Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Identity.DirectoryManagement Directory Roles.directory…

25 actions 25 updates phrasing extends openapi/azure-ad-directoryroles-directoryobject-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 25 · first 16 shown; the file carries all of them

$.info
$.paths['/directoryRoles/{directoryRole-id}/members'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/$ref'].delete
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.application'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.device'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.group'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.orgContact'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.servicePrincipal'].get
$.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.user'].get
$.paths['/directoryRoles/{directoryRole-id}/members/$count'].get
$.paths['/directoryRoles/{directoryRole-id}/members/$ref'].get
$.paths['/directoryRoles/{directoryRole-id}/members/$ref'].post
$.paths['/directoryRoles/{directoryRole-id}/members/$ref'].delete
$.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.application'].get
$.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.application/$count'].get
$.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.device'].get

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.DirectoryManagement Directory Roles.directory…
  version: 1.0.0
extends: openapi/azure-ad-directoryroles-directoryobject-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 24
- target: $.paths['/directoryRoles/{directoryRole-id}/members'].get
  update:
    x-apievangelist-phrasing:
      intent: List members of a directory role
      effect: read
      questions:
      - Who is assigned to the Global Administrator role in my Entra tenant?
      - Can I list a directory role's members using its template ID instead of its object ID?
      instructions:
      - text: List all members of directory role {role} with their full objects.
        slots:
          role: path.directoryRole-id
      - text: Show every principal assigned to role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/$ref'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a member from a directory role by id
      effect: destructive
      questions:
      - How do I take a user out of an admin role in Entra ID?
      - Can I unassign one principal from a directory role by addressing it in the URL path?
      instructions:
      - text: Remove member {member} from directory role {role}.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Unassign principal {member} from role {role} using its path id.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.application'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as an application
      effect: read
      questions:
      - How do I read a role member cast as an application object?
      - Is a particular member of this directory role an app registration?
      instructions:
      - text: Get member {member} of role {role} as an application.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the application details of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.device'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as a device
      effect: read
      questions:
      - How do I read a directory role member cast as a device?
      - Is one of this role's members actually a device object?
      instructions:
      - text: Get member {member} of role {role} as a device.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the device details of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.group'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as a group
      effect: read
      questions:
      - How do I read a role member cast as a group, for a role-assignable group?
      - Is a given member of this admin role a group rather than a person?
      instructions:
      - text: Get member {member} of role {role} as a group.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the group details of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.orgContact'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as an org contact
      effect: read
      questions:
      - How do I read a role member cast as an organizational contact?
      - Is a particular member of this role an org contact?
      instructions:
      - text: Get member {member} of role {role} as an organizational contact.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the org contact details of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.servicePrincipal'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as a service principal
      effect: read
      questions:
      - How do I read a role member cast as a service principal?
      - Which enterprise app is this particular directory role member?
      instructions:
      - text: Get member {member} of role {role} as a service principal.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the service principal details of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/{directoryObject-id}/microsoft.graph.user'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a directory role member as a user
      effect: read
      questions:
      - How do I read one role member's user profile directly?
      - Is a particular member of this admin role a user account?
      instructions:
      - text: Get member {member} of role {role} as a user.
        slots:
          member: path.directoryObject-id
          role: path.directoryRole-id
      - text: Fetch the user profile of role {role} member {member}.
        slots:
          role: path.directoryRole-id
          member: path.directoryObject-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count all members of a directory role
      effect: read
      questions:
      - How many principals of any type hold a given directory role?
      - What's the total number of members across all types in an admin role?
      instructions:
      - text: Count all members of directory role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many principals are assigned to role {role} in total.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/$ref'].get
  update:
    x-apievangelist-phrasing:
      intent: List references to a directory role's members
      effect: read
      questions:
      - Can I get just the reference links for a role's members instead of the full objects?
      - Which member ids and @odata.id links does a directory role hold?
      instructions:
      - text: List the member references ($ref) of directory role {role}.
        slots:
          role: path.directoryRole-id
      - text: Return only the @odata.id links for members of role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/$ref'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a member to a directory role
