# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand. overlay: 1.0.0 info: title: API Evangelist conversational phrasing for Identity.Governance Role Management.rbac Application API version: 1.0.0 extends: openapi/azure-ad-rolemanagement-rbacapplication-api-openapi.yml actions: - target: $.info update: x-apievangelist-phrasing: method: generated generated: '2026-10-01' generator: build-phrasing.py label: Generated by API Evangelist operations: 224 - target: $.paths['/roleManagement/directory'].get update: x-apievangelist-phrasing: intent: Get the directory role management container effect: read questions: - What does the role management directory container expose in Entra ID? - Can I read the directory RBAC provider object that holds role definitions and assignments? instructions: - text: Get the directory role management container. - text: Show me the directory RBAC provider root with {expand} expanded. slots: expand: query.$expand method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory'].delete update: x-apievangelist-phrasing: intent: Delete the directory role management container effect: destructive questions: - Is it possible to delete the whole directory RBAC provider navigation property? - Can I remove the roleManagement directory object itself? instructions: - text: Delete the directory role management container. - text: Remove the directory RBAC provider object from role management. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory'].patch update: x-apievangelist-phrasing: intent: Update the directory role management container effect: write questions: - Can I patch the directory RBAC provider object itself rather than one role? - Which collections can be set when updating the directory role management container? instructions: - text: Update the directory role management container with resource namespaces {namespaces}. slots: namespaces: requestBody.resourceNamespaces - text: Patch the directory RBAC provider so its role definitions are {definitions}. slots: definitions: requestBody.roleDefinitions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces'].get update: x-apievangelist-phrasing: intent: List directory resource namespaces effect: read questions: - Which resource namespaces exist for directory role permissions? - Where do I see all RBAC resource namespaces such as microsoft.directory? instructions: - text: List all resource namespaces in the directory RBAC provider. - text: Show the first {top} directory resource namespaces. slots: top: query.$top method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces'].post update: x-apievangelist-phrasing: intent: Create a directory resource namespace effect: write questions: - Can I add a new resource namespace to the directory RBAC provider? - What fields does a new directory resource namespace take? instructions: - text: Create a directory resource namespace named {name}. slots: name: requestBody.name - text: Add namespace {name} with resource actions {actions} to the directory provider. slots: name: requestBody.name actions: requestBody.resourceActions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].get update: x-apievangelist-phrasing: intent: Get a directory resource namespace effect: read questions: - How can I look up a single directory resource namespace by its ID? - What does one directory resource namespace contain? instructions: - text: Get directory resource namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Show the details of resource namespace {namespace} in the directory provider. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory resource namespace effect: destructive questions: - Can I remove a resource namespace from the directory RBAC provider? - What ID do I need to delete a directory resource namespace? instructions: - text: Delete directory resource namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Remove resource namespace {namespace} from directory role management. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory resource namespace effect: write questions: - Can I rename a directory resource namespace? - Is there a way to change the resource actions listed under a directory namespace in one patch? instructions: - text: Rename directory resource namespace {namespace} to {name}. slots: namespace: path.unifiedRbacResourceNamespace-id name: requestBody.name - text: Replace the resource actions on directory namespace {namespace} with {actions}. slots: namespace: path.unifiedRbacResourceNamespace-id actions: requestBody.resourceActions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions'].get update: x-apievangelist-phrasing: intent: List actions in a directory resource namespace effect: read questions: - Which resource actions are defined in a directory resource namespace? - Where can I find the permission action strings under a directory namespace? instructions: - text: List resource actions in directory namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Show every action verb defined under directory resource namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions'].post update: x-apievangelist-phrasing: intent: Add a resource action to a directory namespace effect: write questions: - Can I add a custom resource action to a directory resource namespace? - Is it possible to tie a new directory resource action to an authentication context? instructions: - text: Add resource action {name} with verb {verb} to directory namespace {namespace}. slots: name: requestBody.name verb: requestBody.actionVerb namespace: path.unifiedRbacResourceNamespace-id - text: Create directory resource action {name} in namespace {namespace} described as {description}. slots: name: requestBody.name namespace: path.unifiedRbacResourceNamespace-id description: requestBody.description method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].get update: x-apievangelist-phrasing: intent: Get a resource action in a directory namespace effect: read questions: - What does a specific resource action in a directory namespace allow? - Can I check whether one directory resource action supports authentication context? instructions: - text: Get resource action {action} in directory namespace {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id - text: Show the verb and scope of directory resource action {action} under {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].delete update: x-apievangelist-phrasing: intent: Delete a resource action from a directory namespace effect: destructive questions: - How do I remove one resource action from a directory resource namespace? - Can a single directory permission action be deleted without dropping its namespace? instructions: - text: Delete resource action {action} from directory namespace {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id - text: Remove directory action {action} in namespace {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].patch update: x-apievangelist-phrasing: intent: Update a resource action in a directory namespace effect: write questions: - Can I change the action verb of an existing directory resource action? - How do I make a directory resource action settable by authentication context? instructions: - text: Set authentication context {context} on directory resource action {action} in namespace {namespace}. slots: context: requestBody.authenticationContextId action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id - text: Update the description of directory action {action} under namespace {namespace} to {description}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id description: requestBody.description method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count'].get update: x-apievangelist-phrasing: intent: Count actions in a directory resource namespace effect: read questions: - How many resource actions does a directory resource namespace hold? - Can I get just the count of actions in one directory namespace? instructions: - text: Count the resource actions in directory namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Tell me how many actions directory namespace {namespace} defines. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/resourceNamespaces/$count'].get update: x-apievangelist-phrasing: intent: Count directory resource namespaces effect: read questions: - How many resource namespaces does the directory RBAC provider have? - Is there a quick way to count directory resource namespaces without listing them? instructions: - text: Count the directory resource namespaces. - text: Give me the number of resource namespaces in directory role management. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments'].get update: x-apievangelist-phrasing: intent: List directory role assignments effect: read questions: - Who has which Entra directory roles assigned in my tenant? - Can I filter directory role assignments by principal or role definition? - How do I list every directory role assignment? instructions: - text: List all directory role assignments. - text: List directory role assignments matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments'].post update: x-apievangelist-phrasing: intent: Assign a directory role to a principal effect: write questions: - How do I assign a directory role to a user? - Can I scope a directory role assignment to an administrative unit instead of the whole tenant? instructions: - text: Assign directory role {role} to principal {principal} at scope {scope}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId scope: requestBody.directoryScopeId - text: Grant principal {principal} the directory role {role} tenant-wide. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}'].get update: x-apievangelist-phrasing: intent: Get a directory role assignment effect: read questions: - What does a single directory role assignment contain? - Can I look up one directory role assignment by its ID? instructions: - text: Get directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Show the principal, role and scope for directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}'].delete update: x-apievangelist-phrasing: intent: Remove a directory role assignment effect: destructive questions: - How do I revoke a directory role from a user? - Can I delete a single directory role assignment by ID? instructions: - text: Delete directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Revoke the directory role granted by assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role assignment effect: write questions: - Can I change the scope of an existing directory role assignment? - Is it possible to add a condition to a directory role assignment after it exists? instructions: - text: Change the directory scope of role assignment {assignment} to {scope}. slots: assignment: path.unifiedRoleAssignment-id scope: requestBody.directoryScopeId - text: Set condition {condition} on directory role assignment {assignment}. slots: condition: requestBody.condition assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory role assignment effect: read questions: - Which app-specific scope does a directory role assignment apply to? - Where can I see the app scope details of a directory role assignment? instructions: - text: Get the app scope of directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Show the app-specific scope attached to directory assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope'].delete update: x-apievangelist-phrasing: intent: Delete the app scope of a directory role assignment effect: destructive questions: - Can I remove the app scope from a directory role assignment? - How do I clear an app-specific scope on a directory role assignment? instructions: - text: Delete the app scope on directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Clear the app-specific scope from directory assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope'].patch update: x-apievangelist-phrasing: intent: Update the app scope of a directory role assignment effect: write questions: - Can I rename the app scope on a directory role assignment? - What fields can I change on a directory role assignment's app scope? instructions: - text: Set the app scope display name on directory assignment {assignment} to {name}. slots: assignment: path.unifiedRoleAssignment-id name: requestBody.displayName - text: Update the app scope type on directory role assignment {assignment} to {type}. slots: assignment: path.unifiedRoleAssignment-id type: requestBody.type method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory role assignment effect: read questions: - Which directory object is the scope of a directory role assignment? - Is a given directory role assignment scoped to an administrative unit or the whole tenant? instructions: - text: Get the scope object for directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Show what object directory role assignment {assignment} is scoped to. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory role assignment effect: read questions: - Who is the principal behind a directory role assignment? - Can I fetch the user or group that holds a given directory role assignment? instructions: - text: Get the principal of directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Show who received directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role granted by a directory role assignment effect: read questions: - Which role does a directory role assignment grant? - Where do I see the role definition behind a directory role assignment? instructions: - text: Get the role definition for directory role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Show which role directory assignment {assignment} is for. