# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.DirectoryManagement Directory.administrative Unit…
  version: 1.0.0
extends: openapi/azure-ad-directory-administrativeunit-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 44
- target: $.paths['/directory/administrativeUnits'].get
  update:
    x-apievangelist-phrasing:
      intent: List administrative units in the directory
      effect: read
      questions:
      - What administrative units exist in my Microsoft Entra tenant?
      - Can I see every administrative unit we use to delegate admin scope?
      instructions:
      - text: List all administrative units in the directory.
      - text: Show me every administrative unit with its display name and visibility.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits'].post
  update:
    x-apievangelist-phrasing:
      intent: Create an administrative unit
      effect: write
      questions:
      - How do I set up a new administrative unit to scope admin rights to one region?
      - Can a new administrative unit use a dynamic membership rule?
      instructions:
      - text: Create an administrative unit named {name}.
        slots:
          name: requestBody.displayName
      - text: Create an administrative unit called {name} described as {description}.
        slots:
          name: requestBody.displayName
          description: requestBody.description
      - text: Create a dynamic administrative unit {name} whose membership rule is {rule}.
        slots:
          name: requestBody.displayName
          rule: requestBody.membershipRule
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit's details
      effect: read
      questions:
      - What are the properties of a specific administrative unit?
      - Is a given administrative unit restricted management or hidden membership?
      instructions:
      - text: Show the details of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Get the membership rule and visibility of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an administrative unit
      effect: destructive
      questions:
      - How do I remove an administrative unit we no longer need?
      - Can I delete an administrative unit outright?
      instructions:
      - text: Delete administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Remove the administrative unit {unit_id} from the directory entirely.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update an administrative unit
      effect: write
      questions:
      - How do I rename an existing administrative unit?
      - Can I change the membership rule on an administrative unit that already exists?
      instructions:
      - text: Rename administrative unit {unit_id} to {name}.
        slots:
          unit_id: path.administrativeUnit-id
          name: requestBody.displayName
      - text: Change the membership rule of administrative unit {unit_id} to {rule}.
        slots:
          unit_id: path.administrativeUnit-id
          rule: requestBody.membershipRule
      - text: Update the description of administrative unit {unit_id} to {description}.
        slots:
          unit_id: path.administrativeUnit-id
          description: requestBody.description
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions'].get
  update:
    x-apievangelist-phrasing:
      intent: List open extensions on an administrative unit
      effect: read
      questions:
      - What custom open extensions are attached to an administrative unit?
      - Can I read the custom data we stored on an administrative unit?
      instructions:
      - text: List the open extensions on administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show all custom extension data stored on administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions'].post
  update:
    x-apievangelist-phrasing:
      intent: Add an open extension to an administrative unit
      effect: write
      questions:
      - How do I attach custom data to an administrative unit as an open extension?
      - Can I add a new extension to an administrative unit?
      instructions:
      - text: Add an open extension to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Create extension {extension_id} on administrative unit {unit_id}.
        slots:
          extension_id: requestBody.id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions/{extension-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one open extension on an administrative unit
      effect: read
      questions:
      - What's stored in a particular open extension on an administrative unit?
      - Can I fetch a single extension by its id from an administrative unit?
      instructions:
      - text: Get extension {extension_id} on administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      - text: Show the contents of open extension {extension_id} for administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions/{extension-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an open extension from an administrative unit
      effect: destructive
      questions:
      - How do I remove custom extension data from an administrative unit?
      - Can I delete one open extension without touching the administrative unit itself?
      instructions:
      - text: Delete extension {extension_id} from administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      - text: Remove the open extension {extension_id} on administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions/{extension-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update an open extension on an administrative unit
      effect: write
      questions:
      - How do I change the custom data in an existing extension on an administrative unit?
      - Can I edit an open extension that's already on an administrative unit?
      instructions:
      - text: Update extension {extension_id} on administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      - text: Modify the existing open extension {extension_id} stored on administrative unit {unit_id}.
        slots:
          extension_id: path.extension-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/extensions/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count open extensions on an administrative unit
      effect: read
      questions:
      - How many open extensions does an administrative unit have?
      - Is there any custom extension data on this administrative unit at all?
      instructions:
      - text: Count the open extensions on administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me the number of extensions attached to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members'].get
  update:
    x-apievangelist-phrasing:
      intent: List all members of an administrative unit
      effect: read
      questions:
      - Which users, groups and devices belong to an administrative unit?
      - Can I see the full member objects of an administrative unit, not just references?
      instructions:
      - text: List every member of administrative unit {unit_id} with full details.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the users, groups and devices in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a new member inside an administrative unit
      effect: write
      questions:
      - Can I create a brand-new user or group directly inside an administrative unit?
      - How do I add a new directory object as a member of an administrative unit in one step?
      instructions:
      - text: Create a new member object inside administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Add directory object {object_id} as a new member object of administrative unit {unit_id}.
        slots:
          object_id: requestBody.id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/$ref'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a specific member from an administrative unit
      effect: destructive
      questions:
      - How do I take one user out of an administrative unit by their object id?
