# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Security Services Saas Tenant Restrictions API
  version: 1.0.0
extends: openapi/palo-alto-networks-saas-tenant-restrictions-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 2
- target: $.paths['/saas-tenant-restrictions'].get
  update:
    x-apievangelist-phrasing:
      intent: Get SaaS tenant restrictions
      effect: read
      questions:
      - Which SaaS tenant restrictions are configured, such as for Microsoft 365 or Dropbox?
      - Can I view tenant restrictions defined in a specific snippet?
      instructions:
      - text: Get SaaS tenant restrictions in folder {folder}.
        slots:
          folder: query.folder
      - text: Show the SaaS tenant restriction named {name}.
        slots:
          name: query.name
      method: generated
      generated: '2026-09-26'
- target: $.paths['/saas-tenant-restrictions'].put
  update:
    x-apievangelist-phrasing:
      intent: Update SaaS tenant restrictions
      effect: write
      questions:
      - How do I restrict access to only my organization's SaaS tenants using domains and headers?
      - Can I attach an EDL to a SaaS tenant restriction?
      instructions:
      - text: Update SaaS tenant restriction {name} with domains {domains} and headers {headers}.
        slots:
          name: requestBody.name
          domains: requestBody.domains
          headers: requestBody.headers
      - text: Set the EDLs for tenant restriction {name} in snippet {snippet} to {saas_edl}.
        slots:
          name: requestBody.name
          snippet: query.snippet
          saas_edl: requestBody.saas_edl
      method: generated
      generated: '2026-09-26'