Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0
API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Package…
253 actions
253 updates
phrasing
extends
openapi/azure-ad-identitygovernance-accesspackagecatalog-api-openapi.yml
Generated by API Evangelist
Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
What the actions change
x-apievangelist-phrasing
Targets 253 · first 16 shown; the file carries all of them
$.info
$.paths['/identityGovernance/catalogs'].get
$.paths['/identityGovernance/catalogs'].post
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].delete
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].patch
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages/{accessPackage-id}'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages/$count'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions'].post
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].delete
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].patch
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/$count'].get
$.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles'].get
OpenAPI Overlay
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
title: API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Package…
version: 1.0.0
extends: openapi/azure-ad-identitygovernance-accesspackagecatalog-api-openapi.yml
actions:
- target: $.info
update:
x-apievangelist-phrasing:
method: generated
generated: '2026-10-01'
generator: build-phrasing.py
label: Generated by API Evangelist
operations: 252
- target: $.paths['/identityGovernance/catalogs'].get
update:
x-apievangelist-phrasing:
intent: List access package catalogs
effect: read
questions:
- Which access package catalogs exist in my Entra ID tenant?
- Can I search or filter the catalogs used for entitlement management?
instructions:
- text: List every access package catalog in the tenant.
- text: Show catalogs whose properties match {filter}, first {top} only.
slots:
filter: query.$filter
top: query.$top
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs'].post
update:
x-apievangelist-phrasing:
intent: Create an access package catalog
effect: write
questions:
- How do I set up a new catalog to hold access packages?
- Can a new catalog be made visible to users outside my organization?
instructions:
- text: Create an access package catalog called {name}.
slots:
name: requestBody.displayName
- text: Create an externally visible catalog named {name} described as {description}.
slots:
name: requestBody.displayName
description: requestBody.description
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one access package catalog
effect: read
questions:
- What are the settings of a specific access package catalog?
- Is a particular catalog published and externally visible?
instructions:
- text: Show the details of access package catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Get the name, state and visibility of catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete an access package catalog
effect: destructive
questions:
- Can I remove an access package catalog I no longer use?
- What happens when I delete an entitlement management catalog?
instructions:
- text: Delete access package catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Remove catalog {catalog} from identity governance permanently.
slots:
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update an access package catalog
effect: write
questions:
- How do I rename an existing access package catalog?
- Can I switch a catalog's state or its external visibility after creating it?
instructions:
- text: Rename access package catalog {catalog} to {name}.
slots:
catalog: path.accessPackageCatalog-id
name: requestBody.displayName
- text: Change the state of catalog {catalog} to {state}.
slots:
catalog: path.accessPackageCatalog-id
state: requestBody.state
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages'].get
update:
x-apievangelist-phrasing:
intent: List the access packages in a catalog
effect: read
questions:
- Which access packages live inside a given catalog?
- Can I see all access packages grouped under one catalog?
instructions:
- text: List the access packages in catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Show the first {top} access packages of catalog {catalog}.
slots:
top: query.$top
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages/{accessPackage-id}'].get
update:
x-apievangelist-phrasing:
intent: Get an access package from a catalog
effect: read
questions:
- How can I look up one access package through its catalog?
- What details does a catalog return for a single access package it holds?
instructions:
- text: Get access package {package} from catalog {catalog}.
slots:
package: path.accessPackage-id
catalog: path.accessPackageCatalog-id
- text: Show package {package} as listed under catalog {catalog}.
slots:
package: path.accessPackage-id
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/accessPackages/$count'].get
update:
x-apievangelist-phrasing:
intent: Count the access packages in a catalog
effect: read
questions:
- How many access packages does a catalog contain?
- Can I count only the catalog's packages matching a filter?
instructions:
- text: Count the access packages in catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Count packages in catalog {catalog} that match {filter}.
slots:
catalog: path.accessPackageCatalog-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions'].get
update:
x-apievangelist-phrasing:
intent: List a catalog's custom workflow extensions
effect: read
questions:
- Which custom workflow extensions are attached to a catalog?
- Can I see the Logic App callouts a catalog uses during access requests?
instructions:
- text: List the custom workflow extensions of catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Show custom callout extensions in catalog {catalog} matching {filter}.
slots:
catalog: path.accessPackageCatalog-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions'].post
update:
x-apievangelist-phrasing:
intent: Add a custom workflow extension to a catalog
effect: write
questions:
- How do I add a custom extension that calls an external endpoint from a catalog?
