-import { from, Observable, of, Subscription } from 'rxjs';
+import { Subscription } from 'rxjs';
 import { ChangeType } from 'src/app/modules/changes/changes.component';
 import {
     Application,
@@ -17,7 +17,7 @@ import {
     ProjectState,
     ProjectType,
 } from 'src/app/proto/generated/management_pb';
-import { GrpcService } from 'src/app/services/grpc.service';
+import { OrgService } from 'src/app/services/org.service';
 import { ProjectService } from 'src/app/services/project.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -55,8 +55,7 @@ export class OwnedProjectDetailComponent implements OnInit, OnDestroy {
     private subscription?: Subscription;
     public editstate: boolean = false;
 
-    public isZitadel$: Observable<boolean> = of(false);
-    private zitadelsub: Subscription = new Subscription();
+    public isZitadel: boolean = false;
 
     constructor(
         public translate: TranslateService,
@@ -64,7 +63,7 @@ export class OwnedProjectDetailComponent implements OnInit, OnDestroy {
         private toast: ToastService,
         private projectService: ProjectService,
         private _location: Location,
-        private grpcService: GrpcService,
+        private orgService: OrgService,
     ) {
     }
 
@@ -74,27 +73,23 @@ export class OwnedProjectDetailComponent implements OnInit, OnDestroy {
 
     public ngOnDestroy(): void {
         this.subscription?.unsubscribe();
-        this.zitadelsub.unsubscribe();
     }
 
     private async getData({ id }: Params): Promise<void> {
         this.projectId = id;
 
+        this.orgService.GetIam().then(iam => {
+            this.isZitadel = iam.toObject().iamProjectId === this.projectId;
+        });
+
         if (this.projectId) {
             this.projectService.GetProjectById(id).then(proj => {
                 this.project = proj.toObject();
                 console.log(this.project);
-                this.isZitadel$ = from(this.projectService.SearchApplications(this.project.id, 100, 0).then(appsResp => {
-                    const ret = appsResp.toObject().resultList
-                        .filter(app => app.oidcConfig?.clientId === this.grpcService.clientid).length > 0;
-                    return ret;
-                }));
             }).catch(error => {
                 this.toast.showError(error.message);
             });
         }
-
-        this.zitadelsub = this.isZitadel$.subscribe(isZita => console.log(`zitade: ${isZita}`));
     }
 
     public changeState(newState: ProjectState): void {
diff --git a/console/src/app/pages/user-create/user-create.component.html b/console/src/app/pages/user-create/user-create.component.html
index 5b306e1e85..7e482d87ec 100644
--- a/console/src/app/pages/user-create/user-create.component.html
+++ b/console/src/app/pages/user-create/user-create.component.html
@@ -52,13 +52,6 @@
                             {{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
                     </mat-form-field>
-                    <mat-form-field class="formfield">
-                        <mat-label>{{ 'USER.PROFILE.DISPLAYNAME' | translate }}</mat-label>
-                        <input matInput formControlName="displayName" />
-                        <mat-error *ngIf="displayName?.invalid && displayName?.errors?.required">
-                            {{ 'USER.VALIDATION.REQUIRED' | translate }}
-                        </mat-error>
-                    </mat-form-field>
 
                     <p class="section">{{ 'USER.CREATE.GENDERLANGSECTION' | translate }}</p>
 
diff --git a/console/src/app/pages/user-create/user-create.component.ts b/console/src/app/pages/user-create/user-create.component.ts
index 79689e226b..f8b72eda2d 100644
--- a/console/src/app/pages/user-create/user-create.component.ts
+++ b/console/src/app/pages/user-create/user-create.component.ts
@@ -28,7 +28,6 @@ export class UserCreateComponent implements OnDestroy {
             firstName: ['', Validators.required],
             lastName: ['', Validators.required],
             nickName: [''],
-            displayName: [{ value: '', disabled: false }],
             gender: [Gender.GENDER_UNSPECIFIED],
             preferredLanguage: [''],
             phone: [''],
@@ -75,9 +74,6 @@ export class UserCreateComponent implements OnDestroy {
     public get nickName(): AbstractControl | null {
         return this.userForm.get('nickName');
     }
-    public get displayName(): AbstractControl | null {
-        return this.userForm.get('displayName');
-    }
     public get gender(): AbstractControl | null {
         return this.userForm.get('gender');
     }
diff --git a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.html b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.html
index 7428383d53..db5e8b7ef1 100644
--- a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.html
+++ b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.html
@@ -36,10 +36,10 @@
                         formControlName="newPassword" />
                     <mat-error *ngIf="newPassword?.errors?.required">{{ 'USER.VALIDATION.REQUIRED' | translate }}
                     </mat-error>
-                    <mat-error *ngIf="newPassword?.errors?.pattern">{{ 'USER.VALIDATION.INVALIDPATTERN' | translate }}
+                    <mat-error *ngIf="newPassword?.errors?.pattern">{{ policy | passwordPattern | translate }}
                     </mat-error>
                     <mat-error *ngIf="newPassword?.errors?.minlength">
-                        {{ 'USER.PASSWORD.MINLENGTHERROR' | translate: minLengthPassword }}
+                        {{ 'USER.VALIDATION.MINLENGTH' | translate:policy }}
                     </mat-error>
                 </mat-form-field>
                 <mat-form-field class="formfield">
@@ -49,10 +49,10 @@
                     <mat-error *ngIf="confirmPassword?.errors?.required">{{ 'USER.VALIDATION.REQUIRED' | translate }}
                     </mat-error>
                     <mat-error *ngIf="confirmPassword?.errors?.pattern">
-                        {{ 'USER.VALIDATION.INVALIDPATTERN' | translate }}
+                        {{ policy | passwordPattern | translate }}
                     </mat-error>
                     <mat-error *ngIf="confirmPassword?.errors?.minlength">
-                        {{ 'USER.PASSWORD.MINLENGTHERROR' | translate: minLengthPassword }}
+                        {{ 'USER.VALIDATION.MINLENGTH' | translate:policy }}
                     </mat-error>
                     <mat-error *ngIf="confirmPassword?.errors?.notequal">{{ 'USER.PASSWORD.NOTEQUAL' | translate }}
                     </mat-error>
diff --git a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
index c5d3df94af..f6d1aff65b 100644
--- a/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
+++ b/console/src/app/pages/user-detail/auth-user-detail/auth-user-detail.component.ts
@@ -3,9 +3,10 @@ import { AbstractControl, FormBuilder, FormGroup, Validators } from '@angular/fo
 import { MatDialog } from '@angular/material/dialog';
 import { TranslateService } from '@ngx-translate/core';
 import { Subscription } from 'rxjs';
-import { Gender, UserAddress, UserEmail, UserPhone, UserProfile } from 'src/app/proto/generated/auth_pb';
+import { Gender, User, UserAddress, UserEmail, UserPhone, UserProfile } from 'src/app/proto/generated/auth_pb';
 import { PasswordComplexityPolicy } from 'src/app/proto/generated/management_pb';
 import { AuthUserService } from 'src/app/services/auth-user.service';
+import { MgmtUserService } from 'src/app/services/mgmt-user.service';
 import { OrgService } from 'src/app/services/org.service';
 import { ToastService } from 'src/app/services/toast.service';
 
@@ -32,6 +33,8 @@ function passwordConfirmValidator(c: AbstractControl): any {
     styleUrls: ['./auth-user-detail.component.scss'],
 })
 export class AuthUserDetailComponent implements OnDestroy {
+    public user!: User.AsObject;
+
     public profile!: UserProfile.AsObject;
     public email: UserEmail.AsObject = { email: '' } as any;
     public phone: UserPhone.AsObject = { phone: '' } as any;
@@ -48,13 +51,12 @@ export class AuthUserDetailComponent implements OnDestroy {
 
     public loading: boolean = false;
 
-    public minLengthPassword: any = {
-        value: 0,
-    };
+    public policy!: PasswordComplexityPolicy.AsObject;
 
     constructor(
         public translate: TranslateService,
         private toast: ToastService,
+        private mgmtUserService: MgmtUserService,
         private userService: AuthUserService,
         private fb: FormBuilder,
         private dialog: MatDialog,
@@ -62,21 +64,20 @@ export class AuthUserDetailComponent implements OnDestroy {
     ) {
         const validators: Validators[] = [Validators.required];
         this.orgService.GetPasswordComplexityPolicy().then(data => {
-            const policy: PasswordComplexityPolicy.AsObject = data.toObject();
-            this.minLengthPassword.value = data.toObject().minLength;
-            if (policy.minLength) {
-                validators.push(Validators.minLength(policy.minLength));
+            this.policy = data.toObject();
+            if (this.policy.minLength) {
+                validators.push(Validators.minLength(this.policy.minLength));
             }
-            if (policy.hasLowercase) {
+            if (this.policy.hasLowercase) {
                 validators.push(Validators.pattern(/[a-z]/g));
             }
-            if (policy.hasUppercase) {
+            if (this.policy.hasUppercase) {
                 validators.push(Validators.pattern(/[A-Z]/g));
             }
-            if (policy.hasNumber) {
+            if (this.policy.hasNumber) {
                 validators.push(Validators.pattern(/[0-9]/g));
             }
-            if (policy.hasSymbol) {
+            if (this.policy.hasSymbol) {
                 // All characters that are not a digit or an English letter \W or a whitespace \S
                 validators.push(Validators.pattern(/[\W\S]/));
             }
@@ -266,6 +267,12 @@ export class AuthUserDetailComponent implements OnDestroy {
     }
 
     private async getData(): Promise<void> {
+        // this.mgmtUserService.GetUserByID(id).then(user => {
+        //     console.log(user.toObject());
+        //     this.user = user.toObject();
+        // }).catch(err => {
+        //     console.error(err);
+        // });
         this.profile = (await this.userService.GetMyUserProfile()).toObject();
         this.email = (await this.userService.GetMyUserEmail()).toObject();
         this.phone = (await this.userService.GetMyUserPhone()).toObject();
diff --git a/console/src/app/pages/user-detail/detail-form/detail-form.component.html b/console/src/app/pages/user-detail/detail-form/detail-form.component.html
index 28d0f5c5a9..4e0fb9b29d 100644
--- a/console/src/app/pages/user-detail/detail-form/detail-form.component.html
+++ b/console/src/app/pages/user-detail/detail-form/detail-form.component.html
@@ -16,10 +16,6 @@
             <mat-label>{{ 'USER.PROFILE.NICKNAME' | translate }}</mat-label>
             <input matInput formControlName="nickName" />
         </mat-form-field>
-        <mat-form-field class="formfield">
-            <mat-label>{{ 'USER.PROFILE.DISPLAYNAME' | translate }}</mat-label>
-            <input matInput formControlName="displayName" />
-        </mat-form-field>
         <mat-form-field class="formfield">
             <mat-label>{{ 'USER.PROFILE.GENDER' | translate }}</mat-label>
             <mat-select formControlName="gender">
diff --git a/console/src/app/pages/user-detail/detail-form/detail-form.component.ts b/console/src/app/pages/user-detail/detail-form/detail-form.component.ts
index a869966a7d..374dd63051 100644
--- a/console/src/app/pages/user-detail/detail-form/detail-form.component.ts
+++ b/console/src/app/pages/user-detail/detail-form/detail-form.component.ts
@@ -27,7 +27,6 @@ export class DetailFormComponent implements OnInit, OnDestroy {
             firstName: [{ value: '', disabled: this.disabled }, Validators.required],
             lastName: [{ value: '', disabled: this.disabled }, Validators.required],
             nickName: [{ value: '', disabled: this.disabled }],
-            displayName: [{ value: '', disabled: this.disabled }],
             gender: [{ value: 0 }, { disabled: this.disabled }],
             preferredLanguage: [{ value: '', disabled: this.disabled }],
         });
@@ -62,9 +61,6 @@ export class DetailFormComponent implements OnInit, OnDestroy {
     public get nickName(): AbstractControl | null {
         return this.profileForm.get('nickName');
     }
-    public get displayName(): AbstractControl | null {
-        return this.profileForm.get('displayName');
-    }
     public get gender(): AbstractControl | null {
         return this.profileForm.get('gender');
     }
diff --git a/console/src/app/pages/user-detail/user-detail.module.ts b/console/src/app/pages/user-detail/user-detail.module.ts
index 5ef038fd90..3b1b4a3abe 100644
--- a/console/src/app/pages/user-detail/user-detail.module.ts
+++ b/console/src/app/pages/user-detail/user-detail.module.ts
@@ -16,6 +16,7 @@ import { HasRoleModule } from 'src/app/directives/has-role/has-role.module';
 import { CardModule } from 'src/app/modules/card/card.module';
 import { ChangesModule } from 'src/app/modules/changes/changes.module';
 import { MetaLayoutModule } from 'src/app/modules/meta-layout/meta-layout.module';
+import { PipesModule } from 'src/app/pipes/pipes.module';
 
 import { AuthUserDetailComponent } from './auth-user-detail/auth-user-detail.component';
 import { AuthUserMfaComponent } from './auth-user-mfa/auth-user-mfa.component';
@@ -47,6 +48,7 @@ import { UserMfaComponent } from './user-mfa/user-mfa.component';
         MatDialogModule,
         QRCodeModule,
         MetaLayoutModule,
+        PipesModule,
         MatFormFieldModule,
         UserGrantsModule,
         CodeDialogModule,
diff --git a/console/src/app/pages/user-detail/user-detail/user-detail.component.html b/console/src/app/pages/user-detail/user-detail/user-detail.component.html
index e3c57b6f50..dd83a0779b 100644
--- a/console/src/app/pages/user-detail/user-detail/user-detail.component.html
+++ b/console/src/app/pages/user-detail/user-detail/user-detail.component.html
@@ -1,23 +1,23 @@
 <app-meta-layout>
 
-    <div *ngIf="profile" class="max-width-container">
+    <div *ngIf="user" class="max-width-container">
         <div class="head">
             <a (click)="navigateBack()" mat-icon-button>
                 <mat-icon class="icon">arrow_back</mat-icon>
             </a>
-            <h1>{{ 'USER.PROFILE.TITLE' | translate }} {{profile?.firstName}}</h1>
+            <h1>{{ 'USER.PROFILE.TITLE' | translate }} {{user?.firstName}}</h1>
 
             <p class="desc">{{ 'USER.PROFILE.DESCRIPTION' | translate }}</p>
         </div>
 
         <mat-progress-bar *ngIf="loading" color="accent" mode="indeterminate"></mat-progress-bar>
 
-        <ng-template appHasRole [appHasRole]="['user.read', 'user.read:'+profile?.id]">
+        <ng-template appHasRole [appHasRole]="['user.read', 'user.read:'+user?.id]">
             <app-card title="{{ 'USER.PROFILE.TITLE' | translate }}"
                 description="{{'USER.PROFILE.DESCRIPTION' | translate}}">
                 <app-detail-form
-                    *ngIf="((authUserService.isAllowed(['user.write:' + profile?.id, 'user.write']) | async) || false) as canwrite"
-                    [disabled]="canwrite" [genders]="genders" [languages]="languages" [profile]="profile"
+                    *ngIf="((authUserService.isAllowed(['user.write:' + user?.id, 'user.write']) | async) || false) as canwrite"
+                    [disabled]="canwrite" [genders]="genders" [languages]="languages" [profile]="user"
                     (submitData)="saveProfile($event)">
                 </app-detail-form>
             </app-card>
@@ -26,11 +26,12 @@
         <app-card title="{{'USER.PASSWORD.TITLE' | translate}}"
             description="{{'USER.PASSWORD.DESCRIPTION' | translate}}">
             <card-actions class="card-actions">
-                <button mat-stroked-button color="primary"
+                <button *ngIf="user.state === UserState.USERSTATE_INITIAL" mat-stroked-button color="primary"
                     (click)="sendSetPasswordNotification()">{{ 'USER.PASSWORD.RESENDNOTIFICATION' | translate }}</button>
             </card-actions>
             <form *ngIf="passwordForm" autocomplete="new-password" [formGroup]="passwordForm"
                 (ngSubmit)="setInitialPassword()">
+                <!-- {{USERSTATE_INITIAL}} -->
                 <div class="content center">
                     <mat-form-field class="formfield">
                         <mat-label>{{ 'USER.PASSWORD.NEW' | translate }}</mat-label>
@@ -38,9 +39,9 @@
                         <mat-error *ngIf="password?.errors?.required">{{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
                         <mat-error *ngIf="password?.errors?.minlength">
-                            {{ 'USER.PASSWORD.MINLENGTHERROR' | translate: minLengthPassword }}
+                            {{ 'USER.VALIDATION.MINLENGTH' | translate: policy }}
                         </mat-error>
-                        <mat-error *ngIf="password?.errors?.pattern">{{ 'USER.VALIDATION.INVALIDPATTERN' | translate }}
+                        <mat-error *ngIf="password?.errors?.pattern">{{ policy | passwordPattern | translate }}
                         </mat-error>
                     </mat-form-field>
                     <mat-form-field class="formfield">
@@ -51,7 +52,9 @@
                             {{ 'USER.VALIDATION.REQUIRED' | translate }}
                         </mat-error>
                         <mat-error *ngIf="confirmPassword?.errors?.minlength">
-                            {{ 'USER.PASSWORD.MINLENGTHERROR' | translate: minLengthPassword }}
+                            {{ 'USER.VALIDATION.MINLENGTH' | translate: policy }}
+                        </mat-error>
+                        <mat-error *ngIf="confirmPassword?.errors?.pattern">{{ policy | passwordPattern | translate }}
                         </mat-error>
                         <mat-error *ngIf="confirmPassword?.errors?.notequal">{{ 'USER.PASSWORD.NOTEQUAL' | translate }}
                         </mat-error>
@@ -72,11 +75,11 @@
 
                     <ng-container *ngIf="!emailEditState; else emailEdit">
                         <div class="actions">
-                            <span class="name">{{email?.email}}</span>
-                            <mat-icon *ngIf="email?.isEmailVerified" color="primary" aria-hidden="false"
+                            <span class="name">{{user?.email}}</span>
+                            <mat-icon *ngIf="user?.isEmailVerified" color="primary" aria-hidden="false"
                                 aria-label="verified icon">
                                 check_circle_outline</mat-icon>
-                            <ng-container *ngIf="email?.email && !email?.isEmailVerified">
+                            <ng-container *ngIf="user?.email && !user?.isEmailVerified">
                                 <mat-icon color="warn" aria-hidden="false" aria-label="not verified icon">highlight_off
                                 </mat-icon>
                                 <a class="verify" matTooltip="{{'USER.LOGINMETHODS.EMAIL.RESEND' | translate}}"
@@ -93,12 +96,12 @@
                     <ng-template #emailEdit>
                         <mat-form-field class="name">
                             <mat-label>{{ 'USER.EMAIL' | translate }}</mat-label>
-                            <input matInput [(ngModel)]="email.email" />
+                            <input matInput [(ngModel)]="user.email" />
                         </mat-form-field>
                         <button (click)="emailEditState = false" mat-icon-button>
                             <mat-icon>close</mat-icon>
                         </button>
-                        <button [disabled]="!email.email" class="submit-button" type="button" color="primary"
+                        <button [disabled]="!user.email" class="submit-button" type="button" color="primary"
                             (click)="saveEmail()" mat-raised-button>{{ 'ACTIONS.SAVE' | translate }}</button>
                     </ng-template>
                 </div>
@@ -108,11 +111,11 @@
 
                     <ng-container *ngIf="!phoneEditState; else phoneEdit">
                         <div class="actions">
-                            <span class="name">{{phone?.phone}}</span>
-                            <mat-icon *ngIf="phone?.isPhoneVerified" color="primary" aria-hidden="false"
+                            <span class="name">{{user?.phone}}</span>
+                            <mat-icon *ngIf="user?.isPhoneVerified" color="primary" aria-hidden="false"
                                 aria-label="verified icon">
                                 check_circle_outline</mat-icon>
-                            <ng-container *ngIf="phone?.phone && !phone?.isPhoneVerified">
+                            <ng-container *ngIf="user?.phone && !user?.isPhoneVerified">
                                 <mat-icon color="warn" aria-hidden="false" aria-label="not verified icon">highlight_off
                                 </mat-icon>
 
@@ -125,7 +128,7 @@
                             <button (click)="phoneEditState = true" mat-icon-button>
                                 <mat-icon>edit</mat-icon>
                             </button>
-                            <button *ngIf="phone?.phone" (click)="deletePhone()" mat-icon-button>
+                            <button *ngIf="user?.phone" (click)="deletePhone()" mat-icon-button>
                                 <mat-icon>delete_outline</mat-icon>
                             </button>
                         </div>
@@ -134,19 +137,19 @@
                     <ng-template #phoneEdit>
                         <mat-form-field class="name">
                             <mat-label>{{ 'USER.PHONE' | translate }}</mat-label>
-                            <input matInput [(ngModel)]="phone.phone" />
+                            <input matInput [(ngModel)]="user.phone" />
                         </mat-form-field>
                         <button (click)="phoneEditState = false" mat-icon-button>
                             <mat-icon>close</mat-icon>
                         </button>
-                        <button [disabled]="!phone.phone" type="button" color="primary" (click)="savePhone()"
+                        <button [disabled]="!user.phone" type="button" color="primary" (click)="savePhone()"
                             mat-raised-button>{{ 'ACTIONS.SAVE' | translate }}</button>
                     </ng-template>
                 </div>
             </div>
         </app-card>
 
-        <app-auth-user-mfa *ngIf="profile" [profile]="profile"></app-auth-user-mfa>
+        <app-auth-user-mfa *ngIf="user" [profile]="user"></app-auth-user-mfa>
 
         <app-card title="{{ 'USER.ADDRESS.TITLE' | translate }}">
             <form [formGroup]="addressForm" (ngSubmit)="saveAddress()">
@@ -178,14 +181,14 @@
             </form>
         </app-card>
 
-        <app-card *ngIf="profile?.id" title="{{ 'USER.GRANTS.TITLE' | translate }}"
+        <app-card *ngIf="user?.id" title="{{ 'USER.GRANTS.TITLE' | translate }}"
             description="{{'USER.GRANTS.DESCRIPTION' | translate }}">
-            <app-user-grants [userId]="profile?.id"></app-user-grants>
+            <app-user-grants [userId]="user?.id"></app-user-grants>
         </app-card>
     </div>
 