      - Does removing someone from an administrative unit delete their account?
      instructions:
      - text: Remove member {member_id} from administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Take directory object {member_id} out of administrative unit {unit_id} using its path id.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.application'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as an application
      effect: read
      questions:
      - Can I read a member of an administrative unit as an application object?
      - What application details does a given administrative unit member have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as an application.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the application properties of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.device'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as a device
      effect: read
      questions:
      - Can I read a member of an administrative unit as a device?
      - What device details does a particular administrative unit member have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as a device.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the device properties of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.group'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as a group
      effect: read
      questions:
      - Can I read a member of an administrative unit as a group object?
      - What group details does a specific administrative unit member have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as a group.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the group properties of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.orgContact'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as an org contact
      effect: read
      questions:
      - Can I read a member of an administrative unit as an organizational contact?
      - What contact details does an org contact in an administrative unit have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as an org contact.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the organizational contact properties of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.servicePrincipal'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as a service principal
      effect: read
      questions:
      - Can I read a member of an administrative unit as a service principal?
      - What service principal details does a given administrative unit member have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as a service principal.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the service principal properties of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/{directoryObject-id}/microsoft.graph.user'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an administrative unit member as a user
      effect: read
      questions:
      - Can I read a member of an administrative unit as a user with their user properties?
      - What user profile details does a specific administrative unit member have?
      instructions:
      - text: Get member {member_id} of administrative unit {unit_id} cast as a user.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      - text: Show the user profile of member {member_id} in administrative unit {unit_id}.
        slots:
          member_id: path.directoryObject-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count all members of an administrative unit
      effect: read
      questions:
      - How many members of any type are in an administrative unit?
      - What's the total headcount of an administrative unit?
      instructions:
      - text: Count all members of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me the total number of objects in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/$ref'].get
  update:
    x-apievangelist-phrasing:
      intent: List member references of an administrative unit
      effect: read
      questions:
      - Can I get just the reference links to the members of an administrative unit?
      - Which object ids are members of an administrative unit, without their full properties?
      instructions:
      - text: List the member references ($ref) of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Give me only the member object links for administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/$ref'].post
  update:
    x-apievangelist-phrasing:
      intent: Add an existing object to an administrative unit
      effect: write
      questions:
      - How do I add an existing user, group or device to an administrative unit?
      - Can I add more than one member to an administrative unit per request?
      instructions:
      - text: Add the existing object at {object_ref} to administrative unit {unit_id}.
        slots:
          object_ref: requestBody.@odata.id
          unit_id: path.administrativeUnit-id
      - text: Link directory object reference {object_ref} as a member of administrative unit {unit_id}.
        slots:
          object_ref: requestBody.@odata.id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/$ref'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a member from an administrative unit by reference
      effect: destructive
      questions:
      - Can I remove a member from an administrative unit by passing its reference URL as a query parameter?
      - What's the query-string way to unlink someone from an administrative unit?
      instructions:
      - text: Remove the member referenced by {member_ref} from administrative unit {unit_id} using the @id query parameter.
        slots:
          member_ref: query.@id
          unit_id: path.administrativeUnit-id
      - text: Unlink the object at reference {member_ref} from administrative unit {unit_id}.
        slots:
          member_ref: query.@id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.application'].get
  update:
    x-apievangelist-phrasing:
      intent: List application members of an administrative unit
      effect: read
      questions:
      - Which applications are members of an administrative unit?
      - Can I filter an administrative unit's members down to applications only?
      instructions:
      - text: List only the applications in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the app registrations that belong to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.application/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count application members of an administrative unit
      effect: read
      questions:
      - How many applications are in an administrative unit?
      - Does this administrative unit contain any applications at all?
      instructions:
      - text: Count the applications in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many app members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.device'].get
  update:
    x-apievangelist-phrasing:
      intent: List device members of an administrative unit
      effect: read
      questions:
      - Which devices are members of an administrative unit?
      - Can I list only the laptops and phones scoped into an administrative unit?
      instructions:
      - text: List only the devices in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the device members that belong to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.device/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count device members of an administrative unit
      effect: read
      questions:
      - How many devices are in an administrative unit?
      - Does an administrative unit have any devices assigned?
      instructions:
      - text: Count the devices in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many device members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.group'].get
  update:
    x-apievangelist-phrasing:
      intent: List group members of an administrative unit
      effect: read
      questions:
      - Which groups are members of an administrative unit?
      - Can I see only the groups scoped into an administrative unit?
      instructions:
      - text: List only the groups in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the group members that belong to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.group/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count group members of an administrative unit
      effect: read
      questions:
      - How many groups are in an administrative unit?
      - Does an administrative unit include any groups?
      instructions:
      - text: Count the groups in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many group members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.orgContact'].get
  update:
    x-apievangelist-phrasing:
      intent: List org contact members of an administrative unit
      effect: read
      questions:
      - Which organizational contacts are members of an administrative unit?
      - Can I list only the external contacts in an administrative unit?
      instructions:
      - text: List only the org contacts in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the organizational contact members of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.orgContact/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count org contact members of an administrative unit
      effect: read
      questions:
      - How many organizational contacts are in an administrative unit?