- Can I configure the endpoint and authentication for a new catalog callout?
instructions:
- text: Add a custom workflow extension named {name} to catalog {catalog}.
slots:
name: requestBody.displayName
catalog: path.accessPackageCatalog-id
- text: Create a callout extension in catalog {catalog} pointing at endpoint {endpoint}.
slots:
catalog: path.accessPackageCatalog-id
endpoint: requestBody.endpointConfiguration
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].get
update:
x-apievangelist-phrasing:
intent: Get a catalog's custom workflow extension
effect: read
questions:
- What endpoint and authentication does one catalog callout extension use?
- Where can I inspect a single custom workflow extension of a catalog?
instructions:
- text: Show custom workflow extension {ext} in catalog {catalog}.
slots:
ext: path.customCalloutExtension-id
catalog: path.accessPackageCatalog-id
- text: Get the endpoint configuration of extension {ext} from catalog {catalog}.
slots:
ext: path.customCalloutExtension-id
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].delete
update:
x-apievangelist-phrasing:
intent: Remove a catalog's custom workflow extension
effect: destructive
questions:
- Can I delete a custom workflow extension from a catalog?
- What removes an unused Logic App callout from an access package catalog?
instructions:
- text: Delete custom workflow extension {ext} from catalog {catalog}.
slots:
ext: path.customCalloutExtension-id
catalog: path.accessPackageCatalog-id
- text: Remove callout extension {ext} out of catalog {catalog}.
slots:
ext: path.customCalloutExtension-id
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/{customCalloutExtension-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update a catalog's custom workflow extension
effect: write
questions:
- How do I point an existing catalog callout extension at a new endpoint?
- Can I rename a custom workflow extension that a catalog already has?
instructions:
- text: Change the endpoint of custom workflow extension {ext} in catalog {catalog} to {endpoint}.
slots:
ext: path.customCalloutExtension-id
catalog: path.accessPackageCatalog-id
endpoint: requestBody.endpointConfiguration
- text: Rename catalog {catalog} extension {ext} to {name}.
slots:
catalog: path.accessPackageCatalog-id
ext: path.customCalloutExtension-id
name: requestBody.displayName
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/customWorkflowExtensions/$count'].get
update:
x-apievangelist-phrasing:
intent: Count a catalog's custom workflow extensions
effect: read
questions:
- How many custom workflow extensions are defined in a catalog?
- Can I count a catalog's callout extensions that match a filter?
instructions:
- text: Count the custom workflow extensions in catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Count catalog {catalog} callout extensions matching {filter}.
slots:
catalog: path.accessPackageCatalog-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles'].get
update:
x-apievangelist-phrasing:
intent: List a catalog's resource roles
effect: read
questions:
- Which resource roles are available to assign from a catalog?
- Can I filter a catalog's resource roles, for example by origin system?
instructions:
- text: List the resource roles in catalog {catalog}.
slots:
catalog: path.accessPackageCatalog-id
- text: Show resource roles of catalog {catalog} that match {filter}.
slots:
catalog: path.accessPackageCatalog-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles'].post
update:
x-apievangelist-phrasing:
intent: Add a resource role to a catalog
effect: write
questions:
- How do I register a role of a resource so a catalog can hand it out?
- Can I add a role by its origin ID from the source system?
instructions:
- text: Add a resource role named {name} to catalog {catalog}.
slots:
name: requestBody.displayName
catalog: path.accessPackageCatalog-id
- text: Register role {originId} from {originSystem} as a resource role in catalog {catalog}.
slots:
originId: requestBody.originId
originSystem: requestBody.originSystem
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one resource role in a catalog
effect: read
questions:
- What are the details of a specific resource role in a catalog?
- Which origin system does a given catalog resource role come from?
instructions:
- text: Show resource role {role} of catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Get the origin ID and type of catalog {catalog} resource role {role}.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}'].delete
update:
x-apievangelist-phrasing:
intent: Remove a resource role from a catalog
effect: destructive
questions:
- Can I take a resource role out of an access package catalog?
- How is a role deleted from a catalog's list of resource roles?
instructions:
- text: Delete resource role {role} from catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Remove role {role} from the resource roles of catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update a resource role in a catalog
effect: write
questions:
- How do I change the name or description of a catalog resource role?
