# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Microsoft Azure Providers API
  version: 1.0.0
extends: openapi/microsoft-azure-providers-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 167
- target: $.paths['/providers/Microsoft.ADHybridHealthService/addsservices/{serviceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get details of an onboarded AD Domain Service
      effect: read
      questions:
      - Where can I see the Connect Health details for one of my Active Directory Domain Services?
      - Can I look up a single AD DS service that is onboarded to Azure AD Connect Health by name?
      instructions:
      - text: Show me the Connect Health details for AD Domain Service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Fetch the ADDS service record named {serviceName}.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/addsservices/{serviceName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove an AD Domain Service from Connect Health
      effect: destructive
      questions:
      - How do I offboard an Active Directory Domain Service from Connect Health?
      - Is there a confirm flag I must pass before an AD DS service is deleted from Connect Health?
      instructions:
      - text: Delete AD Domain Service {serviceName} from Connect Health monitoring.
        slots:
          serviceName: path.serviceName
      - text: Offboard ADDS service {serviceName} with confirm set to {confirm}.
        slots:
          serviceName: path.serviceName
          confirm: query.confirm
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/addsservices/{serviceName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update an onboarded AD Domain Service's settings
      effect: write
      questions:
      - Can I change the notification emails for an AD Domain Service monitored by Connect Health?
      - What AD DS service properties, like display name or disabled state, can I patch?
      instructions:
      - text: Rename AD Domain Service {serviceName} to display as {displayName}.
        slots:
          serviceName: path.serviceName
          displayName: requestBody.displayName
      - text: Send health alerts for ADDS service {serviceName} to {notificationEmails}.
        slots:
          serviceName: path.serviceName
          notificationEmails: requestBody.notificationEmails
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/addsservices/premiumCheck'].get
  update:
    x-apievangelist-phrasing:
      intent: List AD Domain Services on a premium-licensed tenant
      effect: read
      questions:
      - Which Active Directory Domain Services in my Azure AD Premium tenant are onboarded to Connect Health?
      - Can I page through the premium-checked AD DS services with skip and take counts?
      instructions:
      - text: List the premium-licensed AD Domain Services onboarded to Connect Health.
      - text: List premium AD DS services of type {serviceType}, taking {takeCount} results.
        slots:
          serviceType: query.serviceType
          takeCount: query.takeCount
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services'].get
  update:
    x-apievangelist-phrasing:
      intent: List services onboarded to AD Connect Health
      effect: read
      questions:
      - What services does my tenant have onboarded to Azure Active Directory Connect Health?
      - Can I filter my Connect Health services by service type?
      instructions:
      - text: List every service my tenant has onboarded to Connect Health.
      - text: List Connect Health onboarded services filtered by type {serviceType}.
        slots:
          serviceType: query.serviceType
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services'].post
  update:
    x-apievangelist-phrasing:
      intent: Onboard a service to AD Connect Health
      effect: write
      questions:
      - How do I onboard a new service into AD Connect Health for my tenant?
      - Can I set notification emails when I first add a service to Connect Health?
      instructions:
      - text: Onboard a new Connect Health service named {serviceName}.
        slots:
          serviceName: requestBody.serviceName
      - text: Add service {displayName} to Connect Health and email alerts to {notificationEmails}.
        slots:
          displayName: requestBody.displayName
          notificationEmails: requestBody.notificationEmails
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/premiumCheck'].get
  update:
    x-apievangelist-phrasing:
      intent: List Connect Health services on a premium tenant
      effect: read
      questions:
      - Which Connect Health services qualify under my tenant's Azure AD Premium license?
      - Is there a premium check that lists only licensed Connect Health services?
      instructions:
      - text: Run the premium check and list licensed Connect Health services.
      - text: Show premium-licensed Connect Health services matching filter {filter}.
        slots:
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one Connect Health onboarded service
      effect: read
      questions:
      - How can I read the details of a single service onboarded to AD Connect Health?
      - What does Connect Health report about one specific onboarded service?
      instructions:
      - text: Get the Connect Health service record for {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Look up onboarded Connect Health service {serviceName} and show its health.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a Connect Health onboarded service
      effect: destructive
      questions:
      - Can I remove a service I previously onboarded to AD Connect Health?
      - What happens to Connect Health monitoring when an onboarded service is deleted?
      instructions:
      - text: Delete onboarded Connect Health service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Remove Connect Health service {serviceName}, passing confirm {confirm}.
        slots:
          serviceName: path.serviceName
          confirm: query.confirm
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a Connect Health service's properties
      effect: write
      questions:
      - How do I turn off global admin email notifications for a Connect Health service?
      - Can I change which addresses get custom notifications for an onboarded service?
      instructions:
      - text: Set the custom notification emails for Connect Health service {serviceName} to {customNotificationEmails}.
        slots:
          serviceName: path.serviceName
          customNotificationEmails: requestBody.customNotificationEmails
      - text: Disable Connect Health service {serviceName} by setting disabled to {disabled}.
        slots:
          serviceName: path.serviceName
          disabled: requestBody.disabled
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/checkServiceFeatureAvailibility/{featureName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Check if a service meets a feature's prerequisites
      effect: read
      questions:
      - Does my Connect Health service have all the prerequisites met to use a given feature?
      - Can I verify feature availability for a service before turning the feature on?
      instructions:
      - text: Check whether service {serviceName} meets the prerequisites for feature {featureName}.
        slots:
          serviceName: path.serviceName
          featureName: path.featureName
      - text: Verify feature {featureName} is available on Connect Health service {serviceName}.
        slots:
          featureName: path.featureName
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/exporterrors/counts'].get
  update:
    x-apievangelist-phrasing:
      intent: Count the latest AAD export errors
      effect: read
      questions:
      - How many AAD export errors did my sync service hit most recently?
      - Can I get just the counts of export errors rather than the error details?
      instructions:
      - text: Count the latest AAD export errors for service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Give me export error totals by type for {serviceName}.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/exporterrors/listV2'].get
  update:
    x-apievangelist-phrasing:
      intent: List categorized export errors by bucket
      effect: read
      questions:
      - What are the individual export errors in one error category for my sync service?
      - Which error bucket do I have to choose when listing categorized export errors?
      instructions:
      - text: List the export errors in bucket {errorBucket} for service {serviceName}.
        slots:
          errorBucket: query.errorBucket
          serviceName: path.serviceName
      - text: Show categorized export error details for {serviceName} in the {errorBucket} category.
        slots:
          serviceName: path.serviceName
          errorBucket: query.errorBucket
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/exportstatus'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a service's export status
      effect: read
      questions:
      - Is my Connect Health sync service currently exporting successfully?
      - Where do I see the export status of a sync service?
      instructions:
      - text: Get the export status for service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Report how exports are running on {serviceName}.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/monitoringconfiguration'].patch
  update:
    x-apievangelist-phrasing:
      intent: Change a service's monitoring configuration
      effect: write
      questions:
      - How do I change a service-level monitoring setting in Connect Health?
      - Can I set one monitoring configuration key to a new value?
      instructions:
      - text: Set monitoring configuration {key} to {value} on service {serviceName}.
        slots:
          key: requestBody.key
          value: requestBody.value
          serviceName: path.serviceName
      - text: Update the monitoring setting {key} for {serviceName}.
        slots:
          key: requestBody.key
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/monitoringconfigurations'].get
  update:
    x-apievangelist-phrasing:
      intent: List a service's monitoring configurations
      effect: read
      questions:
      - What service-level monitoring configurations are set on my Connect Health service?
      - Can I review all monitoring settings for a service before changing one?
      instructions:
      - text: List the monitoring configurations for service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Show every monitoring setting currently applied to {serviceName}.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ADHybridHealthService/services/{serviceName}/TenantWhitelisting/{featureName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Check if a tenant is allowed to use a feature
      effect: read
      questions:
      - Is the tenant behind my Connect Health service on the allow list for a feature?
      - Can I check tenant allow-listing for a feature through a registered service?
      instructions:
      - text: Check whether the tenant for service {serviceName} is allowed to use feature {featureName}.
        slots:
          serviceName: path.serviceName
          featureName: path.featureName
      - text: Confirm tenant allow-listing of {featureName} via service {serviceName}.
        slots:
          featureName: path.featureName
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Web/publishingUsers/web'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the App Service publishing user
      effect: read
      questions:
      - What deployment credentials user is set up for publishing my web apps?
      - Can I see the current publishing user for my App Service account?
      instructions:
      - text: Get my web app publishing user.
      - text: Show the publishing user using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Web/publishingUsers/web'].put
  update:
    x-apievangelist-phrasing:
      intent: Update the App Service publishing user
      effect: write
      questions:
      - How do I change the deployment publishing user for my web apps?
      - Can I replace the publishing user credentials that my deployments use?
      instructions:
      - text: Update my web app publishing user.
      - text: Replace the publishing user with API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Web/sourcecontrols'].get
  update:
    x-apievangelist-phrasing:
      intent: List source controls available for websites
      effect: read
      questions:
      - Which source control providers are available to connect to my websites?
      - What source controls can App Service deploy from?
      instructions:
      - text: List the source controls available for my websites.
      - text: List website source controls using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Web/sourcecontrols/{sourceControlType}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a source control token
      effect: read
      questions:
      - Can I see the token App Service holds for one source control type?
