diff --git a/samples/generated/v1/security_center.get_iam_policy.js b/samples/generated/v1/security_center.get_iam_policy.js
index c14522e3..c35eaa59 100644
--- a/samples/generated/v1/security_center.get_iam_policy.js
+++ b/samples/generated/v1/security_center.get_iam_policy.js
@@ -32,7 +32,7 @@ function main(resource) {
   // const resource = 'abc123'
   /**
    *  OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *  `GetIamPolicy`. This field is only used by Cloud IAM.
+   *  `GetIamPolicy`.
    */
   // const options = {}
 
diff --git a/samples/generated/v1/security_center.set_iam_policy.js b/samples/generated/v1/security_center.set_iam_policy.js
index 7949b8e5..f1c269c9 100644
--- a/samples/generated/v1/security_center.set_iam_policy.js
+++ b/samples/generated/v1/security_center.set_iam_policy.js
@@ -37,6 +37,13 @@ function main(resource, policy) {
    *  might reject them.
    */
   // const policy = {}
+  /**
+   *  OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *  the fields in the mask will be modified. If no mask is provided, the
+   *  following default mask is used:
+   *  `paths: "bindings, etag"`
+   */
+  // const updateMask = {}
 
   // Imports the Securitycenter library
   const {SecurityCenterClient} = require('@google-cloud/security-center').v1;
diff --git a/samples/generated/v1/snippet_metadata.google.cloud.securitycenter.v1.json b/samples/generated/v1/snippet_metadata.google.cloud.securitycenter.v1.json
index bed009e6..a1cbd617 100644
--- a/samples/generated/v1/snippet_metadata.google.cloud.securitycenter.v1.json
+++ b/samples/generated/v1/snippet_metadata.google.cloud.securitycenter.v1.json
@@ -1122,7 +1122,7 @@
       "segments": [
         {
           "start": 25,
-          "end": 59,
+          "end": 66,
           "type": "FULL"
         }
       ],
@@ -1138,6 +1138,10 @@
           {
             "name": "policy",
             "type": ".google.iam.v1.Policy"
+          },
+          {
+            "name": "update_mask",
+            "type": ".google.protobuf.FieldMask"
           }
         ],
         "resultType": ".google.iam.v1.Policy",
diff --git a/samples/generated/v1beta1/security_center.get_iam_policy.js b/samples/generated/v1beta1/security_center.get_iam_policy.js
index a91712e7..c8f862f8 100644
--- a/samples/generated/v1beta1/security_center.get_iam_policy.js
+++ b/samples/generated/v1beta1/security_center.get_iam_policy.js
@@ -32,7 +32,7 @@ function main(resource) {
   // const resource = 'abc123'
   /**
    *  OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *  `GetIamPolicy`. This field is only used by Cloud IAM.
+   *  `GetIamPolicy`.
    */
   // const options = {}
 
diff --git a/samples/generated/v1beta1/security_center.set_iam_policy.js b/samples/generated/v1beta1/security_center.set_iam_policy.js
index f30512e7..f9bb09e4 100644
--- a/samples/generated/v1beta1/security_center.set_iam_policy.js
+++ b/samples/generated/v1beta1/security_center.set_iam_policy.js
@@ -37,6 +37,13 @@ function main(resource, policy) {
    *  might reject them.
    */
   // const policy = {}
+  /**
+   *  OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *  the fields in the mask will be modified. If no mask is provided, the
+   *  following default mask is used:
+   *  `paths: "bindings, etag"`
+   */
+  // const updateMask = {}
 
   // Imports the Securitycenter library
   const {SecurityCenterClient} = require('@google-cloud/security-center').v1beta1;
diff --git a/samples/generated/v1beta1/snippet_metadata.google.cloud.securitycenter.v1beta1.json b/samples/generated/v1beta1/snippet_metadata.google.cloud.securitycenter.v1beta1.json
index 0420e922..93228556 100644
--- a/samples/generated/v1beta1/snippet_metadata.google.cloud.securitycenter.v1beta1.json
+++ b/samples/generated/v1beta1/snippet_metadata.google.cloud.securitycenter.v1beta1.json
@@ -630,7 +630,7 @@
       "segments": [
         {
           "start": 25,
-          "end": 59,
+          "end": 66,
           "type": "FULL"
         }
       ],
@@ -646,6 +646,10 @@
           {
             "name": "policy",
             "type": ".google.iam.v1.Policy"
+          },
+          {
+            "name": "update_mask",
+            "type": ".google.protobuf.FieldMask"
           }
         ],
         "resultType": ".google.iam.v1.Policy",
diff --git a/samples/generated/v1p1beta1/security_center.get_iam_policy.js b/samples/generated/v1p1beta1/security_center.get_iam_policy.js
index 728cb1ed..712e4fe1 100644
--- a/samples/generated/v1p1beta1/security_center.get_iam_policy.js
+++ b/samples/generated/v1p1beta1/security_center.get_iam_policy.js
@@ -32,7 +32,7 @@ function main(resource) {
   // const resource = 'abc123'
   /**
    *  OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *  `GetIamPolicy`. This field is only used by Cloud IAM.
+   *  `GetIamPolicy`.
    */
   // const options = {}
 