- Can I edit a resource role a catalog already lists?
instructions:
- text: Rename resource role {role} in catalog {catalog} to {name}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
name: requestBody.displayName
- text: Update the description of catalog {catalog} resource role {role} to {description}.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
description: requestBody.description
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource'].get
update:
x-apievangelist-phrasing:
intent: Get the resource behind a catalog resource role
effect: read
questions:
- Which resource does a catalog resource role actually belong to?
- Can I see the app or group a catalog role grants access to?
instructions:
- text: Show the resource behind catalog role {role} in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Get the app or group that catalog {catalog} role {role} points at.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource'].delete
update:
x-apievangelist-phrasing:
intent: Unlink the resource from a catalog resource role
effect: destructive
questions:
- Can I delete the resource record attached to a catalog resource role?
- What detaches the resource a catalog role was granting?
instructions:
- text: Delete the resource record attached to catalog role {role} in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Detach catalog {catalog} role {role} from the resource it grants.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource'].patch
update:
x-apievangelist-phrasing:
intent: Update the resource behind a catalog resource role
effect: write
questions:
- How do I rename the resource that sits behind a catalog role?
- Can I edit attributes of the resource a catalog role grants?
instructions:
- text: Rename the resource that sits behind catalog role {role} (catalog {catalog}) to {name}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
name: requestBody.displayName
- text: Change attributes of the resource granted by catalog {catalog} role {role} to {attributes}.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
attributes: requestBody.attributes
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/environment'].get
update:
x-apievangelist-phrasing:
intent: Get the environment of a catalog role's resource
effect: read
questions:
- Which environment is the resource behind a catalog role tied to?
- Can I read the origin environment of a resource a catalog role grants?
instructions:
- text: Show the environment of the resource behind catalog role {role} in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Get environment info for the resource granted by catalog {catalog} role {role}.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/microsoft.graph.refresh'].post
update:
x-apievangelist-phrasing:
intent: Refresh the resource behind a catalog resource role
effect: write
questions:
- How do I refresh the resource that a catalog role is attached to?
- Can I trigger a refresh on the resource a catalog role grants?
instructions:
- text: Refresh the resource behind catalog role {role} in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Run the refresh action for the resource granted by catalog {catalog} role {role}.
slots:
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles'].get
update:
x-apievangelist-phrasing:
intent: List roles of a catalog role's backing resource
effect: read
questions:
- What other roles does the resource behind a catalog role offer?
- Can I list every role defined on the resource a catalog role grants?
instructions:
- text: List every role offered by catalog role {role}'s backing resource in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Show backing-resource roles matching {filter} for catalog {catalog} role {role}.
slots:
filter: query.$filter
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles'].post
update:
x-apievangelist-phrasing:
intent: Add a role to a catalog role's backing resource
effect: write
questions:
- How do I add another role to the resource behind a catalog role?
- Can I register a new origin role on a catalog role's backing resource?
instructions:
- text: Add a new role called {name} to catalog role {role}'s backing resource in catalog {catalog}.
slots:
name: requestBody.displayName
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Register origin role {originId} with the backing resource of catalog {catalog} role {role}.
slots:
originId: requestBody.originId
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles/{accessPackageResourceRole-id1}'].get
update:
x-apievangelist-phrasing:
intent: Get a sibling role on a catalog role's resource
effect: read
questions:
- Where do I read a single sibling role offered by a catalog role's backing resource?
- What details come back for one other role on the resource a catalog role grants?
instructions:
- text: Show sibling role {role2} offered by catalog role {role}'s backing resource in catalog {catalog}.
slots:
role2: path.accessPackageResourceRole-id1
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Get sibling role entry {role2} from the backing resource of catalog {catalog} role {role}.
slots:
role2: path.accessPackageResourceRole-id1
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles/{accessPackageResourceRole-id1}'].delete
update:
x-apievangelist-phrasing:
intent: Delete a sibling role on a catalog role's resource
effect: destructive
questions:
- Can I delete one sibling role from a catalog role's backing resource?
- What removes a single other role offered by the resource a catalog role grants?
instructions:
- text: Delete sibling role {role2} offered by catalog role {role}'s backing resource in catalog {catalog}.
slots:
role2: path.accessPackageResourceRole-id1
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Remove sibling role entry {role2} from the backing resource of catalog {catalog} role {role}.
slots:
role2: path.accessPackageResourceRole-id1
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles/{accessPackageResourceRole-id1}'].patch
update:
x-apievangelist-phrasing:
intent: Update a sibling role on a catalog role's resource
effect: write
questions:
- How do I rename a sibling role offered by a catalog role's backing resource?