-    <metainfo *ngIf="profile" class="side">
+    <metainfo *ngIf="user" class="side">
         <p class="side-section">{{ 'CHANGES.USER.TITLE' | translate }}</p>
-        <app-changes [changeType]="ChangeType.USER" [id]="profile.id"></app-changes>
+        <app-changes [changeType]="ChangeType.USER" [id]="user.id"></app-changes>
     </metainfo>
 </app-meta-layout>
\ No newline at end of file
diff --git a/console/src/app/pages/user-detail/user-detail/user-detail.component.ts b/console/src/app/pages/user-detail/user-detail/user-detail.component.ts
index b161e713a0..fea14fe367 100644
--- a/console/src/app/pages/user-detail/user-detail/user-detail.component.ts
+++ b/console/src/app/pages/user-detail/user-detail/user-detail.component.ts
@@ -10,10 +10,12 @@ import {
     Gender,
     NotificationType,
     PasswordComplexityPolicy,
+    User,
     UserAddress,
     UserEmail,
     UserPhone,
     UserProfile,
+    UserState,
 } from 'src/app/proto/generated/management_pb';
 import { AuthUserService } from 'src/app/services/auth-user.service';
 import { MgmtUserService } from 'src/app/services/mgmt-user.service';
@@ -43,9 +45,9 @@ function passwordConfirmValidator(c: AbstractControl): any {
     styleUrls: ['./user-detail.component.scss'],
 })
 export class UserDetailComponent implements OnInit, OnDestroy {
-    public profile!: UserProfile.AsObject;
-    public email: UserEmail.AsObject = { email: '' } as any;
-    public phone: UserPhone.AsObject = { phone: '' } as any;
+    public user!: User.AsObject;
+    // public email: UserEmail.AsObject = { email: '' } as any;
+    // public phone: UserPhone.AsObject = { phone: '' } as any;
     public address: UserAddress.AsObject = { id: '' } as any;
     public genders: Gender[] = [Gender.GENDER_MALE, Gender.GENDER_FEMALE, Gender.GENDER_DIVERSE];
     public languages: string[] = ['de', 'en'];
@@ -61,10 +63,8 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     public ChangeType: any = ChangeType;
     public loading: boolean = false;
 
-
-    public minLengthPassword: any = {
-        value: 0,
-    };
+    public UserState: any = UserState;
+    public policy!: PasswordComplexityPolicy.AsObject;
     constructor(
         public translate: TranslateService,
         private route: ActivatedRoute,
@@ -77,22 +77,22 @@ export class UserDetailComponent implements OnInit, OnDestroy {
         public authUserService: AuthUserService,
     ) {
         const validators: Validators[] = [Validators.required];
+
         this.orgService.GetPasswordComplexityPolicy().then(data => {
-            const policy: PasswordComplexityPolicy.AsObject = data.toObject();
-            this.minLengthPassword.value = data.toObject().minLength;
-            if (policy.minLength) {
-                validators.push(Validators.minLength(policy.minLength));
+            this.policy = data.toObject();
+            if (this.policy.minLength) {
+                validators.push(Validators.minLength(this.policy.minLength));
             }
-            if (policy.hasLowercase) {
+            if (this.policy.hasLowercase) {
                 validators.push(Validators.pattern(/[a-z]/g));
             }
-            if (policy.hasUppercase) {
+            if (this.policy.hasUppercase) {
                 validators.push(Validators.pattern(/[A-Z]/g));
             }
-            if (policy.hasNumber) {
+            if (this.policy.hasNumber) {
                 validators.push(Validators.pattern(/[0-9]/g));
             }
-            if (policy.hasSymbol) {
+            if (this.policy.hasSymbol) {
                 // All characters that are not a digit or an English letter \W or a whitespace \S
                 validators.push(Validators.pattern(/[\W\S]/));
             }
@@ -101,7 +101,6 @@ export class UserDetailComponent implements OnInit, OnDestroy {
                 password: ['', validators],
                 confirmPassword: ['', [...validators, passwordConfirmValidator]],
             });
-            // TODO custom validator for pattern
         }).catch(error => {
             console.log('no password complexity policy defined!');
             this.passwordForm = this.fb.group({
@@ -135,14 +134,14 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     }
 
     public deletePhone(): void {
-        this.phone.phone = '';
+        this.user.phone = '';
         this.savePhone();
     }
 
     public enterCode(): void {
         const dialogRef = this.dialog.open(CodeDialogComponent, {
             data: {
-                number: this.phone.phone,
+                number: this.user.phone,
             },
         });
 
@@ -154,17 +153,18 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     }
 
     public saveProfile(profileData: UserProfile.AsObject): void {
-        this.profile.firstName = profileData.firstName;
-        this.profile.lastName = profileData.lastName;
-        this.profile.nickName = profileData.nickName;
-        this.profile.displayName = profileData.displayName;
-        this.profile.gender = profileData.gender;
-        this.profile.preferredLanguage = profileData.preferredLanguage;
+        this.user.firstName = profileData.firstName;
+        this.user.lastName = profileData.lastName;
+        this.user.nickName = profileData.nickName;
+        this.user.displayName = profileData.displayName;
+        this.user.gender = profileData.gender;
+        this.user.preferredLanguage = profileData.preferredLanguage;
+        console.log(this.user);
         this.mgmtUserService
-            .SaveUserProfile(this.profile)
+            .SaveUserProfile(this.user)
             .then((data: UserProfile) => {
                 this.toast.showInfo('Saved Profile');
-                this.profile = data.toObject();
+                this.user = Object.assign(this.user, data.toObject());
             })
             .catch(data => {
                 this.toast.showError(data.message);
@@ -173,7 +173,7 @@ export class UserDetailComponent implements OnInit, OnDestroy {
 
     public resendVerification(): void {
         console.log('resendverification');
-        this.mgmtUserService.ResendEmailVerification(this.profile.id).then(() => {
+        this.mgmtUserService.ResendEmailVerification(this.user.id).then(() => {
             this.toast.showInfo('Email was successfully sent!');
         }).catch(data => {
             this.toast.showError(data.message);
@@ -181,7 +181,7 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     }
 
     public resendPhoneVerification(): void {
-        this.mgmtUserService.ResendPhoneVerification(this.profile.id).then(() => {
+        this.mgmtUserService.ResendPhoneVerification(this.user.id).then(() => {
             this.toast.showInfo('Phoneverification was successfully sent!');
         }).catch(data => {
             this.toast.showError(data.message);
@@ -190,9 +190,9 @@ export class UserDetailComponent implements OnInit, OnDestroy {
 
     public setInitialPassword(): void {
         if (this.passwordForm.valid && this.password && this.password.value) {
-            this.mgmtUserService.SetInitialPassword(this.profile.id, this.password.value).then((data: any) => {
+            this.mgmtUserService.SetInitialPassword(this.user.id, this.password.value).then((data: any) => {
                 this.toast.showInfo('Set initial Password');
-                this.email = data.toObject();
+                this.user.email = data.toObject();
             }).catch(data => {
                 this.toast.showError(data.message);
             });
@@ -200,10 +200,10 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     }
 
     public sendSetPasswordNotification(): void {
-        this.mgmtUserService.SendSetPasswordNotification(this.profile.id, NotificationType.NOTIFICATIONTYPE_EMAIL)
+        this.mgmtUserService.SendSetPasswordNotification(this.user.id, NotificationType.NOTIFICATIONTYPE_EMAIL)
             .then((data: any) => {
                 this.toast.showInfo('Set initial Password');
-                this.email = data.toObject();
+                this.user.email = data.toObject();
             }).catch(data => {
                 this.toast.showError(data.message);
             });
@@ -212,9 +212,9 @@ export class UserDetailComponent implements OnInit, OnDestroy {
     public saveEmail(): void {
         this.emailEditState = false;
         this.mgmtUserService
-            .SaveUserEmail(this.email).then((data: UserEmail) => {
+            .SaveUserEmail(this.user.id, this.user.email).then((data: UserEmail) => {
                 this.toast.showInfo('Saved Email');
-                this.email = data.toObject();
+                this.user.email = data.toObject().email;
             }).catch(data => {
                 this.toast.showError(data.message);
             });
@@ -222,13 +222,10 @@ export class UserDetailComponent implements OnInit, OnDestroy {
 
     public savePhone(): void {
         this.phoneEditState = false;
-        if (!this.phone.id) {
-            this.phone.id = this.profile.id;
-        }
         this.mgmtUserService
-            .SaveUserPhone(this.phone).then((data: UserPhone) => {
+            .SaveUserPhone(this.user.id, this.user.phone).then((data: UserPhone) => {
                 this.toast.showInfo('Saved Phone');
-                this.phone = data.toObject();
+                this.user.phone = data.toObject().phone;
             }).catch(data => {
                 this.toast.showError(data.message);
             });
@@ -236,7 +233,7 @@ export class UserDetailComponent implements OnInit, OnDestroy {
 
     public saveAddress(): void {
         if (!this.address.id) {
-            this.address.id = this.profile.id;
+            this.address.id = this.user.id;
         }
 
         this.address.streetAddress = this.streetAddress?.value;
@@ -283,9 +280,15 @@ export class UserDetailComponent implements OnInit, OnDestroy {
 
     private async getData({ id }: Params): Promise<void> {
         this.isMgmt = true;
-        this.profile = (await this.mgmtUserService.GetUserProfile(id)).toObject();
-        this.email = (await this.mgmtUserService.GetUserEmail(id)).toObject();
-        this.phone = (await this.mgmtUserService.GetUserPhone(id)).toObject();
+        this.mgmtUserService.GetUserByID(id).then(user => {
+            console.log(user.toObject());
+            this.user = user.toObject();
+        }).catch(err => {
+            console.error(err);
+        });
+        // this.profile = (await this.mgmtUserService.GetUserProfile(id)).toObject();
+        // this.email = (await this.mgmtUserService.GetUserEmail(id)).toObject();
+        // this.phone = (await this.mgmtUserService.GetUserPhone(id)).toObject();
         this.address = (await this.mgmtUserService.GetUserAddress(id)).toObject();
         this.addressForm.patchValue(this.address);
     }
diff --git a/console/src/app/pipes/password-pattern.pipe.spec.ts b/console/src/app/pipes/password-pattern.pipe.spec.ts
new file mode 100644
index 0000000000..1253c24a00
--- /dev/null
+++ b/console/src/app/pipes/password-pattern.pipe.spec.ts
@@ -0,0 +1,8 @@
+import { PasswordPatternPipe } from './password-pattern.pipe';
+
+describe('PasswordPatternPipe', () => {
+  it('create an instance', () => {
+    const pipe = new PasswordPatternPipe();
+    expect(pipe).toBeTruthy();
+  });
+});
diff --git a/console/src/app/pipes/password-pattern.pipe.ts b/console/src/app/pipes/password-pattern.pipe.ts
new file mode 100644
index 0000000000..cc604df3ec
--- /dev/null
+++ b/console/src/app/pipes/password-pattern.pipe.ts
@@ -0,0 +1,17 @@
+import { Pipe, PipeTransform } from '@angular/core';
+
+import { PasswordComplexityPolicy } from '../proto/generated/management_pb';
+import { OrgService } from '../services/org.service';
+
+@Pipe({
+    name: 'passwordPattern',
+})
+export class PasswordPatternPipe implements PipeTransform {
+
+    constructor(private orgService: OrgService) { }
+
+    transform(policy: PasswordComplexityPolicy.AsObject, ...args: unknown[]): string {
+        return this.orgService.getLocalizedComplexityPolicyPatternErrorString(policy);
+    }
+
+}
diff --git a/console/src/app/pipes/pipes.module.ts b/console/src/app/pipes/pipes.module.ts
index 976c10f054..910f8d73c2 100644
--- a/console/src/app/pipes/pipes.module.ts
+++ b/console/src/app/pipes/pipes.module.ts
@@ -3,11 +3,13 @@ import { NgModule } from '@angular/core';
 import { MomentModule } from 'ngx-moment';
 
 import { LocalizedDatePipe } from './localized-date.pipe';
+import { PasswordPatternPipe } from './password-pattern.pipe';
 
 
 @NgModule({
     declarations: [
         LocalizedDatePipe,
+        PasswordPatternPipe,
     ],
     imports: [
         CommonModule,
@@ -15,6 +17,7 @@ import { LocalizedDatePipe } from './localized-date.pipe';
     ],
     exports: [
         LocalizedDatePipe,
+        PasswordPatternPipe,
     ],
 })
 export class PipesModule { }
diff --git a/console/src/app/proto/generated/admin_grpc_web_pb.d.ts b/console/src/app/proto/generated/admin_grpc_web_pb.d.ts
index 4fbbb4eae7..61be9106d6 100644
--- a/console/src/app/proto/generated/admin_grpc_web_pb.d.ts
+++ b/console/src/app/proto/generated/admin_grpc_web_pb.d.ts
@@ -11,6 +11,9 @@ import * as authoption_options_pb from './authoption/options_pb';
 import {
   Org,
   OrgID,
+  OrgIamPolicy,
+  OrgIamPolicyID,
+  OrgIamPolicyRequest,
   OrgSearchRequest,
   OrgSearchResponse,
   OrgSetUpRequest,
@@ -72,6 +75,34 @@ export class AdminServiceClient {
                response: OrgSetUpResponse) => void
   ): grpcWeb.ClientReadableStream<OrgSetUpResponse>;
 
+  getOrgIamPolicy(
+    request: OrgIamPolicyID,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: OrgIamPolicy) => void
+  ): grpcWeb.ClientReadableStream<OrgIamPolicy>;
+
+  createOrgIamPolicy(
+    request: OrgIamPolicyRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: OrgIamPolicy) => void
+  ): grpcWeb.ClientReadableStream<OrgIamPolicy>;
+
+  updateOrgIamPolicy(
+    request: OrgIamPolicyRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: OrgIamPolicy) => void
+  ): grpcWeb.ClientReadableStream<OrgIamPolicy>;
+
+  deleteOrgIamPolicy(
+    request: OrgIamPolicyID,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: google_protobuf_empty_pb.Empty) => void
+  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
+
 }
 
 export class AdminServicePromiseClient {
@@ -114,5 +145,25 @@ export class AdminServicePromiseClient {
     metadata?: grpcWeb.Metadata
   ): Promise<OrgSetUpResponse>;
 
+  getOrgIamPolicy(
+    request: OrgIamPolicyID,
+    metadata?: grpcWeb.Metadata
+  ): Promise<OrgIamPolicy>;
+
+  createOrgIamPolicy(
+    request: OrgIamPolicyRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<OrgIamPolicy>;
+
+  updateOrgIamPolicy(
+    request: OrgIamPolicyRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<OrgIamPolicy>;
+
+  deleteOrgIamPolicy(
+    request: OrgIamPolicyID,
+    metadata?: grpcWeb.Metadata
+  ): Promise<google_protobuf_empty_pb.Empty>;
+
 }
 
diff --git a/console/src/app/proto/generated/admin_grpc_web_pb.js b/console/src/app/proto/generated/admin_grpc_web_pb.js
index 785a9e5446..1d36332826 100644
--- a/console/src/app/proto/generated/admin_grpc_web_pb.js
+++ b/console/src/app/proto/generated/admin_grpc_web_pb.js
@@ -644,5 +644,325 @@ proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.setUpOrg =
 };
 
 
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodDescriptor_AdminService_GetOrgIamPolicy = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.admin.api.v1.AdminService/GetOrgIamPolicy',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodInfo_AdminService_GetOrgIamPolicy = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.OrgIamPolicy)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.getOrgIamPolicy =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/GetOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_GetOrgIamPolicy,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.getOrgIamPolicy =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/GetOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_GetOrgIamPolicy);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodDescriptor_AdminService_CreateOrgIamPolicy = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.admin.api.v1.AdminService/CreateOrgIamPolicy',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodInfo_AdminService_CreateOrgIamPolicy = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.OrgIamPolicy)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.createOrgIamPolicy =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/CreateOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_CreateOrgIamPolicy,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.createOrgIamPolicy =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/CreateOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_CreateOrgIamPolicy);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodDescriptor_AdminService_UpdateOrgIamPolicy = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.admin.api.v1.AdminService/UpdateOrgIamPolicy',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest,
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ */
+const methodInfo_AdminService_UpdateOrgIamPolicy = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.admin.api.v1.OrgIamPolicy)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.updateOrgIamPolicy =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/UpdateOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_UpdateOrgIamPolicy,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.admin.api.v1.OrgIamPolicy>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.updateOrgIamPolicy =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/UpdateOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_UpdateOrgIamPolicy);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+ *   !proto.google.protobuf.Empty>}
+ */
+const methodDescriptor_AdminService_DeleteOrgIamPolicy = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.admin.api.v1.AdminService/DeleteOrgIamPolicy',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+  google_protobuf_empty_pb.Empty,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  google_protobuf_empty_pb.Empty.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.admin.api.v1.OrgIamPolicyID,
+ *   !proto.google.protobuf.Empty>}
+ */
+const methodInfo_AdminService_DeleteOrgIamPolicy = new grpc.web.AbstractClientBase.MethodInfo(
+  google_protobuf_empty_pb.Empty,
+  /**
+   * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  google_protobuf_empty_pb.Empty.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.admin.api.v1.AdminServiceClient.prototype.deleteOrgIamPolicy =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/DeleteOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_DeleteOrgIamPolicy,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.google.protobuf.Empty>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.admin.api.v1.AdminServicePromiseClient.prototype.deleteOrgIamPolicy =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.admin.api.v1.AdminService/DeleteOrgIamPolicy',
+      request,
+      metadata || {},
+      methodDescriptor_AdminService_DeleteOrgIamPolicy);
+};
+
+
 module.exports = proto.caos.zitadel.admin.api.v1;
 
diff --git a/console/src/app/proto/generated/admin_pb.d.ts b/console/src/app/proto/generated/admin_pb.d.ts
index 2be0777135..c114c1f05b 100644
--- a/console/src/app/proto/generated/admin_pb.d.ts
+++ b/console/src/app/proto/generated/admin_pb.d.ts
@@ -267,9 +267,6 @@ export class CreateUserRequest extends jspb.Message {
   getNickName(): string;
   setNickName(value: string): void;
 
-  getDisplayName(): string;
-  setDisplayName(value: string): void;
-
   getPreferredLanguage(): string;
   setPreferredLanguage(value: string): void;
 
@@ -320,7 +317,6 @@ export namespace CreateUserRequest {
     firstName: string,
     lastName: string,
     nickName: string,
-    displayName: string,
     preferredLanguage: string,
     gender: Gender,
     email: string,
@@ -460,6 +456,96 @@ export namespace CreateOrgRequest {
   }
 }
 
+export class OrgIamPolicy extends jspb.Message {
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  getDescription(): string;
+  setDescription(value: string): void;
+
+  getUserLoginMustBeDomain(): boolean;
+  setUserLoginMustBeDomain(value: boolean): void;
+
+  getDefault(): boolean;
+  setDefault(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgIamPolicy.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgIamPolicy): OrgIamPolicy.AsObject;
+  static serializeBinaryToWriter(message: OrgIamPolicy, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgIamPolicy;
+  static deserializeBinaryFromReader(message: OrgIamPolicy, reader: jspb.BinaryReader): OrgIamPolicy;
+}
+
+export namespace OrgIamPolicy {
+  export type AsObject = {
+    orgId: string,
+    description: string,
+    userLoginMustBeDomain: boolean,
+    pb_default: boolean,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
+export class OrgIamPolicyRequest extends jspb.Message {
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  getDescription(): string;
+  setDescription(value: string): void;
+
+  getUserLoginMustBeDomain(): boolean;
+  setUserLoginMustBeDomain(value: boolean): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgIamPolicyRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgIamPolicyRequest): OrgIamPolicyRequest.AsObject;
+  static serializeBinaryToWriter(message: OrgIamPolicyRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgIamPolicyRequest;
+  static deserializeBinaryFromReader(message: OrgIamPolicyRequest, reader: jspb.BinaryReader): OrgIamPolicyRequest;
+}
+
+export namespace OrgIamPolicyRequest {
+  export type AsObject = {
+    orgId: string,
+    description: string,
+    userLoginMustBeDomain: boolean,
+  }
+}
+
+export class OrgIamPolicyID extends jspb.Message {
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgIamPolicyID.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgIamPolicyID): OrgIamPolicyID.AsObject;
+  static serializeBinaryToWriter(message: OrgIamPolicyID, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgIamPolicyID;
+  static deserializeBinaryFromReader(message: OrgIamPolicyID, reader: jspb.BinaryReader): OrgIamPolicyID;
+}
+
+export namespace OrgIamPolicyID {
+  export type AsObject = {
+    orgId: string,
+  }
+}
+
 export enum OrgState { 
   ORGSTATE_UNSPECIFIED = 0,
   ORGSTATE_ACTIVE = 1,
diff --git a/console/src/app/proto/generated/admin_pb.js b/console/src/app/proto/generated/admin_pb.js
index fbf3ef52d9..75b1556958 100644
--- a/console/src/app/proto/generated/admin_pb.js
+++ b/console/src/app/proto/generated/admin_pb.js
@@ -30,6 +30,9 @@ goog.exportSymbol('proto.caos.zitadel.admin.api.v1.CreateUserRequest', null, glo
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.Gender', null, global);
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.Org', null, global);
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgID', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgIamPolicy', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgIamPolicyID', null, global);
+goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchKey', null, global);
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchMethod', null, global);
 goog.exportSymbol('proto.caos.zitadel.admin.api.v1.OrgSearchQuery', null, global);
@@ -294,6 +297,69 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.admin.api.v1.CreateOrgRequest.displayName = 'proto.caos.zitadel.admin.api.v1.CreateOrgRequest';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgIamPolicy, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.displayName = 'proto.caos.zitadel.admin.api.v1.OrgIamPolicy';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.displayName = 'proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.admin.api.v1.OrgIamPolicyID, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.displayName = 'proto.caos.zitadel.admin.api.v1.OrgIamPolicyID';
+}
 
 
 