diff --git a/samples/generated/v1p1beta1/security_center.set_iam_policy.js b/samples/generated/v1p1beta1/security_center.set_iam_policy.js
index e9c4e89e..637a16ea 100644
--- a/samples/generated/v1p1beta1/security_center.set_iam_policy.js
+++ b/samples/generated/v1p1beta1/security_center.set_iam_policy.js
@@ -37,6 +37,13 @@ function main(resource, policy) {
    *  might reject them.
    */
   // const policy = {}
+  /**
+   *  OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *  the fields in the mask will be modified. If no mask is provided, the
+   *  following default mask is used:
+   *  `paths: "bindings, etag"`
+   */
+  // const updateMask = {}
 
   // Imports the Securitycenter library
   const {SecurityCenterClient} = require('@google-cloud/security-center').v1p1beta1;
diff --git a/samples/generated/v1p1beta1/snippet_metadata.google.cloud.securitycenter.v1p1beta1.json b/samples/generated/v1p1beta1/snippet_metadata.google.cloud.securitycenter.v1p1beta1.json
index 6b0aa36e..27a6b4e3 100644
--- a/samples/generated/v1p1beta1/snippet_metadata.google.cloud.securitycenter.v1p1beta1.json
+++ b/samples/generated/v1p1beta1/snippet_metadata.google.cloud.securitycenter.v1p1beta1.json
@@ -814,7 +814,7 @@
       "segments": [
         {
           "start": 25,
-          "end": 59,
+          "end": 66,
           "type": "FULL"
         }
       ],
@@ -830,6 +830,10 @@
           {
             "name": "policy",
             "type": ".google.iam.v1.Policy"
+          },
+          {
+            "name": "update_mask",
+            "type": ".google.protobuf.FieldMask"
           }
         ],
         "resultType": ".google.iam.v1.Policy",
diff --git a/src/v1/security_center_client.ts b/src/v1/security_center_client.ts
index c0b057f4..10ad8b68 100644
--- a/src/v1/security_center_client.ts
+++ b/src/v1/security_center_client.ts
@@ -1235,7 +1235,7 @@ export class SecurityCenterClient {
    *   See the operation documentation for the appropriate value for this field.
    * @param {google.iam.v1.GetPolicyOptions} request.options
    *   OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *   `GetIamPolicy`. This field is only used by Cloud IAM.
+   *   `GetIamPolicy`.
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
@@ -1901,6 +1901,12 @@ export class SecurityCenterClient {
    *   the policy is limited to a few 10s of KB. An empty policy is a
    *   valid policy but certain Cloud Platform services (such as Projects)
    *   might reject them.
+   * @param {google.protobuf.FieldMask} request.updateMask
+   *   OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *   the fields in the mask will be modified. If no mask is provided, the
+   *   following default mask is used:
+   *
+   *   `paths: "bindings, etag"`
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
diff --git a/src/v1beta1/security_center_client.ts b/src/v1beta1/security_center_client.ts
index cc3fb509..4f0c0587 100644
--- a/src/v1beta1/security_center_client.ts
+++ b/src/v1beta1/security_center_client.ts
@@ -620,7 +620,7 @@ export class SecurityCenterClient {
    *   See the operation documentation for the appropriate value for this field.
    * @param {google.iam.v1.GetPolicyOptions} request.options
    *   OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *   `GetIamPolicy`. This field is only used by Cloud IAM.
+   *   `GetIamPolicy`.
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
@@ -1008,6 +1008,12 @@ export class SecurityCenterClient {
    *   the policy is limited to a few 10s of KB. An empty policy is a
    *   valid policy but certain Cloud Platform services (such as Projects)
    *   might reject them.
+   * @param {google.protobuf.FieldMask} request.updateMask
+   *   OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *   the fields in the mask will be modified. If no mask is provided, the
+   *   following default mask is used:
+   *
+   *   `paths: "bindings, etag"`
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
diff --git a/src/v1p1beta1/security_center_client.ts b/src/v1p1beta1/security_center_client.ts
index 341ee5cc..48d371ce 100644
--- a/src/v1p1beta1/security_center_client.ts
+++ b/src/v1p1beta1/security_center_client.ts
@@ -874,7 +874,7 @@ export class SecurityCenterClient {
    *   See the operation documentation for the appropriate value for this field.
    * @param {google.iam.v1.GetPolicyOptions} request.options
    *   OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *   `GetIamPolicy`. This field is only used by Cloud IAM.
+   *   `GetIamPolicy`.
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
@@ -1366,6 +1366,12 @@ export class SecurityCenterClient {
    *   the policy is limited to a few 10s of KB. An empty policy is a
    *   valid policy but certain Cloud Platform services (such as Projects)
    *   might reject them.
+   * @param {google.protobuf.FieldMask} request.updateMask
+   *   OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *   the fields in the mask will be modified. If no mask is provided, the
+   *   following default mask is used:
+   *
+   *   `paths: "bindings, etag"`
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.