Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0
API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Review Set…
78 actions
78 updates
phrasing
extends
openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml
Generated by API Evangelist
Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
What the actions change
x-apievangelist-phrasing
Targets 78 · first 16 shown; the file carries all of them
$.info
$.paths['/identityGovernance/accessReviews'].get
$.paths['/identityGovernance/accessReviews'].delete
$.paths['/identityGovernance/accessReviews'].patch
$.paths['/identityGovernance/accessReviews/definitions'].get
$.paths['/identityGovernance/accessReviews/definitions'].post
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].put
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].delete
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].post
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].delete
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].patch
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].post
OpenAPI Overlay
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
title: API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Review Set…
version: 1.0.0
extends: openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml
actions:
- target: $.info
update:
x-apievangelist-phrasing:
method: generated
generated: '2026-10-01'
generator: build-phrasing.py
label: Generated by API Evangelist
operations: 77
- target: $.paths['/identityGovernance/accessReviews'].get
update:
x-apievangelist-phrasing:
intent: Get the tenant's access review container
effect: read
questions:
- What does the top-level access reviews object in identity governance contain?
- Can I expand the review definitions and history definitions from the access review root?
instructions:
- text: Show me the access reviews root object for our tenant.
- text: Fetch the access review set with its definitions expanded.
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews'].delete
update:
x-apievangelist-phrasing:
intent: Delete the access review container
effect: destructive
questions:
- Is it possible to remove the whole access reviews navigation property from identity governance?
- What happens if I delete the access review set itself rather than a single definition?
instructions:
- text: Delete the access reviews container from identity governance.
- text: Remove the access review set only if its ETag still matches {etag}.
slots:
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews'].patch
update:
x-apievangelist-phrasing:
intent: Update the access review container
effect: write
questions:
- Can I patch the access review set root in one call instead of each definition?
- Which collections hang off the access review set that a patch can touch?
instructions:
- text: Update the access review set root object.
- text: 'Patch the access review set with these schedule definitions: {definitions}.'
slots:
definitions: requestBody.definitions
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions'].get
update:
x-apievangelist-phrasing:
intent: List access review schedule definitions
effect: read
questions:
- Which access review series are set up in our Entra tenant?
- Can I filter the access review schedule definitions by status or display name?
instructions:
- text: List all access review schedule definitions.
- text: Show the first {top} access review definitions ordered by {orderby}.
slots:
top: query.$top
orderby: query.$orderby
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions'].post
update:
x-apievangelist-phrasing:
intent: Create a new access review series
effect: write
questions:
- How do I schedule a recurring access review of a group's members?
- Can I set fallback reviewers and stage settings when I create an access review?
- What do I need to specify to start a new access review schedule definition?
instructions:
- text: Create an access review called {displayName} scoped to {scope} with reviewers {reviewers}.
slots:
displayName: requestBody.displayName
scope: requestBody.scope
reviewers: requestBody.reviewers
- text: Set up a new access review series named {displayName} with settings {settings}.
slots:
displayName: requestBody.displayName
settings: requestBody.settings
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one access review schedule definition
effect: read
questions:
- How can I see the scope, reviewers and settings of a specific access review series?
- What properties come back when I read a single access review definition?
instructions:
- text: Get access review definition {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
- text: Show the reviewers and schedule settings of access review {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].put
update:
x-apievangelist-phrasing:
intent: Replace an access review schedule definition
effect: write
questions:
- Can I change the reviewers or recurrence of an access review series that already exists?
- Is updating an existing access review definition a full replace rather than a patch?
instructions:
- text: Update access review definition {definition} to use reviewers {reviewers}.
slots:
definition: path.accessReviewScheduleDefinition-id
reviewers: requestBody.reviewers
- text: Rename existing access review series {definition} to {displayName}.
slots:
definition: path.accessReviewScheduleDefinition-id
displayName: requestBody.displayName
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete an access review series
effect: destructive
questions:
- How do I permanently remove an access review series from Entra?
