# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Palo Alto Networks Permission Groups API
  version: 1.0.0
extends: openapi/palo-alto-networks-permission-groups-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 6
- target: $.paths['/authz/v1/feature'].get
  update:
    x-apievangelist-phrasing:
      intent: List features for custom permission groups
      effect: read
      questions:
      - Which Prisma Cloud features can I grant in a custom permission group?
      - What active features are available to assign permissions on?
      instructions:
      - text: List all active features I can add to a custom permission group.
      - text: Show the Prisma Cloud features available for permissions.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/authz/v1/permission_group/{id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a permission group by ID
      effect: read
      questions:
      - What features and permissions does a specific permission group grant?
      - Can I also see which roles use a permission group?
      instructions:
      - text: Get permission group {id}.
        slots:
          id: path.id
      - text: Show permission group {id} including its associated roles {includeAssociatedRoles}.
        slots:
          id: path.id
          includeAssociatedRoles: query.includeAssociatedRoles
      method: generated
      generated: '2026-09-26'
- target: $.paths['/authz/v1/permission_group/{id}'].put
  update:
    x-apievangelist-phrasing:
      intent: Update a permission group
      effect: write
      questions:
      - Can I add another feature to an existing permission group?
      - How do I rename a permission group?
      instructions:
      - text: Update permission group {id} with features {features}.
        slots:
          id: path.id
          features: requestBody.features
      - text: Rename permission group {id} to {name} keeping features {features}.
        slots:
          id: path.id
          name: requestBody.name
          features: requestBody.features
      method: generated
      generated: '2026-09-26'
- target: $.paths['/authz/v1/permission_group/{id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a permission group
      effect: destructive
      questions:
      - How do I delete a custom permission group?
      - Can default permission groups be deleted too?
      instructions:
      - text: Delete permission group {id}.
        slots:
          id: path.id
      - text: Remove the permission group with ID {id}.
        slots:
          id: path.id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/authz/v1/permission_group'].get
  update:
    x-apievangelist-phrasing:
      intent: List all permission groups
      effect: read
      questions:
      - What permission groups exist in my Prisma Cloud tenant?
      - Can the permission group list include each group's features and roles?
      instructions:
      - text: List all permission groups.
      - text: List permission groups with features included {includeFeatures}.
        slots:
          includeFeatures: query.includeFeatures
      method: generated
      generated: '2026-09-26'
- target: $.paths['/authz/v1/permission_group'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a custom permission group
      effect: write
      questions:
      - How do I create a custom permission group that limits console access?
      - Can a new permission group be restricted to just a few features?
      instructions:
      - text: Create custom permission group {name} with features {features}.
        slots:
          name: requestBody.name
          features: requestBody.features
      - text: Add permission group {name} described as {description} granting {features}.
        slots:
          name: requestBody.name
          description: requestBody.description
          features: requestBody.features
      method: generated
      generated: '2026-09-26'