      - What source control token is stored for a given provider type?
      instructions:
      - text: Get the source control token for type {sourceControlType}.
        slots:
          sourceControlType: path.sourceControlType
      - text: Show the stored {sourceControlType} source control token.
        slots:
          sourceControlType: path.sourceControlType
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Web/sourcecontrols/{sourceControlType}'].put
  update:
    x-apievangelist-phrasing:
      intent: Update a source control token
      effect: write
      questions:
      - How do I refresh the token App Service uses for a source control type?
      - Can I replace an expired source control token for my deployments?
      instructions:
      - text: Update the source control token for type {sourceControlType}.
        slots:
          sourceControlType: path.sourceControlType
      - text: Replace the {sourceControlType} token with properties {properties}.
        slots:
          sourceControlType: path.sourceControlType
          properties: requestBody.properties
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/attestations'].get
  update:
    x-apievangelist-phrasing:
      intent: List policy attestations for a resource
      effect: read
      questions:
      - Which compliance attestations have been recorded for one of my resources?
      - Can I limit how many attestations come back for a resource?
      instructions:
      - text: List all attestations for resource {resourceId}.
        slots:
          resourceId: path.resourceId
      - text: List the first {top} attestations on resource {resourceId}.
        slots:
          top: query.$top
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/attestations/{attestationName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one attestation on a resource
      effect: read
      questions:
      - How can I read a specific policy attestation I made on a resource?
      - What compliance state does a named attestation record at resource scope?
      instructions:
      - text: Get attestation {attestationName} on resource {resourceId}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
      - text: Show me the {attestationName} attestation for {resourceId}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/attestations/{attestationName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update an attestation on a resource
      effect: write
      questions:
      - How do I attest that a resource complies with a manual policy?
      - Can I overwrite an existing attestation at resource scope?
      instructions:
      - text: Create attestation {attestationName} on resource {resourceId} with properties {properties}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
          properties: requestBody.properties
      - text: Update the {attestationName} attestation on {resourceId}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/attestations/{attestationName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an attestation on a resource
      effect: destructive
      questions:
      - Can I withdraw a compliance attestation I made on a resource?
      - What removes an attestation at individual resource scope?
      instructions:
      - text: Delete attestation {attestationName} from resource {resourceId}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
      - text: Remove the {attestationName} attestation recorded on {resourceId}.
        slots:
          attestationName: path.attestationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Authorization/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Authorization provider operations
      effect: read
      questions:
      - What operations does the Microsoft.Authorization resource provider expose?
      - Which authorization actions can I reference in role definitions?
      instructions:
      - text: List the Microsoft.Authorization provider operations.
      - text: List authorization operations using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.AlertsManagement/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Alerts Management provider operations
      effect: read
      questions:
      - Which operations are available through the Alerts Management resource provider?
      - What actions can I grant on Alerts Management resources?
      instructions:
      - text: List all Alerts Management provider operations.
      - text: Show the operations the Microsoft.AlertsManagement namespace supports.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.AlertsManagement/alertsMetaData'].get
  update:
    x-apievangelist-phrasing:
      intent: Get alerts metadata by identifier
      effect: read
      questions:
      - Where do I get metadata about alerts, such as the list of monitor services?
      - What identifier values does the alerts metadata endpoint accept?
      instructions:
      - text: Get alerts metadata for identifier {identifier}.
        slots:
          identifier: query.identifier
      - text: Fetch the {identifier} alert metadata information.
        slots:
          identifier: query.identifier
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts'].get
  update:
    x-apievangelist-phrasing:
      intent: List alerts in a scope with filters
      effect: read
      questions:
      - Which alerts fired in my subscription over the last day?
      - Can I filter alerts by severity and sort them by start time?
      - How do I find only the alerts that are still in the New state?
      instructions:
      - text: List alerts in scope {scope} with severity {severity}.
        slots:
          scope: path.scope
          severity: query.severity
      - text: List alerts in {scope} in state {alertState} over time range {timeRange}.
        slots:
          scope: path.scope
          alertState: query.alertState
          timeRange: query.timeRange
      - text: List alerts for target resource group {targetResourceGroup} in {scope}.
        slots:
          targetResourceGroup: query.targetResourceGroup
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts/{alertId}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a specific alert
      effect: read
      questions:
      - How can I see the full details of one alert instance?
      - What information is available about an alert when I have its ID?
      instructions:
      - text: Get alert {alertId} in scope {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      - text: Show me everything about alert instance {alertId} under {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts/{alertId}/changestate'].post
  update:
    x-apievangelist-phrasing:
      intent: Change an alert's state
      effect: write
      questions:
      - How do I acknowledge an alert so my team knows someone is on it?
      - Can I close an alert and leave a comment explaining why?
      instructions:
      - text: Set alert {alertId} in scope {scope} to state {newState}.
        slots:
          alertId: path.alertId
          scope: path.scope
          newState: query.newState
      - text: Mark alert {alertId} under {scope} as {newState} with comment {comment}.
        slots:
          alertId: path.alertId
          scope: path.scope
          newState: query.newState
          comment: body.comment
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts/{alertId}/history'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the change history of an alert
      effect: read
      questions:
      - When was an alert acknowledged, closed, or resolved?
      - Can I see the monitor condition changes an alert went through?
      instructions:
      - text: Get the history of alert {alertId} in scope {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      - text: Show who changed the state of alert {alertId} under {scope} and when.
        slots:
          alertId: path.alertId
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alertsSummary'].get
  update:
    x-apievangelist-phrasing:
      intent: Summarize alert counts grouped by field
      effect: read
      questions:
      - How many alerts do I have for each severity level?
      - Can I group my alert counts by two fields at once, like severity and state?
      instructions:
      - text: Summarize alerts in scope {scope} grouped by {groupby}.
        slots:
          scope: path.scope
          groupby: query.groupby
      - text: Count alerts in {scope} grouped by {groupby} for monitor service {monitorService}.
        slots:
          scope: path.scope
          groupby: query.groupby
          monitorService: query.monitorService
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts/{alertId}/enrichments'].get
  update:
    x-apievangelist-phrasing:
      intent: List an alert's enrichments
      effect: read
      questions:
      - What enrichments have been attached to an alert?
      - Is there a collection of enrichment objects I can list for an alert?
      instructions:
      - text: List the enrichments collection for alert {alertId} in scope {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      - text: Enumerate enrichment objects attached to alert {alertId} under {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.AlertsManagement/alerts/{alertId}/enrichments/default'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an alert's default enrichment
      effect: read
      questions:
      - Can I read the default enrichment details for an alert directly?
      - What extra context does the default enrichment give me about an alert?
      instructions:
      - text: Get the default enrichment for alert {alertId} in scope {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      - text: Fetch alert {alertId}'s default enrichment record under {scope}.
        slots:
          alertId: path.alertId
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Migrate/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Azure Migrate provider operations
      effect: read
      questions:
      - Which REST operations does the Microsoft.Migrate provider support?
      - What migration actions are exposed by Azure Migrate?
      instructions:
      - text: List the operations supported by Microsoft.Migrate.
      - text: Show every Azure Migrate REST operation.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Quantum/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Azure Quantum provider operations
      effect: read
      questions:
      - What operations can I perform on Azure Quantum workspaces?
      - Which actions does the Microsoft.Quantum provider publish?
      instructions:
      - text: List the Microsoft.Quantum operations.
      - text: List quantum provider operations using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers'].get
  update:
    x-apievangelist-phrasing:
      intent: List resource providers for a subscription
      effect: read
      questions:
      - Which resource providers are available in my subscription and are they registered?
      - Can I expand the provider list to include resource type metadata like aliases?
      instructions:
      - text: List all resource providers for subscription {subscriptionId}.
        slots:
          subscriptionId: path.subscriptionId
      - text: List providers in subscription {subscriptionId} expanding {expand}.
        slots:
          subscriptionId: path.subscriptionId
          expand: query.$expand
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a tenant action group
      effect: read
      questions:
      - How can I view the receivers configured on a tenant-level action group?
      - Which tenant ID header do I need to read a tenant action group?
      instructions:
      - text: Get tenant action group {tenantActionGroupName} in management group {managementGroupId}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      - text: Show tenant action group {tenantActionGroupName} under {managementGroupId} for tenant {tenantId}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
          tenantId: header.x-ms-client-tenant-id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or replace a tenant action group
      effect: write
      questions:
      - How do I set up a tenant-level action group that notifies people when alerts fire?
      - Do I have to give a location when creating a tenant action group?
      instructions:
      - text: Create tenant action group {tenantActionGroupName} in management group {managementGroupId} at location {location}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
          location: requestBody.location
      - text: Replace tenant action group {tenantActionGroupName} under {managementGroupId} with properties {properties}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
          properties: requestBody.properties
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a tenant action group
      effect: destructive
      questions:
      - Can I remove a tenant action group that nobody uses anymore?
      - What is needed to delete an action group at the management group level?
      instructions:
      - text: Delete tenant action group {tenantActionGroupName} from management group {managementGroupId}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      - text: Remove the {tenantActionGroupName} tenant action group in {managementGroupId}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a tenant action group's tags
      effect: write
      questions:
      - Can I change only the tags on a tenant action group without redefining it?