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignments/$count'].get update: x-apievangelist-phrasing: intent: Count directory role assignments effect: read questions: - How many directory role assignments exist in my tenant? - Can I count directory role assignments without paging through them? instructions: - text: Count directory role assignments. - text: Count directory role assignments matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances'].get update: x-apievangelist-phrasing: intent: List active directory role assignment instances effect: read questions: - Which directory role assignments are active right now, including PIM activations? - Can I see active directory role instances that came from activating an eligible role? instructions: - text: List active directory role assignment instances. - text: List active directory role instances matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances'].post update: x-apievangelist-phrasing: intent: Create an active directory role assignment instance effect: write questions: - Can I create an active directory role assignment instance directly? - What start and end times does a new directory assignment schedule instance take? instructions: - text: Create a directory role assignment instance for schedule {schedule} from {start} to {end}. slots: schedule: requestBody.roleAssignmentScheduleId start: requestBody.startDateTime end: requestBody.endDateTime - text: Add an active directory assignment instance with assignment type {type}. slots: type: requestBody.assignmentType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].get update: x-apievangelist-phrasing: intent: Get an active directory role assignment instance effect: read questions: - What does one active directory role assignment instance look like? - When does a particular active directory role instance start and end? instructions: - text: Get active directory role assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show start and end times of directory assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].delete update: x-apievangelist-phrasing: intent: Delete an active directory role assignment instance effect: destructive questions: - Can I delete an active directory role assignment instance? - What do I need to remove a directory assignment schedule instance by ID? instructions: - text: Delete directory role assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Remove active directory assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].patch update: x-apievangelist-phrasing: intent: Update an active directory role assignment instance effect: write questions: - Can I change the end time of an active directory role assignment instance? - Which fields can be patched on a directory assignment schedule instance? instructions: - text: Set the end time of directory assignment instance {instance} to {end}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id end: requestBody.endDateTime - text: Update member type on active directory role instance {instance} to {memberType}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility behind an active directory role effect: read questions: - Which eligible assignment was activated to produce an active directory role instance? - Can I trace an active directory role instance back to the eligibility it came from? instructions: - text: Get the eligibility used to activate directory assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show which eligible role activation produced active directory instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an active directory role instance effect: read questions: - Is an active directory role instance scoped to a specific app? - Where do I find the app scope of an active directory assignment instance? instructions: - text: Get the app scope of active directory role instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show app-specific scope details for directory assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an active directory role instance effect: read questions: - What directory object is an active directory role instance scoped to? - Can I see whether an active directory role instance covers an administrative unit? instructions: - text: Get the scope object of active directory role instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show the directory object that assignment instance {instance} is scoped to. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an active directory role instance effect: read questions: - Who holds a given active directory role assignment instance? - Can I fetch the principal of an active directory role instance? instructions: - text: Get the principal of active directory role instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show the user or group behind directory assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an active directory role instance effect: read questions: - Which role is granted by an active directory role assignment instance? - Can I read the role definition behind an active directory role instance? instructions: - text: Get the role definition of active directory role instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Show which role directory assignment instance {instance} grants. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/$count'].get update: x-apievangelist-phrasing: intent: Count active directory role assignment instances effect: read questions: - How many active directory role assignment instances are there? - Can I get a count of directory roles that are active at this moment? instructions: - text: Count active directory role assignment instances. - text: Tell me how many directory roles are active right now. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleInstances/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my active directory role instances effect: read questions: - Which directory roles are active for me right now? - Can I list only my own active directory role instances? instructions: - text: List my active directory role instances filtered on {on}. slots: 'on': path.on - text: Show active directory role assignment instances where I am the {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests'].get update: x-apievangelist-phrasing: intent: List PIM directory role assignment requests effect: read questions: - What PIM requests for active directory role assignments have been made? - Can I see pending and granted directory role assignment requests? instructions: - text: List directory role assignment schedule requests. - text: List PIM directory assignment requests matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests'].post update: x-apievangelist-phrasing: intent: Request an active directory role assignment in PIM effect: write questions: - How do I activate an eligible directory role through PIM with a justification? - Can I validate a directory role assignment request without actually submitting it? - What actions like assign, extend or renew does a directory assignment request support? instructions: - text: Request directory role {role} for principal {principal} with action {action} and justification {justification}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId action: requestBody.action justification: requestBody.justification - text: Activate eligible directory role {role} for {principal} on schedule {schedule}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId schedule: requestBody.scheduleInfo - text: Dry-run a directory assignment request for role {role} and principal {principal} with validation only {validate}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId validate: requestBody.isValidationOnly method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].get update: x-apievangelist-phrasing: intent: Get a PIM directory role assignment request effect: read questions: - How do I check the status of a PIM directory role assignment request? - Can I read the justification on a directory assignment request? instructions: - text: Get directory role assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show status and justification of PIM directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory role assignment request effect: destructive questions: - Can I delete a directory role assignment request record? - What is needed to remove a PIM directory assignment request object? instructions: - text: Delete directory role assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Remove PIM directory assignment request {request} from role management. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role assignment request effect: write questions: - Can I edit the justification on an existing directory role assignment request? - Which fields can be patched on a PIM directory assignment request? instructions: - text: Update the justification on directory assignment request {request} to {justification}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id justification: requestBody.justification - text: Change ticket info on PIM directory assignment request {request} to {ticket}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id ticket: requestBody.ticketInfo method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility used by a directory role request effect: read questions: - Which eligible assignment did a directory activation request use? - Can I see the eligibility behind a PIM directory activation request? instructions: - text: Get the eligibility used by directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show which eligible directory role PIM request {request} activated. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory role request effect: read questions: - Is a PIM directory assignment request scoped to an app? - Where can I read the app scope of a directory role assignment request? instructions: - text: Get the app scope of directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show the app-specific scope that PIM assignment request {request} targets in the directory. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory role request effect: read questions: - Which directory object does a PIM directory assignment request use as scope? - Can I see the administrative unit a directory role request is scoped to? instructions: - text: Get the scope object of directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show the directory object PIM role request {request} targets as scope. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/microsoft.graph.cancel'].post update: x-apievangelist-phrasing: intent: Cancel a granted directory role assignment request effect: destructive questions: - How do I cancel a granted PIM directory role assignment request? - Can I withdraw a directory role assignment request that was already granted? instructions: - text: Cancel directory role assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Withdraw granted PIM directory assignment request {request} now. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory role request effect: read questions: - Who is the principal on a PIM directory role assignment request? - Can I fetch the user a directory assignment request was made for? instructions: - text: Get the principal of directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show who PIM directory role request {request} is for. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role requested in a directory role request effect: read questions: - Which role is being requested in a PIM directory assignment request? - Can I read the role definition referenced by a directory assignment request? instructions: - text: Get the role definition requested in directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show which role PIM directory request {request} asks for. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/targetSchedule'].get update: x-apievangelist-phrasing: intent: Get the target schedule of a directory role request effect: read questions: - Which assignment schedule does a directory role request create or modify? - Can I see the target schedule behind a PIM directory assignment request? instructions: - text: Get the target schedule of directory assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Show the schedule PIM directory role request {request} affects. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/$count'].get update: x-apievangelist-phrasing: intent: Count directory role assignment requests effect: read questions: - How many directory role assignment requests exist? - Can I count PIM directory assignment requests in the tenant? instructions: - text: Count directory role assignment requests. - text: Tell me the number of PIM directory assignment requests. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentScheduleRequests/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my directory role assignment requests effect: read questions: - Which PIM directory role assignment requests did I create or approve? - Can I list only my own directory assignment requests? instructions: - text: List my directory role assignment requests where I am the {on}. slots: 'on': path.on - text: Show PIM directory assignment requests filtered to me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules'].get update: x-apievangelist-phrasing: intent: List directory role assignment schedules effect: read questions: - What schedules exist for active directory role assignments? - Can I see when active directory role assignments are set to expire? instructions: - text: List directory role assignment schedules. - text: List active directory assignment schedules matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules'].post update: x-apievangelist-phrasing: intent: Create a directory role assignment schedule effect: write questions: - Can I create a directory role assignment schedule object directly? - What schedule info does a new directory assignment schedule need? instructions: - text: Create a directory role assignment schedule with schedule info {info}. slots: info: requestBody.scheduleInfo - text: Add a directory assignment schedule of type {type} for member type {memberType}. slots: type: requestBody.assignmentType memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].get update: x-apievangelist-phrasing: intent: Get a directory role assignment schedule effect: read questions: - What does one directory role assignment schedule contain? - When does a specific active directory assignment schedule start and expire? instructions: - text: Get directory role assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show the start and expiry of directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory role assignment schedule effect: destructive questions: - Can I delete a directory role assignment schedule? - Which ID removes a directory assignment schedule object? instructions: - text: Delete directory role assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Remove directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role assignment schedule effect: write questions: - Can I change the schedule info on a directory role assignment schedule? - Which properties are editable on a directory assignment schedule? instructions: - text: Update schedule info on directory assignment schedule {schedule} to {info}. slots: schedule: path.unifiedRoleAssignmentSchedule-id info: requestBody.scheduleInfo - text: Change the assignment type of directory schedule {schedule} to {type}. slots: schedule: path.unifiedRoleAssignmentSchedule-id type: requestBody.assignmentType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility behind a directory role schedule effect: read questions: - Which eligible assignment was activated for a directory role assignment schedule? - Can I trace a directory assignment schedule back to its eligibility? instructions: - text: Get the eligibility activated for directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show the eligible role used by directory role schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory role schedule effect: read questions: - Is a directory role assignment schedule scoped to an app? - Where is the app scope of a directory assignment schedule? instructions: - text: Get the app scope of directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show which app directory assignment schedule {schedule} is limited to. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory role schedule effect: read questions: - Which directory object is a directory role assignment schedule scoped to? - Can I check the administrative unit on a directory assignment schedule? instructions: - text: Get the scope object of directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show the directory object that role schedule {schedule} covers. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory role schedule effect: read questions: - Who is the principal on a directory role assignment schedule? - Can I fetch the user a directory assignment schedule belongs to? instructions: - text: Get the principal of directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show the user or group that active directory assignment schedule {schedule} is for. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of a directory role schedule effect: read questions: - What role is attached to a directory role assignment schedule? - Can I read the role definition on a directory assignment schedule? instructions: - text: Get the role definition of directory assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Show which role directory role schedule {schedule} grants. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/$count'].get update: x-apievangelist-phrasing: intent: Count directory role assignment schedules effect: read questions: - How many directory role assignment schedules are there? - Can I count active directory assignment schedules quickly? instructions: - text: Count directory role assignment schedules. - text: Tell me how many active directory assignment schedules exist. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleAssignmentSchedules/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my directory role assignment schedules effect: read questions: - Which active directory role schedules am I the principal on? - Can I list only the directory assignment schedules for the signed-in user? instructions: - text: List my directory role assignment schedules filtered on {on}. slots: 'on': path.on - text: Show directory assignment schedules where I am the {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions'].get update: x-apievangelist-phrasing: intent: List directory role definitions effect: read questions: - Which directory roles, built-in and custom, are available in my tenant? - Can I filter directory role definitions to only custom roles? instructions: - text: List all directory role definitions. - text: List directory role definitions matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions'].post update: x-apievangelist-phrasing: intent: Create a custom directory role effect: write questions: - How do I create a custom Entra directory role with specific permissions? - Does creating a custom directory role require a P1 or P2 license? instructions: - text: Create custom directory role {name} with permissions {permissions}. slots: name: requestBody.displayName permissions: requestBody.rolePermissions - text: Create a custom directory role {name} described as {description}. slots: name: requestBody.displayName description: requestBody.description method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}'].get update: x-apievangelist-phrasing: intent: Get a directory role definition effect: read questions: - What permissions does a specific directory role grant? - Can I read one directory role definition by ID? instructions: - text: Get directory role definition {role}. slots: role: path.unifiedRoleDefinition-id - text: Show the permissions in directory role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}'].delete update: x-apievangelist-phrasing: intent: Delete a custom directory role effect: destructive questions: - How do I delete a custom directory role? - Can built-in directory roles be deleted? instructions: - text: Delete custom directory role {role}. slots: role: path.unifiedRoleDefinition-id - text: Remove directory role definition {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}'].patch update: x-apievangelist-phrasing: intent: Update a custom directory role effect: write questions: - Can I change the permissions of a custom directory role? - Is it possible to disable a custom directory role without deleting it? instructions: - text: Update permissions on custom directory role {role} to {permissions}. slots: role: path.unifiedRoleDefinition-id permissions: requestBody.rolePermissions - text: Disable custom directory role {role} by setting enabled to {enabled}. slots: role: path.unifiedRoleDefinition-id enabled: requestBody.isEnabled method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom'].get update: x-apievangelist-phrasing: intent: List roles a directory role inherits from effect: read questions: - Which roles does a directory role definition inherit permissions from? - Can I see the inheritance chain of a built-in directory role? instructions: - text: List roles that directory role {role} inherits permissions from. slots: role: path.unifiedRoleDefinition-id - text: Show inherited role definitions for directory role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom'].post update: x-apievangelist-phrasing: intent: Add an inherited role to a directory role effect: write questions: - Can I add an inherited role entry to a directory role definition? - How do I register a role that a directory role inherits permissions from? instructions: - text: Add inherited role {name} to directory role {role}. slots: name: requestBody.displayName role: path.unifiedRoleDefinition-id - text: Create an inherits-from entry under directory role {role} with permissions {permissions}. slots: role: path.unifiedRoleDefinition-id permissions: requestBody.rolePermissions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].get update: x-apievangelist-phrasing: intent: Get one role a directory role inherits from effect: read questions: - What does one role that a directory role inherits from contain? - Can I fetch a specific inherited role definition of a directory role? instructions: - text: Get inherited role {parent} of directory role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id - text: Show inherited definition {parent} under directory role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].delete update: x-apievangelist-phrasing: intent: Remove an inherited role from a directory role effect: destructive questions: - Can I remove an inherited role from a directory role definition? - How do I drop one inherits-from link on a directory role? instructions: - text: Remove inherited role {parent} from directory role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id - text: Delete inheritance link {parent} on directory role definition {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].patch update: x-apievangelist-phrasing: intent: Update an inherited role on a directory role effect: write questions: - Can I edit an inherited role entry on a directory role? - Which fields of an inherited directory role entry can be patched? instructions: - text: Update inherited role {parent} under directory role {role} with description {description}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id description: requestBody.description - text: Rename inherited entry {parent} on directory role {role} to {name}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id name: requestBody.displayName method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/$count'].get update: x-apievangelist-phrasing: intent: Count roles a directory role inherits from effect: read questions: - How many roles does a directory role inherit permissions from? - Can I count the inherited roles of one directory role definition? instructions: - text: Count the roles directory role {role} inherits from. slots: role: path.unifiedRoleDefinition-id - text: Tell me how many inherited definitions directory role {role} has. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleDefinitions/$count'].get update: x-apievangelist-phrasing: intent: Count directory role definitions effect: read questions: - How many directory role definitions exist in my tenant? - Can I count custom directory roles only? instructions: - text: Count directory role definitions. - text: Count directory role definitions matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances'].get update: x-apievangelist-phrasing: intent: List directory role eligibility instances effect: read questions: - Which users are currently eligible for directory roles? - Can I list role eligibility instances in the directory provider? instructions: - text: List directory role eligibility instances. - text: List directory eligibility instances matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances'].post update: x-apievangelist-phrasing: intent: Create a directory role eligibility instance effect: write questions: - Can I create a directory role eligibility instance directly? - What start and end times does a new directory eligibility instance take? instructions: - text: Create a directory eligibility instance for schedule {schedule} from {start} to {end}. slots: schedule: requestBody.roleEligibilityScheduleId start: requestBody.startDateTime end: requestBody.endDateTime - text: Add a directory role eligibility instance with member type {memberType}. slots: memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].get update: x-apievangelist-phrasing: intent: Get a directory role eligibility instance effect: read questions: - What does one directory role eligibility instance contain? - When does a particular directory role eligibility start and end? instructions: - text: Get directory role eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Show the eligibility window of directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory role eligibility instance effect: destructive questions: - Can I delete a directory role eligibility instance? - What ID removes one directory eligibility instance? instructions: - text: Delete directory role eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Remove directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role eligibility instance effect: write questions: - Can I change the end date of a directory role eligibility instance? - Which fields are editable on a directory eligibility instance? instructions: - text: Set the end time of directory eligibility instance {instance} to {end}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id end: requestBody.endDateTime - text: Change member type on directory role eligibility instance {instance} to {memberType}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory eligibility instance effect: read questions: - Is a directory role eligibility instance scoped to an app? - Where is the app scope of a directory eligibility instance shown? instructions: - text: Get the app scope of directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Show app-specific scope for directory role eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory eligibility instance effect: read questions: - Which directory object does a directory role eligibility instance cover? - Can I see the administrative unit a directory eligibility instance is scoped to? instructions: - text: Get the scope object of directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Show the directory object eligibility instance {instance} is scoped to. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory eligibility instance effect: read questions: - Who is eligible under a given directory role eligibility instance? - Can I fetch the principal of a directory eligibility instance? instructions: - text: Get the principal of directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Show which user or group directory eligibility instance {instance} belongs to. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of a directory eligibility instance effect: read questions: - Which role is a directory role eligibility instance for? - Can I read the role definition behind a directory eligibility instance? instructions: - text: Get the role definition of directory eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Show which role directory eligibility instance {instance} makes someone eligible for. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/$count'].get update: x-apievangelist-phrasing: intent: Count directory role eligibility instances effect: read questions: - How many directory role eligibility instances are there? - Can I count directory eligibilities without listing them? instructions: - text: Count directory role eligibility instances. - text: Tell me how many directory role eligibilities exist right now. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleInstances/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my directory role eligibility instances effect: read questions: - Which directory roles am I eligible to activate? - Can I list only my own directory role eligibility instances? instructions: - text: List my directory role eligibility instances filtered on {on}. slots: 'on': path.on - text: Show directory eligibility instances where I am the {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests'].get update: x-apievangelist-phrasing: intent: List PIM directory role eligibility requests effect: read questions: - What PIM requests for directory role eligibility have been made? - Can I see which principals asked to become eligible for directory roles? instructions: - text: List directory role eligibility requests. - text: List PIM directory eligibility requests matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests'].post update: x-apievangelist-phrasing: intent: Request a directory role eligibility in PIM effect: write questions: - How do I make a user eligible for a directory role through PIM? - Can I remove or extend a directory role eligibility with an eligibility request? - Is there a validation-only mode for directory eligibility requests? instructions: - text: Make principal {principal} eligible for directory role {role} with action {action}. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId action: requestBody.action - text: Request directory eligibility for {principal} on role {role} with justification {justification}. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId justification: requestBody.justification - text: Validate a directory eligibility request for role {role} and principal {principal} with validation only {validate}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId validate: requestBody.isValidationOnly method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].get update: x-apievangelist-phrasing: intent: Get a PIM directory role eligibility request effect: read questions: - How do I check the status of a directory role eligibility request? - Can I read the justification on a PIM directory eligibility request? instructions: - text: Get directory role eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show status and justification of PIM directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory role eligibility request effect: destructive questions: - Can I delete a directory role eligibility request record? - What is required to remove a PIM directory eligibility request object? instructions: - text: Delete directory role eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Remove PIM directory eligibility request {request} from role management. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role eligibility request effect: write questions: - Can I edit the justification on a directory role eligibility request? - Which fields can be patched on a PIM directory eligibility request? instructions: - text: Update the justification on directory eligibility request {request} to {justification}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id justification: requestBody.justification - text: Change the schedule on PIM directory eligibility request {request} to {info}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id info: requestBody.scheduleInfo method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory eligibility request effect: read questions: - Is a PIM directory eligibility request scoped to an app? - Where do I find which app a directory eligibility request is limited to? instructions: - text: Get the app scope of directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show app-specific scope for PIM directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory eligibility request effect: read questions: - Which directory object is a PIM directory eligibility request scoped to? - Can I see the administrative unit targeted by a directory eligibility request? instructions: - text: Get the scope object of directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show the directory object PIM eligibility request {request} is scoped to. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/microsoft.graph.cancel'].post update: x-apievangelist-phrasing: intent: Cancel a granted directory role eligibility request effect: destructive questions: - How do I cancel a granted PIM directory role eligibility request? - Can I withdraw a directory eligibility request after it was granted? instructions: - text: Cancel directory role eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Withdraw granted PIM directory eligibility request {request} now. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory eligibility request effect: read questions: - Who is the principal on a PIM directory eligibility request? - Can I fetch the user a directory eligibility request was made for? instructions: - text: Get the principal of directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show who PIM directory eligibility request {request} is for. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role in a directory eligibility request effect: read questions: - Which role does a PIM directory eligibility request ask for? - Can I read the role definition referenced by a directory eligibility request? instructions: - text: Get the role definition in directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show which role PIM directory eligibility request {request} targets. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/targetSchedule'].get update: x-apievangelist-phrasing: intent: Get the target schedule of a directory eligibility request effect: read questions: - Which eligibility schedule does a directory eligibility request create or change? - Can I see the target schedule of a PIM directory eligibility request? instructions: - text: Get the target schedule of directory eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Show the eligibility schedule PIM directory request {request} affects. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/$count'].get update: x-apievangelist-phrasing: intent: Count directory role eligibility requests effect: read questions: - How many directory role eligibility requests exist? - Can I count PIM directory eligibility requests in my tenant? instructions: - text: Count directory role eligibility requests. - text: Tell me the number of PIM directory eligibility requests. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilityScheduleRequests/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my directory role eligibility requests effect: read questions: - Which PIM directory eligibility requests did I create or approve? - Can I list only my own directory role eligibility requests? instructions: - text: List my directory role eligibility requests where I am the {on}. slots: 'on': path.on - text: Show PIM directory eligibility requests filtered to me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules'].get update: x-apievangelist-phrasing: intent: List directory role eligibility schedules effect: read questions: - What schedules exist for directory role eligibilities? - Can I see when directory role eligibilities are set to expire? instructions: - text: List directory role eligibility schedules. - text: List directory eligibility schedules matching {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules'].post update: x-apievangelist-phrasing: intent: Create a directory role eligibility schedule effect: write questions: - Can I create a directory role eligibility schedule object directly? - What schedule info does a new directory eligibility schedule need? instructions: - text: Create a directory role eligibility schedule with schedule info {info}. slots: info: requestBody.scheduleInfo - text: Add a directory eligibility schedule for member type {memberType}. slots: memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].get update: x-apievangelist-phrasing: intent: Get a directory role eligibility schedule effect: read questions: - What does one directory role eligibility schedule contain? - When does a specific directory eligibility schedule start and expire? instructions: - text: Get directory role eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Show the start and expiry of directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].delete update: x-apievangelist-phrasing: intent: Delete a directory role eligibility schedule effect: destructive questions: - Can I delete a directory role eligibility schedule? - Which ID removes a directory eligibility schedule object? instructions: - text: Delete directory role eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Remove directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].patch update: x-apievangelist-phrasing: intent: Update a directory role eligibility schedule effect: write questions: - Can I change the schedule info on a directory role eligibility schedule? - Which properties are editable on a directory eligibility schedule? instructions: - text: Update schedule info on directory eligibility schedule {schedule} to {info}. slots: schedule: path.unifiedRoleEligibilitySchedule-id info: requestBody.scheduleInfo - text: Change member type of directory eligibility schedule {schedule} to {memberType}. slots: schedule: path.unifiedRoleEligibilitySchedule-id memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of a directory eligibility schedule effect: read questions: - Is a directory role eligibility schedule scoped to an app? - Where is the app scope of a directory eligibility schedule? instructions: - text: Get the app scope of directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Show app-specific scope for directory role eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of a directory eligibility schedule effect: read questions: - Which directory object is a directory eligibility schedule scoped to? - Can I check the administrative unit on a directory role eligibility schedule? instructions: - text: Get the scope object of directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Show the directory object eligibility schedule {schedule} covers. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of a directory eligibility schedule effect: read questions: - Who is the principal on a directory role eligibility schedule? - Can I fetch the user a directory eligibility schedule belongs to? instructions: - text: Get the principal of directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Show who directory role eligibility schedule {schedule} applies to. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of a directory eligibility schedule effect: read questions: - Which role does a directory role eligibility schedule make someone eligible for? - Can I read the role definition on a directory eligibility schedule? instructions: - text: Get the role definition of directory eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Show which role directory eligibility schedule {schedule} is for. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/$count'].get update: x-apievangelist-phrasing: intent: Count directory role eligibility schedules effect: read questions: - How many directory role eligibility schedules are there? - Can I count directory eligibility schedules quickly? instructions: - text: Count directory role eligibility schedules. - text: Tell me how many directory eligibility schedules exist. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/directory/roleEligibilitySchedules/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my directory role eligibility schedules effect: read questions: - Which directory role eligibility schedules am I the principal on? - Can I list only the directory eligibility schedules for the signed-in user? instructions: - text: List my directory role eligibility schedules filtered on {on}. slots: 'on': path.on - text: Show directory eligibility schedules where I am the {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement'].get update: x-apievangelist-phrasing: intent: Get the entitlement management RBAC container effect: read questions: - What sits inside the entitlement management role container? - Can I read the roles and assignments root for entitlement management resources? instructions: - text: Get the entitlement management RBAC container. - text: Fetch the entitlement management roles root with {expand} included. slots: expand: query.$expand method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement'].delete update: x-apievangelist-phrasing: intent: Delete the entitlement management RBAC container effect: destructive questions: - Is the entitlement management role container something I can delete? - What happens to the RBAC root for entitlement management if I remove it? instructions: - text: Delete the entitlement management RBAC container. - text: Remove the entitlement management provider node from role management. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement'].patch update: x-apievangelist-phrasing: intent: Update the entitlement management RBAC container effect: write questions: - Can I patch the entitlement management provider object as a whole? - Which navigation collections are settable on the entitlement management container? instructions: - text: Patch the entitlement management container with role assignments {assignments}. slots: assignments: requestBody.roleAssignments - text: Set resource namespaces {namespaces} on the entitlement management RBAC root. slots: namespaces: requestBody.resourceNamespaces method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces'].get update: x-apievangelist-phrasing: intent: List entitlement management resource namespaces effect: read questions: - What resource namespaces does entitlement management define for its permissions? - Is there a list of RBAC namespaces used by entitlement management? instructions: - text: List resource namespaces under entitlement management. - text: Return {top} entitlement management resource namespaces. slots: top: query.$top method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces'].post update: x-apievangelist-phrasing: intent: Create an entitlement management resource namespace effect: write questions: - Can I register a new resource namespace for entitlement management? - What does a new entitlement management namespace need besides a name? instructions: - text: Register entitlement management resource namespace {name}. slots: name: requestBody.name - text: Create namespace {name} for entitlement management containing actions {actions}. slots: name: requestBody.name actions: requestBody.resourceActions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management resource namespace effect: read questions: - How can I fetch one entitlement management resource namespace? - What is inside a particular entitlement management namespace? instructions: - text: Fetch entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Look up resource namespace {namespace} used by entitlement management. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management resource namespace effect: destructive questions: - Can an entitlement management resource namespace be removed? - Which identifier do I pass to drop an entitlement management namespace? instructions: - text: Drop entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Delete resource namespace {namespace} from entitlement management. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management resource namespace effect: write questions: - Can I change the name of an entitlement management namespace? - Is it possible to swap out the action list of an entitlement management namespace? instructions: - text: Change the name of entitlement management namespace {namespace} to {name}. slots: namespace: path.unifiedRbacResourceNamespace-id name: requestBody.name - text: Set actions {actions} on entitlement management namespace {namespace}. slots: actions: requestBody.resourceActions namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions'].get update: x-apievangelist-phrasing: intent: List actions in an entitlement management namespace effect: read questions: - What permission actions live under an entitlement management namespace? - Can I enumerate the resource actions entitlement management defines in one namespace? instructions: - text: Enumerate the actions in entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Return all resource actions for entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions'].post update: x-apievangelist-phrasing: intent: Add a resource action to an entitlement management namespace effect: write questions: - Can I define a new permission action inside an entitlement management namespace? - Does a new entitlement management resource action accept an authentication context ID? instructions: - text: Define action {name} using verb {verb} in entitlement management namespace {namespace}. slots: name: requestBody.name verb: requestBody.actionVerb namespace: path.unifiedRbacResourceNamespace-id - text: Add an entitlement management action {name} to {namespace} scoped to {resourceScope}. slots: name: requestBody.name namespace: path.unifiedRbacResourceNamespace-id resourceScope: requestBody.resourceScopeId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].get update: x-apievangelist-phrasing: intent: Get a resource action in an entitlement management namespace effect: read questions: - What does one entitlement management resource action permit? - Can I fetch a single action from an entitlement management namespace? instructions: - text: Fetch action {action} from entitlement management namespace {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id - text: Look up entitlement management resource action {action} in {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].delete update: x-apievangelist-phrasing: intent: Delete a resource action from an entitlement namespace effect: destructive questions: - Can I drop one action from an entitlement management namespace? - What identifiers are needed to delete an entitlement management resource action? instructions: - text: Drop action {action} from entitlement management namespace {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id - text: Delete entitlement management resource action {action} under {namespace}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}'].patch update: x-apievangelist-phrasing: intent: Update a resource action in an entitlement namespace effect: write questions: - Can I edit an existing entitlement management resource action? - Is it possible to toggle whether an entitlement management action allows authentication context? instructions: - text: Change the verb of entitlement management action {action} in {namespace} to {verb}. slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id verb: requestBody.actionVerb - text: 'Allow authentication context on entitlement management action {action} in {namespace}: {settable}.' slots: action: path.unifiedRbacResourceAction-id namespace: path.unifiedRbacResourceNamespace-id settable: requestBody.isAuthenticationContextSettable method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count'].get update: x-apievangelist-phrasing: intent: Count actions in an entitlement management namespace effect: read questions: - What is the number of actions in an entitlement management namespace? - Can I get an action total for one entitlement management namespace? instructions: - text: Return the action total for entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id - text: Give me just the number of resource actions in entitlement management namespace {namespace}. slots: namespace: path.unifiedRbacResourceNamespace-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/resourceNamespaces/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management resource namespaces effect: read questions: - What is the total number of entitlement management resource namespaces? - Can I get only a namespace count for entitlement management? instructions: - text: Return the entitlement management namespace total. - text: Get a count of resource namespaces in entitlement management. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments'].get update: x-apievangelist-phrasing: intent: List entitlement management role assignments effect: read questions: - Who holds entitlement management roles such as catalog owner or reader? - Can I narrow entitlement management role assignments to one principal? - What entitlement management role assignments exist today? instructions: - text: Show every entitlement management role assignment. - text: Find entitlement management role assignments where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments'].post update: x-apievangelist-phrasing: intent: Assign an entitlement management role effect: write questions: - Can I grant a user an entitlement management role through the API? - What scope does an entitlement management role assignment take? instructions: - text: Give principal {principal} entitlement management role {role} on scope {scope}. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId scope: requestBody.directoryScopeId - text: Create an entitlement management role assignment of {role} for {principal} scoped to app {appScope}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId appScope: requestBody.appScopeId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role assignment effect: read questions: - What does one entitlement management role assignment record hold? - Can I fetch a single entitlement management role grant by ID? instructions: - text: Fetch entitlement management role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Look up who, what and where for entitlement management assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}'].delete update: x-apievangelist-phrasing: intent: Remove an entitlement management role assignment effect: destructive questions: - Can I take an entitlement management role away from someone? - What ID do I need to drop an entitlement management role grant? instructions: - text: Drop entitlement management role assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Take away the entitlement management role granted by {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role assignment effect: write questions: - Can I move an entitlement management role assignment to a different scope? - Is an entitlement management role assignment editable after it is created? instructions: - text: Move entitlement management assignment {assignment} to scope {scope}. slots: assignment: path.unifiedRoleAssignment-id scope: requestBody.directoryScopeId - text: Switch entitlement management assignment {assignment} to role {role}. slots: assignment: path.unifiedRoleAssignment-id role: requestBody.roleDefinitionId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement management assignment effect: read questions: - Which app scope applies to an entitlement management role assignment? - Can I see app-specific scope details on an entitlement management role grant? instructions: - text: Fetch the app scope for entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Look up which app entitlement management role grant {assignment} is limited to. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope'].delete update: x-apievangelist-phrasing: intent: Delete the app scope of an entitlement management assignment effect: destructive questions: - Can I drop the app scope on an entitlement management role assignment? - Is removing the app-specific scope from an entitlement management grant supported? instructions: - text: Drop the app scope from entitlement management assignment {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Remove app-specific scoping on entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope'].patch update: x-apievangelist-phrasing: intent: Update the app scope of an entitlement management assignment effect: write questions: - Can I edit the app scope attached to an entitlement management role assignment? - What app scope properties are editable on an entitlement management grant? instructions: - text: Rename the app scope on entitlement management assignment {assignment} to {name}. slots: assignment: path.unifiedRoleAssignment-id name: requestBody.displayName - text: Change app scope type for entitlement management role grant {assignment} to {type}. slots: assignment: path.unifiedRoleAssignment-id type: requestBody.type method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement management assignment effect: read questions: - What object is an entitlement management role assignment scoped to? - Can I resolve the scope of an entitlement management role grant to a real object? instructions: - text: Fetch the scope object for entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Resolve what entitlement management role grant {assignment} is scoped to. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement management assignment effect: read questions: - Who received a particular entitlement management role assignment? - Can I resolve the principal on an entitlement management role grant? instructions: - text: Fetch the principal for entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Resolve the user or group holding entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an entitlement management assignment effect: read questions: - What role does a given entitlement management assignment confer? - Can I resolve the role definition of an entitlement management role grant? instructions: - text: Fetch the role definition for entitlement management role grant {assignment}. slots: assignment: path.unifiedRoleAssignment-id - text: Resolve which role entitlement management grant {assignment} confers. slots: assignment: path.unifiedRoleAssignment-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignments/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role assignments effect: read questions: - What is the total number of entitlement management role assignments? - Can I get only the count of entitlement management role grants? instructions: - text: Return the entitlement management role assignment total. - text: Get a count of entitlement management role grants where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances'].get update: x-apievangelist-phrasing: intent: List active entitlement management role instances effect: read questions: - Which entitlement management roles are active at this moment? - Can I enumerate active entitlement management assignment instances? instructions: - text: Enumerate active entitlement management assignment instances. - text: Find active entitlement management role instances where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances'].post update: x-apievangelist-phrasing: intent: Create an active entitlement management role instance effect: write questions: - Can I add an active entitlement management assignment instance myself? - What time window does a new entitlement management assignment instance accept? instructions: - text: Add an entitlement management assignment instance on schedule {schedule} running {start} to {end}. slots: schedule: requestBody.roleAssignmentScheduleId start: requestBody.startDateTime end: requestBody.endDateTime - text: Create an active