API Evangelist conversational phrasing for Applications.application.Actions API

# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Applications.application.Actions API
  version: 1.0.0
extends: openapi/azure-ad-applications-application-actions-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 14
- target: $.paths['/applications/{application-id}/microsoft.graph.addKey'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a certificate key credential to an app
      effect: write
      questions:
      - How do I roll an expiring certificate on an app registration automatically?
      - Can I add a new key credential to an app with a signed proof of possession?
      instructions:
      - text: Add key credential {key} to application {app_id} using proof {proof}.
        slots:
          app_id: path.application-id
          key: requestBody.keyCredential
          proof: requestBody.proof
      - text: Upload a new certificate key to app registration {app_id}.
        slots:
          app_id: path.application-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.addPassword'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a client secret to an app
      effect: write
      questions:
      - How do I generate a new client secret for my app registration?
      - Can I give a new application password a display name and end date?
      instructions:
      - text: Create a new client secret on application {app_id}.
        slots:
          app_id: path.application-id
      - text: Add password credential {password} to app {app_id}.
        slots:
          app_id: path.application-id
          password: requestBody.passwordCredential
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.checkMemberGroups'].post
  update:
    x-apievangelist-phrasing:
      intent: Check an app's membership in given groups
      effect: read
      questions:
      - Which of a list of groups does an application object belong to?
      - Can I test an app registration against specific group IDs?
      instructions:
      - text: Check whether application {app_id} is in any of the groups {group_ids}.
        slots:
          app_id: path.application-id
          group_ids: requestBody.groupIds
      - text: Tell me which of {group_ids} contain app {app_id}.
        slots:
          app_id: path.application-id
          group_ids: requestBody.groupIds
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.checkMemberObjects'].post
  update:
    x-apievangelist-phrasing:
      intent: Check an app against directory object IDs
      effect: read
      questions:
      - Is an app a member of certain groups, admin units or roles by ID?
      - Can I check an application's memberships against a mixed list of object IDs?
      instructions:
      - text: Check application {app_id} for membership in objects {ids}.
        slots:
          app_id: path.application-id
          ids: requestBody.ids
      - text: Run checkMemberObjects for app registration {app_id}.
        slots:
          app_id: path.application-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.getMemberGroups'].post
  update:
    x-apievangelist-phrasing:
      intent: List all groups an app belongs to
      effect: read
      questions:
      - What groups is an app registration a member of?
      - Can I return only the security groups an application is in?
      instructions:
      - text: Get every group ID that application {app_id} belongs to.
        slots:
          app_id: path.application-id
      - text: List groups for app {app_id} with security-enabled only {security_only}.
        slots:
          app_id: path.application-id
          security_only: requestBody.securityEnabledOnly
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.getMemberObjects'].post
  update:
    x-apievangelist-phrasing:
      intent: List groups, admin units and roles of an app
      effect: read
      questions:
      - Which groups, administrative units and directory roles include this application?
      - Can I get an app's full membership list, not just groups?
      instructions:
      - text: Get member objects of application {app_id}, including admin units and roles.
        slots:
          app_id: path.application-id
      - text: List all memberships of app {app_id} with security-enabled only {security_only}.
        slots:
          app_id: path.application-id
          security_only: requestBody.securityEnabledOnly
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.removeKey'].post
  update:
    x-apievangelist-phrasing:
      intent: Remove a certificate key credential from an app
      effect: destructive
      questions:
      - How do I retire an old certificate from an app registration after rolling it?
      - Does removing an app key need a proof-of-possession token?
      instructions:
      - text: Remove key {key_id} from application {app_id} with proof {proof}.
        slots:
          app_id: path.application-id
          key_id: requestBody.keyId
          proof: requestBody.proof
      - text: Delete the certificate credential {key_id} on app {app_id}.
        slots:
          app_id: path.application-id
          key_id: requestBody.keyId
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.removePassword'].post
  update:
    x-apievangelist-phrasing:
      intent: Remove a client secret from an app
      effect: destructive
      questions:
      - How do I revoke a leaked client secret on my app registration?
      - Can I delete one application password by its key ID?
      instructions:
      - text: Remove client secret {key_id} from application {app_id}.
        slots:
          app_id: path.application-id
          key_id: requestBody.keyId
      - text: Revoke password credential {key_id} on app {app_id}.
        slots:
          app_id: path.application-id
          key_id: requestBody.keyId
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.restore'].post
  update:
    x-apievangelist-phrasing:
      intent: Restore a deleted app registration
      effect: write
      questions:
      - How do I bring back an app registration someone deleted?
      - Can I undelete an application by its object ID?
      instructions:
      - text: Restore application {app_id} from deleted items.
        slots:
          app_id: path.application-id
      - text: Undelete app registration {app_id}.
        slots:
          app_id: path.application-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.setVerifiedPublisher'].post
  update:
    x-apievangelist-phrasing:
      intent: Set the verified publisher on an app
      effect: write
      questions:
      - How do I get the blue verified badge on my app's consent prompt?
      - Can I link my app registration to a Partner Center publisher ID?
      instructions:
      - text: Set verified publisher {publisher_id} on application {app_id}.
        slots:
          app_id: path.application-id
          publisher_id: requestBody.verifiedPublisherId
      - text: Mark app {app_id} as published by verified publisher {publisher_id}.
        slots:
          app_id: path.application-id
          publisher_id: requestBody.verifiedPublisherId
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/{application-id}/microsoft.graph.unsetVerifiedPublisher'].post
  update:
    x-apievangelist-phrasing:
      intent: Remove the verified publisher from an app
      effect: destructive
      questions:
      - How do I take the verified publisher off an app registration?
      - What happens to the publisher properties when I unset verification on an app?
      instructions:
      - text: Unset the verified publisher on application {app_id}.
        slots:
          app_id: path.application-id
      - text: Clear all verified publisher properties from app {app_id}.
        slots:
          app_id: path.application-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/microsoft.graph.getAvailableExtensionProperties'].post
  update:
    x-apievangelist-phrasing:
      intent: List registered directory extension properties
      effect: read
      questions:
      - What directory extension attributes are registered in my tenant, including by multitenant apps?
      - Can I list only the extension properties synced from on-premises?
      instructions:
      - text: List all available directory extension properties.
      - text: Get extension definitions where synced from on-premises is {synced}.
        slots:
          synced: requestBody.isSyncedFromOnPremises
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/microsoft.graph.getByIds'].post
  update:
    x-apievangelist-phrasing:
      intent: Fetch directory objects by a list of IDs
      effect: read
      questions:
      - How can I resolve a batch of object IDs to apps, users or groups in one request?
      - Can I restrict an ID lookup to application objects only?
      instructions:
      - text: Look up the directory objects with IDs {ids}.
        slots:
          ids: requestBody.ids
      - text: Resolve IDs {ids} returning only types {types}.
        slots:
          ids: requestBody.ids
          types: requestBody.types
      method: generated
      generated: '2026-10-01'
- target: $.paths['/applications/microsoft.graph.validateProperties'].post
  update:
    x-apievangelist-phrasing:
      intent: Check a group name against naming policy
      effect: read
      questions:
      - Will a Microsoft 365 group display name pass my tenant's naming policy?
      - Can I check a mail nickname for blocked words before creating the group?
      instructions:
      - text: Validate display name {display_name} and mail nickname {nickname}.
        slots:
          display_name: requestBody.displayName
          nickname: requestBody.mailNickname
      - text: Check {display_name} against naming policy on behalf of user {user_id}.
        slots:
          display_name: requestBody.displayName
          user_id: requestBody.onBehalfOfUserId
      method: generated
      generated: '2026-10-01'