@@ -2094,19 +2160,18 @@ proto.caos.zitadel.admin.api.v1.CreateUserRequest.toObject = function(includeIns
     firstName: jspb.Message.getFieldWithDefault(msg, 2, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 3, ""),
     nickName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    displayName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 6, ""),
-    gender: jspb.Message.getFieldWithDefault(msg, 7, 0),
-    email: jspb.Message.getFieldWithDefault(msg, 8, ""),
-    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 9, false),
-    phone: jspb.Message.getFieldWithDefault(msg, 11, ""),
-    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 12, false),
-    country: jspb.Message.getFieldWithDefault(msg, 13, ""),
-    locality: jspb.Message.getFieldWithDefault(msg, 14, ""),
-    postalCode: jspb.Message.getFieldWithDefault(msg, 15, ""),
-    region: jspb.Message.getFieldWithDefault(msg, 16, ""),
-    streetAddress: jspb.Message.getFieldWithDefault(msg, 17, ""),
-    password: jspb.Message.getFieldWithDefault(msg, 18, "")
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 6, 0),
+    email: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 8, false),
+    phone: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 10, false),
+    country: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 12, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 13, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 15, ""),
+    password: jspb.Message.getFieldWithDefault(msg, 16, "")
   };
 
   if (includeInstance) {
@@ -2160,54 +2225,50 @@ proto.caos.zitadel.admin.api.v1.CreateUserRequest.deserializeBinaryFromReader =
       msg.setNickName(value);
       break;
     case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDisplayName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.setPreferredLanguage(value);
       break;
-    case 7:
+    case 6:
       var value = /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
-    case 8:
+    case 7:
       var value = /** @type {string} */ (reader.readString());
       msg.setEmail(value);
       break;
-    case 9:
+    case 8:
       var value = /** @type {boolean} */ (reader.readBool());
       msg.setIsEmailVerified(value);
       break;
-    case 11:
+    case 9:
       var value = /** @type {string} */ (reader.readString());
       msg.setPhone(value);
       break;
-    case 12:
+    case 10:
       var value = /** @type {boolean} */ (reader.readBool());
       msg.setIsPhoneVerified(value);
       break;
-    case 13:
+    case 11:
       var value = /** @type {string} */ (reader.readString());
       msg.setCountry(value);
       break;
-    case 14:
+    case 12:
       var value = /** @type {string} */ (reader.readString());
       msg.setLocality(value);
       break;
-    case 15:
+    case 13:
       var value = /** @type {string} */ (reader.readString());
       msg.setPostalCode(value);
       break;
-    case 16:
+    case 14:
       var value = /** @type {string} */ (reader.readString());
       msg.setRegion(value);
       break;
-    case 17:
+    case 15:
       var value = /** @type {string} */ (reader.readString());
       msg.setStreetAddress(value);
       break;
-    case 18:
+    case 16:
       var value = /** @type {string} */ (reader.readString());
       msg.setPassword(value);
       break;
@@ -2268,94 +2329,87 @@ proto.caos.zitadel.admin.api.v1.CreateUserRequest.serializeBinaryToWriter = func
       f
     );
   }
-  f = message.getDisplayName();
+  f = message.getPreferredLanguage();
   if (f.length > 0) {
     writer.writeString(
       5,
       f
     );
   }
-  f = message.getPreferredLanguage();
-  if (f.length > 0) {
-    writer.writeString(
-      6,
-      f
-    );
-  }
   f = message.getGender();
   if (f !== 0.0) {
     writer.writeEnum(
-      7,
+      6,
       f
     );
   }
   f = message.getEmail();
   if (f.length > 0) {
     writer.writeString(
-      8,
+      7,
       f
     );
   }
   f = message.getIsEmailVerified();
   if (f) {
     writer.writeBool(
-      9,
+      8,
       f
     );
   }
   f = message.getPhone();
   if (f.length > 0) {
     writer.writeString(
-      11,
+      9,
       f
     );
   }
   f = message.getIsPhoneVerified();
   if (f) {
     writer.writeBool(
-      12,
+      10,
       f
     );
   }
   f = message.getCountry();
   if (f.length > 0) {
     writer.writeString(
-      13,
+      11,
       f
     );
   }
   f = message.getLocality();
   if (f.length > 0) {
     writer.writeString(
-      14,
+      12,
       f
     );
   }
   f = message.getPostalCode();
   if (f.length > 0) {
     writer.writeString(
-      15,
+      13,
       f
     );
   }
   f = message.getRegion();
   if (f.length > 0) {
     writer.writeString(
-      16,
+      14,
       f
     );
   }
   f = message.getStreetAddress();
   if (f.length > 0) {
     writer.writeString(
-      17,
+      15,
       f
     );
   }
   f = message.getPassword();
   if (f.length > 0) {
     writer.writeString(
-      18,
+      16,
       f
     );
   }
@@ -2423,201 +2477,186 @@ proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setNickName = functi
 
 
 /**
- * optional string display_name = 5;
+ * optional string preferred_language = 5;
  * @return {string}
  */
-proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
 
 /**
- * optional string preferred_language = 6;
- * @return {string}
- */
-proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPreferredLanguage = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPreferredLanguage = function(value) {
-  jspb.Message.setProto3StringField(this, 6, value);
-};
-
-
-/**
- * optional Gender gender = 7;
+ * optional Gender gender = 6;
  * @return {!proto.caos.zitadel.admin.api.v1.Gender}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getGender = function() {
-  return /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+  return /** @type {!proto.caos.zitadel.admin.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.admin.api.v1.Gender} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setGender = function(value) {
-  jspb.Message.setProto3EnumField(this, 7, value);
+  jspb.Message.setProto3EnumField(this, 6, value);
 };
 
 
 /**
- * optional string email = 8;
+ * optional string email = 7;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 8, value);
+  jspb.Message.setProto3StringField(this, 7, value);
 };
 
 
 /**
- * optional bool is_email_verified = 9;
+ * optional bool is_email_verified = 8;
  * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getIsEmailVerified = function() {
-  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 9, false));
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 8, false));
 };
 
 
 /** @param {boolean} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setIsEmailVerified = function(value) {
-  jspb.Message.setProto3BooleanField(this, 9, value);
+  jspb.Message.setProto3BooleanField(this, 8, value);
 };
 
 
 /**
- * optional string phone = 11;
+ * optional string phone = 9;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPhone = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPhone = function(value) {
-  jspb.Message.setProto3StringField(this, 11, value);
+  jspb.Message.setProto3StringField(this, 9, value);
 };
 
 
 /**
- * optional bool is_phone_verified = 12;
+ * optional bool is_phone_verified = 10;
  * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getIsPhoneVerified = function() {
-  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 12, false));
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 10, false));
 };
 
 
 /** @param {boolean} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setIsPhoneVerified = function(value) {
-  jspb.Message.setProto3BooleanField(this, 12, value);
+  jspb.Message.setProto3BooleanField(this, 10, value);
 };
 
 
 /**
- * optional string country = 13;
+ * optional string country = 11;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getCountry = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setCountry = function(value) {
-  jspb.Message.setProto3StringField(this, 13, value);
+  jspb.Message.setProto3StringField(this, 11, value);
 };
 
 
 /**
- * optional string locality = 14;
+ * optional string locality = 12;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getLocality = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setLocality = function(value) {
-  jspb.Message.setProto3StringField(this, 14, value);
+  jspb.Message.setProto3StringField(this, 12, value);
 };
 
 
 /**
- * optional string postal_code = 15;
+ * optional string postal_code = 13;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPostalCode = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPostalCode = function(value) {
-  jspb.Message.setProto3StringField(this, 15, value);
+  jspb.Message.setProto3StringField(this, 13, value);
 };
 
 
 /**
- * optional string region = 16;
+ * optional string region = 14;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getRegion = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setRegion = function(value) {
-  jspb.Message.setProto3StringField(this, 16, value);
+  jspb.Message.setProto3StringField(this, 14, value);
 };
 
 
 /**
- * optional string street_address = 17;
+ * optional string street_address = 15;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getStreetAddress = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setStreetAddress = function(value) {
-  jspb.Message.setProto3StringField(this, 17, value);
+  jspb.Message.setProto3StringField(this, 15, value);
 };
 
 
 /**
- * optional string password = 18;
+ * optional string password = 16;
  * @return {string}
  */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.getPassword = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.admin.api.v1.CreateUserRequest.prototype.setPassword = function(value) {
-  jspb.Message.setProto3StringField(this, 18, value);
+  jspb.Message.setProto3StringField(this, 16, value);
 };
 
 
@@ -3482,6 +3521,643 @@ proto.caos.zitadel.admin.api.v1.CreateOrgRequest.prototype.setDomain = function(
 };
 
 
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicy.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicy} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    description: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    userLoginMustBeDomain: jspb.Message.getFieldWithDefault(msg, 3, false),
+    pb_default: jspb.Message.getFieldWithDefault(msg, 4, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 5, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicy}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgIamPolicy;
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicy} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicy}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDescription(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setUserLoginMustBeDomain(value);
+      break;
+    case 4:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setDefault(value);
+      break;
+    case 5:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 7:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicy.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicy} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getDescription();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getUserLoginMustBeDomain();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getDefault();
+  if (f) {
+    writer.writeBool(
+      4,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      5,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      7,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string org_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string description = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getDescription = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setDescription = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool user_login_must_be_domain = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getUserLoginMustBeDomain = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setUserLoginMustBeDomain = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional bool default = 4;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getDefault = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 4, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setDefault = function(value) {
+  jspb.Message.setProto3BooleanField(this, 4, value);
+};
+
+
+/**
+ * optional uint64 sequence = 5;
+ * @return {number}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 5, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 7;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 7, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicy.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 7) != null;
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    description: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    userLoginMustBeDomain: jspb.Message.getFieldWithDefault(msg, 3, false)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest;
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDescription(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setUserLoginMustBeDomain(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getDescription();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getUserLoginMustBeDomain();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string org_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string description = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.getDescription = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.setDescription = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool user_login_must_be_domain = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.getUserLoginMustBeDomain = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyRequest.prototype.setUserLoginMustBeDomain = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgId: jspb.Message.getFieldWithDefault(msg, 1, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.admin.api.v1.OrgIamPolicyID;
+  return proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.admin.api.v1.OrgIamPolicyID} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string org_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.admin.api.v1.OrgIamPolicyID.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
 /**
  * @enum {number}
  */
diff --git a/console/src/app/proto/generated/auth_grpc_web_pb.d.ts b/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
index 5fb89b8330..a87917c087 100644
--- a/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
+++ b/console/src/app/proto/generated/auth_grpc_web_pb.d.ts
@@ -20,11 +20,15 @@ import {
   UpdateUserPhoneRequest,
   UpdateUserProfileRequest,
   UserAddress,
+  UserAddressView,
   UserEmail,
+  UserEmailView,
   UserGrantSearchRequest,
   UserGrantSearchResponse,
   UserPhone,
+  UserPhoneView,
   UserProfile,
+  UserProfileView,
   UserSessionViews,
   VerifyMfaOtp,
   VerifyMyUserEmailRequest,
@@ -67,8 +71,8 @@ export class AuthServiceClient {
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserProfile) => void
-  ): grpcWeb.ClientReadableStream<UserProfile>;
+               response: UserProfileView) => void
+  ): grpcWeb.ClientReadableStream<UserProfileView>;
 
   updateMyUserProfile(
     request: UpdateUserProfileRequest,
@@ -81,8 +85,8 @@ export class AuthServiceClient {
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserEmail) => void
-  ): grpcWeb.ClientReadableStream<UserEmail>;
+               response: UserEmailView) => void
+  ): grpcWeb.ClientReadableStream<UserEmailView>;
 
   changeMyUserEmail(
     request: UpdateUserEmailRequest,
@@ -109,8 +113,8 @@ export class AuthServiceClient {
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserPhone) => void
-  ): grpcWeb.ClientReadableStream<UserPhone>;
+               response: UserPhoneView) => void
+  ): grpcWeb.ClientReadableStream<UserPhoneView>;
 
   changeMyUserPhone(
     request: UpdateUserPhoneRequest,
@@ -137,8 +141,8 @@ export class AuthServiceClient {
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserAddress) => void
-  ): grpcWeb.ClientReadableStream<UserAddress>;
+               response: UserAddressView) => void
+  ): grpcWeb.ClientReadableStream<UserAddressView>;
 
   updateMyUserAddress(
     request: UpdateUserAddressRequest,
@@ -233,7 +237,7 @@ export class AuthServicePromiseClient {
   getMyUserProfile(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserProfile>;
+  ): Promise<UserProfileView>;
 
   updateMyUserProfile(
     request: UpdateUserProfileRequest,
@@ -243,7 +247,7 @@ export class AuthServicePromiseClient {
   getMyUserEmail(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserEmail>;
+  ): Promise<UserEmailView>;
 
   changeMyUserEmail(
     request: UpdateUserEmailRequest,
@@ -263,7 +267,7 @@ export class AuthServicePromiseClient {
   getMyUserPhone(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserPhone>;
+  ): Promise<UserPhoneView>;
 
   changeMyUserPhone(
     request: UpdateUserPhoneRequest,
@@ -283,7 +287,7 @@ export class AuthServicePromiseClient {
   getMyUserAddress(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserAddress>;
+  ): Promise<UserAddressView>;
 
   updateMyUserAddress(
     request: UpdateUserAddressRequest,
diff --git a/console/src/app/proto/generated/auth_grpc_web_pb.js b/console/src/app/proto/generated/auth_grpc_web_pb.js
index be00dbe385..ca8c8b3f06 100644
--- a/console/src/app/proto/generated/auth_grpc_web_pb.js
+++ b/console/src/app/proto/generated/auth_grpc_web_pb.js
@@ -408,13 +408,13 @@ proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserSessi
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UserProfileView>}
  */
 const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescriptor(
   '/caos.zitadel.auth.api.v1.AuthService/GetMyUserProfile',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.caos.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UserProfileView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -422,7 +422,7 @@ const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescrip
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfileView.deserializeBinary
 );
 
 
@@ -430,10 +430,10 @@ const methodDescriptor_AuthService_GetMyUserProfile = new grpc.web.MethodDescrip
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.auth.api.v1.UserProfileView>}
  */
 const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.auth.api.v1.UserProfile,
+  proto.caos.zitadel.auth.api.v1.UserProfileView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -441,7 +441,7 @@ const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserProfileView.deserializeBinary
 );
 
 
@@ -450,9 +450,9 @@ const methodInfo_AuthService_GetMyUserProfile = new grpc.web.AbstractClientBase.
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserProfile)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserProfileView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserProfile>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserProfileView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserProfile =
@@ -471,7 +471,7 @@ proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserProfile =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserProfile>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserProfileView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserProfile =
@@ -568,13 +568,13 @@ proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.updateMyUserPr
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UserEmailView>}
  */
 const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescriptor(
   '/caos.zitadel.auth.api.v1.AuthService/GetMyUserEmail',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.caos.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UserEmailView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -582,7 +582,7 @@ const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescripto
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmailView.deserializeBinary
 );
 
 
@@ -590,10 +590,10 @@ const methodDescriptor_AuthService_GetMyUserEmail = new grpc.web.MethodDescripto
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.auth.api.v1.UserEmailView>}
  */
 const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.auth.api.v1.UserEmail,
+  proto.caos.zitadel.auth.api.v1.UserEmailView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -601,7 +601,7 @@ const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.Me
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserEmailView.deserializeBinary
 );
 
 
@@ -610,9 +610,9 @@ const methodInfo_AuthService_GetMyUserEmail = new grpc.web.AbstractClientBase.Me
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserEmail)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserEmailView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserEmail>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserEmailView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserEmail =
@@ -631,7 +631,7 @@ proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserEmail =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserEmail>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserEmailView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserEmail =
@@ -888,13 +888,13 @@ proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyEmailV
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UserPhoneView>}
  */
 const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescriptor(
   '/caos.zitadel.auth.api.v1.AuthService/GetMyUserPhone',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.caos.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UserPhoneView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -902,7 +902,7 @@ const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescripto
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhoneView.deserializeBinary
 );
 
 
@@ -910,10 +910,10 @@ const methodDescriptor_AuthService_GetMyUserPhone = new grpc.web.MethodDescripto
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.auth.api.v1.UserPhoneView>}
  */
 const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.auth.api.v1.UserPhone,
+  proto.caos.zitadel.auth.api.v1.UserPhoneView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -921,7 +921,7 @@ const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.Me
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserPhoneView.deserializeBinary
 );
 
 
@@ -930,9 +930,9 @@ const methodInfo_AuthService_GetMyUserPhone = new grpc.web.AbstractClientBase.Me
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserPhone)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserPhoneView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserPhone>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserPhoneView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserPhone =
@@ -951,7 +951,7 @@ proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserPhone =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserPhone>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserPhoneView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserPhone =
@@ -1208,13 +1208,13 @@ proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.resendMyPhoneV
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UserAddressView>}
  */
 const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescriptor(
   '/caos.zitadel.auth.api.v1.AuthService/GetMyUserAddress',
   grpc.web.MethodType.UNARY,
   google_protobuf_empty_pb.Empty,
-  proto.caos.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UserAddressView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1222,7 +1222,7 @@ const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescrip
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddressView.deserializeBinary
 );
 
 
@@ -1230,10 +1230,10 @@ const methodDescriptor_AuthService_GetMyUserAddress = new grpc.web.MethodDescrip
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.google.protobuf.Empty,
- *   !proto.caos.zitadel.auth.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.auth.api.v1.UserAddressView>}
  */
 const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.auth.api.v1.UserAddress,
+  proto.caos.zitadel.auth.api.v1.UserAddressView,
   /**
    * @param {!proto.google.protobuf.Empty} request
    * @return {!Uint8Array}
@@ -1241,7 +1241,7 @@ const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.auth.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.auth.api.v1.UserAddressView.deserializeBinary
 );
 
 
@@ -1250,9 +1250,9 @@ const methodInfo_AuthService_GetMyUserAddress = new grpc.web.AbstractClientBase.
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserAddress)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.auth.api.v1.UserAddressView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserAddress>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.auth.api.v1.UserAddressView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserAddress =
@@ -1271,7 +1271,7 @@ proto.caos.zitadel.auth.api.v1.AuthServiceClient.prototype.getMyUserAddress =
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserAddress>}
+ * @return {!Promise<!proto.caos.zitadel.auth.api.v1.UserAddressView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.auth.api.v1.AuthServicePromiseClient.prototype.getMyUserAddress =
diff --git a/console/src/app/proto/generated/auth_pb.d.ts b/console/src/app/proto/generated/auth_pb.d.ts
index 34cf2c3087..16a372e439 100644
--- a/console/src/app/proto/generated/auth_pb.d.ts
+++ b/console/src/app/proto/generated/auth_pb.d.ts
@@ -152,6 +152,14 @@ export class User extends jspb.Message {
   getSequence(): number;
   setSequence(value: number): void;
 
+  getLoginNamesList(): Array<string>;
+  setLoginNamesList(value: Array<string>): void;
+  clearLoginNamesList(): void;
+  addLoginNames(value: string, index?: number): void;
+
+  getPreferredLoginName(): string;
+  setPreferredLoginName(value: string): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): User.AsObject;
   static toObject(includeInstance: boolean, msg: User): User.AsObject;
@@ -187,6 +195,8 @@ export namespace User {
     streetAddress: string,
     passwordChangeRequired: boolean,
     sequence: number,
+    loginNamesList: Array<string>,
+    preferredLoginName: string,
   }
 }
 
@@ -252,7 +262,13 @@ export namespace UserProfile {
   }
 }
 
-export class UpdateUserProfileRequest extends jspb.Message {
+export class UserProfileView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getUserName(): string;
+  setUserName(value: string): void;
+
   getFirstName(): string;
   setFirstName(value: string): void;
 
@@ -271,6 +287,69 @@ export class UpdateUserProfileRequest extends jspb.Message {
   getGender(): Gender;
   setGender(value: Gender): void;
 
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getLoginNamesList(): Array<string>;
+  setLoginNamesList(value: Array<string>): void;
+  clearLoginNamesList(): void;
+  addLoginNames(value: string, index?: number): void;
+
+  getPreferredLoginName(): string;
+  setPreferredLoginName(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserProfileView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserProfileView): UserProfileView.AsObject;
+  static serializeBinaryToWriter(message: UserProfileView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserProfileView;
+  static deserializeBinaryFromReader(message: UserProfileView, reader: jspb.BinaryReader): UserProfileView;
+}
+
+export namespace UserProfileView {
+  export type AsObject = {
+    id: string,
+    userName: string,
+    firstName: string,
+    lastName: string,
+    nickName: string,
+    displayName: string,
+    preferredLanguage: string,
+    gender: Gender,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    loginNamesList: Array<string>,
+    preferredLoginName: string,
+  }
+}
+
+export class UpdateUserProfileRequest extends jspb.Message {
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getNickName(): string;
+  setNickName(value: string): void;
+
+  getPreferredLanguage(): string;
+  setPreferredLanguage(value: string): void;
+
+  getGender(): Gender;
+  setGender(value: Gender): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UpdateUserProfileRequest.AsObject;
   static toObject(includeInstance: boolean, msg: UpdateUserProfileRequest): UpdateUserProfileRequest.AsObject;
@@ -284,7 +363,6 @@ export namespace UpdateUserProfileRequest {
     firstName: string,
     lastName: string,
     nickName: string,
-    displayName: string,
     preferredLanguage: string,
     gender: Gender,
   }
@@ -332,6 +410,48 @@ export namespace UserEmail {
   }
 }
 
+export class UserEmailView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getIsemailverified(): boolean;
+  setIsemailverified(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserEmailView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserEmailView): UserEmailView.AsObject;
+  static serializeBinaryToWriter(message: UserEmailView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserEmailView;
+  static deserializeBinaryFromReader(message: UserEmailView, reader: jspb.BinaryReader): UserEmailView;
+}
+
+export namespace UserEmailView {
+  export type AsObject = {
+    id: string,
+    email: string,
+    isemailverified: boolean,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class VerifyMyUserEmailRequest extends jspb.Message {
   getCode(): string;
   setCode(value: string): void;
@@ -432,6 +552,48 @@ export namespace UserPhone {
   }
 }
 
+export class UserPhoneView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getPhone(): string;
+  setPhone(value: string): void;
+
+  getIsPhoneVerified(): boolean;
+  setIsPhoneVerified(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserPhoneView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserPhoneView): UserPhoneView.AsObject;
+  static serializeBinaryToWriter(message: UserPhoneView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserPhoneView;
+  static deserializeBinaryFromReader(message: UserPhoneView, reader: jspb.BinaryReader): UserPhoneView;
+}
+
+export namespace UserPhoneView {
+  export type AsObject = {
+    id: string,
+    phone: string,
+    isPhoneVerified: boolean,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class UpdateUserPhoneRequest extends jspb.Message {
   getPhone(): string;
   setPhone(value: string): void;
@@ -522,6 +684,60 @@ export namespace UserAddress {
   }
 }
 