      effect: write
      questions:
      - How do I assign a user to an Entra admin role through the Graph API?
      - Can I add a service principal to a directory role by its @odata.id reference?
      instructions:
      - text: Add {member_ref} as a member of directory role {role}.
        slots:
          member_ref: requestBody.@odata.id
          role: path.directoryRole-id
      - text: Assign the principal at {member_ref} to role {role}.
        slots:
          member_ref: requestBody.@odata.id
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/$ref'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a role member by reference query
      effect: destructive
      questions:
      - Can I remove a directory role member by passing its @id as a query parameter?
      - What is the collection-level way to unassign someone from a directory role?
      instructions:
      - text: Remove the member referenced by {member_ref} from role {role} via the @id query.
        slots:
          member_ref: query.@id
          role: path.directoryRole-id
      - text: Unassign {member_ref} from directory role {role} using the members $ref collection.
        slots:
          member_ref: query.@id
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.application'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's application members
      effect: read
      questions:
      - Which applications hold a given directory role?
      - Can I filter a role's members down to app registrations only?
      instructions:
      - text: List only the application members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the apps assigned to directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.application/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's application members
      effect: read
      questions:
      - How many applications are assigned to a directory role?
      - What's the number of app members in an admin role?
      instructions:
      - text: Count the application members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many apps hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.device'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's device members
      effect: read
      questions:
      - Which devices are members of a given directory role?
      - Can I narrow a role's member list to device objects?
      instructions:
      - text: List only the device members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the devices assigned to directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.device/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's device members
      effect: read
      questions:
      - How many devices are members of a directory role?
      - What's the device member count for an admin role?
      instructions:
      - text: Count the device members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many devices hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.group'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's group members
      effect: read
      questions:
      - Which role-assignable groups are members of an admin role?
      - Can I see only the groups assigned to a directory role?
      instructions:
      - text: List only the group members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the groups assigned to directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.group/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's group members
      effect: read
      questions:
      - How many groups are assigned to a directory role?
      - What's the group member count for an admin role?
      instructions:
      - text: Count the group members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many groups hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.orgContact'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's org contact members
      effect: read
      questions:
      - Which organizational contacts appear as members of a directory role?
      - Can I filter a role's members to org contacts only?
      instructions:
      - text: List only the org contact members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the organizational contacts in directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.orgContact/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's org contact members
      effect: read
      questions:
      - How many org contacts are members of a directory role?
      - What's the organizational contact count for an admin role?
      instructions:
      - text: Count the org contact members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many organizational contacts hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.servicePrincipal'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's service principal members
      effect: read
      questions:
      - Which service principals have been granted a given admin role?
      - Can I see just the enterprise apps holding a directory role?
      instructions:
      - text: List only the service principal members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the service principals assigned to directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.servicePrincipal/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's service principal members
      effect: read
      questions:
      - How many service principals hold a directory role?
      - What's the service principal member count for an admin role?
      instructions:
      - text: Count the service principal members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many service principals hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.user'].get
  update:
    x-apievangelist-phrasing:
      intent: List a directory role's user members
      effect: read
      questions:
      - Which people are Global Administrators in my tenant, excluding apps and groups?
      - Can I list just the user accounts assigned to a directory role?
      instructions:
      - text: List only the user members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Show the users assigned to directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoles/{directoryRole-id}/members/microsoft.graph.user/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count a directory role's user members
      effect: read
      questions:
      - How many users hold a particular admin role in Entra ID?
      - What's the user member count for a directory role?
      instructions:
      - text: Count the user members of role {role}.
        slots:
          role: path.directoryRole-id
      - text: Tell me how many users hold directory role {role}.
        slots:
          role: path.directoryRole-id
      method: generated
      generated: '2026-10-01'