- Does deleting an access review schedule definition also get rid of its instances?
instructions:
- text: Delete access review definition {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
- text: Remove access review series {definition} if its ETag is {etag}.
slots:
definition: path.accessReviewScheduleDefinition-id
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].get
update:
x-apievangelist-phrasing:
intent: List occurrences of an access review series
effect: read
questions:
- Which recurrences have run so far for a given access review definition?
- Can I filter an access review series' instances by status to find the in-progress one?
instructions:
- text: List the instances of access review definition {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
- text: Show instances of review series {definition} matching {filter}.
slots:
definition: path.accessReviewScheduleDefinition-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].post
update:
x-apievangelist-phrasing:
intent: Add an instance to an access review series
effect: write
questions:
- Can I create an access review instance directly under a schedule definition?
- What start and end dates can I give a new occurrence of a review series?
instructions:
- text: Create an instance of access review {definition} starting {startDateTime} and ending {endDateTime}.
slots:
definition: path.accessReviewScheduleDefinition-id
startDateTime: requestBody.startDateTime
endDateTime: requestBody.endDateTime
- text: Add a new occurrence to review series {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one occurrence of an access review
effect: read
questions:
- How do I check the status and dates of one run of an access review?
- What does a single access review instance tell me about its scope and reviewers?
instructions:
- text: Get instance {instance} of access review definition {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show the status of review occurrence {instance} in series {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete an access review instance
effect: destructive
questions:
- Is it possible to delete one occurrence of an access review without deleting the series?
- Can I guard deletion of an access review instance with an ETag?
instructions:
- text: Delete instance {instance} from access review series {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Remove review occurrence {instance} of {definition} only if the ETag is {etag}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].patch
update:
x-apievangelist-phrasing:
intent: Change reviewers on a running access review
effect: write
questions:
- Can I add fallback reviewers to an access review instance that's already in progress?
- Why can't I remove existing fallback reviewers from a review instance?
- Which fields of an access review instance can actually be updated?
instructions:
- text: Add fallback reviewers {fallbackReviewers} to review instance {instance} of {definition}, keeping scope {scope}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
fallbackReviewers: requestBody.fallbackReviewers
scope: requestBody.scope
- text: Set the reviewers of in-progress instance {instance} in series {definition} to {reviewers} with scope {scope}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
reviewers: requestBody.reviewers
scope: requestBody.scope
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].get
update:
x-apievangelist-phrasing:
intent: List reviewers contacted for a review instance
effect: read
questions:
- Who were the individual people asked to complete a particular access review run?
- Does the contacted reviewer list include people who never got a notification?
instructions:
- text: List contacted reviewers for instance {instance} of review {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show who was asked to review occurrence {instance} in series {definition}, filtered by {filter}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].post
update:
x-apievangelist-phrasing:
intent: Add a contacted reviewer record to a review
effect: write
questions:
- Can I add an entry to the contacted reviewers of an access review instance?
- What fields does a contacted reviewer record take, like user principal name?
instructions:
- text: Add {userPrincipalName} as a contacted reviewer on instance {instance} of review {definition}.
slots:
userPrincipalName: requestBody.userPrincipalName
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Record contacted reviewer {displayName} for review occurrence {instance} of {definition}.
slots:
displayName: requestBody.displayName
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one contacted reviewer of a review
effect: read
questions:
- When a group owner is the reviewer, how do I see which actual person was contacted?
- What details are stored for a single contacted reviewer on an access review?
instructions:
- text: Get contacted reviewer {reviewer} on instance {instance} of review {definition}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show the user principal name of contacted reviewer {reviewer} in occurrence {instance} of {definition}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].delete
update:
x-apievangelist-phrasing:
intent: Remove a contacted reviewer from a review
effect: destructive
questions:
- Can I delete a contacted reviewer entry from an access review instance?