+export class UserAddressView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getCountry(): string;
+  setCountry(value: string): void;
+
+  getLocality(): string;
+  setLocality(value: string): void;
+
+  getPostalCode(): string;
+  setPostalCode(value: string): void;
+
+  getRegion(): string;
+  setRegion(value: string): void;
+
+  getStreetAddress(): string;
+  setStreetAddress(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserAddressView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserAddressView): UserAddressView.AsObject;
+  static serializeBinaryToWriter(message: UserAddressView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserAddressView;
+  static deserializeBinaryFromReader(message: UserAddressView, reader: jspb.BinaryReader): UserAddressView;
+}
+
+export namespace UserAddressView {
+  export type AsObject = {
+    id: string,
+    country: string,
+    locality: string,
+    postalCode: string,
+    region: string,
+    streetAddress: string,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class UpdateUserAddressRequest extends jspb.Message {
   getCountry(): string;
   setCountry(value: string): void;
diff --git a/console/src/app/proto/generated/auth_pb.js b/console/src/app/proto/generated/auth_pb.js
index 60930f1cdc..af36c5ff1d 100644
--- a/console/src/app/proto/generated/auth_pb.js
+++ b/console/src/app/proto/generated/auth_pb.js
@@ -49,14 +49,18 @@ goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserPhoneRequest', null,
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.User', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserAddress', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserAddressView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserEmail', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserEmailView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchKey', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchQuery', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserGrantView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserPhone', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserPhoneView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserProfile', null, global);
+goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserProfileView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionState', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionView', null, global);
 goog.exportSymbol('proto.caos.zitadel.auth.api.v1.UserSessionViews', null, global);
@@ -118,7 +122,7 @@ if (goog.DEBUG && !COMPILED) {
  * @constructor
  */
 proto.caos.zitadel.auth.api.v1.User = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.User.repeatedFields_, null);
 };
 goog.inherits(proto.caos.zitadel.auth.api.v1.User, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
@@ -149,6 +153,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.auth.api.v1.UserProfile.displayName = 'proto.caos.zitadel.auth.api.v1.UserProfile';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.auth.api.v1.UserProfileView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserProfileView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.UserProfileView.displayName = 'proto.caos.zitadel.auth.api.v1.UserProfileView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -191,6 +216,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.auth.api.v1.UserEmail.displayName = 'proto.caos.zitadel.auth.api.v1.UserEmail';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserEmailView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.UserEmailView.displayName = 'proto.caos.zitadel.auth.api.v1.UserEmailView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -275,6 +321,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.auth.api.v1.UserPhone.displayName = 'proto.caos.zitadel.auth.api.v1.UserPhone';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserPhoneView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.UserPhoneView.displayName = 'proto.caos.zitadel.auth.api.v1.UserPhoneView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -338,6 +405,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.auth.api.v1.UserAddress.displayName = 'proto.caos.zitadel.auth.api.v1.UserAddress';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.auth.api.v1.UserAddressView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.auth.api.v1.UserAddressView.displayName = 'proto.caos.zitadel.auth.api.v1.UserAddressView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1131,6 +1219,13 @@ proto.caos.zitadel.auth.api.v1.UserSessionView.prototype.setSequence = function(
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.auth.api.v1.User.repeatedFields_ = [26];
+
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -1184,7 +1279,9 @@ proto.caos.zitadel.auth.api.v1.User.toObject = function(includeInstance, msg) {
     region: jspb.Message.getFieldWithDefault(msg, 22, ""),
     streetAddress: jspb.Message.getFieldWithDefault(msg, 23, ""),
     passwordChangeRequired: jspb.Message.getFieldWithDefault(msg, 24, false),
-    sequence: jspb.Message.getFieldWithDefault(msg, 25, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 25, 0),
+    loginNamesList: jspb.Message.getRepeatedField(msg, 26),
+    preferredLoginName: jspb.Message.getFieldWithDefault(msg, 27, "")
   };
 
   if (includeInstance) {
@@ -1326,6 +1423,14 @@ proto.caos.zitadel.auth.api.v1.User.deserializeBinaryFromReader = function(msg,
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
+    case 26:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addLoginNames(value);
+      break;
+    case 27:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLoginName(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -1535,6 +1640,20 @@ proto.caos.zitadel.auth.api.v1.User.serializeBinaryToWriter = function(message,
       f
     );
   }
+  f = message.getLoginNamesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      26,
+      f
+    );
+  }
+  f = message.getPreferredLoginName();
+  if (f.length > 0) {
+    writer.writeString(
+      27,
+      f
+    );
+  }
 };
 
 
@@ -2009,6 +2128,53 @@ proto.caos.zitadel.auth.api.v1.User.prototype.setSequence = function(value) {
 };
 
 
+/**
+ * repeated string login_names = 26;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.auth.api.v1.User.prototype.getLoginNamesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 26));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.auth.api.v1.User.prototype.setLoginNamesList = function(value) {
+  jspb.Message.setField(this, 26, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.auth.api.v1.User.prototype.addLoginNames = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 26, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.auth.api.v1.User.prototype.clearLoginNamesList = function() {
+  this.setLoginNamesList([]);
+};
+
+
+/**
+ * optional string preferred_login_name = 27;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.User.prototype.getPreferredLoginName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 27, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.User.prototype.setPreferredLoginName = function(value) {
+  jspb.Message.setProto3StringField(this, 27, value);
+};
+
+
 
 
 
@@ -2445,6 +2611,519 @@ proto.caos.zitadel.auth.api.v1.UserProfile.prototype.hasChangeDate = function()
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.repeatedFields_ = [12];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserProfileView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfileView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    userName: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    nickName: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    displayName: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 8, 0),
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    loginNamesList: jspb.Message.getRepeatedField(msg, 12),
+    preferredLoginName: jspb.Message.getFieldWithDefault(msg, 13, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserProfileView}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserProfileView;
+  return proto.caos.zitadel.auth.api.v1.UserProfileView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfileView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserProfileView}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setNickName(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDisplayName(value);
+      break;
+    case 7:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLanguage(value);
+      break;
+    case 8:
+      var value = /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
+      msg.setGender(value);
+      break;
+    case 9:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 10:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 11:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 12:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addLoginNames(value);
+      break;
+    case 13:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLoginName(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.UserProfileView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserProfileView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getNickName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getDisplayName();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getPreferredLanguage();
+  if (f.length > 0) {
+    writer.writeString(
+      7,
+      f
+    );
+  }
+  f = message.getGender();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      8,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      9,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      10,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      11,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getLoginNamesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      12,
+      f
+    );
+  }
+  f = message.getPreferredLoginName();
+  if (f.length > 0) {
+    writer.writeString(
+      13,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string user_name = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string first_name = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string last_name = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string nick_name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getNickName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setNickName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional string display_name = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getDisplayName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setDisplayName = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional string preferred_language = 7;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getPreferredLanguage = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setPreferredLanguage = function(value) {
+  jspb.Message.setProto3StringField(this, 7, value);
+};
+
+
+/**
+ * optional Gender gender = 8;
+ * @return {!proto.caos.zitadel.auth.api.v1.Gender}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 8, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.auth.api.v1.Gender} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setGender = function(value) {
+  jspb.Message.setProto3EnumField(this, 8, value);
+};
+
+
+/**
+ * optional uint64 sequence = 9;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 9, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 10;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 10));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 10, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 10) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 11;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 11));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 11, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 11) != null;
+};
+
+
+/**
+ * repeated string login_names = 12;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getLoginNamesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 12));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setLoginNamesList = function(value) {
+  jspb.Message.setField(this, 12, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.addLoginNames = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 12, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.clearLoginNamesList = function() {
+  this.setLoginNamesList([]);
+};
+
+
+/**
+ * optional string preferred_login_name = 13;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.getPreferredLoginName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserProfileView.prototype.setPreferredLoginName = function(value) {
+  jspb.Message.setProto3StringField(this, 13, value);
+};
+
+
+
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -2477,9 +3156,8 @@ proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.toObject = function(incl
     firstName: jspb.Message.getFieldWithDefault(msg, 1, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 2, ""),
     nickName: jspb.Message.getFieldWithDefault(msg, 3, ""),
-    displayName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    gender: jspb.Message.getFieldWithDefault(msg, 6, 0)
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 5, 0)
   };
 
   if (includeInstance) {
@@ -2529,14 +3207,10 @@ proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.deserializeBinaryFromRea
       msg.setNickName(value);
       break;
     case 4:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDisplayName(value);
-      break;
-    case 5:
       var value = /** @type {string} */ (reader.readString());
       msg.setPreferredLanguage(value);
       break;
-    case 6:
+    case 5:
       var value = /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
@@ -2590,24 +3264,17 @@ proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.serializeBinaryToWriter
       f
     );
   }
-  f = message.getDisplayName();
+  f = message.getPreferredLanguage();
   if (f.length > 0) {
     writer.writeString(
       4,
       f
     );
   }
-  f = message.getPreferredLanguage();
-  if (f.length > 0) {
-    writer.writeString(
-      5,
-      f
-    );
-  }
   f = message.getGender();
   if (f !== 0.0) {
     writer.writeEnum(
-      6,
+      5,
       f
     );
   }
@@ -2660,47 +3327,32 @@ proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setNickName =
 
 
 /**
- * optional string display_name = 4;
+ * optional string preferred_language = 4;
  * @return {string}
  */
-proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 4, value);
 };
 
 
 /**
- * optional string preferred_language = 5;
- * @return {string}
- */
-proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
-  jspb.Message.setProto3StringField(this, 5, value);
-};
-
-
-/**
- * optional Gender gender = 6;
+ * optional Gender gender = 5;
  * @return {!proto.caos.zitadel.auth.api.v1.Gender}
  */
 proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.getGender = function() {
-  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
+  return /** @type {!proto.caos.zitadel.auth.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.auth.api.v1.Gender} value */
 proto.caos.zitadel.auth.api.v1.UpdateUserProfileRequest.prototype.setGender = function(value) {
-  jspb.Message.setProto3EnumField(this, 6, value);
+  jspb.Message.setProto3EnumField(this, 5, value);
 };
 
 
@@ -3009,6 +3661,308 @@ proto.caos.zitadel.auth.api.v1.UserEmail.prototype.hasChangeDate = function() {
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserEmailView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmailView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    email: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    isemailverified: jspb.Message.getFieldWithDefault(msg, 3, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserEmailView}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserEmailView;
+  return proto.caos.zitadel.auth.api.v1.UserEmailView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmailView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserEmailView}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsemailverified(value);
+      break;
+    case 4:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.UserEmailView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserEmailView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getIsemailverified();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      4,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string email = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool isEmailVerified = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getIsemailverified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setIsemailverified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional uint64 sequence = 4;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 4, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserEmailView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -3713,6 +4667,308 @@ proto.caos.zitadel.auth.api.v1.UserPhone.prototype.hasChangeDate = function() {
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserPhoneView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhoneView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    phone: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 3, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserPhoneView}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserPhoneView;
+  return proto.caos.zitadel.auth.api.v1.UserPhoneView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhoneView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserPhoneView}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPhone(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsPhoneVerified(value);
+      break;
+    case 4:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.UserPhoneView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserPhoneView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getPhone();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getIsPhoneVerified();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      4,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string phone = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getPhone = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setPhone = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool is_phone_verified = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getIsPhoneVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setIsPhoneVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional uint64 sequence = 4;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 4, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserPhoneView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -4344,6 +5600,387 @@ proto.caos.zitadel.auth.api.v1.UserAddress.prototype.hasChangeDate = function()
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.auth.api.v1.UserAddressView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddressView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    country: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserAddressView}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.auth.api.v1.UserAddressView;
+  return proto.caos.zitadel.auth.api.v1.UserAddressView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddressView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.auth.api.v1.UserAddressView}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setCountry(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLocality(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPostalCode(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setRegion(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setStreetAddress(value);
+      break;
+    case 7:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 9:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.auth.api.v1.UserAddressView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.auth.api.v1.UserAddressView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getCountry();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getLocality();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getPostalCode();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getRegion();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getStreetAddress();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      7,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      9,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string country = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getCountry = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setCountry = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string locality = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getLocality = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setLocality = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string postal_code = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getPostalCode = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setPostalCode = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string region = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getRegion = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setRegion = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional string street_address = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getStreetAddress = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setStreetAddress = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional uint64 sequence = 7;
+ * @return {number}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 7, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 9;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 9));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 9, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.auth.api.v1.UserAddressView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 9) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
diff --git a/console/src/app/proto/generated/management_grpc_web_pb.d.ts b/console/src/app/proto/generated/management_grpc_web_pb.d.ts
index 1ea73935c8..115e9ff8e4 100644
--- a/console/src/app/proto/generated/management_grpc_web_pb.d.ts
+++ b/console/src/app/proto/generated/management_grpc_web_pb.d.ts
@@ -10,6 +10,7 @@ import * as google_protobuf_descriptor_pb from 'google-protobuf/google/protobuf/
 import * as authoption_options_pb from './authoption/options_pb';
 
 import {
+  AddOrgDomainRequest,
   AddOrgMemberRequest,
   Application,
   ApplicationID,
@@ -24,12 +25,15 @@ import {
   ClientSecret,
   CreateUserRequest,
   GrantedProjectSearchRequest,
+  Iam,
   MultiFactors,
   OIDCApplicationCreate,
   OIDCConfig,
   OIDCConfigUpdate,
   Org,
   OrgDomain,
+  OrgDomainSearchRequest,
+  OrgDomainSearchResponse,
   OrgID,
   OrgMember,
   OrgMemberRoles,
@@ -88,6 +92,7 @@ import {
   ProjectUserGrantID,
   ProjectUserGrantSearchRequest,
   ProjectUserGrantUpdate,
+  RemoveOrgDomainRequest,
   RemoveOrgMemberRequest,
   SetPasswordNotificationRequest,
   UniqueUserRequest,
@@ -98,8 +103,10 @@ import {
   UpdateUserProfileRequest,
   User,
   UserAddress,
+  UserAddressView,
   UserEmail,
   UserEmailID,
+  UserEmailView,
   UserGrant,
   UserGrantCreate,
   UserGrantID,
@@ -108,7 +115,9 @@ import {
   UserGrantUpdate,
   UserID,
   UserPhone,
+  UserPhoneView,
   UserProfile,
+  UserProfileView,
   UserSearchRequest,
   UserSearchResponse,
   UserView} from './management_pb';
@@ -139,12 +148,19 @@ export class ManagementServiceClient {
                response: google_protobuf_struct_pb.Struct) => void
   ): grpcWeb.ClientReadableStream<google_protobuf_struct_pb.Struct>;
 
+  getIam(
+    request: google_protobuf_empty_pb.Empty,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: Iam) => void
+  ): grpcWeb.ClientReadableStream<Iam>;
+
   getUserByID(
     request: UserID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: User) => void
-  ): grpcWeb.ClientReadableStream<User>;
+               response: UserView) => void
+  ): grpcWeb.ClientReadableStream<UserView>;
 
   getUserByEmailGlobal(
     request: UserEmailID,
@@ -241,8 +257,8 @@ export class ManagementServiceClient {
     request: UserID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserProfile) => void
-  ): grpcWeb.ClientReadableStream<UserProfile>;
+               response: UserProfileView) => void
+  ): grpcWeb.ClientReadableStream<UserProfileView>;
 
   updateUserProfile(
     request: UpdateUserProfileRequest,
@@ -255,8 +271,8 @@ export class ManagementServiceClient {
     request: UserID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserEmail) => void
-  ): grpcWeb.ClientReadableStream<UserEmail>;
+               response: UserEmailView) => void
+  ): grpcWeb.ClientReadableStream<UserEmailView>;
 
   changeUserEmail(
     request: UpdateUserEmailRequest,
@@ -276,8 +292,8 @@ export class ManagementServiceClient {
     request: UserID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserPhone) => void
-  ): grpcWeb.ClientReadableStream<UserPhone>;
+               response: UserPhoneView) => void
+  ): grpcWeb.ClientReadableStream<UserPhoneView>;
 
   changeUserPhone(
     request: UpdateUserPhoneRequest,
@@ -297,8 +313,8 @@ export class ManagementServiceClient {
     request: UserID,
     metadata: grpcWeb.Metadata | undefined,
     callback: (err: grpcWeb.Error,
-               response: UserAddress) => void
-  ): grpcWeb.ClientReadableStream<UserAddress>;
+               response: UserAddressView) => void
+  ): grpcWeb.ClientReadableStream<UserAddressView>;
 
   updateUserAddress(
     request: UpdateUserAddressRequest,
@@ -440,6 +456,27 @@ export class ManagementServiceClient {
                response: Org) => void
   ): grpcWeb.ClientReadableStream<Org>;
 
+  searchMyOrgDomains(
+    request: OrgDomainSearchRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: OrgDomainSearchResponse) => void
+  ): grpcWeb.ClientReadableStream<OrgDomainSearchResponse>;
+
+  addMyOrgDomain(
+    request: AddOrgDomainRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: OrgDomain) => void
+  ): grpcWeb.ClientReadableStream<OrgDomain>;
+
+  removeMyOrgDomain(
+    request: RemoveOrgDomainRequest,
+    metadata: grpcWeb.Metadata | undefined,
+    callback: (err: grpcWeb.Error,
+               response: google_protobuf_empty_pb.Empty) => void
+  ): grpcWeb.ClientReadableStream<google_protobuf_empty_pb.Empty>;
+
   getOrgMemberRoles(
     request: google_protobuf_empty_pb.Empty,
     metadata: grpcWeb.Metadata | undefined,
@@ -903,10 +940,15 @@ export class ManagementServicePromiseClient {
     metadata?: grpcWeb.Metadata
   ): Promise<google_protobuf_struct_pb.Struct>;
 
+  getIam(
+    request: google_protobuf_empty_pb.Empty,
+    metadata?: grpcWeb.Metadata
+  ): Promise<Iam>;
+
   getUserByID(
     request: UserID,
     metadata?: grpcWeb.Metadata
-  ): Promise<User>;
+  ): Promise<UserView>;
 
   getUserByEmailGlobal(
     request: UserEmailID,
@@ -976,7 +1018,7 @@ export class ManagementServicePromiseClient {
   getUserProfile(
     request: UserID,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserProfile>;
+  ): Promise<UserProfileView>;
 
   updateUserProfile(
     request: UpdateUserProfileRequest,
@@ -986,7 +1028,7 @@ export class ManagementServicePromiseClient {
   getUserEmail(
     request: UserID,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserEmail>;
+  ): Promise<UserEmailView>;
 
   changeUserEmail(
     request: UpdateUserEmailRequest,
@@ -1001,7 +1043,7 @@ export class ManagementServicePromiseClient {
   getUserPhone(
     request: UserID,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserPhone>;
+  ): Promise<UserPhoneView>;
 
   changeUserPhone(
     request: UpdateUserPhoneRequest,
@@ -1016,7 +1058,7 @@ export class ManagementServicePromiseClient {
   getUserAddress(
     request: UserID,
     metadata?: grpcWeb.Metadata
-  ): Promise<UserAddress>;
+  ): Promise<UserAddressView>;
 
   updateUserAddress(
     request: UpdateUserAddressRequest,
@@ -1118,6 +1160,21 @@ export class ManagementServicePromiseClient {
     metadata?: grpcWeb.Metadata
   ): Promise<Org>;
 
+  searchMyOrgDomains(
+    request: OrgDomainSearchRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<OrgDomainSearchResponse>;
+
+  addMyOrgDomain(
+    request: AddOrgDomainRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<OrgDomain>;
+
+  removeMyOrgDomain(
+    request: RemoveOrgDomainRequest,
+    metadata?: grpcWeb.Metadata
+  ): Promise<google_protobuf_empty_pb.Empty>;
+
   getOrgMemberRoles(
     request: google_protobuf_empty_pb.Empty,
     metadata?: grpcWeb.Metadata
diff --git a/console/src/app/proto/generated/management_grpc_web_pb.js b/console/src/app/proto/generated/management_grpc_web_pb.js
index 327b53cc6f..997ea6f80a 100644
--- a/console/src/app/proto/generated/management_grpc_web_pb.js
+++ b/console/src/app/proto/generated/management_grpc_web_pb.js
@@ -326,17 +326,97 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.va
 };
 
 
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.google.protobuf.Empty,
+ *   !proto.caos.zitadel.management.api.v1.Iam>}
+ */
+const methodDescriptor_ManagementService_GetIam = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.management.api.v1.ManagementService/GetIam',
+  grpc.web.MethodType.UNARY,
+  google_protobuf_empty_pb.Empty,
+  proto.caos.zitadel.management.api.v1.Iam,
+  /**
+   * @param {!proto.google.protobuf.Empty} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.Iam.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.google.protobuf.Empty,
+ *   !proto.caos.zitadel.management.api.v1.Iam>}
+ */
+const methodInfo_ManagementService_GetIam = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.management.api.v1.Iam,
+  /**
+   * @param {!proto.google.protobuf.Empty} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.Iam.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.google.protobuf.Empty} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.Iam)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.Iam>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getIam =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/GetIam',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_GetIam,
+      callback);
+};
+
+
+/**
+ * @param {!proto.google.protobuf.Empty} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.Iam>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getIam =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/GetIam',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_GetIam);
+};
+
+
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.User>}
+ *   !proto.caos.zitadel.management.api.v1.UserView>}
  */
 const methodDescriptor_ManagementService_GetUserByID = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserByID',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserID,
-  proto.caos.zitadel.management.api.v1.User,
+  proto.caos.zitadel.management.api.v1.UserView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -344,7 +424,7 @@ const methodDescriptor_ManagementService_GetUserByID = new grpc.web.MethodDescri
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.User.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserView.deserializeBinary
 );
 
 
@@ -352,10 +432,10 @@ const methodDescriptor_ManagementService_GetUserByID = new grpc.web.MethodDescri
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.User>}
+ *   !proto.caos.zitadel.management.api.v1.UserView>}
  */
 const methodInfo_ManagementService_GetUserByID = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.User,
+  proto.caos.zitadel.management.api.v1.UserView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -363,7 +443,7 @@ const methodInfo_ManagementService_GetUserByID = new grpc.web.AbstractClientBase
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.User.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserView.deserializeBinary
 );
 
 
@@ -372,9 +452,9 @@ const methodInfo_ManagementService_GetUserByID = new grpc.web.AbstractClientBase
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.User)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.User>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserByID =
@@ -393,7 +473,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserBy
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.User>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserByID =
@@ -1450,13 +1530,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.pr
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.management.api.v1.UserProfileView>}
  */
 const methodDescriptor_ManagementService_GetUserProfile = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserProfile',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserID,
-  proto.caos.zitadel.management.api.v1.UserProfile,
+  proto.caos.zitadel.management.api.v1.UserProfileView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1464,7 +1544,7 @@ const methodDescriptor_ManagementService_GetUserProfile = new grpc.web.MethodDes
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserProfileView.deserializeBinary
 );
 
 
@@ -1472,10 +1552,10 @@ const methodDescriptor_ManagementService_GetUserProfile = new grpc.web.MethodDes
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserProfile>}
+ *   !proto.caos.zitadel.management.api.v1.UserProfileView>}
  */
 const methodInfo_ManagementService_GetUserProfile = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.UserProfile,
+  proto.caos.zitadel.management.api.v1.UserProfileView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1483,7 +1563,7 @@ const methodInfo_ManagementService_GetUserProfile = new grpc.web.AbstractClientB
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserProfile.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserProfileView.deserializeBinary
 );
 