- Can I edit the description of one other role on the resource a catalog role grants?
instructions:
- text: Rename sibling role {role2} offered by catalog role {role}'s backing resource (catalog {catalog}) to {name}.
slots:
role2: path.accessPackageResourceRole-id1
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
name: requestBody.displayName
- text: Set sibling role entry {role2} description to {description} on catalog {catalog} role {role}'s backing resource.
slots:
role2: path.accessPackageResourceRole-id1
description: requestBody.description
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/roles/$count'].get
update:
x-apievangelist-phrasing:
intent: Count roles of a catalog role's backing resource
effect: read
questions:
- How many roles does the resource behind a catalog role have in total?
- Can I count the backing resource's roles for a catalog role using a filter?
instructions:
- text: Count every role offered by catalog role {role}'s backing resource in catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Count backing-resource roles matching {filter} for catalog {catalog} role {role}.
slots:
filter: query.$filter
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/scopes'].get
update:
x-apievangelist-phrasing:
intent: List scopes of a catalog role's backing resource
effect: read
questions:
- Which scopes exist within the underlying resource of a catalog role?
- Is there a way to filter scopes defined within a catalog role's underlying resource?
instructions:
- text: List scopes defined within the underlying resource of catalog role {role}, catalog {catalog}.
slots:
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Enumerate underlying-resource scopes that match {filter} under catalog {catalog} role {role}.
slots:
filter: query.$filter
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/scopes'].post
update:
x-apievangelist-phrasing:
intent: Add a scope to a catalog role's backing resource
effect: write
questions:
- What call creates a scope within the underlying resource of a catalog role?
- Is it possible to register an origin scope within a catalog role's underlying resource?
instructions:
- text: Create scope {name} within the underlying resource of catalog role {role}, catalog {catalog}.
slots:
name: requestBody.displayName
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Register origin scope {originId} within the underlying resource tied to catalog {catalog} role {role}.
slots:
originId: requestBody.originId
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/scopes/{accessPackageResourceScope-id}'].get
update:
x-apievangelist-phrasing:
intent: Get a scope of a catalog role's backing resource
effect: read
questions:
- Where can I fetch one scope defined within a catalog role's underlying resource?
- What does a single underlying-resource scope of a catalog role contain?
instructions:
- text: Fetch scope {scope} defined within the underlying resource of catalog role {role}, catalog {catalog}.
slots:
scope: path.accessPackageResourceScope-id
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Retrieve underlying-resource scope {scope} for catalog {catalog} role {role}.
slots:
scope: path.accessPackageResourceScope-id
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/scopes/{accessPackageResourceScope-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete a scope of a catalog role's backing resource
effect: destructive
questions:
- Is it possible to remove one scope within a catalog role's underlying resource?
- Which call drops a scope defined within the underlying resource of a catalog role?
instructions:
- text: Remove scope {scope} defined within the underlying resource of catalog role {role}, catalog {catalog}.
slots:
scope: path.accessPackageResourceScope-id
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
- text: Drop underlying-resource scope {scope} for catalog {catalog} role {role}.
slots:
scope: path.accessPackageResourceScope-id
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/catalogs/{accessPackageCatalog-id}/resourceRoles/{accessPackageResourceRole-id}/resource/scopes/{accessPackageResourceScope-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update a scope of a catalog role's backing resource
effect: write
questions:
- What changes the name of a scope within a catalog role's underlying resource?
- Is editing a scope description within a catalog role's underlying resource supported?
instructions:
- text: Retitle scope {scope} within the underlying resource of catalog role {role}, catalog {catalog}, as {name}.
slots:
scope: path.accessPackageResourceScope-id
role: path.accessPackageResourceRole-id
catalog: path.accessPackageCatalog-id
name: requestBody.displayName
- text: Change underlying-resource scope {scope} description to {description} for catalog {catalog} role {role}.
slots:
scope: path.accessPackageResourceScope-id
description: requestBody.description
catalog: path.accessPackageCatalog-id
role: path.accessPackageResourceRole-id
method: generated
generated: '2026-10-01'
# --- truncated at 32 KB (299 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/overlays/azure-ad-identitygovernance-accesspackagecatalog-api-phrasing-overlay.yaml