# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Dynatrace Account Management Permission management API
  version: 1.0.0
extends: openapi/dynatrace-permission-management-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 4
- target: $.paths['/iam/v1/accounts/{account-uuid}/groups/{group-uuid}/permissions'].get
  update:
    x-apievangelist-phrasing:
      intent: List a group's role-based permissions
      effect: read
      questions:
      - What legacy role-based permissions does a group currently have?
      - Can I still read a group's permissions before migrating to IAM policies?
      instructions:
      - text: List the role-based permissions of group {group} in account {account}.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      - text: Show what group {group} on {account} is permitted to do.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      method: generated
      generated: '2026-09-26'
- target: $.paths['/iam/v1/accounts/{account-uuid}/groups/{group-uuid}/permissions'].put
  update:
    x-apievangelist-phrasing:
      intent: Overwrite a group's role-based permissions
      effect: write
      questions:
      - How do I replace a group's entire permission set in one go?
      - Does setting permissions discard the ones a group already has?
      instructions:
      - text: Overwrite all permissions of group {group} in account {account}.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      - text: Replace the permission set on group {group} for {account} with this list.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      method: generated
      generated: '2026-09-26'
- target: $.paths['/iam/v1/accounts/{account-uuid}/groups/{group-uuid}/permissions'].post
  update:
    x-apievangelist-phrasing:
      intent: Add role-based permissions to a group
      effect: write
      questions:
      - Can I grant extra permissions to a group while keeping what it has?
      - What's the call to assign one more role-based permission to a group?
      instructions:
      - text: Grant additional permissions to group {group} in account {account}.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      - text: Assign these permissions to {group} on {account} without removing existing ones.
        slots:
          group: path.group-uuid
          account: path.account-uuid
      method: generated
      generated: '2026-09-26'
- target: $.paths['/iam/v1/accounts/{account-uuid}/groups/{group-uuid}/permissions'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a permission from a group
      effect: destructive
      questions:
      - How do I revoke one permission from a group for a single environment?
      - Which scope details are needed to remove a group permission?
      instructions:
      - text: Remove permission {permission} on {scopeType} {scope} from group {group} in {account}.
        slots:
          permission: query.permission-name
          scopeType: query.scope-type
          scope: query.scope
          group: path.group-uuid
          account: path.account-uuid
      - text: Revoke {permission} for scope {scope} ({scopeType}) from group {group} on {account}.
        slots:
          permission: query.permission-name
          scope: query.scope
          scopeType: query.scope-type
          group: path.group-uuid
          account: path.account-uuid
      method: generated
      generated: '2026-09-26'