 
@@ -1492,9 +1572,9 @@ const methodInfo_ManagementService_GetUserProfile = new grpc.web.AbstractClientB
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserProfile)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserProfileView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserProfile>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserProfileView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserProfile =
@@ -1513,7 +1593,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserPr
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserProfile>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserProfileView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserProfile =
@@ -1610,13 +1690,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.up
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.management.api.v1.UserEmailView>}
  */
 const methodDescriptor_ManagementService_GetUserEmail = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserEmail',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserID,
-  proto.caos.zitadel.management.api.v1.UserEmail,
+  proto.caos.zitadel.management.api.v1.UserEmailView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1624,7 +1704,7 @@ const methodDescriptor_ManagementService_GetUserEmail = new grpc.web.MethodDescr
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserEmailView.deserializeBinary
 );
 
 
@@ -1632,10 +1712,10 @@ const methodDescriptor_ManagementService_GetUserEmail = new grpc.web.MethodDescr
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserEmail>}
+ *   !proto.caos.zitadel.management.api.v1.UserEmailView>}
  */
 const methodInfo_ManagementService_GetUserEmail = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.UserEmail,
+  proto.caos.zitadel.management.api.v1.UserEmailView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1643,7 +1723,7 @@ const methodInfo_ManagementService_GetUserEmail = new grpc.web.AbstractClientBas
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserEmail.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserEmailView.deserializeBinary
 );
 
 
@@ -1652,9 +1732,9 @@ const methodInfo_ManagementService_GetUserEmail = new grpc.web.AbstractClientBas
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserEmail)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserEmailView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserEmail>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserEmailView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserEmail =
@@ -1673,7 +1753,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserEm
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserEmail>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserEmailView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserEmail =
@@ -1850,13 +1930,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.re
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.management.api.v1.UserPhoneView>}
  */
 const methodDescriptor_ManagementService_GetUserPhone = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserPhone',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserID,
-  proto.caos.zitadel.management.api.v1.UserPhone,
+  proto.caos.zitadel.management.api.v1.UserPhoneView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1864,7 +1944,7 @@ const methodDescriptor_ManagementService_GetUserPhone = new grpc.web.MethodDescr
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserPhoneView.deserializeBinary
 );
 
 
@@ -1872,10 +1952,10 @@ const methodDescriptor_ManagementService_GetUserPhone = new grpc.web.MethodDescr
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserPhone>}
+ *   !proto.caos.zitadel.management.api.v1.UserPhoneView>}
  */
 const methodInfo_ManagementService_GetUserPhone = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.UserPhone,
+  proto.caos.zitadel.management.api.v1.UserPhoneView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -1883,7 +1963,7 @@ const methodInfo_ManagementService_GetUserPhone = new grpc.web.AbstractClientBas
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserPhone.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserPhoneView.deserializeBinary
 );
 
 
@@ -1892,9 +1972,9 @@ const methodInfo_ManagementService_GetUserPhone = new grpc.web.AbstractClientBas
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserPhone)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserPhoneView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserPhone>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserPhoneView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserPhone =
@@ -1913,7 +1993,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserPh
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserPhone>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserPhoneView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserPhone =
@@ -2090,13 +2170,13 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.re
  * @const
  * @type {!grpc.web.MethodDescriptor<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.management.api.v1.UserAddressView>}
  */
 const methodDescriptor_ManagementService_GetUserAddress = new grpc.web.MethodDescriptor(
   '/caos.zitadel.management.api.v1.ManagementService/GetUserAddress',
   grpc.web.MethodType.UNARY,
   proto.caos.zitadel.management.api.v1.UserID,
-  proto.caos.zitadel.management.api.v1.UserAddress,
+  proto.caos.zitadel.management.api.v1.UserAddressView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -2104,7 +2184,7 @@ const methodDescriptor_ManagementService_GetUserAddress = new grpc.web.MethodDes
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserAddressView.deserializeBinary
 );
 
 
@@ -2112,10 +2192,10 @@ const methodDescriptor_ManagementService_GetUserAddress = new grpc.web.MethodDes
  * @const
  * @type {!grpc.web.AbstractClientBase.MethodInfo<
  *   !proto.caos.zitadel.management.api.v1.UserID,
- *   !proto.caos.zitadel.management.api.v1.UserAddress>}
+ *   !proto.caos.zitadel.management.api.v1.UserAddressView>}
  */
 const methodInfo_ManagementService_GetUserAddress = new grpc.web.AbstractClientBase.MethodInfo(
-  proto.caos.zitadel.management.api.v1.UserAddress,
+  proto.caos.zitadel.management.api.v1.UserAddressView,
   /**
    * @param {!proto.caos.zitadel.management.api.v1.UserID} request
    * @return {!Uint8Array}
@@ -2123,7 +2203,7 @@ const methodInfo_ManagementService_GetUserAddress = new grpc.web.AbstractClientB
   function(request) {
     return request.serializeBinary();
   },
-  proto.caos.zitadel.management.api.v1.UserAddress.deserializeBinary
+  proto.caos.zitadel.management.api.v1.UserAddressView.deserializeBinary
 );
 
 
@@ -2132,9 +2212,9 @@ const methodInfo_ManagementService_GetUserAddress = new grpc.web.AbstractClientB
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserAddress)}
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.UserAddressView)}
  *     callback The callback function(error, response)
- * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserAddress>|undefined}
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.UserAddressView>|undefined}
  *     The XHR Node Readable Stream
  */
 proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserAddress =
@@ -2153,7 +2233,7 @@ proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.getUserAd
  *     request proto
  * @param {?Object<string, string>} metadata User defined
  *     call metadata
- * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserAddress>}
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.UserAddressView>}
  *     A native promise that resolves to the response
  */
 proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.getUserAddress =
@@ -3766,6 +3846,246 @@ proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.re
 };
 
 
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest,
+ *   !proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse>}
+ */
+const methodDescriptor_ManagementService_SearchMyOrgDomains = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.management.api.v1.ManagementService/SearchMyOrgDomains',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest,
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest,
+ *   !proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse>}
+ */
+const methodInfo_ManagementService_SearchMyOrgDomains = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.searchMyOrgDomains =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/SearchMyOrgDomains',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_SearchMyOrgDomains,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.searchMyOrgDomains =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/SearchMyOrgDomains',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_SearchMyOrgDomains);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.management.api.v1.AddOrgDomainRequest,
+ *   !proto.caos.zitadel.management.api.v1.OrgDomain>}
+ */
+const methodDescriptor_ManagementService_AddMyOrgDomain = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.management.api.v1.ManagementService/AddMyOrgDomain',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.management.api.v1.AddOrgDomainRequest,
+  proto.caos.zitadel.management.api.v1.OrgDomain,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.management.api.v1.AddOrgDomainRequest,
+ *   !proto.caos.zitadel.management.api.v1.OrgDomain>}
+ */
+const methodInfo_ManagementService_AddMyOrgDomain = new grpc.web.AbstractClientBase.MethodInfo(
+  proto.caos.zitadel.management.api.v1.OrgDomain,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.caos.zitadel.management.api.v1.OrgDomain)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.caos.zitadel.management.api.v1.OrgDomain>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.addMyOrgDomain =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/AddMyOrgDomain',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_AddMyOrgDomain,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.caos.zitadel.management.api.v1.OrgDomain>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.addMyOrgDomain =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/AddMyOrgDomain',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_AddMyOrgDomain);
+};
+
+
+/**
+ * @const
+ * @type {!grpc.web.MethodDescriptor<
+ *   !proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest,
+ *   !proto.google.protobuf.Empty>}
+ */
+const methodDescriptor_ManagementService_RemoveMyOrgDomain = new grpc.web.MethodDescriptor(
+  '/caos.zitadel.management.api.v1.ManagementService/RemoveMyOrgDomain',
+  grpc.web.MethodType.UNARY,
+  proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest,
+  google_protobuf_empty_pb.Empty,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  google_protobuf_empty_pb.Empty.deserializeBinary
+);
+
+
+/**
+ * @const
+ * @type {!grpc.web.AbstractClientBase.MethodInfo<
+ *   !proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest,
+ *   !proto.google.protobuf.Empty>}
+ */
+const methodInfo_ManagementService_RemoveMyOrgDomain = new grpc.web.AbstractClientBase.MethodInfo(
+  google_protobuf_empty_pb.Empty,
+  /**
+   * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} request
+   * @return {!Uint8Array}
+   */
+  function(request) {
+    return request.serializeBinary();
+  },
+  google_protobuf_empty_pb.Empty.deserializeBinary
+);
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @param {function(?grpc.web.Error, ?proto.google.protobuf.Empty)}
+ *     callback The callback function(error, response)
+ * @return {!grpc.web.ClientReadableStream<!proto.google.protobuf.Empty>|undefined}
+ *     The XHR Node Readable Stream
+ */
+proto.caos.zitadel.management.api.v1.ManagementServiceClient.prototype.removeMyOrgDomain =
+    function(request, metadata, callback) {
+  return this.client_.rpcCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/RemoveMyOrgDomain',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_RemoveMyOrgDomain,
+      callback);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} request The
+ *     request proto
+ * @param {?Object<string, string>} metadata User defined
+ *     call metadata
+ * @return {!Promise<!proto.google.protobuf.Empty>}
+ *     A native promise that resolves to the response
+ */
+proto.caos.zitadel.management.api.v1.ManagementServicePromiseClient.prototype.removeMyOrgDomain =
+    function(request, metadata) {
+  return this.client_.unaryCall(this.hostname_ +
+      '/caos.zitadel.management.api.v1.ManagementService/RemoveMyOrgDomain',
+      request,
+      metadata || {},
+      methodDescriptor_ManagementService_RemoveMyOrgDomain);
+};
+
+
 /**
  * @const
  * @type {!grpc.web.MethodDescriptor<
diff --git a/console/src/app/proto/generated/management_pb.d.ts b/console/src/app/proto/generated/management_pb.d.ts
index 8acad1fbf7..0a69163ea8 100644
--- a/console/src/app/proto/generated/management_pb.d.ts
+++ b/console/src/app/proto/generated/management_pb.d.ts
@@ -9,10 +9,43 @@ import * as validate_validate_pb from './validate/validate_pb';
 import * as google_protobuf_descriptor_pb from 'google-protobuf/google/protobuf/descriptor_pb';
 import * as authoption_options_pb from './authoption/options_pb';
 
+export class Iam extends jspb.Message {
+  getGlobalOrgId(): string;
+  setGlobalOrgId(value: string): void;
+
+  getIamProjectId(): string;
+  setIamProjectId(value: string): void;
+
+  getSetUpDone(): boolean;
+  setSetUpDone(value: boolean): void;
+
+  getSetUpStarted(): boolean;
+  setSetUpStarted(value: boolean): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): Iam.AsObject;
+  static toObject(includeInstance: boolean, msg: Iam): Iam.AsObject;
+  static serializeBinaryToWriter(message: Iam, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): Iam;
+  static deserializeBinaryFromReader(message: Iam, reader: jspb.BinaryReader): Iam;
+}
+
+export namespace Iam {
+  export type AsObject = {
+    globalOrgId: string,
+    iamProjectId: string,
+    setUpDone: boolean,
+    setUpStarted: boolean,
+  }
+}
+
 export class ChangeRequest extends jspb.Message {
   getId(): string;
   setId(value: string): void;
 
+  getSecId(): string;
+  setSecId(value: string): void;
+
   getLimit(): number;
   setLimit(value: number): void;
 
@@ -30,6 +63,7 @@ export class ChangeRequest extends jspb.Message {
 export namespace ChangeRequest {
   export type AsObject = {
     id: string,
+    secId: string,
     limit: number,
     sequenceOffset: number,
   }
@@ -230,9 +264,6 @@ export class CreateUserRequest extends jspb.Message {
   getNickName(): string;
   setNickName(value: string): void;
 
-  getDisplayName(): string;
-  setDisplayName(value: string): void;
-
   getPreferredLanguage(): string;
   setPreferredLanguage(value: string): void;
 
@@ -283,7 +314,6 @@ export namespace CreateUserRequest {
     firstName: string,
     lastName: string,
     nickName: string,
-    displayName: string,
     preferredLanguage: string,
     gender: Gender,
     email: string,
@@ -482,6 +512,14 @@ export class UserView extends jspb.Message {
   getResourceOwner(): string;
   setResourceOwner(value: string): void;
 
+  getLoginNamesList(): Array<string>;
+  setLoginNamesList(value: Array<string>): void;
+  clearLoginNamesList(): void;
+  addLoginNames(value: string, index?: number): void;
+
+  getPreferredLoginName(): string;
+  setPreferredLoginName(value: string): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UserView.AsObject;
   static toObject(includeInstance: boolean, msg: UserView): UserView.AsObject;
@@ -516,6 +554,8 @@ export namespace UserView {
     streetAddress: string,
     sequence: number,
     resourceOwner: string,
+    loginNamesList: Array<string>,
+    preferredLoginName: string,
   }
 }
 
@@ -675,7 +715,7 @@ export namespace UserProfile {
   }
 }
 
-export class UpdateUserProfileRequest extends jspb.Message {
+export class UserProfileView extends jspb.Message {
   getId(): string;
   setId(value: string): void;
 
@@ -697,6 +737,75 @@ export class UpdateUserProfileRequest extends jspb.Message {
   getGender(): Gender;
   setGender(value: Gender): void;
 
+  getUserName(): string;
+  setUserName(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getLoginNamesList(): Array<string>;
+  setLoginNamesList(value: Array<string>): void;
+  clearLoginNamesList(): void;
+  addLoginNames(value: string, index?: number): void;
+
+  getPreferredLoginName(): string;
+  setPreferredLoginName(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserProfileView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserProfileView): UserProfileView.AsObject;
+  static serializeBinaryToWriter(message: UserProfileView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserProfileView;
+  static deserializeBinaryFromReader(message: UserProfileView, reader: jspb.BinaryReader): UserProfileView;
+}
+
+export namespace UserProfileView {
+  export type AsObject = {
+    id: string,
+    firstName: string,
+    lastName: string,
+    nickName: string,
+    displayName: string,
+    preferredLanguage: string,
+    gender: Gender,
+    userName: string,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    loginNamesList: Array<string>,
+    preferredLoginName: string,
+  }
+}
+
+export class UpdateUserProfileRequest extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getFirstName(): string;
+  setFirstName(value: string): void;
+
+  getLastName(): string;
+  setLastName(value: string): void;
+
+  getNickName(): string;
+  setNickName(value: string): void;
+
+  getPreferredLanguage(): string;
+  setPreferredLanguage(value: string): void;
+
+  getGender(): Gender;
+  setGender(value: Gender): void;
+
   serializeBinary(): Uint8Array;
   toObject(includeInstance?: boolean): UpdateUserProfileRequest.AsObject;
   static toObject(includeInstance: boolean, msg: UpdateUserProfileRequest): UpdateUserProfileRequest.AsObject;
@@ -711,7 +820,6 @@ export namespace UpdateUserProfileRequest {
     firstName: string,
     lastName: string,
     nickName: string,
-    displayName: string,
     preferredLanguage: string,
     gender: Gender,
   }
@@ -759,6 +867,48 @@ export namespace UserEmail {
   }
 }
 
+export class UserEmailView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getEmail(): string;
+  setEmail(value: string): void;
+
+  getIsEmailVerified(): boolean;
+  setIsEmailVerified(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserEmailView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserEmailView): UserEmailView.AsObject;
+  static serializeBinaryToWriter(message: UserEmailView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserEmailView;
+  static deserializeBinaryFromReader(message: UserEmailView, reader: jspb.BinaryReader): UserEmailView;
+}
+
+export namespace UserEmailView {
+  export type AsObject = {
+    id: string,
+    email: string,
+    isEmailVerified: boolean,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class UpdateUserEmailRequest extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -827,6 +977,48 @@ export namespace UserPhone {
   }
 }
 
+export class UserPhoneView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getPhone(): string;
+  setPhone(value: string): void;
+
+  getIsPhoneVerified(): boolean;
+  setIsPhoneVerified(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserPhoneView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserPhoneView): UserPhoneView.AsObject;
+  static serializeBinaryToWriter(message: UserPhoneView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserPhoneView;
+  static deserializeBinaryFromReader(message: UserPhoneView, reader: jspb.BinaryReader): UserPhoneView;
+}
+
+export namespace UserPhoneView {
+  export type AsObject = {
+    id: string,
+    phone: string,
+    isPhoneVerified: boolean,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class UpdateUserPhoneRequest extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -907,6 +1099,60 @@ export namespace UserAddress {
   }
 }
 
+export class UserAddressView extends jspb.Message {
+  getId(): string;
+  setId(value: string): void;
+
+  getCountry(): string;
+  setCountry(value: string): void;
+
+  getLocality(): string;
+  setLocality(value: string): void;
+
+  getPostalCode(): string;
+  setPostalCode(value: string): void;
+
+  getRegion(): string;
+  setRegion(value: string): void;
+
+  getStreetAddress(): string;
+  setStreetAddress(value: string): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): UserAddressView.AsObject;
+  static toObject(includeInstance: boolean, msg: UserAddressView): UserAddressView.AsObject;
+  static serializeBinaryToWriter(message: UserAddressView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): UserAddressView;
+  static deserializeBinaryFromReader(message: UserAddressView, reader: jspb.BinaryReader): UserAddressView;
+}
+
+export namespace UserAddressView {
+  export type AsObject = {
+    id: string,
+    country: string,
+    locality: string,
+    postalCode: string,
+    region: string,
+    streetAddress: string,
+    sequence: number,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+  }
+}
+
 export class UpdateUserAddressRequest extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -1505,24 +1751,6 @@ export namespace OrgID {
   }
 }
 
-export class OrgDomain extends jspb.Message {
-  getDomain(): string;
-  setDomain(value: string): void;
-
-  serializeBinary(): Uint8Array;
-  toObject(includeInstance?: boolean): OrgDomain.AsObject;
-  static toObject(includeInstance: boolean, msg: OrgDomain): OrgDomain.AsObject;
-  static serializeBinaryToWriter(message: OrgDomain, writer: jspb.BinaryWriter): void;
-  static deserializeBinary(bytes: Uint8Array): OrgDomain;
-  static deserializeBinaryFromReader(message: OrgDomain, reader: jspb.BinaryReader): OrgDomain;
-}
-
-export namespace OrgDomain {
-  export type AsObject = {
-    domain: string,
-  }
-}
-
 export class Org extends jspb.Message {
   getId(): string;
   setId(value: string): void;
@@ -1543,9 +1771,6 @@ export class Org extends jspb.Message {
   getName(): string;
   setName(value: string): void;
 
-  getDomain(): string;
-  setDomain(value: string): void;
-
   getSequence(): number;
   setSequence(value: number): void;
 
@@ -1564,11 +1789,244 @@ export namespace Org {
     creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
     name: string,
-    domain: string,
     sequence: number,
   }
 }
 