      - Is there a lighter patch for a tenant action group than full create or update?
      instructions:
      - text: Set tags {tags} on tenant action group {tenantActionGroupName} in {managementGroupId}.
        slots:
          tags: requestBody.tags
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      - text: Patch tenant action group {tenantActionGroupName} under {managementGroupId}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups'].get
  update:
    x-apievangelist-phrasing:
      intent: List tenant action groups in a management group
      effect: read
      questions:
      - What tenant action groups exist in my management group?
      - Can I see every tenant-level notification group I have set up?
      instructions:
      - text: List all tenant action groups in management group {managementGroupId}.
        slots:
          managementGroupId: path.managementGroupId
      - text: Enumerate tenant action groups under {managementGroupId} for tenant {tenantId}.
        slots:
          managementGroupId: path.managementGroupId
          tenantId: header.x-ms-client-tenant-id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}/createNotifications'].post
  update:
    x-apievangelist-phrasing:
      intent: Send test notifications from a tenant action group
      effect: write
      questions:
      - How do I test that my tenant action group's email and SMS receivers actually get notified?
      - Can I send a test notification for a specific alert type?
      instructions:
      - text: Send test notifications from tenant action group {tenantActionGroupName} in {managementGroupId} for alert type {alertType}.
        slots:
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
          alertType: requestBody.alertType
      - text: Test email receivers {emailReceivers} on tenant action group {tenantActionGroupName} under {managementGroupId}.
        slots:
          emailReceivers: requestBody.emailReceivers
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Insights/tenantActionGroups/{tenantActionGroupName}/notificationStatus/{notificationId}'].get
  update:
    x-apievangelist-phrasing:
      intent: Check the status of a test notification
      effect: read
      questions:
      - Did the test notification I sent from my tenant action group get delivered?
      - Where can I check results for a test notification by its ID?
      instructions:
      - text: Get test notification {notificationId} status for tenant action group {tenantActionGroupName} in {managementGroupId}.
        slots:
          notificationId: path.notificationId
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      - text: Check delivery of notification {notificationId} sent by {tenantActionGroupName} under {managementGroupId}.
        slots:
          notificationId: path.notificationId
          tenantActionGroupName: path.tenantActionGroupName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Media/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Media Services provider operations
      effect: read
      questions:
      - What operations does Media Services expose?
      - Which actions can be performed against Microsoft.Media resources?
      instructions:
      - text: List all the Media operations.
      - text: Show the Microsoft.Media provider's available operations.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.AzureDataTransfer/validateSchema'].post
  update:
    x-apievangelist-phrasing:
      intent: Validate a schema for Data Transfer
      effect: read
      questions:
      - Can I check whether a schema is valid before using it in Azure Data Transfer?
      - What does the Data Transfer schema validation check look at?
      instructions:
      - text: Validate schema {name} with content {content} for Data Transfer.
        slots:
          name: requestBody.name
          content: requestBody.content
      - text: Check schema {name} on connection {connectionId} is valid.
        slots:
          name: requestBody.name
          connectionId: requestBody.connectionId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.AzureDataTransfer/listApprovedSchemas'].post
  update:
    x-apievangelist-phrasing:
      intent: List approved Data Transfer schemas
      effect: read
      questions:
      - Which schemas have been approved for my Data Transfer pipeline?
      - Can I filter approved schemas by pipeline direction?
      instructions:
      - text: List approved schemas for pipeline {pipeline}.
        slots:
          pipeline: requestBody.pipeline
      - text: List approved schemas for pipeline {pipeline} in direction {direction}.
        slots:
          pipeline: requestBody.pipeline
          direction: requestBody.direction
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Carbon/carbonEmissionReports'].post
  update:
    x-apievangelist-phrasing:
      intent: Get carbon emissions reports
      effect: read
      questions:
      - What are the carbon emissions of my subscriptions over a date range?
      - Can I break down carbon emissions by scope and location?
      - How do I report emissions for just certain resource types?
      instructions:
      - text: Get a {reportType} carbon emissions report for subscriptions {subscriptionList} over {dateRange} for scopes {carbonScopeList}.
        slots:
          reportType: requestBody.reportType
          subscriptionList: requestBody.subscriptionList
          dateRange: requestBody.dateRange
          carbonScopeList: requestBody.carbonScopeList
      - text: Report carbon emissions for subscriptions {subscriptionList} in locations {locationList}.
        slots:
          subscriptionList: requestBody.subscriptionList
          locationList: requestBody.locationList
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Carbon/queryCarbonEmissionDataAvailableDateRange'].post
  update:
    x-apievangelist-phrasing:
      intent: Get the date range of available carbon data
      effect: read
      questions:
      - For which dates is carbon emission data available to query?
      - How far back does my carbon emissions data go?
      instructions:
      - text: Get the available date range for carbon emission data.
      - text: Tell me the earliest and latest dates with carbon emissions data.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/userSettings/{userSettingsName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get Cloud Shell user settings in a region
      effect: read
      questions:
      - What are my Cloud Shell preferences, like preferred shell and storage, stored in a given region?
      - Can I read my Cloud Shell settings from a specific location?
      instructions:
      - text: Get my Cloud Shell user settings {userSettingsName} in location {location}.
        slots:
          userSettingsName: path.userSettingsName
          location: path.location
      - text: Show my regional {location} Cloud Shell preferences named {userSettingsName}.
        slots:
          location: path.location
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/userSettings/{userSettingsName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Save Cloud Shell user settings in a region
      effect: write
      questions:
      - How do I save my Cloud Shell preferences in a particular region?
      - Can I create Cloud Shell settings pinned to a location?
      instructions:
      - text: Create Cloud Shell settings {userSettingsName} in location {location} with {properties}.
        slots:
          userSettingsName: path.userSettingsName
          location: path.location
          properties: requestBody.properties
      - text: Overwrite my regional Cloud Shell settings {userSettingsName} stored in {location}.
        slots:
          userSettingsName: path.userSettingsName
          location: path.location
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/userSettings/{userSettingsName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete Cloud Shell user settings in a region
      effect: destructive
      questions:
      - Can I wipe my Cloud Shell settings stored in one region?
      - What resets my Cloud Shell preferences for a particular location?
      instructions:
      - text: Delete Cloud Shell settings {userSettingsName} in location {location}.
        slots:
          userSettingsName: path.userSettingsName
          location: path.location
      - text: Remove my {location} regional Cloud Shell preferences {userSettingsName}.
        slots:
          location: path.location
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/userSettings/{userSettingsName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Patch Cloud Shell user settings in a region
      effect: write
      questions:
      - Can I change just one Cloud Shell preference in a region without replacing them all?
      - Is there a partial update for regional Cloud Shell settings?
      instructions:
      - text: Patch Cloud Shell settings {userSettingsName} in location {location} with {properties}.
        slots:
          userSettingsName: path.userSettingsName
          location: path.location
          properties: requestBody.properties
      - text: Partially update my regional {location} Cloud Shell preferences {userSettingsName}.
        slots:
          location: path.location
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/consoles/{consoleName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a Cloud Shell console in a region
      effect: read
      questions:
      - Is my Cloud Shell console in a given region still provisioned?
      - Can I look up a regional Cloud Shell console by name?
      instructions:
      - text: Get Cloud Shell console {consoleName} in location {location}.
        slots:
          consoleName: path.consoleName
          location: path.location
      - text: Show the state of my {location} regional console {consoleName}.
        slots:
          location: path.location
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/consoles/{consoleName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Request a Cloud Shell console in a region
      effect: write
      questions:
      - How do I start a Cloud Shell console in a specific region?
      - Can I request a console pinned to one location?
      instructions:
      - text: Request Cloud Shell console {consoleName} in location {location}.
        slots:
          consoleName: path.consoleName
          location: path.location
      - text: Provision a regional console named {consoleName} in {location}.
        slots:
          consoleName: path.consoleName
          location: path.location
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/consoles/{consoleName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a Cloud Shell console in a region
      effect: destructive
      questions:
      - Can I shut down and delete my Cloud Shell console in one region?
      - What tears down a regional Cloud Shell console?
      instructions:
      - text: Delete Cloud Shell console {consoleName} in location {location}.
        slots:
          consoleName: path.consoleName
          location: path.location
      - text: Tear down my {location} regional console {consoleName}.
        slots:
          location: path.location
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/locations/{location}/consoles/{consoleName}/keepAlive'].post
  update:
    x-apievangelist-phrasing:
      intent: Keep a regional Cloud Shell console alive
      effect: write
      questions:
      - How do I stop my regional Cloud Shell console from timing out?
      - Can I send a keep-alive to a console in a specific location?
      instructions:
      - text: Keep Cloud Shell console {consoleName} in location {location} alive.
        slots:
          consoleName: path.consoleName
          location: path.location
      - text: Send a keep-alive ping to my {location} regional console {consoleName}.
        slots:
          location: path.location
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/userSettings/{userSettingsName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get my Cloud Shell user settings
      effect: read
      questions:
      - What preferred shell type and storage profile does my Cloud Shell use?
      - Where can I read my Cloud Shell preferences without picking a region?
      instructions:
      - text: Get my Cloud Shell user settings {userSettingsName}.
        slots:
          userSettingsName: path.userSettingsName
      - text: Show my signed-in Cloud Shell preferences named {userSettingsName}.
        slots:
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/userSettings/{userSettingsName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update my Cloud Shell settings
      effect: write
      questions:
      - How do I set my preferred shell type for Cloud Shell?
