diff --git a/swagger/docs.go b/swagger/docs.go
index 6d6d786627..e5b0bcdd9d 100644
--- a/swagger/docs.go
+++ b/swagger/docs.go
@@ -17292,6 +17292,19 @@ const docTemplate = `{
         "hostops.RequestSummary": {
             "type": "object",
             "properties": {
+                "deniedOptional": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "deniedRequired": {
+                    "description": "DeniedRequired and DeniedOptional are the missing operations that a deny\nrule forbids. They are also listed in the Missing lists. An operation\nthat is denied can never be approved, so a caller reads this to tell\n\"ask the administrator to approve\" from \"blocked by policy\".",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
                 "granted": {
                     "type": "array",
                     "items": {
diff --git a/swagger/swagger.json b/swagger/swagger.json
index ab7f19abbc..cd41323e85 100644
--- a/swagger/swagger.json
+++ b/swagger/swagger.json
@@ -17289,6 +17289,19 @@
         "hostops.RequestSummary": {
             "type": "object",
             "properties": {
+                "deniedOptional": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "deniedRequired": {
+                    "description": "DeniedRequired and DeniedOptional are the missing operations that a deny\nrule forbids. They are also listed in the Missing lists. An operation\nthat is denied can never be approved, so a caller reads this to tell\n\"ask the administrator to approve\" from \"blocked by policy\".",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
                 "granted": {
                     "type": "array",
                     "items": {
diff --git a/swagger/swagger.yaml b/swagger/swagger.yaml
index d3f6b33ea9..3777ae1a36 100644
--- a/swagger/swagger.yaml
+++ b/swagger/swagger.yaml
@@ -2024,6 +2024,19 @@ definitions:
     type: object
   hostops.RequestSummary:
     properties:
+      deniedOptional:
+        items:
+          type: string
+        type: array
+      deniedRequired:
+        description: |-
+          DeniedRequired and DeniedOptional are the missing operations that a deny
+          rule forbids. They are also listed in the Missing lists. An operation
+          that is denied can never be approved, so a caller reads this to tell
+          "ask the administrator to approve" from "blocked by policy".
+        items:
+          type: string
+        type: array
       granted:
         items:
           type: string