+export class OrgDomains extends jspb.Message {
+  getDomainsList(): Array<OrgDomain>;
+  setDomainsList(value: Array<OrgDomain>): void;
+  clearDomainsList(): void;
+  addDomains(value?: OrgDomain, index?: number): OrgDomain;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomains.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomains): OrgDomains.AsObject;
+  static serializeBinaryToWriter(message: OrgDomains, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomains;
+  static deserializeBinaryFromReader(message: OrgDomains, reader: jspb.BinaryReader): OrgDomains;
+}
+
+export namespace OrgDomains {
+  export type AsObject = {
+    domainsList: Array<OrgDomain.AsObject>,
+  }
+}
+
+export class OrgDomain extends jspb.Message {
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getDomain(): string;
+  setDomain(value: string): void;
+
+  getVerified(): boolean;
+  setVerified(value: boolean): void;
+
+  getPrimary(): boolean;
+  setPrimary(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomain.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomain): OrgDomain.AsObject;
+  static serializeBinaryToWriter(message: OrgDomain, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomain;
+  static deserializeBinaryFromReader(message: OrgDomain, reader: jspb.BinaryReader): OrgDomain;
+}
+
+export namespace OrgDomain {
+  export type AsObject = {
+    orgId: string,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    domain: string,
+    verified: boolean,
+    primary: boolean,
+    sequence: number,
+  }
+}
+
+export class OrgDomainView extends jspb.Message {
+  getOrgId(): string;
+  setOrgId(value: string): void;
+
+  getCreationDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setCreationDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasCreationDate(): boolean;
+  clearCreationDate(): void;
+
+  getChangeDate(): google_protobuf_timestamp_pb.Timestamp | undefined;
+  setChangeDate(value?: google_protobuf_timestamp_pb.Timestamp): void;
+  hasChangeDate(): boolean;
+  clearChangeDate(): void;
+
+  getDomain(): string;
+  setDomain(value: string): void;
+
+  getVerified(): boolean;
+  setVerified(value: boolean): void;
+
+  getPrimary(): boolean;
+  setPrimary(value: boolean): void;
+
+  getSequence(): number;
+  setSequence(value: number): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomainView.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomainView): OrgDomainView.AsObject;
+  static serializeBinaryToWriter(message: OrgDomainView, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomainView;
+  static deserializeBinaryFromReader(message: OrgDomainView, reader: jspb.BinaryReader): OrgDomainView;
+}
+
+export namespace OrgDomainView {
+  export type AsObject = {
+    orgId: string,
+    creationDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    changeDate?: google_protobuf_timestamp_pb.Timestamp.AsObject,
+    domain: string,
+    verified: boolean,
+    primary: boolean,
+    sequence: number,
+  }
+}
+
+export class AddOrgDomainRequest extends jspb.Message {
+  getDomain(): string;
+  setDomain(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): AddOrgDomainRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: AddOrgDomainRequest): AddOrgDomainRequest.AsObject;
+  static serializeBinaryToWriter(message: AddOrgDomainRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): AddOrgDomainRequest;
+  static deserializeBinaryFromReader(message: AddOrgDomainRequest, reader: jspb.BinaryReader): AddOrgDomainRequest;
+}
+
+export namespace AddOrgDomainRequest {
+  export type AsObject = {
+    domain: string,
+  }
+}
+
+export class RemoveOrgDomainRequest extends jspb.Message {
+  getDomain(): string;
+  setDomain(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): RemoveOrgDomainRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: RemoveOrgDomainRequest): RemoveOrgDomainRequest.AsObject;
+  static serializeBinaryToWriter(message: RemoveOrgDomainRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): RemoveOrgDomainRequest;
+  static deserializeBinaryFromReader(message: RemoveOrgDomainRequest, reader: jspb.BinaryReader): RemoveOrgDomainRequest;
+}
+
+export namespace RemoveOrgDomainRequest {
+  export type AsObject = {
+    domain: string,
+  }
+}
+
+export class OrgDomainSearchResponse extends jspb.Message {
+  getOffset(): number;
+  setOffset(value: number): void;
+
+  getLimit(): number;
+  setLimit(value: number): void;
+
+  getTotalResult(): number;
+  setTotalResult(value: number): void;
+
+  getResultList(): Array<OrgDomainView>;
+  setResultList(value: Array<OrgDomainView>): void;
+  clearResultList(): void;
+  addResult(value?: OrgDomainView, index?: number): OrgDomainView;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomainSearchResponse.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomainSearchResponse): OrgDomainSearchResponse.AsObject;
+  static serializeBinaryToWriter(message: OrgDomainSearchResponse, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomainSearchResponse;
+  static deserializeBinaryFromReader(message: OrgDomainSearchResponse, reader: jspb.BinaryReader): OrgDomainSearchResponse;
+}
+
+export namespace OrgDomainSearchResponse {
+  export type AsObject = {
+    offset: number,
+    limit: number,
+    totalResult: number,
+    resultList: Array<OrgDomainView.AsObject>,
+  }
+}
+
+export class OrgDomainSearchRequest extends jspb.Message {
+  getOffset(): number;
+  setOffset(value: number): void;
+
+  getLimit(): number;
+  setLimit(value: number): void;
+
+  getQueriesList(): Array<OrgDomainSearchQuery>;
+  setQueriesList(value: Array<OrgDomainSearchQuery>): void;
+  clearQueriesList(): void;
+  addQueries(value?: OrgDomainSearchQuery, index?: number): OrgDomainSearchQuery;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomainSearchRequest.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomainSearchRequest): OrgDomainSearchRequest.AsObject;
+  static serializeBinaryToWriter(message: OrgDomainSearchRequest, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomainSearchRequest;
+  static deserializeBinaryFromReader(message: OrgDomainSearchRequest, reader: jspb.BinaryReader): OrgDomainSearchRequest;
+}
+
+export namespace OrgDomainSearchRequest {
+  export type AsObject = {
+    offset: number,
+    limit: number,
+    queriesList: Array<OrgDomainSearchQuery.AsObject>,
+  }
+}
+
+export class OrgDomainSearchQuery extends jspb.Message {
+  getKey(): OrgDomainSearchKey;
+  setKey(value: OrgDomainSearchKey): void;
+
+  getMethod(): SearchMethod;
+  setMethod(value: SearchMethod): void;
+
+  getValue(): string;
+  setValue(value: string): void;
+
+  serializeBinary(): Uint8Array;
+  toObject(includeInstance?: boolean): OrgDomainSearchQuery.AsObject;
+  static toObject(includeInstance: boolean, msg: OrgDomainSearchQuery): OrgDomainSearchQuery.AsObject;
+  static serializeBinaryToWriter(message: OrgDomainSearchQuery, writer: jspb.BinaryWriter): void;
+  static deserializeBinary(bytes: Uint8Array): OrgDomainSearchQuery;
+  static deserializeBinaryFromReader(message: OrgDomainSearchQuery, reader: jspb.BinaryReader): OrgDomainSearchQuery;
+}
+
+export namespace OrgDomainSearchQuery {
+  export type AsObject = {
+    key: OrgDomainSearchKey,
+    method: SearchMethod,
+    value: string,
+  }
+}
+
 export class OrgMemberRoles extends jspb.Message {
   getRolesList(): Array<string>;
   setRolesList(value: Array<string>): void;
@@ -4308,6 +4766,10 @@ export enum OrgState {
   ORGSTATE_ACTIVE = 1,
   ORGSTATE_INACTIVE = 2,
 }
+export enum OrgDomainSearchKey { 
+  ORGDOMAINSEARCHKEY_UNSPECIFIED = 0,
+  ORGDOMAINSEARCHKEY_DOMAIN = 1,
+}
 export enum OrgMemberSearchKey { 
   ORGMEMBERSEARCHKEY_UNSPECIFIED = 0,
   ORGMEMBERSEARCHKEY_FIRST_NAME = 1,
diff --git a/console/src/app/proto/generated/management_pb.js b/console/src/app/proto/generated/management_pb.js
index 4d9d1df9ad..53307d026e 100644
--- a/console/src/app/proto/generated/management_pb.js
+++ b/console/src/app/proto/generated/management_pb.js
@@ -27,6 +27,7 @@ var google_protobuf_descriptor_pb = require('google-protobuf/google/protobuf/des
 goog.object.extend(proto, google_protobuf_descriptor_pb);
 var authoption_options_pb = require('./authoption/options_pb.js');
 goog.object.extend(proto, authoption_options_pb);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.AddOrgDomainRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.AddOrgMemberRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.AppState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.Application', null, global);
@@ -50,6 +51,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ClientSecret', null, glo
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.CreateUserRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.Gender', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.GrantedProjectSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.Iam', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MFAState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MfaType', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.MultiFactor', null, global);
@@ -64,6 +66,12 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.OIDCGrantType', null, gl
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.OIDCResponseType', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.Org', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomain', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomainSearchKey', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomainView', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgDomains', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgID', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgMember', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.OrgMemberRoles', null, global);
@@ -144,6 +152,7 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectUserGrantSearchRe
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectUserGrantUpdate', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ProjectView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.Projects', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.RemoveOrgMemberRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.ResetPasswordRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.SearchMethod', null, global);
@@ -156,8 +165,10 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.UpdateUserPhoneRequest',
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.User', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserAddress', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserAddressView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserEmail', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserEmailID', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserEmailView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrant', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantCreate', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantID', null, global);
@@ -170,13 +181,36 @@ goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantUpdate', null,
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserGrantView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserID', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserPhone', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserPhoneView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserProfile', null, global);
+goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserProfileView', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchKey', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchQuery', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchRequest', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserSearchResponse', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserState', null, global);
 goog.exportSymbol('proto.caos.zitadel.management.api.v1.UserView', null, global);
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.Iam = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.Iam, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.Iam.displayName = 'proto.caos.zitadel.management.api.v1.Iam';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -419,7 +453,7 @@ if (goog.DEBUG && !COMPILED) {
  * @constructor
  */
 proto.caos.zitadel.management.api.v1.UserView = function(opt_data) {
-  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.UserView.repeatedFields_, null);
 };
 goog.inherits(proto.caos.zitadel.management.api.v1.UserView, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
@@ -513,6 +547,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.UserProfile.displayName = 'proto.caos.zitadel.management.api.v1.UserProfile';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.UserProfileView.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserProfileView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserProfileView.displayName = 'proto.caos.zitadel.management.api.v1.UserProfileView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -555,6 +610,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.UserEmail.displayName = 'proto.caos.zitadel.management.api.v1.UserEmail';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserEmailView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserEmailView.displayName = 'proto.caos.zitadel.management.api.v1.UserEmailView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -597,6 +673,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.UserPhone.displayName = 'proto.caos.zitadel.management.api.v1.UserPhone';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserPhoneView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserPhoneView.displayName = 'proto.caos.zitadel.management.api.v1.UserPhoneView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -639,6 +736,27 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.UserAddress.displayName = 'proto.caos.zitadel.management.api.v1.UserAddress';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.UserAddressView, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.UserAddressView.displayName = 'proto.caos.zitadel.management.api.v1.UserAddressView';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1059,6 +1177,48 @@ if (goog.DEBUG && !COMPILED) {
    */
   proto.caos.zitadel.management.api.v1.OrgID.displayName = 'proto.caos.zitadel.management.api.v1.OrgID';
 }
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.Org = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.Org, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.Org.displayName = 'proto.caos.zitadel.management.api.v1.Org';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.OrgDomains.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.OrgDomains, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.OrgDomains.displayName = 'proto.caos.zitadel.management.api.v1.OrgDomains';
+}
 /**
  * Generated by JsPbCodeGenerator.
  * @param {Array=} opt_data Optional initial data array, typically from a
@@ -1090,16 +1250,121 @@ if (goog.DEBUG && !COMPILED) {
  * @extends {jspb.Message}
  * @constructor
  */
-proto.caos.zitadel.management.api.v1.Org = function(opt_data) {
+proto.caos.zitadel.management.api.v1.OrgDomainView = function(opt_data) {
   jspb.Message.initialize(this, opt_data, 0, -1, null, null);
 };
-goog.inherits(proto.caos.zitadel.management.api.v1.Org, jspb.Message);
+goog.inherits(proto.caos.zitadel.management.api.v1.OrgDomainView, jspb.Message);
 if (goog.DEBUG && !COMPILED) {
   /**
    * @public
    * @override
    */
-  proto.caos.zitadel.management.api.v1.Org.displayName = 'proto.caos.zitadel.management.api.v1.Org';
+  proto.caos.zitadel.management.api.v1.OrgDomainView.displayName = 'proto.caos.zitadel.management.api.v1.OrgDomainView';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.AddOrgDomainRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.displayName = 'proto.caos.zitadel.management.api.v1.AddOrgDomainRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.displayName = 'proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.displayName = 'proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.repeatedFields_, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.displayName = 'proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest';
+}
+/**
+ * Generated by JsPbCodeGenerator.
+ * @param {Array=} opt_data Optional initial data array, typically from a
+ * server response, or constructed directly in Javascript. The array is used
+ * in place and becomes part of the constructed object. It is not cloned.
+ * If no data is provided, the constructed object will be empty, but still
+ * valid.
+ * @extends {jspb.Message}
+ * @constructor
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery = function(opt_data) {
+  jspb.Message.initialize(this, opt_data, 0, -1, null, null);
+};
+goog.inherits(proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery, jspb.Message);
+if (goog.DEBUG && !COMPILED) {
+  /**
+   * @public
+   * @override
+   */
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.displayName = 'proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery';
 }
 /**
  * Generated by JsPbCodeGenerator.
@@ -2784,6 +3049,216 @@ if (goog.DEBUG && !COMPILED) {
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.Iam.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.Iam} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.Iam.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    globalOrgId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    iamProjectId: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    setUpDone: jspb.Message.getFieldWithDefault(msg, 3, false),
+    setUpStarted: jspb.Message.getFieldWithDefault(msg, 4, false)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.Iam}
+ */
+proto.caos.zitadel.management.api.v1.Iam.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.Iam;
+  return proto.caos.zitadel.management.api.v1.Iam.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.Iam} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.Iam}
+ */
+proto.caos.zitadel.management.api.v1.Iam.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setGlobalOrgId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setIamProjectId(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setSetUpDone(value);
+      break;
+    case 4:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setSetUpStarted(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.Iam.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.Iam} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.Iam.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getGlobalOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getIamProjectId();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getSetUpDone();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getSetUpStarted();
+  if (f) {
+    writer.writeBool(
+      4,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string global_org_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.getGlobalOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.Iam.prototype.setGlobalOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string iam_project_id = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.getIamProjectId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.Iam.prototype.setIamProjectId = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool set_up_done = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.getSetUpDone = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.Iam.prototype.setSetUpDone = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional bool set_up_started = 4;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.Iam.prototype.getSetUpStarted = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 4, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.Iam.prototype.setSetUpStarted = function(value) {
+  jspb.Message.setProto3BooleanField(this, 4, value);
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -2812,8 +3287,9 @@ proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.toObject = function
 proto.caos.zitadel.management.api.v1.ChangeRequest.toObject = function(includeInstance, msg) {
   var f, obj = {
     id: jspb.Message.getFieldWithDefault(msg, 1, ""),
-    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
-    sequenceOffset: jspb.Message.getFieldWithDefault(msg, 3, 0)
+    secId: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    limit: jspb.Message.getFieldWithDefault(msg, 3, 0),
+    sequenceOffset: jspb.Message.getFieldWithDefault(msg, 4, 0)
   };
 
   if (includeInstance) {
@@ -2855,10 +3331,14 @@ proto.caos.zitadel.management.api.v1.ChangeRequest.deserializeBinaryFromReader =
       msg.setId(value);
       break;
     case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setSecId(value);
+      break;
+    case 3:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setLimit(value);
       break;
-    case 3:
+    case 4:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequenceOffset(value);
       break;
@@ -2898,17 +3378,24 @@ proto.caos.zitadel.management.api.v1.ChangeRequest.serializeBinaryToWriter = fun
       f
     );
   }
+  f = message.getSecId();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
   f = message.getLimit();
   if (f !== 0) {
     writer.writeUint64(
-      2,
+      3,
       f
     );
   }
   f = message.getSequenceOffset();
   if (f !== 0) {
     writer.writeUint64(
-      3,
+      4,
       f
     );
   }
@@ -2931,35 +3418,50 @@ proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setId = function(va
 
 
 /**
- * optional uint64 limit = 2;
- * @return {number}
+ * optional string sec_id = 2;
+ * @return {string}
  */
-proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.getLimit = function() {
-  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.getSecId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
 };
 
 
-/** @param {number} value */
-proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setLimit = function(value) {
-  jspb.Message.setProto3IntField(this, 2, value);
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setSecId = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
 };
 
 
 /**
- * optional uint64 sequence_offset = 3;
+ * optional uint64 limit = 3;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.getSequenceOffset = function() {
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.getLimit = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setSequenceOffset = function(value) {
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setLimit = function(value) {
   jspb.Message.setProto3IntField(this, 3, value);
 };
 
 
+/**
+ * optional uint64 sequence_offset = 4;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.getSequenceOffset = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.ChangeRequest.prototype.setSequenceOffset = function(value) {
+  jspb.Message.setProto3IntField(this, 4, value);
+};
+
+
 
 /**
  * List of repeated fields within this message type.
@@ -4281,19 +4783,18 @@ proto.caos.zitadel.management.api.v1.CreateUserRequest.toObject = function(inclu
     firstName: jspb.Message.getFieldWithDefault(msg, 2, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 3, ""),
     nickName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    displayName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 6, ""),
-    gender: jspb.Message.getFieldWithDefault(msg, 7, 0),
-    email: jspb.Message.getFieldWithDefault(msg, 8, ""),
-    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 9, false),
-    phone: jspb.Message.getFieldWithDefault(msg, 11, ""),
-    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 12, false),
-    country: jspb.Message.getFieldWithDefault(msg, 13, ""),
-    locality: jspb.Message.getFieldWithDefault(msg, 14, ""),
-    postalCode: jspb.Message.getFieldWithDefault(msg, 15, ""),
-    region: jspb.Message.getFieldWithDefault(msg, 16, ""),
-    streetAddress: jspb.Message.getFieldWithDefault(msg, 17, ""),
-    password: jspb.Message.getFieldWithDefault(msg, 18, "")
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 6, 0),
+    email: jspb.Message.getFieldWithDefault(msg, 7, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 8, false),
+    phone: jspb.Message.getFieldWithDefault(msg, 9, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 10, false),
+    country: jspb.Message.getFieldWithDefault(msg, 11, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 12, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 13, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 14, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 15, ""),
+    password: jspb.Message.getFieldWithDefault(msg, 16, "")
   };
 
   if (includeInstance) {
@@ -4347,54 +4848,50 @@ proto.caos.zitadel.management.api.v1.CreateUserRequest.deserializeBinaryFromRead
       msg.setNickName(value);
       break;
     case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDisplayName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.setPreferredLanguage(value);
       break;
-    case 7:
+    case 6:
       var value = /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
-    case 8:
+    case 7:
       var value = /** @type {string} */ (reader.readString());
       msg.setEmail(value);
       break;
-    case 9:
+    case 8:
       var value = /** @type {boolean} */ (reader.readBool());
       msg.setIsEmailVerified(value);
       break;
-    case 11:
+    case 9:
       var value = /** @type {string} */ (reader.readString());
       msg.setPhone(value);
       break;
-    case 12:
+    case 10:
       var value = /** @type {boolean} */ (reader.readBool());
       msg.setIsPhoneVerified(value);
       break;
-    case 13:
+    case 11:
       var value = /** @type {string} */ (reader.readString());
       msg.setCountry(value);
       break;
-    case 14:
+    case 12:
       var value = /** @type {string} */ (reader.readString());
       msg.setLocality(value);
       break;
-    case 15:
+    case 13:
       var value = /** @type {string} */ (reader.readString());
       msg.setPostalCode(value);
       break;
-    case 16:
+    case 14:
       var value = /** @type {string} */ (reader.readString());
       msg.setRegion(value);
       break;
-    case 17:
+    case 15:
       var value = /** @type {string} */ (reader.readString());
       msg.setStreetAddress(value);
       break;
-    case 18:
+    case 16:
       var value = /** @type {string} */ (reader.readString());
       msg.setPassword(value);
       break;
@@ -4455,94 +4952,87 @@ proto.caos.zitadel.management.api.v1.CreateUserRequest.serializeBinaryToWriter =
       f
     );
   }
-  f = message.getDisplayName();
+  f = message.getPreferredLanguage();
   if (f.length > 0) {
     writer.writeString(
       5,
       f
     );
   }
-  f = message.getPreferredLanguage();
-  if (f.length > 0) {
-    writer.writeString(
-      6,
-      f
-    );
-  }
   f = message.getGender();
   if (f !== 0.0) {
     writer.writeEnum(
-      7,
+      6,
       f
     );
   }
   f = message.getEmail();
   if (f.length > 0) {
     writer.writeString(
-      8,
+      7,
       f
     );
   }
   f = message.getIsEmailVerified();
   if (f) {
     writer.writeBool(
-      9,
+      8,
       f
     );
   }
   f = message.getPhone();
   if (f.length > 0) {
     writer.writeString(
-      11,
+      9,
       f
     );
   }
   f = message.getIsPhoneVerified();
   if (f) {
     writer.writeBool(
-      12,
+      10,
       f
     );
   }
   f = message.getCountry();
   if (f.length > 0) {
     writer.writeString(
-      13,
+      11,
       f
     );
   }
   f = message.getLocality();
   if (f.length > 0) {
     writer.writeString(
-      14,
+      12,
       f
     );
   }
   f = message.getPostalCode();
   if (f.length > 0) {
     writer.writeString(
-      15,
+      13,
       f
     );
   }
   f = message.getRegion();
   if (f.length > 0) {
     writer.writeString(
-      16,
+      14,
       f
     );
   }
   f = message.getStreetAddress();
   if (f.length > 0) {
     writer.writeString(
-      17,
+      15,
       f
     );
   }
   f = message.getPassword();
   if (f.length > 0) {
     writer.writeString(
-      18,
+      16,
       f
     );
   }
@@ -4610,201 +5100,186 @@ proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setNickName = f
 
 
 /**
- * optional string display_name = 5;
+ * optional string preferred_language = 5;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
 
 /**
- * optional string preferred_language = 6;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getPreferredLanguage = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setPreferredLanguage = function(value) {
-  jspb.Message.setProto3StringField(this, 6, value);
-};
-
-
-/**
- * optional Gender gender = 7;
+ * optional Gender gender = 6;
  * @return {!proto.caos.zitadel.management.api.v1.Gender}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getGender = function() {
-  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.Gender} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setGender = function(value) {
-  jspb.Message.setProto3EnumField(this, 7, value);
+  jspb.Message.setProto3EnumField(this, 6, value);
 };
 
 
 /**
- * optional string email = 8;
+ * optional string email = 7;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getEmail = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 7, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setEmail = function(value) {
-  jspb.Message.setProto3StringField(this, 8, value);
+  jspb.Message.setProto3StringField(this, 7, value);
 };
 
 
 /**
- * optional bool is_email_verified = 9;
+ * optional bool is_email_verified = 8;
  * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getIsEmailVerified = function() {
-  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 9, false));
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 8, false));
 };
 
 
 /** @param {boolean} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setIsEmailVerified = function(value) {
-  jspb.Message.setProto3BooleanField(this, 9, value);
+  jspb.Message.setProto3BooleanField(this, 8, value);
 };
 
 
 /**
- * optional string phone = 11;
+ * optional string phone = 9;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getPhone = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 9, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setPhone = function(value) {
-  jspb.Message.setProto3StringField(this, 11, value);
+  jspb.Message.setProto3StringField(this, 9, value);
 };
 
 
 /**
- * optional bool is_phone_verified = 12;
+ * optional bool is_phone_verified = 10;
  * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
  * You should avoid comparisons like {@code val === true/false} in those cases.
  * @return {boolean}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getIsPhoneVerified = function() {
-  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 12, false));
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 10, false));
 };
 
 
 /** @param {boolean} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setIsPhoneVerified = function(value) {
-  jspb.Message.setProto3BooleanField(this, 12, value);
+  jspb.Message.setProto3BooleanField(this, 10, value);
 };
 
 
 /**
- * optional string country = 13;
+ * optional string country = 11;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getCountry = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 11, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setCountry = function(value) {
-  jspb.Message.setProto3StringField(this, 13, value);
+  jspb.Message.setProto3StringField(this, 11, value);
 };
 
 
 /**
- * optional string locality = 14;
+ * optional string locality = 12;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getLocality = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 12, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setLocality = function(value) {
-  jspb.Message.setProto3StringField(this, 14, value);
+  jspb.Message.setProto3StringField(this, 12, value);
 };
 
 
 /**
- * optional string postal_code = 15;
+ * optional string postal_code = 13;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getPostalCode = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 13, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setPostalCode = function(value) {
-  jspb.Message.setProto3StringField(this, 15, value);
+  jspb.Message.setProto3StringField(this, 13, value);
 };
 
 
 /**
- * optional string region = 16;
+ * optional string region = 14;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getRegion = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 14, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setRegion = function(value) {
-  jspb.Message.setProto3StringField(this, 16, value);
+  jspb.Message.setProto3StringField(this, 14, value);
 };
 
 
 /**
- * optional string street_address = 17;
+ * optional string street_address = 15;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getStreetAddress = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 17, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 15, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setStreetAddress = function(value) {
-  jspb.Message.setProto3StringField(this, 17, value);
+  jspb.Message.setProto3StringField(this, 15, value);
 };
 
 
 /**
- * optional string password = 18;
+ * optional string password = 16;
  * @return {string}
  */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.getPassword = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 18, ""));
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 16, ""));
 };
 
 
 /** @param {string} value */
 proto.caos.zitadel.management.api.v1.CreateUserRequest.prototype.setPassword = function(value) {
-  jspb.Message.setProto3StringField(this, 18, value);
+  jspb.Message.setProto3StringField(this, 16, value);
 };
 