      - Can I save a full set of Cloud Shell preferences for my account?
      instructions:
      - text: Save Cloud Shell settings {userSettingsName} with properties {properties}.
        slots:
          userSettingsName: path.userSettingsName
          properties: requestBody.properties
      - text: Replace my Cloud Shell user settings {userSettingsName} entirely.
        slots:
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/userSettings/{userSettingsName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete my Cloud Shell settings
      effect: destructive
      questions:
      - How can I reset Cloud Shell by removing my saved settings?
      - Is it possible to delete my Cloud Shell preferences entirely?
      instructions:
      - text: Delete my Cloud Shell user settings {userSettingsName}.
        slots:
          userSettingsName: path.userSettingsName
      - text: Clear the saved Cloud Shell preferences {userSettingsName} for my account.
        slots:
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/userSettings/{userSettingsName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Patch my Cloud Shell settings
      effect: write
      questions:
      - Can I switch only my preferred Cloud Shell type and keep other preferences?
      - Is there a way to tweak a single Cloud Shell setting?
      instructions:
      - text: Patch my Cloud Shell settings {userSettingsName} with {properties}.
        slots:
          userSettingsName: path.userSettingsName
          properties: requestBody.properties
      - text: Tweak one preference in Cloud Shell settings {userSettingsName}.
        slots:
          userSettingsName: path.userSettingsName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/consoles/{consoleName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get my Cloud Shell console
      effect: read
      questions:
      - Is my Cloud Shell console running, and what is its URI?
      - Can I check on my console without specifying a region?
      instructions:
      - text: Get my Cloud Shell console {consoleName}.
        slots:
          consoleName: path.consoleName
      - text: Check the status of console {consoleName} for my user.
        slots:
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/consoles/{consoleName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Request a Cloud Shell console
      effect: write
      questions:
      - How do I open a new Cloud Shell console through the API?
      - What properties do I send when requesting a console?
      instructions:
      - text: Request Cloud Shell console {consoleName} with properties {properties}.
        slots:
          consoleName: path.consoleName
          properties: requestBody.properties
      - text: Start a new console named {consoleName} for me.
        slots:
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/consoles/{consoleName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete my Cloud Shell console
      effect: destructive
      questions:
      - Can I terminate my Cloud Shell console when I'm finished?
      - Which call deletes a console that isn't tied to a region?
      instructions:
      - text: Delete my Cloud Shell console {consoleName}.
        slots:
          consoleName: path.consoleName
      - text: Terminate console {consoleName} now.
        slots:
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Portal/consoles/{consoleName}/keepAlive'].post
  update:
    x-apievangelist-phrasing:
      intent: Keep my Cloud Shell console alive
      effect: write
      questions:
      - How can I keep my Cloud Shell session from going idle?
      - Is there a keep-alive call for a console that has no region?
      instructions:
      - text: Keep Cloud Shell console {consoleName} alive.
        slots:
          consoleName: path.consoleName
      - text: Ping console {consoleName} so it stays active.
        slots:
          consoleName: path.consoleName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/componentPolicyStates/{componentPolicyStatesResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query component policy states for a resource
      effect: read
      questions:
      - Which components inside a resource, like keys or certificates, are non-compliant with policy?
      - Can I filter component policy states to a time window?
      instructions:
      - text: Query {componentPolicyStatesResource} component policy states for resource {resourceId}.
        slots:
          componentPolicyStatesResource: path.componentPolicyStatesResource
          resourceId: path.resourceId
      - text: Query component policy states on {resourceId} from {from} to {to} using {componentPolicyStatesResource}.
        slots:
          resourceId: path.resourceId
          from: query.$from
          to: query.$to
          componentPolicyStatesResource: path.componentPolicyStatesResource
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Kubernetes/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Azure Arc connected cluster operations
      effect: read
      questions:
      - What operations does the Microsoft.Kubernetes connected cluster provider expose?
      - Which actions can I grant on Azure Arc-enabled Kubernetes clusters?
      instructions:
      - text: List the Microsoft.Kubernetes connected cluster API operations.
      - text: Show every action available for Arc-connected Kubernetes cluster resources.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/{scope}/providers/Microsoft.Consumption/tags'].get
  update:
    x-apievangelist-phrasing:
      intent: List tag keys available for cost data
      effect: read
      questions:
      - Which tag keys can I use to break down consumption costs in a scope?
      - What tags are available for cost analysis on my subscription?
      instructions:
      - text: Get all available consumption tag keys for scope {scope}.
        slots:
          scope: path.scope
      - text: List the cost tag keys I can group usage by in {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Security/sensitivitySettings'].get
  update:
    x-apievangelist-phrasing:
      intent: Get Defender sensitivity settings
      effect: read
      questions:
      - What data sensitivity settings are configured for Defender for Cloud?
      - Which sensitive info types are used to label my data?
      instructions:
      - text: Get my security sensitivity settings.
      - text: Show the sensitivity settings resource for data labeling.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.DeviceUpdate/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Device Update provider operations
      effect: read
      questions:
      - What operations does Device Update for IoT Hub support?
      - Which Microsoft.DeviceUpdate actions can I assign in a role?
      instructions:
      - text: List the Microsoft.DeviceUpdate operations.
      - text: List device update operations using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.GraphServices/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Graph Services provider operations
      effect: read
      questions:
      - Which operations does the Microsoft.GraphServices provider offer?
      - What can I do with Graph Services account resources?
      instructions:
      - text: List the Microsoft.GraphServices operations.
      - text: Show available Graph Services provider actions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/microsoft.insights/guestDiagnosticSettingsAssociation/{associationName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a guest diagnostic settings association
      effect: write
      questions:
      - How do I change the tags on a guest diagnostics settings association for a VM?
      - Can I point a resource's guest diagnostics association at different settings?
      instructions:
      - text: Update guest diagnostics association {associationName} on resource {resourceUri} with tags {tags}.
        slots:
          associationName: path.associationName
          resourceUri: path.resourceUri
          tags: requestBody.tags
      - text: Patch guest diagnostic settings association {associationName} for {resourceUri}.
        slots:
          associationName: path.associationName
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.HDInsight/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List HDInsight provider operations
      effect: read
      questions:
      - What operations can I perform on HDInsight clusters?
      - Which Microsoft.HDInsight actions are exposed?
      instructions:
      - text: List the HDInsight operations.
      - text: Show available Microsoft.HDInsight actions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations'].get
  update:
    x-apievangelist-phrasing:
      intent: Get Intune locations for my tenant
      effect: read
      questions:
      - Which Intune location serves my tenant?
      - Can I find the Intune location for my user tenant?
      instructions:
      - text: Get the Intune locations for my tenant.
      - text: List Intune tenant locations with API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/hostName'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the Intune location host name
      effect: read
      questions:
      - What host name do I use for my tenant's Intune location?
      - How do I find the Intune location host name for the tenant?
      instructions:
      - text: Get the Intune location host name for my tenant.
      - text: Resolve the Intune host name using API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/apps'].get
  update:
    x-apievangelist-phrasing:
      intent: List Intune manageable apps
      effect: read
      questions:
      - Which apps can Intune manage for my tenant?
      - Can I filter the list of manageable apps and cap the number returned?
      instructions:
      - text: List Intune manageable apps at host {hostName}.
        slots:
          hostName: path.hostName
      - text: List the top {top} manageable apps at {hostName} matching {filter}.
        slots:
          top: query.$top
          hostName: path.hostName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies'].get
  update:
    x-apievangelist-phrasing:
      intent: List iOS app protection policies
      effect: read
      questions:
      - What iOS app protection (MAM) policies are defined in Intune?
      - Can I filter my iPhone and iPad policies by name?
      instructions:
      - text: List all iOS MAM policies at host {hostName}.
        slots:
          hostName: path.hostName
      - text: Show iPhone app protection policies at {hostName} filtered by {filter}.
        slots:
          hostName: path.hostName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies'].get
  update:
    x-apievangelist-phrasing:
      intent: List Android app protection policies
      effect: read
      questions:
      - Which Android app protection policies does my tenant have?
      - Can I select only certain fields when listing Android MAM policies?
      instructions:
      - text: List all Android MAM policies at host {hostName}.
        slots:
          hostName: path.hostName
      - text: Return Android policies from {hostName} selecting fields {select}.
        slots:
          hostName: path.hostName
          select: query.$select
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an iOS app protection policy
      effect: read
      questions:
      - How do I see the settings of one iOS MAM policy by name?
      - What does a specific iPhone app protection policy enforce?
      instructions:
      - text: Get iOS MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show the iPhone protection policy called {policyName} on {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update an iOS app protection policy
      effect: write
      questions:
      - How do I create a new app protection policy for iOS devices?
      - Can I overwrite an existing iOS MAM policy's full definition?
      instructions:
      - text: Create iOS MAM policy {policyName} at host {hostName} with properties {properties}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          properties: requestBody.properties
      - text: Replace the iPhone protection policy {policyName} on {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an iOS app protection policy
      effect: destructive
      questions:
      - Can I remove an iOS MAM policy I no longer need?
      - What deletes an iPhone app protection policy from Intune?
      instructions:
      - text: Delete iOS MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Remove the iPhone protection policy {policyName} from {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Patch an iOS app protection policy
      effect: write
      questions:
      - Can I change a few settings on an iOS MAM policy without resending all of it?
