# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.SignIns Policies.conditional Access Policy API
  version: 1.0.0
extends: openapi/azure-ad-policies-conditionalaccesspolicy-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 7
- target: $.paths['/policies/conditionalAccessPolicies'].get
  update:
    x-apievangelist-phrasing:
      intent: List conditional access policies
      effect: read
      questions:
      - Which conditional access policies are configured in our Microsoft Entra tenant?
      - Can I filter conditional access policies to only the ones that are enabled?
      instructions:
      - text: List all conditional access policies.
      - text: Show conditional access policies where {filter}.
        slots:
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a conditional access policy
      effect: write
      questions:
      - How do I require MFA for a set of users with a new conditional access policy?
      - Can I create a conditional access policy in report-only state first?
      - Is it possible to base a new conditional access policy on a template?
      instructions:
      - text: Create a conditional access policy named {displayName} with conditions {conditions} and grant controls {grantControls}.
        slots:
          displayName: requestBody.displayName
          conditions: requestBody.conditions
          grantControls: requestBody.grantControls
      - text: Add a new conditional access policy {displayName} in state {state}.
        slots:
          displayName: requestBody.displayName
          state: requestBody.state
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies/{conditionalAccessPolicy-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a conditional access policy
      effect: read
      questions:
      - What conditions and grant controls does a specific conditional access policy use?
      - How can I see whether one conditional access policy is on, off or report-only?
      instructions:
      - text: Get conditional access policy {policy}.
        slots:
          policy: path.conditionalAccessPolicy-id
      - text: Show the conditions and session controls of conditional access policy {policy}.
        slots:
          policy: path.conditionalAccessPolicy-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies/{conditionalAccessPolicy-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a conditional access policy
      effect: destructive
      questions:
      - How do I remove a conditional access policy from the tenant?
      - Can deletion of a conditional access policy be protected with an ETag?
      instructions:
      - text: Delete conditional access policy {policy}.
        slots:
          policy: path.conditionalAccessPolicy-id
      - text: Remove conditional access policy {policy} if its ETag is {etag}.
        slots:
          policy: path.conditionalAccessPolicy-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies/{conditionalAccessPolicy-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a conditional access policy
      effect: write
      questions:
      - Can I switch an existing conditional access policy from report-only to enabled?
      - How do I change the grant controls on a conditional access policy I already have?
      instructions:
      - text: Set the state of conditional access policy {policy} to {state}.
        slots:
          policy: path.conditionalAccessPolicy-id
          state: requestBody.state
      - text: Change the grant controls of existing conditional access policy {policy} to {grantControls}.
        slots:
          policy: path.conditionalAccessPolicy-id
          grantControls: requestBody.grantControls
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies/{conditionalAccessPolicy-id}/microsoft.graph.restore'].post
  update:
    x-apievangelist-phrasing:
      intent: Restore a deleted conditional access policy
      effect: write
      questions:
      - Can I bring back a conditional access policy that was deleted?
      - Is there a way to undo the deletion of a conditional access policy?
      instructions:
      - text: Restore deleted conditional access policy {policy}.
        slots:
          policy: path.conditionalAccessPolicy-id
      - text: Undelete conditional access policy {policy}.
        slots:
          policy: path.conditionalAccessPolicy-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/conditionalAccessPolicies/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count conditional access policies
      effect: read
      questions:
      - How many conditional access policies do we have?
      - Can I count conditional access policies that match a filter?
      instructions:
      - text: Count all conditional access policies.
      - text: Give me the number of conditional access policies matching {filter}.
        slots:
          filter: query.$filter
      method: generated
      generated: '2026-10-01'