# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.SignIns Policies.identity Security Defaults…
  version: 1.0.0
extends: openapi/azure-ad-policies-identitysecuritydefaultsenforcementpolicy-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 3
- target: $.paths['/policies/identitySecurityDefaultsEnforcementPolicy'].get
  update:
    x-apievangelist-phrasing:
      intent: Check whether security defaults are enabled
      effect: read
      questions:
      - Are security defaults turned on in my Entra tenant?
      - What does the security defaults enforcement policy currently say?
      instructions:
      - text: Show the security defaults enforcement policy.
      - text: Check whether security defaults are enabled, selecting {select}.
        slots:
          select: query.$select
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/identitySecurityDefaultsEnforcementPolicy'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete the security defaults enforcement policy
      effect: destructive
      questions:
      - Can I delete the security defaults enforcement policy object itself?
      - Is removing the identity security defaults policy supported?
      instructions:
      - text: Delete the security defaults enforcement policy.
      - text: Remove the security defaults policy if its ETag matches {etag}.
        slots:
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/identitySecurityDefaultsEnforcementPolicy'].patch
  update:
    x-apievangelist-phrasing:
      intent: Turn security defaults on or off
      effect: write
      questions:
      - How do I enable security defaults for my tenant?
      - Can I disable security defaults so I can use Conditional Access instead?
      instructions:
      - text: Set security defaults enabled to {isEnabled}.
        slots:
          isEnabled: requestBody.isEnabled
      - text: Turn on security defaults for the tenant.
      method: generated
      generated: '2026-10-01'