Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Identity.DirectoryManagement Directory Role…

9 actions 9 updates phrasing extends openapi/azure-ad-directoryroletemplates-directoryroletemplate-actions-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 9

$.info
$.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.checkMemberGroups'].post
$.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.checkMemberObjects'].post
$.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.getMemberGroups'].post
$.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.getMemberObjects'].post
$.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.restore'].post
$.paths['/directoryRoleTemplates/microsoft.graph.getAvailableExtensionProperties'].post
$.paths['/directoryRoleTemplates/microsoft.graph.getByIds'].post
$.paths['/directoryRoleTemplates/microsoft.graph.validateProperties'].post

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.DirectoryManagement Directory Role…
  version: 1.0.0
extends: openapi/azure-ad-directoryroletemplates-directoryroletemplate-actions-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 8
- target: $.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.checkMemberGroups'].post
  update:
    x-apievangelist-phrasing:
      intent: Check a role template's membership in given groups
      effect: read
      questions:
      - Which of a list of group IDs is a directory role template a member of?
      - Can I test membership of a role template against specific groups?
      instructions:
      - text: Check which of groups {groupIds} directory role template {template} belongs to.
        slots:
          groupIds: requestBody.groupIds
          template: path.directoryRoleTemplate-id
      - text: Return the groups from {groupIds} that role template {template} is a member of.
        slots:
          groupIds: requestBody.groupIds
          template: path.directoryRoleTemplate-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.checkMemberObjects'].post
  update:
    x-apievangelist-phrasing:
      intent: Check a role template's membership in given objects
      effect: read
      questions:
      - Is a directory role template a member of any of these groups, roles or administrative units?
      - Can I check membership against a mixed list of directory object IDs?
      instructions:
      - text: Check which of objects {ids} directory role template {template} is a member of.
        slots:
          ids: requestBody.ids
          template: path.directoryRoleTemplate-id
      - text: Test role template {template} for membership in the directory objects {ids}.
        slots:
          template: path.directoryRoleTemplate-id
          ids: requestBody.ids
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.getMemberGroups'].post
  update:
    x-apievangelist-phrasing:
      intent: Get all groups a role template belongs to
      effect: read
      questions:
      - What groups is a directory role template a member of?
      - Can I limit the returned group IDs to security-enabled groups only?
      instructions:
      - text: Get every group ID that directory role template {template} is a member of.
        slots:
          template: path.directoryRoleTemplate-id
      - text: List only security-enabled groups ({securityOnly}) for role template {template}.
        slots:
          securityOnly: requestBody.securityEnabledOnly
          template: path.directoryRoleTemplate-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.getMemberObjects'].post
  update:
    x-apievangelist-phrasing:
      intent: Get all groups, units and roles a template is in
      effect: read
      questions:
      - Which groups, administrative units and directory roles include a given role template?
      - Can I get all membership object IDs, not just groups, for a role template?
      instructions:
      - text: Get all group, administrative unit and role IDs that directory role template {template} belongs to.
        slots:
          template: path.directoryRoleTemplate-id
      - text: Return member-of object IDs for role template {template}, security-enabled only set to {securityOnly}.
        slots:
          template: path.directoryRoleTemplate-id
          securityOnly: requestBody.securityEnabledOnly
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/{directoryRoleTemplate-id}/microsoft.graph.restore'].post
  update:
    x-apievangelist-phrasing:
      intent: Restore a deleted directory object
      effect: write
      questions:
      - How do I bring back a recently deleted directory object from deleted items?
      - Which kinds of deleted directory objects can be restored?
      instructions:
      - text: Restore deleted directory object {template} from deleted items.
        slots:
          template: path.directoryRoleTemplate-id
      - text: Undelete item {template} via the role templates restore action.
        slots:
          template: path.directoryRoleTemplate-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/microsoft.graph.getAvailableExtensionProperties'].post
  update:
    x-apievangelist-phrasing:
      intent: List registered directory extension properties
      effect: read
      questions:
      - What directory extension attributes are registered in my tenant, including from multitenant apps?
      - Can I see only the extension properties synced from on-premises?
      instructions:
      - text: List all available directory extension properties.
      - text: Get directory extension definitions where synced from on-premises is {onPrem}.
        slots:
          onPrem: requestBody.isSyncedFromOnPremises
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/microsoft.graph.getByIds'].post
  update:
    x-apievangelist-phrasing:
      intent: Fetch directory objects by a list of IDs
      effect: read
      questions:
      - Can I resolve a batch of directory object IDs to their objects in one call?
      - Is it possible to restrict an ID lookup to certain object types like users or groups?
      instructions:
      - text: Get the directory objects for IDs {ids}.
        slots:
          ids: requestBody.ids
      - text: Resolve IDs {ids} limited to types {types}.
        slots:
          ids: requestBody.ids
          types: requestBody.types
      method: generated
      generated: '2026-10-01'
- target: $.paths['/directoryRoleTemplates/microsoft.graph.validateProperties'].post
  update:
    x-apievangelist-phrasing:
      intent: Validate a group name against naming policy
      effect: read
      questions:
      - Does a proposed Microsoft 365 group name comply with my tenant's naming policy?
      - Can I check a mail nickname for blocked words before creating a group?
      instructions:
      - text: Validate group display name {displayName} and mail nickname {mailNickname} against naming policy.
        slots:
          displayName: requestBody.displayName
          mailNickname: requestBody.mailNickname
      - text: Check whether {displayName} is an allowed {entityType} name on behalf of user {user}.
        slots:
          displayName: requestBody.displayName
          entityType: requestBody.entityType
          user: requestBody.onBehalfOfUserId
      method: generated
      generated: '2026-10-01'