 
@@ -5518,6 +5993,13 @@ proto.caos.zitadel.management.api.v1.User.prototype.setSequence = function(value
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.UserView.repeatedFields_ = [25];
+
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -5570,7 +6052,9 @@ proto.caos.zitadel.management.api.v1.UserView.toObject = function(includeInstanc
     region: jspb.Message.getFieldWithDefault(msg, 21, ""),
     streetAddress: jspb.Message.getFieldWithDefault(msg, 22, ""),
     sequence: jspb.Message.getFieldWithDefault(msg, 23, 0),
-    resourceOwner: jspb.Message.getFieldWithDefault(msg, 24, "")
+    resourceOwner: jspb.Message.getFieldWithDefault(msg, 24, ""),
+    loginNamesList: jspb.Message.getRepeatedField(msg, 25),
+    preferredLoginName: jspb.Message.getFieldWithDefault(msg, 27, "")
   };
 
   if (includeInstance) {
@@ -5707,6 +6191,14 @@ proto.caos.zitadel.management.api.v1.UserView.deserializeBinaryFromReader = func
       var value = /** @type {string} */ (reader.readString());
       msg.setResourceOwner(value);
       break;
+    case 25:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addLoginNames(value);
+      break;
+    case 27:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLoginName(value);
+      break;
     default:
       reader.skipField();
       break;
@@ -5908,6 +6400,20 @@ proto.caos.zitadel.management.api.v1.UserView.serializeBinaryToWriter = function
       f
     );
   }
+  f = message.getLoginNamesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      25,
+      f
+    );
+  }
+  f = message.getPreferredLoginName();
+  if (f.length > 0) {
+    writer.writeString(
+      27,
+      f
+    );
+  }
 };
 
 
@@ -6347,6 +6853,53 @@ proto.caos.zitadel.management.api.v1.UserView.prototype.setResourceOwner = funct
 };
 
 
+/**
+ * repeated string login_names = 25;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.getLoginNamesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 25));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.UserView.prototype.setLoginNamesList = function(value) {
+  jspb.Message.setField(this, 25, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.addLoginNames = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 25, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.clearLoginNamesList = function() {
+  this.setLoginNamesList([]);
+};
+
+
+/**
+ * optional string preferred_login_name = 27;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserView.prototype.getPreferredLoginName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 27, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserView.prototype.setPreferredLoginName = function(value) {
+  jspb.Message.setProto3StringField(this, 27, value);
+};
+
+
 
 /**
  * List of repeated fields within this message type.
@@ -7461,6 +8014,519 @@ proto.caos.zitadel.management.api.v1.UserProfile.prototype.hasChangeDate = funct
 
 
 
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.repeatedFields_ = [12];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserProfileView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserProfileView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    firstName: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    lastName: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    nickName: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    displayName: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    userName: jspb.Message.getFieldWithDefault(msg, 8, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 9, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    loginNamesList: jspb.Message.getRepeatedField(msg, 12),
+    preferredLoginName: jspb.Message.getFieldWithDefault(msg, 27, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserProfileView}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserProfileView;
+  return proto.caos.zitadel.management.api.v1.UserProfileView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserProfileView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserProfileView}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setFirstName(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLastName(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setNickName(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDisplayName(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLanguage(value);
+      break;
+    case 7:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (reader.readEnum());
+      msg.setGender(value);
+      break;
+    case 8:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setUserName(value);
+      break;
+    case 9:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 10:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 11:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 12:
+      var value = /** @type {string} */ (reader.readString());
+      msg.addLoginNames(value);
+      break;
+    case 27:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPreferredLoginName(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.UserProfileView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.UserProfileView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getFirstName();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getLastName();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getNickName();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getDisplayName();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getPreferredLanguage();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getGender();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      7,
+      f
+    );
+  }
+  f = message.getUserName();
+  if (f.length > 0) {
+    writer.writeString(
+      8,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      9,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      10,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      11,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getLoginNamesList();
+  if (f.length > 0) {
+    writer.writeRepeatedString(
+      12,
+      f
+    );
+  }
+  f = message.getPreferredLoginName();
+  if (f.length > 0) {
+    writer.writeString(
+      27,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string first_name = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getFirstName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setFirstName = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string last_name = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getLastName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setLastName = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string nick_name = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getNickName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setNickName = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string display_name = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getDisplayName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setDisplayName = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional string preferred_language = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getPreferredLanguage = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setPreferredLanguage = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional Gender gender = 7;
+ * @return {!proto.caos.zitadel.management.api.v1.Gender}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getGender = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.Gender} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setGender = function(value) {
+  jspb.Message.setProto3EnumField(this, 7, value);
+};
+
+
+/**
+ * optional string user_name = 8;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getUserName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 8, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setUserName = function(value) {
+  jspb.Message.setProto3StringField(this, 8, value);
+};
+
+
+/**
+ * optional uint64 sequence = 9;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 9, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 9, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 10;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 10));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 10, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 10) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 11;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 11));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 11, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 11) != null;
+};
+
+
+/**
+ * repeated string login_names = 12;
+ * @return {!Array<string>}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getLoginNamesList = function() {
+  return /** @type {!Array<string>} */ (jspb.Message.getRepeatedField(this, 12));
+};
+
+
+/** @param {!Array<string>} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setLoginNamesList = function(value) {
+  jspb.Message.setField(this, 12, value || []);
+};
+
+
+/**
+ * @param {string} value
+ * @param {number=} opt_index
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.addLoginNames = function(value, opt_index) {
+  jspb.Message.addToRepeatedField(this, 12, value, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.clearLoginNamesList = function() {
+  this.setLoginNamesList([]);
+};
+
+
+/**
+ * optional string preferred_login_name = 27;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.getPreferredLoginName = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 27, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserProfileView.prototype.setPreferredLoginName = function(value) {
+  jspb.Message.setProto3StringField(this, 27, value);
+};
+
+
+
 
 
 if (jspb.Message.GENERATE_TO_OBJECT) {
@@ -7494,9 +8560,8 @@ proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.toObject = functio
     firstName: jspb.Message.getFieldWithDefault(msg, 2, ""),
     lastName: jspb.Message.getFieldWithDefault(msg, 3, ""),
     nickName: jspb.Message.getFieldWithDefault(msg, 4, ""),
-    displayName: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 6, ""),
-    gender: jspb.Message.getFieldWithDefault(msg, 7, 0)
+    preferredLanguage: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    gender: jspb.Message.getFieldWithDefault(msg, 6, 0)
   };
 
   if (includeInstance) {
@@ -7550,14 +8615,10 @@ proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.deserializeBinaryF
       msg.setNickName(value);
       break;
     case 5:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDisplayName(value);
-      break;
-    case 6:
       var value = /** @type {string} */ (reader.readString());
       msg.setPreferredLanguage(value);
       break;
-    case 7:
+    case 6:
       var value = /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (reader.readEnum());
       msg.setGender(value);
       break;
@@ -7618,24 +8679,17 @@ proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.serializeBinaryToW
       f
     );
   }
-  f = message.getDisplayName();
+  f = message.getPreferredLanguage();
   if (f.length > 0) {
     writer.writeString(
       5,
       f
     );
   }
-  f = message.getPreferredLanguage();
-  if (f.length > 0) {
-    writer.writeString(
-      6,
-      f
-    );
-  }
   f = message.getGender();
   if (f !== 0.0) {
     writer.writeEnum(
-      7,
+      6,
       f
     );
   }
@@ -7703,47 +8757,32 @@ proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.setNickN
 
 
 /**
- * optional string display_name = 5;
+ * optional string preferred_language = 5;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.getDisplayName = function() {
+proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
   return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.setDisplayName = function(value) {
+proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
   jspb.Message.setProto3StringField(this, 5, value);
 };
 
 
 /**
- * optional string preferred_language = 6;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.getPreferredLanguage = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.setPreferredLanguage = function(value) {
-  jspb.Message.setProto3StringField(this, 6, value);
-};
-
-
-/**
- * optional Gender gender = 7;
+ * optional Gender gender = 6;
  * @return {!proto.caos.zitadel.management.api.v1.Gender}
  */
 proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.getGender = function() {
-  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+  return /** @type {!proto.caos.zitadel.management.api.v1.Gender} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
 };
 
 
 /** @param {!proto.caos.zitadel.management.api.v1.Gender} value */
 proto.caos.zitadel.management.api.v1.UpdateUserProfileRequest.prototype.setGender = function(value) {
-  jspb.Message.setProto3EnumField(this, 7, value);
+  jspb.Message.setProto3EnumField(this, 6, value);
 };
 
 
@@ -8052,6 +9091,308 @@ proto.caos.zitadel.management.api.v1.UserEmail.prototype.hasChangeDate = functio
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserEmailView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserEmailView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    email: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    isEmailVerified: jspb.Message.getFieldWithDefault(msg, 3, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 4, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserEmailView}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserEmailView;
+  return proto.caos.zitadel.management.api.v1.UserEmailView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserEmailView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserEmailView}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setEmail(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsEmailVerified(value);
+      break;
+    case 4:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 5:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.UserEmailView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.UserEmailView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getEmail();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getIsEmailVerified();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      4,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      5,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string email = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getEmail = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setEmail = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool is_email_verified = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getIsEmailVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setIsEmailVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional uint64 sequence = 4;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 4, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 4, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 5;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 5));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 5, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 5) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserEmailView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -8535,6 +9876,308 @@ proto.caos.zitadel.management.api.v1.UserPhone.prototype.hasChangeDate = functio
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserPhoneView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserPhoneView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    phone: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    isPhoneVerified: jspb.Message.getFieldWithDefault(msg, 3, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 5, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserPhoneView}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserPhoneView;
+  return proto.caos.zitadel.management.api.v1.UserPhoneView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserPhoneView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserPhoneView}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPhone(value);
+      break;
+    case 3:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setIsPhoneVerified(value);
+      break;
+    case 5:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 6:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 7:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.UserPhoneView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.UserPhoneView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getPhone();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getIsPhoneVerified();
+  if (f) {
+    writer.writeBool(
+      3,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      5,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      6,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      7,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string phone = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getPhone = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setPhone = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional bool is_phone_verified = 3;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getIsPhoneVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 3, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setIsPhoneVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 3, value);
+};
+
+
+/**
+ * optional uint64 sequence = 5;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 5, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 5, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 6;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 6));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 6, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 6) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 7;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 7));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 7, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserPhoneView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 7) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -9097,6 +10740,387 @@ proto.caos.zitadel.management.api.v1.UserAddress.prototype.hasChangeDate = funct
 
 
 
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.UserAddressView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.UserAddressView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    id: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    country: jspb.Message.getFieldWithDefault(msg, 2, ""),
+    locality: jspb.Message.getFieldWithDefault(msg, 3, ""),
+    postalCode: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    region: jspb.Message.getFieldWithDefault(msg, 5, ""),
+    streetAddress: jspb.Message.getFieldWithDefault(msg, 6, ""),
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.UserAddressView}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.UserAddressView;
+  return proto.caos.zitadel.management.api.v1.UserAddressView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.UserAddressView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.UserAddressView}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setId(value);
+      break;
+    case 2:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setCountry(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setLocality(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setPostalCode(value);
+      break;
+    case 5:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setRegion(value);
+      break;
+    case 6:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setStreetAddress(value);
+      break;
+    case 7:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    case 8:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 9:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.UserAddressView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.UserAddressView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getCountry();
+  if (f.length > 0) {
+    writer.writeString(
+      2,
+      f
+    );
+  }
+  f = message.getLocality();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+  f = message.getPostalCode();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getRegion();
+  if (f.length > 0) {
+    writer.writeString(
+      5,
+      f
+    );
+  }
+  f = message.getStreetAddress();
+  if (f.length > 0) {
+    writer.writeString(
+      6,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      7,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      8,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      9,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional string id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional string country = 2;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getCountry = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 2, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setCountry = function(value) {
+  jspb.Message.setProto3StringField(this, 2, value);
+};
+
+
+/**
+ * optional string locality = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getLocality = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setLocality = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+/**
+ * optional string postal_code = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getPostalCode = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setPostalCode = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional string region = 5;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getRegion = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 5, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setRegion = function(value) {
+  jspb.Message.setProto3StringField(this, 5, value);
+};
+
+
+/**
+ * optional string street_address = 6;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getStreetAddress = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setStreetAddress = function(value) {
+  jspb.Message.setProto3StringField(this, 6, value);
+};
+
+
+/**
+ * optional uint64 sequence = 7;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 7, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 8;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 8));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 8, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 8) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 9;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 9));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 9, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.UserAddressView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 9) != null;
+};
+
+
+
+
+
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -13294,131 +15318,6 @@ proto.caos.zitadel.management.api.v1.OrgID.prototype.setId = function(value) {
 
 
 
-if (jspb.Message.GENERATE_TO_OBJECT) {
-/**
- * Creates an object representation of this proto suitable for use in Soy templates.
- * Field names that are reserved in JavaScript and will be renamed to pb_name.
- * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
- * For the list of reserved names please see:
- *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
- * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
- *     for transitional soy proto support: http://goto/soy-param-migration
- * @return {!Object}
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.prototype.toObject = function(opt_includeInstance) {
-  return proto.caos.zitadel.management.api.v1.OrgDomain.toObject(opt_includeInstance, this);
-};
-
-
-/**
- * Static version of the {@see toObject} method.
- * @param {boolean|undefined} includeInstance Whether to include the JSPB
- *     instance for transitional soy proto support:
- *     http://goto/soy-param-migration
- * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} msg The msg instance to transform.
- * @return {!Object}
- * @suppress {unusedLocalVariables} f is only used for nested messages
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.toObject = function(includeInstance, msg) {
-  var f, obj = {
-    domain: jspb.Message.getFieldWithDefault(msg, 1, "")
-  };
-
-  if (includeInstance) {
-    obj.$jspbMessageInstance = msg;
-  }
-  return obj;
-};
-}
-
-
-/**
- * Deserializes binary data (in protobuf wire format).
- * @param {jspb.ByteSource} bytes The bytes to deserialize.
- * @return {!proto.caos.zitadel.management.api.v1.OrgDomain}
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinary = function(bytes) {
-  var reader = new jspb.BinaryReader(bytes);
-  var msg = new proto.caos.zitadel.management.api.v1.OrgDomain;
-  return proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinaryFromReader(msg, reader);
-};
-
-
-/**
- * Deserializes binary data (in protobuf wire format) from the
- * given reader into the given message object.
- * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} msg The message object to deserialize into.
- * @param {!jspb.BinaryReader} reader The BinaryReader to use.
- * @return {!proto.caos.zitadel.management.api.v1.OrgDomain}
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinaryFromReader = function(msg, reader) {
-  while (reader.nextField()) {
-    if (reader.isEndGroup()) {
-      break;
-    }
-    var field = reader.getFieldNumber();
-    switch (field) {
-    case 1:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDomain(value);
-      break;
-    default:
-      reader.skipField();
-      break;
-    }
-  }
-  return msg;
-};
-
-
-/**
- * Serializes the message to binary data (in protobuf wire format).
- * @return {!Uint8Array}
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.prototype.serializeBinary = function() {
-  var writer = new jspb.BinaryWriter();
-  proto.caos.zitadel.management.api.v1.OrgDomain.serializeBinaryToWriter(this, writer);
-  return writer.getResultBuffer();
-};
-
-
-/**
- * Serializes the given message to binary data (in protobuf wire
- * format), writing to the given BinaryWriter.
- * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} message
- * @param {!jspb.BinaryWriter} writer
- * @suppress {unusedLocalVariables} f is only used for nested messages
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.serializeBinaryToWriter = function(message, writer) {
-  var f = undefined;
-  f = message.getDomain();
-  if (f.length > 0) {
-    writer.writeString(
-      1,
-      f
-    );
-  }
-};
-
-
-/**
- * optional string domain = 1;
- * @return {string}
- */
-proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getDomain = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
-};
-
-
-/** @param {string} value */
-proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setDomain = function(value) {
-  jspb.Message.setProto3StringField(this, 1, value);
-};
-
-
-
-
-
 if (jspb.Message.GENERATE_TO_OBJECT) {
 /**
  * Creates an object representation of this proto suitable for use in Soy templates.
@@ -13451,8 +15350,7 @@ proto.caos.zitadel.management.api.v1.Org.toObject = function(includeInstance, ms
     creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
     name: jspb.Message.getFieldWithDefault(msg, 5, ""),
-    domain: jspb.Message.getFieldWithDefault(msg, 6, ""),
-    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0)
+    sequence: jspb.Message.getFieldWithDefault(msg, 6, 0)
   };
 
   if (includeInstance) {
@@ -13512,10 +15410,6 @@ proto.caos.zitadel.management.api.v1.Org.deserializeBinaryFromReader = function(
       msg.setName(value);
       break;
     case 6:
-      var value = /** @type {string} */ (reader.readString());
-      msg.setDomain(value);
-      break;
-    case 7:
       var value = /** @type {number} */ (reader.readUint64());
       msg.setSequence(value);
       break;
@@ -13585,17 +15479,10 @@ proto.caos.zitadel.management.api.v1.Org.serializeBinaryToWriter = function(mess
       f
     );
   }
-  f = message.getDomain();
-  if (f.length > 0) {
-    writer.writeString(
-      6,
-      f
-    );
-  }
   f = message.getSequence();
   if (f !== 0) {
     writer.writeUint64(
-      7,
+      6,
       f
     );
   }
@@ -13714,17 +15601,487 @@ proto.caos.zitadel.management.api.v1.Org.prototype.setName = function(value) {
 
 
 /**
- * optional string domain = 6;
+ * optional uint64 sequence = 6;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.Org.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 6, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.Org.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 6, value);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.repeatedFields_ = [1];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomains.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomains} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    domainsList: jspb.Message.toObjectList(msg.getDomainsList(),
+    proto.caos.zitadel.management.api.v1.OrgDomain.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomains}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomains;
+  return proto.caos.zitadel.management.api.v1.OrgDomains.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomains} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomains}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = new proto.caos.zitadel.management.api.v1.OrgDomain;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinaryFromReader);
+      msg.addDomains(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomains.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomains} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getDomainsList();
+  if (f.length > 0) {
+    writer.writeRepeatedMessage(
+      1,
+      f,
+      proto.caos.zitadel.management.api.v1.OrgDomain.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * repeated OrgDomain domains = 1;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.OrgDomain>}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.getDomainsList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.OrgDomain>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.OrgDomain, 1));
+};
+
+
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.OrgDomain>} value */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.setDomainsList = function(value) {
+  jspb.Message.setRepeatedWrapperField(this, 1, value);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomain=} opt_value
+ * @param {number=} opt_index
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomain}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.addDomains = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 1, opt_value, proto.caos.zitadel.management.api.v1.OrgDomain, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomains.prototype.clearDomainsList = function() {
+  this.setDomainsList([]);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomain.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    domain: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    verified: jspb.Message.getFieldWithDefault(msg, 5, false),
+    primary: jspb.Message.getFieldWithDefault(msg, 6, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomain}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomain;
+  return proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomain}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 2:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 3:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDomain(value);
+      break;
+    case 5:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setVerified(value);
+      break;
+    case 6:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setPrimary(value);
+      break;
+    case 7:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomain.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomain} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      2,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      3,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getVerified();
+  if (f) {
+    writer.writeBool(
+      5,
+      f
+    );
+  }
+  f = message.getPrimary();
+  if (f) {
+    writer.writeBool(
+      6,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      7,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string org_id = 1;
  * @return {string}
  */
-proto.caos.zitadel.management.api.v1.Org.prototype.getDomain = function() {
-  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 6, ""));
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
 };
 
 
 /** @param {string} value */
-proto.caos.zitadel.management.api.v1.Org.prototype.setDomain = function(value) {
-  jspb.Message.setProto3StringField(this, 6, value);
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 2;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 2));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 2, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 2) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 3;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 3, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 3) != null;
+};
+
+
+/**
+ * optional string domain = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional bool verified = 5;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 5, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 5, value);
+};
+
+
+/**
+ * optional bool primary = 6;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getPrimary = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 6, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setPrimary = function(value) {
+  jspb.Message.setProto3BooleanField(this, 6, value);
 };
 
 
@@ -13732,18 +16089,1221 @@ proto.caos.zitadel.management.api.v1.Org.prototype.setDomain = function(value) {
  * optional uint64 sequence = 7;
  * @return {number}
  */
-proto.caos.zitadel.management.api.v1.Org.prototype.getSequence = function() {
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.getSequence = function() {
   return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
 };
 
 
 /** @param {number} value */
-proto.caos.zitadel.management.api.v1.Org.prototype.setSequence = function(value) {
+proto.caos.zitadel.management.api.v1.OrgDomain.prototype.setSequence = function(value) {
   jspb.Message.setProto3IntField(this, 7, value);
 };
 
 
 