      - Is there a partial update for iPhone protection policies?
      instructions:
      - text: Patch iOS MAM policy {policyName} at {hostName} with {properties}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          properties: requestBody.properties
      - text: Partially update iPhone policy {policyName} tags to {tags} on {hostName}.
        slots:
          policyName: path.policyName
          tags: requestBody.tags
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an Android app protection policy
      effect: read
      questions:
      - What does one of my Android MAM policies enforce?
      - How can I fetch an Android app protection policy by its name?
      instructions:
      - text: Get Android MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show the Android protection policy named {policyName} from {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update an Android app protection policy
      effect: write
      questions:
      - How do I set up an app protection policy for Android phones?
      - Can I replace an Android MAM policy definition entirely?
      instructions:
      - text: Create Android MAM policy {policyName} at host {hostName} with properties {properties}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          properties: requestBody.properties
      - text: Overwrite Android protection policy {policyName} on {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an Android app protection policy
      effect: destructive
      questions:
      - Can I delete an Android MAM policy from Intune?
      - What removes an app protection policy for Android devices?
      instructions:
      - text: Delete Android MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Drop the Android protection policy {policyName} on {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Patch an Android app protection policy
      effect: write
      questions:
      - How do I tweak one setting on an Android MAM policy?
      - Can I update only the tags of an Android protection policy?
      instructions:
      - text: Patch Android MAM policy {policyName} at {hostName} with {properties}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          properties: requestBody.properties
      - text: Set tags {tags} on Android policy {policyName} at {hostName}.
        slots:
          tags: requestBody.tags
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/apps'].get
  update:
    x-apievangelist-phrasing:
      intent: List apps in an iOS app protection policy
      effect: read
      questions:
      - Which apps are covered by one of my iOS MAM policies?
      - Can I filter the apps attached to an iPhone protection policy?
      instructions:
      - text: List apps in iOS MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show the iPhone apps protected by {policyName} on {hostName}, top {top}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          top: query.$top
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/AndroidPolicies/{policyName}/apps'].get
  update:
    x-apievangelist-phrasing:
      intent: List apps in an Android app protection policy
      effect: read
      questions:
      - What apps does an Android MAM policy apply to?
      - Can I page through apps attached to an Android protection policy?
      instructions:
      - text: List apps in Android MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show Android apps covered by {policyName} on {hostName} matching {filter}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/apps/{appName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Add an app to an iOS app protection policy
      effect: write
      questions:
      - How do I add an app to an existing iOS MAM policy?
      - Can I bring a new iPhone app under an app protection policy?
      instructions:
      - text: Add app {appName} to iOS MAM policy {policyName} at host {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      - text: Protect iPhone app {appName} under policy {policyName} on {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/apps/{appName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove an app from an iOS app protection policy
      effect: destructive
      questions:
      - Can I take an app out of an iOS MAM policy?
      - What removes one iPhone app from app protection?
      instructions:
      - text: Remove app {appName} from iOS MAM policy {policyName} at host {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      - text: Stop protecting iPhone app {appName} with policy {policyName} on {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}/apps/{appName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Add an app to an Android app protection policy
      effect: write
      questions:
      - How do I include an app in an Android MAM policy?
      - Can I add another Android app to a protection policy I already have?
      instructions:
      - text: Add app {appName} to Android MAM policy {policyName} at host {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      - text: Put Android app {appName} under protection policy {policyName} on {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}/apps/{appName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove an app from an Android app protection policy
      effect: destructive
      questions:
      - Can I remove an app from an Android MAM policy?
      - What takes one Android app out of app protection?
      instructions:
      - text: Remove app {appName} from Android MAM policy {policyName} at host {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      - text: Unprotect Android app {appName} in policy {policyName} on {hostName}.
        slots:
          appName: path.appName
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/groups'].get
  update:
    x-apievangelist-phrasing:
      intent: List groups targeted by an iOS policy
      effect: read
      questions:
      - Which user groups is an iOS MAM policy assigned to?
      - Who does my iPhone app protection policy target?
      instructions:
      - text: List groups for iOS MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show the groups targeted by iPhone policy {policyName} on {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}/groups'].get
  update:
    x-apievangelist-phrasing:
      intent: List groups targeted by an Android policy
      effect: read
      questions:
      - Which groups are assigned to an Android MAM policy?
      - Who is my Android app protection policy applied to?
      instructions:
      - text: List groups for Android MAM policy {policyName} at host {hostName}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      - text: Show which groups Android policy {policyName} on {hostName} is assigned to.
        slots:
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/groups/{groupId}'].put
  update:
    x-apievangelist-phrasing:
      intent: Assign a group to an iOS app protection policy
      effect: write
      questions:
      - How do I assign an iOS MAM policy to a user group?
      - Can I target another group with my iPhone protection policy?
      instructions:
      - text: Add group {groupId} to iOS MAM policy {policyName} at host {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      - text: Target iPhone policy {policyName} on {hostName} at group {groupId}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          groupId: path.groupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/iosPolicies/{policyName}/groups/{groupId}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Unassign a group from an iOS policy
      effect: destructive
      questions:
      - Can I stop an iOS MAM policy from applying to a group?
      - What removes a group assignment from an iPhone protection policy?
      instructions:
      - text: Remove group {groupId} from iOS MAM policy {policyName} at host {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      - text: Unassign group {groupId} from iPhone policy {policyName} on {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}/groups/{groupId}'].put
  update:
    x-apievangelist-phrasing:
      intent: Assign a group to an Android app protection policy
      effect: write
      questions:
      - How do I apply an Android MAM policy to a group of users?
      - Can I add a group assignment to my Android protection policy?
      instructions:
      - text: Add group {groupId} to Android MAM policy {policyName} at host {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      - text: Apply Android policy {policyName} on {hostName} to group {groupId}.
        slots:
          policyName: path.policyName
          hostName: path.hostName
          groupId: path.groupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/androidPolicies/{policyName}/groups/{groupId}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Unassign a group from an Android policy
      effect: destructive
      questions:
      - Can I remove a group from an Android MAM policy assignment?
      - What stops an Android protection policy from targeting a group?
      instructions:
      - text: Remove group {groupId} from Android MAM policy {policyName} at host {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      - text: Detach group {groupId} from Android policy {policyName} on {hostName}.
        slots:
          groupId: path.groupId
          policyName: path.policyName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/users/{userName}/devices'].get
  update:
    x-apievangelist-phrasing:
      intent: List a user's Intune managed devices
      effect: read
      questions:
      - Which devices does a particular user have under Intune app management?
      - Can I filter a user's devices list?
      instructions:
      - text: List devices for user {userName} at host {hostName}.
        slots:
          userName: path.userName
          hostName: path.hostName
      - text: Show the top {top} devices of {userName} on {hostName}.
        slots:
          top: query.$top
          userName: path.userName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/users/{userName}/devices/{deviceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one device for a user
      effect: read
      questions:
      - How do I look up a specific device belonging to a user?
      - What details does Intune keep about one user's device?
      instructions:
      - text: Get device {deviceName} for user {userName} at host {hostName}.
        slots:
          deviceName: path.deviceName
          userName: path.userName
          hostName: path.hostName
      - text: Show {userName}'s device {deviceName} on {hostName}.
        slots:
          userName: path.userName
          deviceName: path.deviceName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/users/{userName}/devices/{deviceName}/wipe'].post
  update:
    x-apievangelist-phrasing:
      intent: Wipe a user's device
      effect: destructive
      questions:
      - How do I wipe corporate app data from a lost phone?
      - Can I remotely wipe one device that belongs to a departing user?
      instructions:
      - text: Wipe device {deviceName} for user {userName} at host {hostName}.
        slots:
          deviceName: path.deviceName
          userName: path.userName
          hostName: path.hostName
      - text: Remotely wipe {userName}'s lost device {deviceName} via {hostName}.
        slots:
          userName: path.userName
          deviceName: path.deviceName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/operationResults'].get
  update:
    x-apievangelist-phrasing:
      intent: List Intune operation results
      effect: read
      questions:
      - What were the results of recent Intune operations like wipes?
      - Can I filter Intune operation results?
      instructions:
      - text: List Intune operation results at host {hostName}.
        slots:
          hostName: path.hostName
      - text: Show Intune operation results on {hostName} matching {filter}.
        slots:
          hostName: path.hostName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/statuses/default'].get
  update:
    x-apievangelist-phrasing:
      intent: Get Intune tenant-level statuses
      effect: read
      questions:
      - What is the overall Intune status for my tenant?
      - Where do I see tenant-level app management status counts?
      instructions:
      - text: Get Intune tenant statuses at host {hostName}.
        slots:
          hostName: path.hostName
      - text: Show the default tenant-level MAM status from {hostName}.
        slots:
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/flaggedUsers'].get
  update:
    x-apievangelist-phrasing:
      intent: List Intune flagged users
      effect: read
      questions:
      - Which users has Intune flagged, for example for jailbroken devices?
      - Can I filter the flagged users list?
      instructions:
      - text: List flagged users at host {hostName}.
        slots:
          hostName: path.hostName
      - text: Show the top {top} Intune flagged users on {hostName}.
        slots:
          top: query.$top
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/flaggedUsers/{userName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get details on a flagged user
      effect: read
      questions:
      - Why was a particular user flagged by Intune?
