diff --git a/discovery/accesscontextmanager-v1.json b/discovery/accesscontextmanager-v1.json
index 0f76d83255..52cc9f4126 100644
--- a/discovery/accesscontextmanager-v1.json
+++ b/discovery/accesscontextmanager-v1.json
@@ -1290,7 +1290,7 @@
       }
     }
   },
-  "revision": "20240102",
+  "revision": "20240126",
   "rootUrl": "https://accesscontextmanager.googleapis.com/",
   "schemas": {
     "AccessContextManagerOperationMetadata": {
@@ -1522,7 +1522,7 @@
           "type": "array"
         },
         "role": {
-          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
           "type": "string"
         }
       },
@@ -1689,7 +1689,7 @@
       "id": "EgressFrom",
       "properties": {
         "identities": {
-          "description": "A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.",
+          "description": "A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
           "items": {
             "type": "string"
           },
@@ -1881,7 +1881,7 @@
       "id": "IngressFrom",
       "properties": {
         "identities": {
-          "description": "A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.",
+          "description": "A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id}` or `serviceAccount:{email_id}`.",
           "items": {
             "type": "string"
           },
diff --git a/src/apis/accesscontextmanager/v1.ts b/src/apis/accesscontextmanager/v1.ts
index d5e11beccc..806b255432 100644
--- a/src/apis/accesscontextmanager/v1.ts
+++ b/src/apis/accesscontextmanager/v1.ts
@@ -274,7 +274,7 @@ export namespace accesscontextmanager_v1 {
      */
     members?: string[] | null;
     /**
-     * Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+     * Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).
      */
     role?: string | null;
   }
@@ -376,7 +376,7 @@ export namespace accesscontextmanager_v1 {
    */
   export interface Schema$EgressFrom {
     /**
-     * A list of identities that are allowed access through this [EgressPolicy]. Should be in the format of email address. The email address should represent individual user or service account only.
+     * A list of identities that are allowed access through this [EgressPolicy], in the format of `user:{email_id\}` or `serviceAccount:{email_id\}`.
      */
     identities?: string[] | null;
     /**
@@ -504,7 +504,7 @@ export namespace accesscontextmanager_v1 {
    */
   export interface Schema$IngressFrom {
     /**
-     * A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.
+     * A list of identities that are allowed access through this ingress policy, in the format of `user:{email_id\}` or `serviceAccount:{email_id\}`.
      */
     identities?: string[] | null;
     /**