      - Are there any org contacts in this administrative unit?
      instructions:
      - text: Count the org contacts in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many organizational contact members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.servicePrincipal'].get
  update:
    x-apievangelist-phrasing:
      intent: List service principal members of an administrative unit
      effect: read
      questions:
      - Which service principals are members of an administrative unit?
      - Can I list only the enterprise apps scoped into an administrative unit?
      instructions:
      - text: List only the service principals in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the service principal members of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.servicePrincipal/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count service principal members of an administrative unit
      effect: read
      questions:
      - How many service principals are in an administrative unit?
      - Does an administrative unit hold any service principals?
      instructions:
      - text: Count the service principals in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many service principal members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.user'].get
  update:
    x-apievangelist-phrasing:
      intent: List user members of an administrative unit
      effect: read
      questions:
      - Which people are members of an administrative unit?
      - Can I list only the user accounts in an administrative unit, leaving out groups and devices?
      instructions:
      - text: List only the users in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show the user accounts that belong to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/members/microsoft.graph.user/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count user members of an administrative unit
      effect: read
      questions:
      - How many users are in an administrative unit?
      - What's the number of people assigned to an administrative unit?
      instructions:
      - text: Count the users in administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many user members administrative unit {unit_id} has.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers'].get
  update:
    x-apievangelist-phrasing:
      intent: List role assignments scoped to an administrative unit
      effect: read
      questions:
      - Who has an admin role scoped to a particular administrative unit?
      - Which Microsoft Entra role assignments are limited to an administrative unit?
      instructions:
      - text: List the scoped role members of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Show every role assignment scoped to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers'].post
  update:
    x-apievangelist-phrasing:
      intent: Assign a role scoped to an administrative unit
      effect: write
      questions:
      - How do I make someone a User Administrator only over one administrative unit?
      - Can I delegate a Microsoft Entra role to just the members of an administrative unit?
      instructions:
      - text: Assign role {role_id} scoped to administrative unit {unit_id}.
        slots:
          role_id: requestBody.roleId
          unit_id: path.administrativeUnit-id
      - text: Grant role {role_id} over administrative unit {unit_id} to the member described by {member_info}.
        slots:
          role_id: requestBody.roleId
          unit_id: path.administrativeUnit-id
          member_info: requestBody.roleMemberInfo
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers/{scopedRoleMembership-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one scoped role assignment on an administrative unit
      effect: read
      questions:
      - What role and member does a specific scoped role assignment on an administrative unit hold?
      - Can I look up one scoped role membership by its id?
      instructions:
      - text: Get scoped role membership {membership_id} on administrative unit {unit_id}.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
      - text: Show which role and person scoped role assignment {membership_id} in administrative unit {unit_id} covers.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers/{scopedRoleMembership-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a role assignment scoped to an administrative unit
      effect: destructive
      questions:
      - How do I revoke someone's admin role over a single administrative unit?
      - Can I remove a scoped role assignment without affecting their tenant-wide roles?
      instructions:
      - text: Remove scoped role membership {membership_id} from administrative unit {unit_id}.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
      - text: Revoke the scoped role assignment {membership_id} on administrative unit {unit_id}.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers/{scopedRoleMembership-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a scoped role assignment on an administrative unit
      effect: write
      questions:
      - Can I change which role an existing scoped role assignment grants?
      - How do I edit a scoped role membership that's already on an administrative unit?
      instructions:
      - text: Change scoped role membership {membership_id} on administrative unit {unit_id} to role {role_id}.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
          role_id: requestBody.roleId
      - text: Update the member info of scoped role assignment {membership_id} in administrative unit {unit_id} to {member_info}.
        slots:
          membership_id: path.scopedRoleMembership-id
          unit_id: path.administrativeUnit-id
          member_info: requestBody.roleMemberInfo
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/{administrativeUnit-id}/scopedRoleMembers/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count scoped role assignments on an administrative unit
      effect: read
      questions:
      - How many scoped admin role assignments does an administrative unit have?
      - Are any roles delegated over this administrative unit?
      instructions:
      - text: Count the scoped role members of administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      - text: Tell me how many role assignments are scoped to administrative unit {unit_id}.
        slots:
          unit_id: path.administrativeUnit-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count administrative units in the directory
      effect: read
      questions:
      - How many administrative units does our tenant have?
      - What's the total number of administrative units in the directory?
      instructions:
      - text: Count the administrative units in the directory.
      - text: Tell me how many administrative units exist tenant-wide.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directory/administrativeUnits/microsoft.graph.delta()'].get
  update:
    x-apievangelist-phrasing:
      intent: Track changes to administrative units
      effect: read
      questions:
      - Which administrative units were added, changed or deleted since my last sync?
      - Can I get incremental changes to administrative units instead of re-reading them all?
      instructions:
      - text: Get the delta of administrative unit changes since the last sync.
      - text: Start a delta query to track new, updated and deleted administrative units.
      method: generated
      generated: '2026-10-01'