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomainView.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainView} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    orgId: jspb.Message.getFieldWithDefault(msg, 1, ""),
+    creationDate: (f = msg.getCreationDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    changeDate: (f = msg.getChangeDate()) && google_protobuf_timestamp_pb.Timestamp.toObject(includeInstance, f),
+    domain: jspb.Message.getFieldWithDefault(msg, 4, ""),
+    verified: jspb.Message.getFieldWithDefault(msg, 5, false),
+    primary: jspb.Message.getFieldWithDefault(msg, 6, false),
+    sequence: jspb.Message.getFieldWithDefault(msg, 7, 0)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainView}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomainView;
+  return proto.caos.zitadel.management.api.v1.OrgDomainView.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainView} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainView}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setOrgId(value);
+      break;
+    case 2:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setCreationDate(value);
+      break;
+    case 3:
+      var value = new google_protobuf_timestamp_pb.Timestamp;
+      reader.readMessage(value,google_protobuf_timestamp_pb.Timestamp.deserializeBinaryFromReader);
+      msg.setChangeDate(value);
+      break;
+    case 4:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDomain(value);
+      break;
+    case 5:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setVerified(value);
+      break;
+    case 6:
+      var value = /** @type {boolean} */ (reader.readBool());
+      msg.setPrimary(value);
+      break;
+    case 7:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setSequence(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomainView.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainView} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOrgId();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+  f = message.getCreationDate();
+  if (f != null) {
+    writer.writeMessage(
+      2,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getChangeDate();
+  if (f != null) {
+    writer.writeMessage(
+      3,
+      f,
+      google_protobuf_timestamp_pb.Timestamp.serializeBinaryToWriter
+    );
+  }
+  f = message.getDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      4,
+      f
+    );
+  }
+  f = message.getVerified();
+  if (f) {
+    writer.writeBool(
+      5,
+      f
+    );
+  }
+  f = message.getPrimary();
+  if (f) {
+    writer.writeBool(
+      6,
+      f
+    );
+  }
+  f = message.getSequence();
+  if (f !== 0) {
+    writer.writeUint64(
+      7,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string org_id = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getOrgId = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setOrgId = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+/**
+ * optional google.protobuf.Timestamp creation_date = 2;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getCreationDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 2));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setCreationDate = function(value) {
+  jspb.Message.setWrapperField(this, 2, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.clearCreationDate = function() {
+  this.setCreationDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.hasCreationDate = function() {
+  return jspb.Message.getField(this, 2) != null;
+};
+
+
+/**
+ * optional google.protobuf.Timestamp change_date = 3;
+ * @return {?proto.google.protobuf.Timestamp}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getChangeDate = function() {
+  return /** @type{?proto.google.protobuf.Timestamp} */ (
+    jspb.Message.getWrapperField(this, google_protobuf_timestamp_pb.Timestamp, 3));
+};
+
+
+/** @param {?proto.google.protobuf.Timestamp|undefined} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setChangeDate = function(value) {
+  jspb.Message.setWrapperField(this, 3, value);
+};
+
+
+/**
+ * Clears the message field making it undefined.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.clearChangeDate = function() {
+  this.setChangeDate(undefined);
+};
+
+
+/**
+ * Returns whether this field is set.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.hasChangeDate = function() {
+  return jspb.Message.getField(this, 3) != null;
+};
+
+
+/**
+ * optional string domain = 4;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 4, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 4, value);
+};
+
+
+/**
+ * optional bool verified = 5;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getVerified = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 5, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setVerified = function(value) {
+  jspb.Message.setProto3BooleanField(this, 5, value);
+};
+
+
+/**
+ * optional bool primary = 6;
+ * Note that Boolean fields may be set to 0/1 when serialized from a Java server.
+ * You should avoid comparisons like {@code val === true/false} in those cases.
+ * @return {boolean}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getPrimary = function() {
+  return /** @type {boolean} */ (jspb.Message.getFieldWithDefault(this, 6, false));
+};
+
+
+/** @param {boolean} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setPrimary = function(value) {
+  jspb.Message.setProto3BooleanField(this, 6, value);
+};
+
+
+/**
+ * optional uint64 sequence = 7;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.getSequence = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 7, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainView.prototype.setSequence = function(value) {
+  jspb.Message.setProto3IntField(this, 7, value);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    domain: jspb.Message.getFieldWithDefault(msg, 1, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest}
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.AddOrgDomainRequest;
+  return proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest}
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDomain(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.AddOrgDomainRequest} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string domain = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.prototype.getDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.AddOrgDomainRequest.prototype.setDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    domain: jspb.Message.getFieldWithDefault(msg, 1, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest}
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest;
+  return proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest}
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setDomain(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getDomain();
+  if (f.length > 0) {
+    writer.writeString(
+      1,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional string domain = 1;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.prototype.getDomain = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 1, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.RemoveOrgDomainRequest.prototype.setDomain = function(value) {
+  jspb.Message.setProto3StringField(this, 1, value);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.repeatedFields_ = [4];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    totalResult: jspb.Message.getFieldWithDefault(msg, 3, 0),
+    resultList: jspb.Message.toObjectList(msg.getResultList(),
+    proto.caos.zitadel.management.api.v1.OrgDomainView.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse;
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setOffset(value);
+      break;
+    case 2:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setLimit(value);
+      break;
+    case 3:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setTotalResult(value);
+      break;
+    case 4:
+      var value = new proto.caos.zitadel.management.api.v1.OrgDomainView;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.OrgDomainView.deserializeBinaryFromReader);
+      msg.addResult(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOffset();
+  if (f !== 0) {
+    writer.writeUint64(
+      1,
+      f
+    );
+  }
+  f = message.getLimit();
+  if (f !== 0) {
+    writer.writeUint64(
+      2,
+      f
+    );
+  }
+  f = message.getTotalResult();
+  if (f !== 0) {
+    writer.writeUint64(
+      3,
+      f
+    );
+  }
+  f = message.getResultList();
+  if (f.length > 0) {
+    writer.writeRepeatedMessage(
+      4,
+      f,
+      proto.caos.zitadel.management.api.v1.OrgDomainView.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional uint64 offset = 1;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.getOffset = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.setOffset = function(value) {
+  jspb.Message.setProto3IntField(this, 1, value);
+};
+
+
+/**
+ * optional uint64 limit = 2;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.getLimit = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.setLimit = function(value) {
+  jspb.Message.setProto3IntField(this, 2, value);
+};
+
+
+/**
+ * optional uint64 total_result = 3;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.getTotalResult = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 3, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.setTotalResult = function(value) {
+  jspb.Message.setProto3IntField(this, 3, value);
+};
+
+
+/**
+ * repeated OrgDomainView result = 4;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.OrgDomainView>}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.getResultList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.OrgDomainView>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.OrgDomainView, 4));
+};
+
+
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.OrgDomainView>} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.setResultList = function(value) {
+  jspb.Message.setRepeatedWrapperField(this, 4, value);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainView=} opt_value
+ * @param {number=} opt_index
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainView}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.addResult = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 4, opt_value, proto.caos.zitadel.management.api.v1.OrgDomainView, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchResponse.prototype.clearResultList = function() {
+  this.setResultList([]);
+};
+
+
+
+/**
+ * List of repeated fields within this message type.
+ * @private {!Array<number>}
+ * @const
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.repeatedFields_ = [3];
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    offset: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    limit: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    queriesList: jspb.Message.toObjectList(msg.getQueriesList(),
+    proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.toObject, includeInstance)
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest;
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setOffset(value);
+      break;
+    case 2:
+      var value = /** @type {number} */ (reader.readUint64());
+      msg.setLimit(value);
+      break;
+    case 3:
+      var value = new proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery;
+      reader.readMessage(value,proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.deserializeBinaryFromReader);
+      msg.addQueries(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getOffset();
+  if (f !== 0) {
+    writer.writeUint64(
+      1,
+      f
+    );
+  }
+  f = message.getLimit();
+  if (f !== 0) {
+    writer.writeUint64(
+      2,
+      f
+    );
+  }
+  f = message.getQueriesList();
+  if (f.length > 0) {
+    writer.writeRepeatedMessage(
+      3,
+      f,
+      proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.serializeBinaryToWriter
+    );
+  }
+};
+
+
+/**
+ * optional uint64 offset = 1;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.getOffset = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.setOffset = function(value) {
+  jspb.Message.setProto3IntField(this, 1, value);
+};
+
+
+/**
+ * optional uint64 limit = 2;
+ * @return {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.getLimit = function() {
+  return /** @type {number} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {number} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.setLimit = function(value) {
+  jspb.Message.setProto3IntField(this, 2, value);
+};
+
+
+/**
+ * repeated OrgDomainSearchQuery queries = 3;
+ * @return {!Array<!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery>}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.getQueriesList = function() {
+  return /** @type{!Array<!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery>} */ (
+    jspb.Message.getRepeatedWrapperField(this, proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery, 3));
+};
+
+
+/** @param {!Array<!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery>} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.setQueriesList = function(value) {
+  jspb.Message.setRepeatedWrapperField(this, 3, value);
+};
+
+
+/**
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery=} opt_value
+ * @param {number=} opt_index
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.addQueries = function(opt_value, opt_index) {
+  return jspb.Message.addToRepeatedWrapperField(this, 3, opt_value, proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery, opt_index);
+};
+
+
+/**
+ * Clears the list making it empty but non-null.
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchRequest.prototype.clearQueriesList = function() {
+  this.setQueriesList([]);
+};
+
+
+
+
+
+if (jspb.Message.GENERATE_TO_OBJECT) {
+/**
+ * Creates an object representation of this proto suitable for use in Soy templates.
+ * Field names that are reserved in JavaScript and will be renamed to pb_name.
+ * To access a reserved field use, foo.pb_<name>, eg, foo.pb_default.
+ * For the list of reserved names please see:
+ *     com.google.apps.jspb.JsClassTemplate.JS_RESERVED_WORDS.
+ * @param {boolean=} opt_includeInstance Whether to include the JSPB instance
+ *     for transitional soy proto support: http://goto/soy-param-migration
+ * @return {!Object}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.toObject = function(opt_includeInstance) {
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.toObject(opt_includeInstance, this);
+};
+
+
+/**
+ * Static version of the {@see toObject} method.
+ * @param {boolean|undefined} includeInstance Whether to include the JSPB
+ *     instance for transitional soy proto support:
+ *     http://goto/soy-param-migration
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery} msg The msg instance to transform.
+ * @return {!Object}
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.toObject = function(includeInstance, msg) {
+  var f, obj = {
+    key: jspb.Message.getFieldWithDefault(msg, 1, 0),
+    method: jspb.Message.getFieldWithDefault(msg, 2, 0),
+    value: jspb.Message.getFieldWithDefault(msg, 3, "")
+  };
+
+  if (includeInstance) {
+    obj.$jspbMessageInstance = msg;
+  }
+  return obj;
+};
+}
+
+
+/**
+ * Deserializes binary data (in protobuf wire format).
+ * @param {jspb.ByteSource} bytes The bytes to deserialize.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.deserializeBinary = function(bytes) {
+  var reader = new jspb.BinaryReader(bytes);
+  var msg = new proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery;
+  return proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.deserializeBinaryFromReader(msg, reader);
+};
+
+
+/**
+ * Deserializes binary data (in protobuf wire format) from the
+ * given reader into the given message object.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery} msg The message object to deserialize into.
+ * @param {!jspb.BinaryReader} reader The BinaryReader to use.
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.deserializeBinaryFromReader = function(msg, reader) {
+  while (reader.nextField()) {
+    if (reader.isEndGroup()) {
+      break;
+    }
+    var field = reader.getFieldNumber();
+    switch (field) {
+    case 1:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.OrgDomainSearchKey} */ (reader.readEnum());
+      msg.setKey(value);
+      break;
+    case 2:
+      var value = /** @type {!proto.caos.zitadel.management.api.v1.SearchMethod} */ (reader.readEnum());
+      msg.setMethod(value);
+      break;
+    case 3:
+      var value = /** @type {string} */ (reader.readString());
+      msg.setValue(value);
+      break;
+    default:
+      reader.skipField();
+      break;
+    }
+  }
+  return msg;
+};
+
+
+/**
+ * Serializes the message to binary data (in protobuf wire format).
+ * @return {!Uint8Array}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.serializeBinary = function() {
+  var writer = new jspb.BinaryWriter();
+  proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.serializeBinaryToWriter(this, writer);
+  return writer.getResultBuffer();
+};
+
+
+/**
+ * Serializes the given message to binary data (in protobuf wire
+ * format), writing to the given BinaryWriter.
+ * @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery} message
+ * @param {!jspb.BinaryWriter} writer
+ * @suppress {unusedLocalVariables} f is only used for nested messages
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.serializeBinaryToWriter = function(message, writer) {
+  var f = undefined;
+  f = message.getKey();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      1,
+      f
+    );
+  }
+  f = message.getMethod();
+  if (f !== 0.0) {
+    writer.writeEnum(
+      2,
+      f
+    );
+  }
+  f = message.getValue();
+  if (f.length > 0) {
+    writer.writeString(
+      3,
+      f
+    );
+  }
+};
+
+
+/**
+ * optional OrgDomainSearchKey key = 1;
+ * @return {!proto.caos.zitadel.management.api.v1.OrgDomainSearchKey}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.getKey = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.OrgDomainSearchKey} */ (jspb.Message.getFieldWithDefault(this, 1, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.OrgDomainSearchKey} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.setKey = function(value) {
+  jspb.Message.setProto3EnumField(this, 1, value);
+};
+
+
+/**
+ * optional SearchMethod method = 2;
+ * @return {!proto.caos.zitadel.management.api.v1.SearchMethod}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.getMethod = function() {
+  return /** @type {!proto.caos.zitadel.management.api.v1.SearchMethod} */ (jspb.Message.getFieldWithDefault(this, 2, 0));
+};
+
+
+/** @param {!proto.caos.zitadel.management.api.v1.SearchMethod} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.setMethod = function(value) {
+  jspb.Message.setProto3EnumField(this, 2, value);
+};
+
+
+/**
+ * optional string value = 3;
+ * @return {string}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.getValue = function() {
+  return /** @type {string} */ (jspb.Message.getFieldWithDefault(this, 3, ""));
+};
+
+
+/** @param {string} value */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchQuery.prototype.setValue = function(value) {
+  jspb.Message.setProto3StringField(this, 3, value);
+};
+
+
+
 /**
  * List of repeated fields within this message type.
  * @private {!Array<number>}
@@ -33052,6 +36612,14 @@ proto.caos.zitadel.management.api.v1.OrgState = {
   ORGSTATE_INACTIVE: 2
 };
 
+/**
+ * @enum {number}
+ */
+proto.caos.zitadel.management.api.v1.OrgDomainSearchKey = {
+  ORGDOMAINSEARCHKEY_UNSPECIFIED: 0,
+  ORGDOMAINSEARCHKEY_DOMAIN: 1
+};
+
 /**
  * @enum {number}
  */
diff --git a/console/src/app/services/auth-user.service.ts b/console/src/app/services/auth-user.service.ts
index eb234163f3..d365b71f24 100644
--- a/console/src/app/services/auth-user.service.ts
+++ b/console/src/app/services/auth-user.service.ts
@@ -93,7 +93,6 @@ export class AuthUserService {
         req.setFirstName(profile.firstName);
         req.setLastName(profile.lastName);
         req.setNickName(profile.nickName);
-        req.setDisplayName(profile.displayName);
         req.setPreferredLanguage(profile.preferredLanguage);
         req.setGender(profile.gender);
         console.log(req.toObject());
diff --git a/console/src/app/services/mgmt-user.service.ts b/console/src/app/services/mgmt-user.service.ts
index 7595d5a23b..efcc856551 100644
--- a/console/src/app/services/mgmt-user.service.ts
+++ b/console/src/app/services/mgmt-user.service.ts
@@ -66,7 +66,6 @@ export class MgmtUserService {
         req.setFirstName(user.firstName);
         req.setLastName(user.lastName);
         req.setNickName(user.nickName);
-        req.setDisplayName(user.displayName);
         req.setPassword(user.password);
         req.setPreferredLanguage(user.preferredLanguage);
         req.setGender(user.gender);
@@ -83,6 +82,16 @@ export class MgmtUserService {
         );
     }
 
+    public async GetUserByID(id: string): Promise<User> {
+        const req = new UserID();
+        req.setId(id);
+        return await this.request(
+            c => c.getUserByID,
+            req,
+            f => f,
+        );
+    }
+
     public async GetUserProfile(id: string): Promise<UserProfile> {
         const req = new UserID();
         req.setId(id);
@@ -109,7 +118,6 @@ export class MgmtUserService {
         req.setFirstName(profile.firstName);
         req.setLastName(profile.lastName);
         req.setNickName(profile.nickName);
-        req.setDisplayName(profile.displayName);
         req.setPreferredLanguage(profile.preferredLanguage);
         req.setGender(profile.gender);
         return await this.request(
@@ -129,10 +137,10 @@ export class MgmtUserService {
         );
     }
 
-    public async SaveUserEmail(email: UserEmail.AsObject): Promise<UserEmail> {
+    public async SaveUserEmail(id: string, email: string): Promise<UserEmail> {
         const req = new UpdateUserEmailRequest();
-        req.setId(email.id);
-        req.setEmail(email.email);
+        req.setId(id);
+        req.setEmail(email);
         return await this.request(
             c => c.changeUserEmail,
             req,
@@ -150,10 +158,10 @@ export class MgmtUserService {
         );
     }
 
-    public async SaveUserPhone(phone: UserPhone.AsObject): Promise<UserPhone> {
+    public async SaveUserPhone(id: string, phone: string): Promise<UserPhone> {
         const req = new UpdateUserPhoneRequest();
-        req.setId(phone.id);
-        req.setPhone(phone.phone);
+        req.setId(id);
+        req.setPhone(phone);
         return await this.request(
             c => c.changeUserPhone,
             req,
@@ -202,7 +210,9 @@ export class MgmtUserService {
         const req = new ProjectRoleAdd();
         req.setId(id);
         req.setKey(key);
-        req.setDisplayName(displayName);
+        if (displayName) {
+            req.setDisplayName(displayName);
+        }
         req.setGroup(group);
         return await this.request(
             c => c.addProjectRole,
diff --git a/console/src/app/services/org.service.ts b/console/src/app/services/org.service.ts
index bce1b379b1..cf4e42e090 100644
--- a/console/src/app/services/org.service.ts
+++ b/console/src/app/services/org.service.ts
@@ -5,8 +5,12 @@ import { Metadata } from 'grpc-web';
 import { ManagementServicePromiseClient } from '../proto/generated/management_grpc_web_pb';
 import {
     AddOrgMemberRequest,
+    Iam,
     Org,
     OrgDomain,
+    OrgDomainSearchQuery,
+    OrgDomainSearchRequest,
+    OrgDomainSearchResponse,
     OrgID,
     OrgMemberRoles,
     OrgMemberSearchRequest,
@@ -51,6 +55,15 @@ export class OrgService {
         return responseMapper(response);
     }
 
+    public async GetIam(): Promise<Iam> {
+        const req: Empty = new Empty();
+        return await this.request(
+            c => c.getIam,
+            req,
+            f => f,
+        );
+    }
+
     public async GetOrgById(orgId: string): Promise<Org> {
         const req: OrgID = new OrgID();
         req.setId(orgId);
@@ -61,6 +74,22 @@ export class OrgService {
         );
     }
 
+    public async SearchMyOrgDomains(offset: number, limit: number, queryList?: OrgDomainSearchQuery[]):
+        Promise<OrgDomainSearchResponse> {
+        const req: OrgDomainSearchRequest = new OrgDomainSearchRequest();
+        req.setLimit(limit);
+        req.setOffset(offset);
+        if (queryList) {
+            req.setQueriesList(queryList);
+        }
+
+        return await this.request(
+            c => c.searchMyOrgDomains,
+            req,
+            f => f,
+        );
+    }
+
     public async SearchMyOrgMembers(limit: number, offset: number): Promise<OrgMemberSearchResponse> {
         const req = new OrgMemberSearchRequest();
         req.setLimit(limit);
@@ -322,4 +351,16 @@ export class OrgService {
             f => f,
         );
     }
+
+    public getLocalizedComplexityPolicyPatternErrorString(policy: PasswordComplexityPolicy.AsObject): string {
+        if (policy.hasNumber && policy.hasSymbol) {
+            return 'ORG.POLICY.PWD_COMPLEXITY.SYMBOLANDNUMBERERROR';
+        } else if (policy.hasNumber) {
+            return 'ORG.POLICY.PWD_COMPLEXITY.NUMBERERROR';
+        } else if (policy.hasSymbol) {
+            return 'ORG.POLICY.PWD_COMPLEXITY.SYMBOLERROR';
+        } else {
+            return 'ORG.POLICY.PWD_COMPLEXITY.PATTERNERROR';
+        }
+    }
 }
diff --git a/console/src/app/services/project.service.ts b/console/src/app/services/project.service.ts
index edcb09090c..bf9708d257 100644
--- a/console/src/app/services/project.service.ts
+++ b/console/src/app/services/project.service.ts
@@ -345,7 +345,9 @@ export class ProjectService {
     public async AddProjectRole(role: ProjectRoleAdd.AsObject): Promise<Empty> {
         const req = new ProjectRoleAdd();
         req.setId(role.id);
-        req.setDisplayName(role.displayName);
+        if (role.displayName) {
+            req.setDisplayName(role.displayName);
+        }
         req.setKey(role.key);
         req.setGroup(role.group);
         return await this.request(
diff --git a/console/src/assets/i18n/de.json b/console/src/assets/i18n/de.json
index dd6c376a28..6d6622f5aa 100644
--- a/console/src/assets/i18n/de.json
+++ b/console/src/assets/i18n/de.json
@@ -158,7 +158,8 @@
         },
         "VALIDATION": {
             "INVALIDPATTERN": "Das Password muss aus mindestens 8 Zeichen bestehen und einen Grossbuchstaben, ein Sonderzeichen und eine Zahl enthalten. Die maximale Anzahl an Zeichen ist 72!",
-            "REQUIRED": "Das Feld ist leer"
+            "REQUIRED": "Das Feld ist leer",
+            "MINLENGTH":"Das Password muss mindestens {{minLength}} Zeichen lang sein!"
         },
         "STATE": {
             "0":"unbekannt",
@@ -208,7 +209,11 @@
                 "TITLE":"Passwort Komplexität",
                 "DESCRIPTION":"Stellt sicher, dass alle festgelegten Kennwörter einem bestimmten Muster entsprechen",
                 "TITLECREATE":"Kennwortkomplexitätsrichtlinie erstellen",
-                "DESCRIPTIONCREATE":"Stellt sicher, dass alle festgelegten Kennwörter einem bestimmten Muster entsprechen"
+                "DESCRIPTIONCREATE":"Stellt sicher, dass alle festgelegten Kennwörter einem bestimmten Muster entsprechen",
+                "SYMBOLANDNUMBERERROR":"Das Password muss ein Symbol und eine Nummer beinhalten!",
+                "SYMBOLERROR":"Das Password msus ein Symbol beinhalten!",
+                "NUMBERERROR":"Das Password muss eine Nummer beinhalten!",
+                "PATTERNERROR":"Das vorgeschriebene Muster ist falsch!"
             },
             "PWD_AGE": {
                 "TITLE":"Passwort Maximaldauer",
diff --git a/console/src/assets/i18n/en.json b/console/src/assets/i18n/en.json
index 6859205a42..da21bc72eb 100644
--- a/console/src/assets/i18n/en.json
+++ b/console/src/assets/i18n/en.json
@@ -158,7 +158,8 @@
         },
         "VALIDATION": {
             "INVALIDPATTERN": "The password must consist of at least 8 characters and contain a capital letter, a special character and a number. The maximum length is 72.",
-            "REQUIRED": "The input field is empty"
+            "REQUIRED": "The input field is empty",
+            "MINLENGTH":"The password has to be at least {{minLength}} characters long!"
         },
         "STATE": {
             "0":"unbekannt",
@@ -208,7 +209,12 @@
                 "TITLE":"Password Complexity",
                 "DESCRIPTION":"Ensures that all set passwords correspond to a specific pattern",
                 "TITLECREATE":"Create Password Complexity Policy",
-                "DESCRIPTIONCREATE":"Ensures that all set passwords correspond to a specific pattern"
+                "DESCRIPTIONCREATE":"Ensures that all set passwords correspond to a specific pattern",
+                "SYMBOLANDNUMBERERROR":"The password must consist of a number and a symbol",
+                "SYMBOLERROR":"The password must include a symbol!",
+                "NUMBERERROR":"The password must include a number!",
+                "PATTERNERROR":"The required pattern is not fulfilled!"
+
             },
             "PWD_AGE": {
                 "TITLE":"Password Age",