diff --git a/.generator/schemas/v2/openapi.yaml b/.generator/schemas/v2/openapi.yaml
index 8444b52dbd..fdafbd6b9d 100644
--- a/.generator/schemas/v2/openapi.yaml
+++ b/.generator/schemas/v2/openapi.yaml
@@ -44920,6 +44920,9 @@ components:
           description: Name of the API key.
           example: "API Key for submitting metrics"
           type: string
+        private_action_runner_enroll_enabled:
+          description: Whether the API key can enroll a Private Action Runner.
+          type: boolean
         remote_config_read_enabled:
           description: The remote config read enabled status.
           type: boolean
@@ -84281,6 +84284,9 @@ components:
           description: Name of the API key.
           example: "API Key for submitting metrics"
           type: string
+        private_action_runner_enroll_enabled:
+          description: Whether the API key can enroll a Private Action Runner.
+          type: boolean
         remote_config_read_enabled:
           description: The remote config read enabled status.
           type: boolean
@@ -136793,7 +136799,9 @@ paths:
         **Note**: This endpoint is in preview and is subject to change.
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
     post:
-      description: Trigger a new Bits AI investigation based on a monitor alert.
+      description: |-
+        Trigger a new Bits AI investigation based on a monitor alert.
+        The `monitors_read` permission is required when the trigger type is `monitor_alert_trigger`.
       operationId: TriggerInvestigation
       requestBody:
         content:
@@ -136842,14 +136850,16 @@ paths:
           appKeyAuth: []
         - AuthZ:
             - bits_investigations_write
+            - monitors_read
       summary: Trigger a Bits AI investigation
       tags:
         - Bits AI
       x-codegen-request-body-name: body
       "x-permission":
-        operator: OR
+        operator: AND
         permissions:
           - bits_investigations_write
+          - monitors_read
       x-unstable: |-
         **Note**: This endpoint is in preview and is subject to change.
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
diff --git a/src/datadog_api_client/v2/api/bits_ai_api.py b/src/datadog_api_client/v2/api/bits_ai_api.py
index d087080048..b19bbc5825 100644
--- a/src/datadog_api_client/v2/api/bits_ai_api.py
+++ b/src/datadog_api_client/v2/api/bits_ai_api.py
@@ -207,6 +207,7 @@ def trigger_investigation(
         """Trigger a Bits AI investigation.
 
         Trigger a new Bits AI investigation based on a monitor alert.
+        The ``monitors_read`` permission is required when the trigger type is ``monitor_alert_trigger``.
 
         :param body: Trigger investigation request body.
         :type body: TriggerInvestigationRequest
diff --git a/src/datadog_api_client/v2/model/full_api_key_attributes.py b/src/datadog_api_client/v2/model/full_api_key_attributes.py
index 5b45d1be1f..1927e47625 100644
--- a/src/datadog_api_client/v2/model/full_api_key_attributes.py
+++ b/src/datadog_api_client/v2/model/full_api_key_attributes.py
@@ -33,6 +33,7 @@ def openapi_types(_):
             "last4": (str,),
             "modified_at": (datetime,),
             "name": (str,),
+            "private_action_runner_enroll_enabled": (bool,),
             "remote_config_read_enabled": (bool,),
         }
 
@@ -44,6 +45,7 @@ def openapi_types(_):
         "last4": "last4",
         "modified_at": "modified_at",
         "name": "name",
+        "private_action_runner_enroll_enabled": "private_action_runner_enroll_enabled",
         "remote_config_read_enabled": "remote_config_read_enabled",
     }
     read_only_vars = {
@@ -63,6 +65,7 @@ def __init__(
         last4: Union[str, UnsetType] = unset,
         modified_at: Union[datetime, UnsetType] = unset,
         name: Union[str, UnsetType] = unset,
+        private_action_runner_enroll_enabled: Union[bool, UnsetType] = unset,
         remote_config_read_enabled: Union[bool, UnsetType] = unset,
         **kwargs,
     ):
@@ -90,6 +93,9 @@ def __init__(
         :param name: Name of the API key.
         :type name: str, optional
 
+        :param private_action_runner_enroll_enabled: Whether the API key can enroll a Private Action Runner.
+        :type private_action_runner_enroll_enabled: bool, optional
+
         :param remote_config_read_enabled: The remote config read enabled status.
         :type remote_config_read_enabled: bool, optional
         """
@@ -107,6 +113,8 @@ def __init__(
             kwargs["modified_at"] = modified_at
         if name is not unset:
             kwargs["name"] = name
+        if private_action_runner_enroll_enabled is not unset:
+            kwargs["private_action_runner_enroll_enabled"] = private_action_runner_enroll_enabled
         if remote_config_read_enabled is not unset:
             kwargs["remote_config_read_enabled"] = remote_config_read_enabled
         super().__init__(kwargs)
diff --git a/src/datadog_api_client/v2/model/partial_api_key_attributes.py b/src/datadog_api_client/v2/model/partial_api_key_attributes.py
index 6142d34907..7c9853042b 100644
--- a/src/datadog_api_client/v2/model/partial_api_key_attributes.py
+++ b/src/datadog_api_client/v2/model/partial_api_key_attributes.py
@@ -32,6 +32,7 @@ def openapi_types(_):
             "last4": (str,),
             "modified_at": (str,),
             "name": (str,),
+            "private_action_runner_enroll_enabled": (bool,),
             "remote_config_read_enabled": (bool,),
         }
 
@@ -42,6 +43,7 @@ def openapi_types(_):
         "last4": "last4",
         "modified_at": "modified_at",
         "name": "name",
+        "private_action_runner_enroll_enabled": "private_action_runner_enroll_enabled",
         "remote_config_read_enabled": "remote_config_read_enabled",
     }
     read_only_vars = {
@@ -59,6 +61,7 @@ def __init__(
         last4: Union[str, UnsetType] = unset,
         modified_at: Union[str, UnsetType] = unset,
         name: Union[str, UnsetType] = unset,
+        private_action_runner_enroll_enabled: Union[bool, UnsetType] = unset,
         remote_config_read_enabled: Union[bool, UnsetType] = unset,
         **kwargs,
     ):
@@ -83,6 +86,9 @@ def __init__(
         :param name: Name of the API key.
         :type name: str, optional
 
+        :param private_action_runner_enroll_enabled: Whether the API key can enroll a Private Action Runner.
+        :type private_action_runner_enroll_enabled: bool, optional
+
         :param remote_config_read_enabled: The remote config read enabled status.
         :type remote_config_read_enabled: bool, optional
         """
@@ -98,6 +104,8 @@ def __init__(
             kwargs["modified_at"] = modified_at
         if name is not unset:
             kwargs["name"] = name
+        if private_action_runner_enroll_enabled is not unset:
+            kwargs["private_action_runner_enroll_enabled"] = private_action_runner_enroll_enabled
         if remote_config_read_enabled is not unset:
             kwargs["remote_config_read_enabled"] = remote_config_read_enabled
         super().__init__(kwargs)