      - Can I look up one flagged user's details by name?
      instructions:
      - text: Get flagged user {userName} details at host {hostName}.
        slots:
          userName: path.userName
          hostName: path.hostName
      - text: Show why {userName} is flagged on {hostName}.
        slots:
          userName: path.userName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Intune/locations/{hostName}/flaggedUsers/{userName}/flaggedEnrolledApps'].get
  update:
    x-apievangelist-phrasing:
      intent: List a flagged user's flagged enrolled apps
      effect: read
      questions:
      - Which enrolled apps triggered a flag for a specific user?
      - Can I filter the flagged enrolled apps for one user?
      instructions:
      - text: List flagged enrolled apps for user {userName} at host {hostName}.
        slots:
          userName: path.userName
          hostName: path.hostName
      - text: Show which of {userName}'s enrolled apps are flagged on {hostName}.
        slots:
          userName: path.userName
          hostName: path.hostName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.ManagedIdentity/identities/default'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the system-assigned identity for a scope
      effect: read
      questions:
      - What is the system-assigned managed identity for a resource?
      - Can I read the principal ID of a resource's system identity?
      instructions:
      - text: Get the system-assigned identity at scope {scope}.
        slots:
          scope: path.scope
      - text: Show the managed identity principal and tenant for {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.ManagedIdentity/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Managed Identity provider operations
      effect: read
      questions:
      - Which operations does Microsoft.ManagedIdentity support?
      - What managed identity actions can I grant permissions for?
      instructions:
      - text: List the Microsoft.ManagedIdentity operations.
      - text: List managed identity operations with API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.KubernetesRuntime/services'].get
  update:
    x-apievangelist-phrasing:
      intent: List Kubernetes runtime services on a cluster
      effect: read
      questions:
      - Which Kubernetes runtime service resources are attached to my connected cluster?
      - Can I see every ServiceResource under a parent cluster?
      instructions:
      - text: List Kubernetes runtime services under {resourceUri}.
        slots:
          resourceUri: path.resourceUri
      - text: Show every ServiceResource deployed on cluster {resourceUri}.
        slots:
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.KubernetesRuntime/services/{serviceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a Kubernetes runtime service
      effect: read
      questions:
      - How do I read one Kubernetes runtime ServiceResource on my cluster?
      - What is the provisioning state of a runtime service on a connected cluster?
      instructions:
      - text: Get Kubernetes runtime service {serviceName} on {resourceUri}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
      - text: Show runtime ServiceResource {serviceName} for cluster {resourceUri}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.KubernetesRuntime/services/{serviceName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create a Kubernetes runtime service
      effect: write
      questions:
      - How do I create a Kubernetes runtime service on a connected cluster?
      - Can I update the properties of an existing runtime ServiceResource?
      instructions:
      - text: Create Kubernetes runtime service {serviceName} on {resourceUri}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
      - text: Create runtime ServiceResource {serviceName} on cluster {resourceUri} with {properties}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
          properties: requestBody.properties
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.KubernetesRuntime/services/{serviceName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a Kubernetes runtime service
      effect: destructive
      questions:
      - Can I remove a Kubernetes runtime service from my connected cluster?
      - What deletes a runtime ServiceResource?
      instructions:
      - text: Delete Kubernetes runtime service {serviceName} from {resourceUri}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
      - text: Remove runtime ServiceResource {serviceName} on cluster {resourceUri}.
        slots:
          serviceName: path.serviceName
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.SecurityDevOps/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Security DevOps provider operations
      effect: read
      questions:
      - What operations does the Microsoft.SecurityDevOps provider support?
      - Which DevOps security connector actions are available?
      instructions:
      - text: List the Microsoft.SecurityDevOps operations.
      - text: Show available Security DevOps connector actions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.ServiceLinker/linkers'].get
  update:
    x-apievangelist-phrasing:
      intent: List Service Connector linkers on a resource
      effect: read
      questions:
      - Which service connections does my app resource have to databases or other targets?
      - Can I list every Service Connector linker on a web app?
      instructions:
      - text: List linkers on resource {resourceUri}.
        slots:
          resourceUri: path.resourceUri
      - text: Show all service connections configured for {resourceUri}.
        slots:
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.ServiceLinker/linkers/{linkerName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a Service Connector linker
      effect: read
      questions:
      - How do I read the configuration of one service connection by name?
      - What target service and auth type does a linker use?
      instructions:
      - text: Get linker {linkerName} on resource {resourceUri}.
        slots:
          linkerName: path.linkerName
          resourceUri: path.resourceUri
      - text: Show the {linkerName} service connection for {resourceUri}.
        slots:
          linkerName: path.linkerName
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceUri}/providers/Microsoft.ServiceLinker/linkers/{linkerName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update a Service Connector linker
      effect: write
      questions:
      - How do I connect my app to a database with Service Connector?
      - Can I change the target or auth settings of an existing linker?
      instructions:
      - text: Create linker {linkerName} on {resourceUri} with properties {properties}.
        slots:
          linkerName: path.linkerName
          resourceUri: path.resourceUri
          properties: requestBody.properties
      - text: Update service connection {linkerName} for {resourceUri}.
        slots:
          linkerName: path.linkerName
          resourceUri: path.resourceUri
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Support/services'].get
  update:
    x-apievangelist-phrasing:
      intent: List Azure services available for support tickets
      effect: read
      questions:
      - Which Azure services can I choose when opening a support ticket?
      - Where do I find the service ID to use for a technical support request?
      instructions:
      - text: List every Azure service I can file a support ticket against.
      - text: Show the full catalog of support-ticket service IDs.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.Support/services/{serviceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a service for support tickets
      effect: read
      questions:
      - Can I look up one service's details before filing a support ticket?
      - What does the support service entry for a given service name contain?
      instructions:
      - text: Get support service {serviceName}.
        slots:
          serviceName: path.serviceName
      - text: Show the support ticket service entry {serviceName}.
        slots:
          serviceName: path.serviceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.NetworkCloud/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Network Cloud provider operations
      effect: read
      questions:
      - Which operations does the Operator Nexus Network Cloud provider support?
      - Does the Network Cloud operations list page with a next link?
      instructions:
      - text: List the Microsoft.NetworkCloud operations.
      - text: Show every Network Cloud provider operation, following next links.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupName}/providers/Microsoft.PolicyInsights/policyEvents/{policyEventsResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy events in a management group
      effect: read
      questions:
      - What policy evaluation events happened across resources in my management group?
      - Can I limit management group policy events to a date window?
      instructions:
      - text: Query {policyEventsResource} policy events in management group {managementGroupName} under {managementGroupsNamespace}.
        slots:
          policyEventsResource: path.policyEventsResource
          managementGroupName: path.managementGroupName
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Get management group {managementGroupName} policy events from {from} to {to}.
        slots:
          managementGroupName: path.managementGroupName
          from: query.$from
          to: query.$to
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/policyEvents/{policyEventsResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy events for a resource
      effect: read
      questions:
      - Which policy evaluation events were recorded for one resource?
      - Can I filter a single resource's policy events by effect?
      instructions:
      - text: Query {policyEventsResource} policy events for resource {resourceId}.
        slots:
          policyEventsResource: path.policyEventsResource
          resourceId: path.resourceId
      - text: List policy events on {resourceId} matching {filter}.
        slots:
          resourceId: path.resourceId
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.PolicyInsights/policyMetadata/{resourceName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a policy metadata resource
      effect: read
      questions:
      - What does the policy metadata for a regulatory compliance control say?
      - Can I read one policy metadata resource by name?
      instructions:
      - text: Get policy metadata resource {resourceName}.
        slots:
          resourceName: path.resourceName
      - text: Show the compliance control metadata named {resourceName}.
        slots:
          resourceName: path.resourceName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.PolicyInsights/policyMetadata'].get
  update:
    x-apievangelist-phrasing:
      intent: List policy metadata resources
      effect: read
      questions:
      - What policy metadata resources exist for compliance controls?
      - Can I cap how many policy metadata entries are returned?
      instructions:
      - text: List policy metadata resources.
      - text: List the first {top} policy metadata resources.
        slots:
          top: query.$top
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupName}/providers/Microsoft.PolicyInsights/policyStates/{policyStatesResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy states in a management group
      effect: read
      questions:
      - Which resources in my management group are non-compliant with policy right now?
      - Can I pull the latest policy states for a management group and order them?
      instructions:
      - text: Query {policyStatesResource} policy states in management group {managementGroupName} under {managementGroupsNamespace}.
        slots:
          policyStatesResource: path.policyStatesResource
          managementGroupName: path.managementGroupName
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Find non-compliant policy states in {managementGroupName} matching {filter}.
        slots:
          managementGroupName: path.managementGroupName
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupName}/providers/Microsoft.PolicyInsights/policyStates/{policyStatesSummaryResource}/summarize'].post
  update:
    x-apievangelist-phrasing:
      intent: Summarize policy compliance for a management group
      effect: read
      questions:
      - How many non-compliant resources does my management group have overall?