entitlement management instance whose origin is {origin}. slots: origin: requestBody.roleAssignmentOriginId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].get update: x-apievangelist-phrasing: intent: Get an active entitlement management role instance effect: read questions: - What details come back for one active entitlement management role instance? - Can I fetch a single active entitlement management assignment instance? instructions: - text: Fetch active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Look up the time window of entitlement management assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].delete update: x-apievangelist-phrasing: intent: Delete an active entitlement management role instance effect: destructive questions: - Can I drop an active entitlement management assignment instance? - Which ID deletes an active entitlement management role instance? instructions: - text: Drop active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Delete entitlement management assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}'].patch update: x-apievangelist-phrasing: intent: Update an active entitlement management role instance effect: write questions: - Can I shorten an active entitlement management assignment instance? - What can be edited on an active entitlement management role instance? instructions: - text: Move the end of entitlement management assignment instance {instance} to {end}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id end: requestBody.endDateTime - text: Change the assignment type of active entitlement management instance {instance} to {type}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id type: requestBody.assignmentType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility behind an active entitlement role effect: read questions: - Which eligibility was activated to create an active entitlement management instance? - Can I find the eligible assignment behind an active entitlement management role? instructions: - text: Fetch the eligibility that activated entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Resolve the eligible assignment used for active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an active entitlement instance effect: read questions: - Is an active entitlement management role instance limited to an app? - Can I read app scope details for an active entitlement management instance? instructions: - text: Fetch the app scope for active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Resolve which app entitlement management assignment instance {instance} is limited to. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an active entitlement instance effect: read questions: - What object does an active entitlement management role instance apply to? - Can I resolve the scope of an active entitlement management assignment instance? instructions: - text: Fetch the scope object for active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Resolve the object entitlement management assignment instance {instance} applies to. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an active entitlement instance effect: read questions: - Who is the holder of an active entitlement management role instance? - Can I resolve the user behind an active entitlement management assignment instance? instructions: - text: Fetch the principal for active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Resolve who holds entitlement management assignment instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an active entitlement management instance effect: read questions: - What role does an active entitlement management instance confer? - Can I resolve the role definition of an active entitlement management assignment instance? instructions: - text: Fetch the role definition for active entitlement management instance {instance}. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id - text: Resolve which role entitlement management assignment instance {instance} confers. slots: instance: path.unifiedRoleAssignmentScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/$count'].get update: x-apievangelist-phrasing: intent: Count active entitlement management role instances effect: read questions: - What is the total of active entitlement management role instances? - Can I get just a number of active entitlement management assignments? instructions: - text: Return the active entitlement management instance total. - text: Get a count of active entitlement management assignment instances. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my active entitlement management role instances effect: read questions: - Which entitlement management roles are active for me? - Can I see only the active entitlement management instances where I am the principal? instructions: - text: Find my active entitlement management instances by {on}. slots: 'on': path.on - text: Return active entitlement management assignment instances for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests'].get update: x-apievangelist-phrasing: intent: List entitlement management role assignment requests effect: read questions: - What PIM requests for active entitlement management roles exist? - Can I enumerate entitlement management assignment requests and their status? instructions: - text: Enumerate entitlement management role assignment requests. - text: Find entitlement management assignment requests where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests'].post update: x-apievangelist-phrasing: intent: Request an entitlement management role assignment effect: write questions: - Can I request an active entitlement management role through PIM? - Does an entitlement management assignment request accept a justification and ticket? - Is there a validation-only option for entitlement management assignment requests? instructions: - text: Submit an entitlement management assignment request for {principal} on role {role} with action {action}. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId action: requestBody.action - text: Request entitlement management role {role} for {principal} citing {justification} and ticket {ticket}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId justification: requestBody.justification ticket: requestBody.ticketInfo - text: Check an entitlement management assignment request for {role} and {principal} without applying it, validation only {validate}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId validate: requestBody.isValidationOnly method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role assignment request effect: read questions: - What is the status of a given entitlement management assignment request? - Can I fetch a single PIM activation request for an entitlement management role assignment? instructions: - text: Fetch entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Look up status of entitlement management role request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role assignment request effect: destructive questions: - Can I drop an entitlement management assignment request record? - Which ID deletes an entitlement management role request? instructions: - text: Drop entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Delete entitlement management role request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role assignment request effect: write questions: - Can I edit an entitlement management assignment request after submitting it? - What is editable on an entitlement management role request? instructions: - text: Rewrite the justification on entitlement management assignment request {request} as {justification}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id justification: requestBody.justification - text: Set schedule {info} on entitlement management assignment request {request}. slots: info: requestBody.scheduleInfo request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility used by an entitlement request effect: read questions: - Which eligibility does an entitlement management activation request rely on? - Can I find the eligible assignment used by an entitlement management role request? instructions: - text: Fetch the eligibility used by entitlement management request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Resolve the eligible assignment behind entitlement management role request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement management request effect: read questions: - Is an entitlement management assignment request limited to an app? - Can I read the app scope on an entitlement management role request? instructions: - text: Fetch the app scope for entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Resolve which app entitlement management role request {request} is limited to. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement management request effect: read questions: - What object is an entitlement management assignment request scoped to? - Can I resolve the scope of an entitlement management role request? instructions: - text: Fetch the scope object for entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Resolve the object entitlement management role request {request} is scoped to. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/microsoft.graph.cancel'].post update: x-apievangelist-phrasing: intent: Cancel an entitlement management role assignment request effect: destructive questions: - Can I cancel an entitlement management assignment request that was granted? - Is there a way to call off a granted entitlement management role request? instructions: - text: Cancel entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Call off granted entitlement management role request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement management request effect: read questions: - Who is an entitlement management assignment request for? - Can I resolve the principal on an entitlement management role request? instructions: - text: Fetch the principal for entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Resolve who entitlement management role request {request} is for. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role in an entitlement management request effect: read questions: - What role is asked for in an entitlement management assignment request? - Can I resolve the role definition an entitlement management assignment request asks for? instructions: - text: Fetch the role definition for entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Name the role that entitlement management assignment request {request} is seeking. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/targetSchedule'].get update: x-apievangelist-phrasing: intent: Get the target schedule of an entitlement management request effect: read questions: - Which schedule does an entitlement management assignment request point at? - Can I resolve the target schedule of an entitlement management role request? instructions: - text: Fetch the target schedule for entitlement management assignment request {request}. slots: request: path.unifiedRoleAssignmentScheduleRequest-id - text: Resolve the schedule entitlement management role request {request} targets. slots: request: path.unifiedRoleAssignmentScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role assignment requests effect: read questions: - What is the total of entitlement management assignment requests? - Can I get just a number of entitlement management role requests? instructions: - text: Return the entitlement management assignment request total. - text: Get a count of entitlement management assignment requests. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my entitlement management role assignment requests effect: read questions: - Which entitlement management assignment requests have I created or approved? - Can I see only my own entitlement management role requests? instructions: - text: Find my entitlement management assignment requests by {on}. slots: 'on': path.on - text: Return entitlement management role requests for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules'].get update: x-apievangelist-phrasing: intent: List entitlement management role assignment schedules effect: read questions: - What active assignment schedules does entitlement management have? - Can I enumerate entitlement management assignment schedules and their expiry? instructions: - text: Enumerate entitlement management role assignment schedules. - text: Find entitlement management assignment schedules where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules'].post update: x-apievangelist-phrasing: intent: Create an entitlement management role assignment schedule effect: write questions: - Can I add an entitlement management assignment schedule directly? - What does a new entitlement management assignment schedule require? instructions: - text: Add an entitlement management assignment schedule using schedule info {info}. slots: info: requestBody.scheduleInfo - text: Create an entitlement management assignment schedule with assignment type {type}. slots: type: requestBody.assignmentType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role assignment schedule effect: read questions: - What does a single entitlement management assignment schedule show? - Can I fetch one entitlement management role assignment schedule? instructions: - text: Fetch entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Look up expiry of entitlement management role schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role assignment schedule effect: destructive questions: - Can I drop an entitlement management assignment schedule? - Which ID deletes an entitlement management role assignment schedule? instructions: - text: Drop entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Delete entitlement management role schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role assignment schedule effect: write questions: - Can I edit the timing of an entitlement management assignment schedule? - What is editable on an entitlement management role assignment schedule? instructions: - text: Set schedule info {info} on entitlement management assignment schedule {schedule}. slots: info: requestBody.scheduleInfo schedule: path.unifiedRoleAssignmentSchedule-id - text: Change member type of entitlement management role schedule {schedule} to {memberType}. slots: schedule: path.unifiedRoleAssignmentSchedule-id memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/activatedUsing'].get update: x-apievangelist-phrasing: intent: Get the eligibility behind an entitlement schedule effect: read questions: - Which eligibility was activated for an entitlement management assignment schedule? - Can I find the eligible assignment behind an entitlement management role schedule? instructions: - text: Fetch the eligibility activated for entitlement management schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Resolve the eligible assignment behind entitlement management role schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement management schedule effect: read questions: - Is an entitlement management assignment schedule limited to an app? - Can I read the app scope on an entitlement management role schedule? instructions: - text: Fetch the app scope for entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Resolve which app entitlement management role schedule {schedule} is limited to. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement management schedule effect: read questions: - What object does an entitlement management assignment schedule apply to? - Can I resolve the scope of an entitlement management role schedule? instructions: - text: Fetch the scope object for entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Resolve the object entitlement management role schedule {schedule} applies to. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement management schedule effect: read questions: - Who is an entitlement management assignment schedule for? - Can I resolve the principal on an entitlement management role schedule? instructions: - text: Fetch the principal for entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Resolve who entitlement management role schedule {schedule} covers. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an entitlement management schedule effect: read questions: - What role does an entitlement management assignment schedule confer? - Which role definition does an entitlement management assignment schedule point to? instructions: - text: Fetch the role definition for entitlement management assignment schedule {schedule}. slots: schedule: path.unifiedRoleAssignmentSchedule-id - text: Resolve which role entitlement management role schedule {schedule} confers. slots: schedule: path.unifiedRoleAssignmentSchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role assignment schedules effect: read questions: - What is the total of entitlement management assignment schedules? - Can I get only a number of entitlement management role schedules? instructions: - text: Return the entitlement management assignment schedule total. - text: Get a count of entitlement management assignment schedules. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleAssignmentSchedules/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my entitlement management role assignment schedules effect: read questions: - Which entitlement management assignment schedules am I the principal on? - Can I see only my own entitlement management role schedules? instructions: - text: Find my entitlement management assignment schedules by {on}. slots: 'on': path.on - text: Return entitlement management role schedules for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions'].get update: x-apievangelist-phrasing: intent: List entitlement management role definitions effect: read questions: - What roles does entitlement management offer, like catalog creator or access package manager? - Can I narrow entitlement management role definitions to built-in ones? instructions: - text: Enumerate entitlement management role definitions. - text: Find entitlement management role definitions where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions'].post update: x-apievangelist-phrasing: intent: Create an entitlement management role definition effect: write questions: - Can I define a new role for entitlement management? - What permissions can a new entitlement management role definition carry? instructions: - text: Define entitlement management role {name} with permissions {permissions}. slots: name: requestBody.displayName permissions: requestBody.rolePermissions - text: Add an entitlement management role definition {name} from template {template}. slots: name: requestBody.displayName template: requestBody.templateId method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role definition effect: read questions: - What permissions come with a given entitlement management role? - Can I fetch one entitlement management role definition? instructions: - text: Fetch entitlement management role definition {role}. slots: role: path.unifiedRoleDefinition-id - text: Look up permissions of entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role definition effect: destructive questions: - Can I drop an entitlement management role definition? - What do I need to delete an entitlement management role definition? instructions: - text: Drop entitlement management role definition {role}. slots: role: path.unifiedRoleDefinition-id - text: Delete entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role definition effect: write questions: - Can I edit the permissions on an entitlement management role? - Is it possible to switch off an entitlement management role definition? instructions: - text: Set permissions {permissions} on entitlement management role {role}. slots: permissions: requestBody.rolePermissions role: path.unifiedRoleDefinition-id - text: Switch entitlement management role {role} enabled flag to {enabled}. slots: role: path.unifiedRoleDefinition-id enabled: requestBody.isEnabled method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom'].get update: x-apievangelist-phrasing: intent: List roles an entitlement management role inherits from effect: read questions: - What roles does an entitlement management role inherit its permissions from? - Can I enumerate the parents of an entitlement management role definition? instructions: - text: Enumerate parent roles of entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id - text: Return inherited definitions for entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom'].post update: x-apievangelist-phrasing: intent: Add an inherited role to an entitlement management role effect: write questions: - Can I attach a parent role to an entitlement management role definition? - Is adding an inherits-from entry to an entitlement management role supported? instructions: - text: Attach parent role {name} to entitlement management role {role}. slots: name: requestBody.displayName role: path.unifiedRoleDefinition-id - text: Create an inherited entry on entitlement management role {role} carrying permissions {permissions}. slots: role: path.unifiedRoleDefinition-id permissions: requestBody.rolePermissions method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].get update: x-apievangelist-phrasing: intent: Get one role an entitlement management role inherits from effect: read questions: - What is inside one parent role of an entitlement management role? - Can I fetch a single inherited definition from an entitlement management role? instructions: - text: Fetch parent role {parent} of entitlement management role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id - text: Look up inherited definition {parent} on entitlement management role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].delete update: x-apievangelist-phrasing: intent: Remove an inherited role from an entitlement management role effect: destructive questions: - Can I detach a parent role from an entitlement management role? - Which IDs do I need to drop an inherited entitlement management role? instructions: - text: Detach parent role {parent} from entitlement management role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id - text: Drop inherited definition {parent} on entitlement management role {role}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}'].patch update: x-apievangelist-phrasing: intent: Update an inherited role on an entitlement management role effect: write questions: - Can I edit a parent role entry on an entitlement management role? - What is editable on an inherited entitlement management role entry? instructions: - text: Change the description of parent role {parent} on entitlement management role {role} to {description}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id description: requestBody.description - text: Rename inherited definition {parent} of entitlement management role {role} to {name}. slots: parent: path.unifiedRoleDefinition-id1 role: path.unifiedRoleDefinition-id name: requestBody.displayName method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/$count'].get update: x-apievangelist-phrasing: intent: Count roles an entitlement management role inherits from effect: read questions: - What is the number of parent roles for an entitlement management role? - Can I get just an inherited-role count for one entitlement management role? instructions: - text: Return the parent role total for entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id - text: Get a count of inherited definitions on entitlement management role {role}. slots: role: path.unifiedRoleDefinition-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleDefinitions/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role definitions effect: read questions: - What is the total of entitlement management role definitions? - Can I get only a number of entitlement management roles? instructions: - text: Return the entitlement management role definition total. - text: Get a count of entitlement management roles where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances'].get update: x-apievangelist-phrasing: intent: List entitlement management role eligibility instances effect: read questions: - Who is currently eligible for entitlement management roles? - Can I enumerate entitlement management eligibility instances? instructions: - text: Enumerate entitlement management eligibility instances. - text: Find entitlement management eligibility instances where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances'].post update: x-apievangelist-phrasing: intent: Create an entitlement management role eligibility instance effect: write questions: - Can I add an entitlement management eligibility instance directly? - What time window does a new entitlement management eligibility instance accept? instructions: - text: Add an entitlement management eligibility instance on schedule {schedule} running {start} to {end}. slots: schedule: requestBody.roleEligibilityScheduleId start: requestBody.startDateTime end: requestBody.endDateTime - text: Create an entitlement management eligibility instance for member type {memberType}. slots: memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role eligibility instance effect: read questions: - What details come back for one entitlement management eligibility instance? - Can I fetch a single entitlement management role eligibility instance? instructions: - text: Fetch entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Look up the window of entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role eligibility instance effect: destructive questions: - Can I drop an entitlement management eligibility instance? - Which ID deletes an entitlement management role eligibility instance? instructions: - text: Drop entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Delete entitlement management role eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role eligibility instance effect: write questions: - Can I shorten an entitlement management eligibility instance? - What can be edited on an entitlement management role eligibility instance? instructions: - text: Move the end of entitlement management eligibility instance {instance} to {end}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id end: requestBody.endDateTime - text: Change the start of entitlement management eligibility instance {instance} to {start}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id start: requestBody.startDateTime method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement eligibility instance effect: read questions: - Is an entitlement management eligibility instance limited to an app? - Can I read app scope details for an entitlement management eligibility instance? instructions: - text: Fetch the app scope for entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Resolve which app entitlement management eligibility instance {instance} is limited to. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement eligibility instance effect: read questions: - What object does an entitlement management eligibility instance apply to? - Can I resolve the scope of an entitlement management eligibility instance? instructions: - text: Fetch the scope object for entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Resolve the object entitlement management eligibility instance {instance} applies to. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement eligibility instance effect: read questions: - Who is eligible under an entitlement management eligibility instance? - Can I resolve the user behind an entitlement management eligibility instance? instructions: - text: Fetch the principal for entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Resolve who is eligible under entitlement management instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an entitlement eligibility instance effect: read questions: - What role does an entitlement management eligibility instance make someone eligible for? - Can I resolve the role definition of an entitlement management eligibility instance? instructions: - text: Fetch the role definition for entitlement management eligibility instance {instance}. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id - text: Resolve which role entitlement management eligibility instance {instance} covers. slots: instance: path.unifiedRoleEligibilityScheduleInstance-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role eligibility instances effect: read questions: - What is the total of entitlement management eligibility instances? - Can I get just a number of entitlement management eligibilities? instructions: - text: Return the entitlement management eligibility instance total. - text: Get a count of entitlement management role eligibility instances. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my entitlement management role eligibility instances effect: read questions: - Which entitlement management roles am I eligible for? - Can I see only my own entitlement management eligibility instances? instructions: - text: Find my entitlement management eligibility instances by {on}. slots: 'on': path.on - text: Return entitlement management eligibility instances for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests'].get update: x-apievangelist-phrasing: intent: List entitlement management role eligibility requests effect: read questions: - What PIM eligibility requests exist for entitlement management roles? - Can I enumerate entitlement management eligibility requests and their status? instructions: - text: Enumerate entitlement management role eligibility requests. - text: Find entitlement management eligibility requests where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests'].post update: x-apievangelist-phrasing: intent: Request an entitlement management role eligibility effect: write questions: - Can I make someone eligible for an entitlement management role through PIM? - Does an entitlement management eligibility request accept a justification? - Is there a validation-only option for entitlement management eligibility requests? instructions: - text: Submit an entitlement management eligibility request for {principal} on role {role} with action {action}. slots: principal: requestBody.principalId role: requestBody.roleDefinitionId action: requestBody.action - text: Request entitlement management eligibility on {role} for {principal} citing {justification}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId justification: requestBody.justification - text: Validate, without saving, an eligibility request in entitlement management for {role} and {principal}, validation only {validate}. slots: role: requestBody.roleDefinitionId principal: requestBody.principalId validate: requestBody.isValidationOnly method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role eligibility request effect: read questions: - What is the status of a given entitlement management eligibility request? - Can I fetch a single PIM eligibility request for an entitlement management role? instructions: - text: Fetch entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Look up status of entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role eligibility request effect: destructive questions: - Can I drop an entitlement management eligibility request record? - Which ID deletes an entitlement management eligibility request? instructions: - text: Drop entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Delete entitlement management role eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role eligibility request effect: write questions: - Can I edit an entitlement management eligibility request after submitting it? - What is editable on an entitlement management eligibility request? instructions: - text: Change the justification of entitlement management eligibility request {request} to {justification}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id justification: requestBody.justification - text: Set ticket {ticket} on entitlement management eligibility request {request}. slots: ticket: requestBody.ticketInfo request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement eligibility request effect: read questions: - Is an entitlement management eligibility request limited to an app? - Can I read the app scope on an entitlement management eligibility request? instructions: - text: Fetch the app scope for entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Resolve which app entitlement management eligibility request {request} is limited to. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement eligibility request effect: read questions: - What object is an entitlement management eligibility request scoped to? - Can I resolve the scope of an entitlement management eligibility request? instructions: - text: Fetch the scope object for entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Resolve the object entitlement management eligibility request {request} is scoped to. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/microsoft.graph.cancel'].post update: x-apievangelist-phrasing: intent: Cancel an entitlement management role eligibility request effect: destructive questions: - Can I cancel an entitlement management eligibility request that was granted? - Is there a way to call off a granted entitlement management eligibility request? instructions: - text: Cancel entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Call off granted entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement eligibility request effect: read questions: - Who is an entitlement management eligibility request for? - Can I resolve the principal on an entitlement management eligibility request? instructions: - text: Fetch the principal for entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Resolve who entitlement management eligibility request {request} is for. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role in an entitlement eligibility request effect: read questions: - What role is asked for in an entitlement management eligibility request? - Can I resolve the role definition of an entitlement management eligibility request? instructions: - text: Fetch the role definition for entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Resolve which role entitlement management eligibility request {request} asks for. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/targetSchedule'].get update: x-apievangelist-phrasing: intent: Get target schedule of an entitlement eligibility request effect: read questions: - Which schedule does an entitlement management eligibility request point at? - Can I resolve the target schedule of an entitlement management eligibility request? instructions: - text: Fetch the target schedule for entitlement management eligibility request {request}. slots: request: path.unifiedRoleEligibilityScheduleRequest-id - text: Resolve the schedule entitlement management eligibility request {request} targets. slots: request: path.unifiedRoleEligibilityScheduleRequest-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role eligibility requests effect: read questions: - What is the total of entitlement management eligibility requests? - Can I get just a number of entitlement management eligibility requests? instructions: - text: Return the entitlement management eligibility request total. - text: Get a count of entitlement management role eligibility requests. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my entitlement management role eligibility requests effect: read questions: - Which entitlement management eligibility requests have I created or approved? - Can I see only my own entitlement management eligibility requests? instructions: - text: Find my entitlement management eligibility requests by {on}. slots: 'on': path.on - text: Return entitlement management eligibility requests for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules'].get update: x-apievangelist-phrasing: intent: List entitlement management role eligibility schedules effect: read questions: - What eligibility schedules does entitlement management have? - Can I enumerate entitlement management eligibility schedules and their expiry? instructions: - text: Enumerate entitlement management role eligibility schedules. - text: Find entitlement management eligibility schedules where {filter}. slots: filter: query.$filter method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules'].post update: x-apievangelist-phrasing: intent: Create an entitlement management role eligibility schedule effect: write questions: - Can I add an entitlement management eligibility schedule directly? - What does a new entitlement management eligibility schedule require? instructions: - text: Add an entitlement management eligibility schedule using schedule info {info}. slots: info: requestBody.scheduleInfo - text: Create an entitlement management eligibility schedule for member type {memberType}. slots: memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].get update: x-apievangelist-phrasing: intent: Get an entitlement management role eligibility schedule effect: read questions: - What does a single entitlement management eligibility schedule show? - Can I fetch one entitlement management role eligibility schedule? instructions: - text: Fetch entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Look up expiry of entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].delete update: x-apievangelist-phrasing: intent: Delete an entitlement management role eligibility schedule effect: destructive questions: - Can I drop an entitlement management eligibility schedule? - Which ID deletes an entitlement management role eligibility schedule? instructions: - text: Drop entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Delete entitlement management role eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}'].patch update: x-apievangelist-phrasing: intent: Update an entitlement management role eligibility schedule effect: write questions: - Can I edit the timing of an entitlement management eligibility schedule? - What is editable on an entitlement management role eligibility schedule? instructions: - text: Set schedule info {info} on entitlement management eligibility schedule {schedule}. slots: info: requestBody.scheduleInfo schedule: path.unifiedRoleEligibilitySchedule-id - text: Change member type of entitlement management eligibility schedule {schedule} to {memberType}. slots: schedule: path.unifiedRoleEligibilitySchedule-id memberType: requestBody.memberType method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/appScope'].get update: x-apievangelist-phrasing: intent: Get the app scope of an entitlement eligibility schedule effect: read questions: - Is an entitlement management eligibility schedule limited to an app? - Can I read the app scope on an entitlement management eligibility schedule? instructions: - text: Fetch the app scope for entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Resolve which app entitlement management eligibility schedule {schedule} is limited to. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/directoryScope'].get update: x-apievangelist-phrasing: intent: Get the scope object of an entitlement eligibility schedule effect: read questions: - What object does an entitlement management eligibility schedule apply to? - Can I resolve the scope of an entitlement management eligibility schedule? instructions: - text: Fetch the scope object for entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Resolve the object entitlement management eligibility schedule {schedule} applies to. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/principal'].get update: x-apievangelist-phrasing: intent: Get the principal of an entitlement eligibility schedule effect: read questions: - Who is an entitlement management eligibility schedule for? - Can I resolve the principal on an entitlement management eligibility schedule? instructions: - text: Fetch the principal for entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Resolve who entitlement management eligibility schedule {schedule} covers. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/roleDefinition'].get update: x-apievangelist-phrasing: intent: Get the role of an entitlement eligibility schedule effect: read questions: - What role does an entitlement management eligibility schedule make someone eligible for? - Can I resolve the role definition on an entitlement management eligibility schedule? instructions: - text: Fetch the role definition for entitlement management eligibility schedule {schedule}. slots: schedule: path.unifiedRoleEligibilitySchedule-id - text: Resolve which role entitlement management eligibility schedule {schedule} covers. slots: schedule: path.unifiedRoleEligibilitySchedule-id method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/$count'].get update: x-apievangelist-phrasing: intent: Count entitlement management role eligibility schedules effect: read questions: - What is the total of entitlement management eligibility schedules? - Can I get only a number of entitlement management eligibility schedules? instructions: - text: Return the entitlement management eligibility schedule total. - text: Get a count of entitlement management role eligibility schedules. method: generated generated: '2026-10-01' - target: $.paths['/roleManagement/entitlementManagement/roleEligibilitySchedules/microsoft.graph.filterByCurrentUser(on=\'{on}\')'].get update: x-apievangelist-phrasing: intent: List my entitlement management role eligibility schedules effect: read questions: - Which entitlement management eligibility schedules am I the principal on? - Can I see only my own entitlement management eligibility schedules? instructions: - text: Find my entitlement management eligibility schedules by {on}. slots: 'on': path.on - text: Return entitlement management eligibility schedules for me as {on}. slots: 'on': path.on method: generated generated: '2026-10-01'