      - Can I get a compliance summary for a management group over a time period?
      instructions:
      - text: Summarize {policyStatesSummaryResource} policy states for management group {managementGroupName} under {managementGroupsNamespace}.
        slots:
          policyStatesSummaryResource: path.policyStatesSummaryResource
          managementGroupName: path.managementGroupName
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Give me a compliance summary for {managementGroupName} from {from} to {to}.
        slots:
          managementGroupName: path.managementGroupName
          from: query.$from
          to: query.$to
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/policyStates/{policyStatesResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy states for a resource
      effect: read
      questions:
      - Is a specific resource compliant with its assigned policies?
      - Can I expand policy evaluation details for a single resource's states?
      instructions:
      - text: Query {policyStatesResource} policy states for resource {resourceId}.
        slots:
          policyStatesResource: path.policyStatesResource
          resourceId: path.resourceId
      - text: List policy states on {resourceId} expanding {expand}.
        slots:
          resourceId: path.resourceId
          expand: query.$expand
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/policyStates/{policyStatesSummaryResource}/summarize'].post
  update:
    x-apievangelist-phrasing:
      intent: Summarize policy compliance for a resource
      effect: read
      questions:
      - How many policies is one resource failing in total?
      - Can I get a compliance count summary for a single resource?
      instructions:
      - text: Summarize {policyStatesSummaryResource} policy states for resource {resourceId}.
        slots:
          policyStatesSummaryResource: path.policyStatesSummaryResource
          resourceId: path.resourceId
      - text: Count non-compliant policies on {resourceId} matching {filter}.
        slots:
          resourceId: path.resourceId
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.PolicyInsights/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Policy Insights provider operations
      effect: read
      questions:
      - What operations does Microsoft.PolicyInsights make available?
      - Which policy insights actions can I authorize?
      instructions:
      - text: List the Microsoft.PolicyInsights operations.
      - text: List policy insights operations with API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.PolicyInsights/policyStates/$metadata'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the OData metadata for policy states
      effect: read
      questions:
      - Where can I get the OData metadata XML describing policy state fields?
      - What fields can I use in a policy states query filter?
      instructions:
      - text: Get the policy states OData metadata document for scope {scope}.
        slots:
          scope: path.scope
      - text: Download the $metadata XML for policy states at {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupName}/providers/Microsoft.PolicyInsights/policyTrackedResources/{policyTrackedResourcesResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy-tracked resources in a management group
      effect: read
      questions:
      - Which resources are tracked by policies such as deployIfNotExists in my management group?
      - Can I filter management group tracked resources?
      instructions:
      - text: Query {policyTrackedResourcesResource} tracked resources in management group {managementGroupName} under {managementGroupsNamespace}.
        slots:
          policyTrackedResourcesResource: path.policyTrackedResourcesResource
          managementGroupName: path.managementGroupName
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: List the top {top} policy-tracked resources in {managementGroupName}.
        slots:
          top: query.$top
          managementGroupName: path.managementGroupName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/policyTrackedResources/{policyTrackedResourcesResource}/queryResults'].post
  update:
    x-apievangelist-phrasing:
      intent: Query policy-tracked resources under a resource
      effect: read
      questions:
      - Which resources has policy tracked under one parent resource?
      - Can I see what a remediation policy created beneath a resource?
      instructions:
      - text: Query {policyTrackedResourcesResource} tracked resources under resource {resourceId}.
        slots:
          policyTrackedResourcesResource: path.policyTrackedResourcesResource
          resourceId: path.resourceId
      - text: Show policy-tracked resources beneath {resourceId} matching {filter}.
        slots:
          resourceId: path.resourceId
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.RecommendationsService/locations/{location}/operationStatuses/{operationId}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the status of an async recommendations operation
      effect: read
      questions:
      - Has my long-running Recommendations Service operation finished?
      - Where do I check an async operation status for the recommendations provider?
      instructions:
      - text: Get the status of Recommendations Service operation {operationId} in {location}.
        slots:
          operationId: path.operationId
          location: path.location
      - text: Check whether recommendations async operation {operationId} in region {location} has completed.
        slots:
          operationId: path.operationId
          location: path.location
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.RecommendationsService/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Recommendations Service operations
      effect: read
      questions:
      - What operations does the Intelligent Recommendations provider support?
      - Which Microsoft.RecommendationsService actions are available?
      instructions:
      - text: List the Microsoft.RecommendationsService operations.
      - text: Show the intelligent recommendations provider actions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}/listDeployments'].post
  update:
    x-apievangelist-phrasing:
      intent: List deployments of a management group remediation
      effect: read
      questions:
      - Which resource deployments did a management group remediation task run?
      - Can I see how each deployment of a management group remediation went?
      instructions:
      - text: List deployments for remediation {remediationName} in management group {managementGroupId} under {managementGroupsNamespace}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Show the first {top} deployments run by management group remediation {remediationName} in {managementGroupId}.
        slots:
          top: query.$top
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}/cancel'].post
  update:
    x-apievangelist-phrasing:
      intent: Cancel a management group remediation
      effect: destructive
      questions:
      - How do I stop a policy remediation that is running across a management group?
      - Can I cancel a management group remediation partway through?
      instructions:
      - text: Cancel remediation {remediationName} in management group {managementGroupId} under {managementGroupsNamespace}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Halt the running management group remediation {remediationName} in {managementGroupId}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations'].get
  update:
    x-apievangelist-phrasing:
      intent: List remediations for a management group
      effect: read
      questions:
      - What policy remediation tasks exist in my management group?
      - Can I filter management group remediations by provisioning state?
      instructions:
      - text: List remediations in management group {managementGroupId} under {managementGroupsNamespace}.
        slots:
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: List management group {managementGroupId} remediation tasks matching {filter}.
        slots:
          managementGroupId: path.managementGroupId
          filter: query.$filter
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a management group remediation
      effect: read
      questions:
      - How is a policy remediation at management group scope progressing?
      - Where can I read one management group remediation by name?
      instructions:
      - text: Get remediation {remediationName} in management group {managementGroupId} under {managementGroupsNamespace}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Show progress of management group remediation {remediationName} for {managementGroupId}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update a management group remediation
      effect: write
      questions:
      - How do I start remediating non-compliant resources across a management group?
      - Can I change the properties of a remediation at management group scope?
      instructions:
      - text: Create remediation {remediationName} in management group {managementGroupId} under {managementGroupsNamespace} with {properties}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
          properties: requestBody.properties
      - text: Start a management group remediation named {remediationName} in {managementGroupId}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{managementGroupsNamespace}/managementGroups/{managementGroupId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a management group remediation
      effect: destructive
      questions:
      - Can I delete a finished remediation task from my management group?
      - What removes a management group scoped remediation?
      instructions:
      - text: Delete remediation {remediationName} in management group {managementGroupId} under {managementGroupsNamespace}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
          managementGroupsNamespace: path.managementGroupsNamespace
      - text: Remove management group remediation record {remediationName} from {managementGroupId}.
        slots:
          remediationName: path.remediationName
          managementGroupId: path.managementGroupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}/listDeployments'].post
  update:
    x-apievangelist-phrasing:
      intent: List deployments of a resource remediation
      effect: read
      questions:
      - What deployments did a remediation on a single resource perform?
      - Did every deployment of my resource-level remediation succeed?
      instructions:
      - text: List deployments for remediation {remediationName} on resource {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      - text: Show the top {top} deployments of resource remediation {remediationName} at {resourceId}.
        slots:
          top: query.$top
          remediationName: path.remediationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}/cancel'].post
  update:
    x-apievangelist-phrasing:
      intent: Cancel a resource remediation
      effect: destructive
      questions:
      - Can I cancel a remediation running on one resource?
      - How do I stop a resource-scoped policy remediation?
      instructions:
      - text: Cancel remediation {remediationName} on resource {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      - text: Stop the resource-level remediation {remediationName} at {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations'].get
  update:
    x-apievangelist-phrasing:
      intent: List remediations for a resource
      effect: read
      questions:
      - Which remediation tasks target a specific resource?
      - Can I limit the number of remediations returned for one resource?
      instructions:
      - text: List remediations for resource {resourceId}.
        slots:
          resourceId: path.resourceId
      - text: List the first {top} remediation tasks on {resourceId}.
        slots:
          top: query.$top
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a resource remediation
      effect: read
      questions:
      - What is the status of a remediation on a single resource?
      - Can I read a resource-scoped remediation by its name?
      instructions:
      - text: Get remediation {remediationName} on resource {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      - text: Show the resource-level remediation {remediationName} for {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or update a resource remediation
      effect: write
      questions:
      - How do I remediate a single non-compliant resource against a policy?
      - Can I update a remediation I already created on a resource?
      instructions:
      - text: Create remediation {remediationName} on resource {resourceId} with {properties}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
          properties: requestBody.properties
      - text: Start remediating resource {resourceId} as {remediationName}.
        slots:
          resourceId: path.resourceId
          remediationName: path.remediationName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{resourceId}/providers/Microsoft.PolicyInsights/remediations/{remediationName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a resource remediation
      effect: destructive
      questions:
      - Can I delete a remediation record from an individual resource?
      - What removes a resource-scoped remediation task?
      instructions:
      - text: Delete remediation {remediationName} on resource {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      - text: Remove resource remediation record {remediationName} from {resourceId}.
        slots:
          remediationName: path.remediationName
          resourceId: path.resourceId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}/unregister'].post
  update:
    x-apievangelist-phrasing:
      intent: Unregister a subscription from a resource provider
      effect: destructive
      questions:
      - How do I unregister my subscription from a resource provider I no longer use?
      - Can I turn off a provider namespace for one subscription?
      instructions:
      - text: Unregister subscription {subscriptionId} from provider {resourceProviderNamespace}.
        slots:
          subscriptionId: path.subscriptionId
          resourceProviderNamespace: path.resourceProviderNamespace
      - text: Disable the {resourceProviderNamespace} namespace in subscription {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{groupId}/providers/{resourceProviderNamespace}/register'].post
  update:
    x-apievangelist-phrasing:
      intent: Register a resource provider for a management group
      effect: write
      questions:
      - How do I register a resource provider so its types can be deployed at management group scope?
      - Can I enable a provider namespace on a whole management group?
      instructions:
      - text: Register provider {resourceProviderNamespace} with management group {groupId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          groupId: path.groupId
      - text: Enable {resourceProviderNamespace} at the management group scope of {groupId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          groupId: path.groupId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}/providerPermissions'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a resource provider's permissions
      effect: read
      questions:
      - What permissions does a resource provider require in my subscription?
      - Which roles does a provider namespace need granted to work?
      instructions:
      - text: Get provider permissions for {resourceProviderNamespace} in subscription {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      - text: Show the permissions {resourceProviderNamespace} needs in {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}/register'].post
  update:
    x-apievangelist-phrasing:
      intent: Register a subscription with a resource provider
      effect: write
      questions:
      - Why can't I deploy a resource type, and how do I register its provider for my subscription?
      - Can I give third-party provider consent when registering a namespace?
      instructions:
      - text: Register subscription {subscriptionId} with provider {resourceProviderNamespace}.
        slots:
          subscriptionId: path.subscriptionId
          resourceProviderNamespace: path.resourceProviderNamespace
      - text: Register {resourceProviderNamespace} in {subscriptionId} with third-party consent {thirdPartyProviderConsent}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
          thirdPartyProviderConsent: requestBody.thirdPartyProviderConsent
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers'].get
  update:
    x-apievangelist-phrasing:
      intent: List resource providers for the tenant
      effect: read
      questions:
      - Which resource providers are available at the tenant level?
      - Can I list tenant-wide providers with their resource types expanded?
      instructions:
      - text: List all resource providers for my tenant.
      - text: List tenant-level providers expanding {expand}.
        slots:
          expand: query.$expand
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a resource provider in a subscription
      effect: read
      questions:
      - Is a given resource provider registered in my subscription?
      - What resource types and API versions does a provider offer in my subscription?
      instructions:
      - text: Get provider {resourceProviderNamespace} in subscription {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      - text: Check the registration state of {resourceProviderNamespace} for {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}/resourceTypes'].get
  update:
    x-apievangelist-phrasing:
      intent: List resource types for a provider
      effect: read
      questions:
      - Which resource types does a provider namespace offer?
      - What locations and API versions are supported for each type in a provider?
      instructions:
      - text: List resource types for provider {resourceProviderNamespace} in subscription {subscriptionId}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
      - text: Show {resourceProviderNamespace} resource types in {subscriptionId} expanding {expand}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          subscriptionId: path.subscriptionId
          expand: query.$expand
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/{resourceProviderNamespace}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a resource provider at tenant level
      effect: read
      questions:
      - Can I read a resource provider's details without a subscription?
      - What does a provider namespace look like at the tenant level?
      instructions:
      - text: Get tenant-level provider {resourceProviderNamespace}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
      - text: Show tenant details for namespace {resourceProviderNamespace} expanding {expand}.
        slots:
          resourceProviderNamespace: path.resourceProviderNamespace
          expand: query.$expand
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Resources/tags/default'].get
  update:
    x-apievangelist-phrasing:
      intent: Get all tags on a resource or subscription
      effect: read
      questions:
      - What tags are currently applied to my resource?
      - Can I read the whole tag set on a subscription in one call?
      instructions:
      - text: Get the tags on scope {scope}.
        slots:
          scope: path.scope
      - text: Show every tag applied to {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Resources/tags/default'].put
  update:
    x-apievangelist-phrasing:
      intent: Replace the entire tag set on a resource
      effect: write
      questions:
      - How do I overwrite all tags on a resource with a new set?
      - Is there a maximum number of tags a resource or subscription can have?
      instructions:
      - text: Replace all tags on {scope} with {properties}.
        slots:
          scope: path.scope
          properties: requestBody.properties
      - text: Overwrite the full tag set of {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Resources/tags/default'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete all tags on a resource or subscription
      effect: destructive
      questions:
      - Can I strip every tag off a resource at once?
      - What clears the whole tag set from a subscription?
      instructions:
      - text: Delete all tags on scope {scope}.
        slots:
          scope: path.scope
      - text: Clear every tag from {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/{scope}/providers/Microsoft.Resources/tags/default'].patch
  update:
    x-apievangelist-phrasing:
      intent: Merge, replace, or delete selected tags
      effect: write
      questions:
      - How do I add one tag to a resource without losing its existing tags?
      - Can I selectively delete a few tags while keeping the rest?
      instructions:
      - text: Apply tag operation {operation} with tags {properties} on {scope}.
        slots:
          operation: requestBody.operation
          properties: requestBody.properties
          scope: path.scope
      - text: Merge new tags into the existing tags of {scope}.
        slots:
          scope: path.scope
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.SecurityInsights/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Microsoft Sentinel provider operations
      effect: read
      questions:
      - What operations does the Security Insights (Sentinel) provider expose?
      - Which Microsoft.SecurityInsights actions can I grant?
      instructions:
      - text: List the Microsoft.SecurityInsights operations.
      - text: Show all Sentinel resource provider actions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts/{alertRuleName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a tenant activity log alert rule
      effect: read
      questions:
      - How can I see the conditions of a tenant activity log alert rule?
      - Is a given tenant-level activity log alert rule enabled?
      instructions:
      - text: Get tenant activity log alert rule {alertRuleName} in management group {managementGroupName}.
        slots:
          alertRuleName: path.alertRuleName
          managementGroupName: path.managementGroupName
      - text: Show the conditions and actions of tenant alert rule {alertRuleName}.
        slots:
          alertRuleName: path.alertRuleName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts/{alertRuleName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create or replace a tenant activity log alert rule
      effect: write
      questions:
      - How do I create an alert on tenant-level activity log events like service health?
      - Can I fully redefine a tenant activity log alert rule's conditions?
      instructions:
      - text: Create tenant activity log alert rule {alertRuleName} in management group {managementGroupName} with properties {properties}.
        slots:
          alertRuleName: path.alertRuleName
          managementGroupName: path.managementGroupName
          properties: requestBody.properties
      - text: Replace the definition of tenant alert rule {alertRuleName}.
        slots:
          alertRuleName: path.alertRuleName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts/{alertRuleName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a tenant activity log alert rule
      effect: destructive
      questions:
      - Can I delete a tenant activity log alert rule I don't need?
      - What removes a tenant-scoped activity log alert?
      instructions:
      - text: Delete tenant activity log alert rule {alertRuleName} from management group {managementGroupName}.
        slots:
          alertRuleName: path.alertRuleName
          managementGroupName: path.managementGroupName
      - text: Remove tenant alert rule {alertRuleName} permanently.
        slots:
          alertRuleName: path.alertRuleName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts/{alertRuleName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Enable, disable, or retag a tenant alert rule
      effect: write
      questions:
      - How do I temporarily disable a tenant activity log alert rule?
      - Can I update only the tags on a tenant alert rule?
      instructions:
      - text: Set tags {tags} on tenant activity log alert rule {alertRuleName} in management group {managementGroupName}.
        slots:
          tags: requestBody.tags
          alertRuleName: path.alertRuleName
          managementGroupName: path.managementGroupName
      - text: Disable tenant alert rule {alertRuleName}.
        slots:
          alertRuleName: path.alertRuleName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts'].get
  update:
    x-apievangelist-phrasing:
      intent: List all tenant activity log alert rules
      effect: read
      questions:
      - What tenant activity log alert rules exist across my whole tenant?
      - Can I see every tenant-level alert rule regardless of management group?
      instructions:
      - text: List all tenant activity log alert rules in my tenant.
      - text: Show every tenant-wide activity log alert.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.AlertsManagement/tenantActivityLogAlerts'].get
  update:
    x-apievangelist-phrasing:
      intent: List tenant alert rules in a management group
      effect: read
      questions:
      - Which tenant activity log alert rules belong to my management group?
      - Can I list tenant alert rules for just one management group?
      instructions:
      - text: List tenant activity log alert rules in management group {managementGroupName}.
        slots:
          managementGroupName: path.managementGroupName
      - text: Show the tenant alert rules scoped to management group {managementGroupName}.
        slots:
          managementGroupName: path.managementGroupName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/providers/Microsoft.WorkloadMonitor/operations'].get
  update:
    x-apievangelist-phrasing:
      intent: List Workload Monitor provider operations
      effect: read
      questions:
      - Which REST API operations does the Workload Monitor provider support?
      - What actions are available on Microsoft.WorkloadMonitor?
      instructions:
      - text: List the Microsoft.WorkloadMonitor operations.
      - text: List workload monitor operations with API version {api_version}.
        slots:
          api_version: query.api-version
      method: generated
      generated: '2026-09-26'