- Is an ETag check supported when removing a contacted reviewer?
instructions:
- text: Delete contacted reviewer {reviewer} from instance {instance} of review {definition}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Remove contacted reviewer {reviewer} on occurrence {instance} of {definition} if the ETag is {etag}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update a contacted reviewer record
effect: write
questions:
- Can I correct the display name stored for a contacted reviewer?
- Which contacted reviewer fields can be patched on an access review instance?
instructions:
- text: Change the display name of contacted reviewer {reviewer} on instance {instance} of {definition} to {displayName}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
displayName: requestBody.displayName
- text: Update the user principal name of contacted reviewer {reviewer} in review occurrence {instance} of {definition} to {userPrincipalName}.
slots:
reviewer: path.accessReviewReviewer-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
userPrincipalName: requestBody.userPrincipalName
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count'].get
update:
x-apievangelist-phrasing:
intent: Count contacted reviewers on a review
effect: read
questions:
- How many people were contacted to complete a given access review instance?
- Can I count only the contacted reviewers that match a filter?
instructions:
- text: Count the contacted reviewers on instance {instance} of review {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Give me the number of contacted reviewers in occurrence {instance} of {definition} matching {filter}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions'].get
update:
x-apievangelist-phrasing:
intent: List decisions in an access review instance
effect: read
questions:
- Which approve and deny decisions have been recorded in an access review run?
- Can I filter the decision items of a review instance to only the ones not yet reviewed?
instructions:
- text: List all decisions for instance {instance} of access review {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show decision items in review occurrence {instance} of {definition} where {filter}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions'].post
update:
x-apievangelist-phrasing:
intent: Add a decision item to a review instance
effect: write
questions:
- Can I create a new decision item directly on an access review instance?
- What goes into a decision item, like the principal, resource and justification?
instructions:
- text: Create a decision item on instance {instance} of review {definition} with decision {decision}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
decision: requestBody.decision
- text: Add a decision for principal {principal} on resource {resource} to review occurrence {instance} of {definition}.
slots:
principal: requestBody.principal
resource: requestBody.resource
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one decision in a review instance
effect: read
questions:
- How do I see who reviewed a specific access decision and what they decided?
- What does a single access review decision item include, like its recommendation?
instructions:
- text: Get decision {decision} from instance {instance} of review {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show the recommendation and outcome of decision {decision} in review occurrence {instance} of {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete a decision from a review instance
effect: destructive
questions:
- Can a decision item be deleted from an access review instance?
- Is an If-Match ETag honoured when deleting a review decision item?
instructions:
- text: Delete decision {decision} from instance {instance} of review {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Remove decision item {decision} in occurrence {instance} of {definition} if its ETag matches {etag}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].patch
update:
x-apievangelist-phrasing:
intent: Record a decision on a review instance item
effect: write
questions:
- How do I approve or deny one access decision directly on a review instance?
- Can I add a justification when I update an instance-level decision item?
instructions:
- text: Set decision {decision} on instance {instance} of review {definition} to {outcome} with justification {justification}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
outcome: requestBody.decision
justification: requestBody.justification
- text: Mark decision item {decision} in review occurrence {instance} of {definition} as {outcome}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
outcome: requestBody.decision
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights'].get
update:
x-apievangelist-phrasing:
intent: List insights behind a review decision
effect: read
questions:
- What recommendations does Entra give reviewers for a specific access decision?
- Can a single decision item have more than one governance insight?
instructions:
- text: Pull the instance-level insights behind decision {decision} of run {instance}, series {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show the approve-or-deny insights attached to decision {decision} of occurrence {instance} in {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights'].post
update:
x-apievangelist-phrasing:
intent: Add an insight to a review decision
effect: write
questions:
- Can I attach a new governance insight to an access review decision item?
- What fields does creating a decision insight accept?
instructions:
- text: Attach an instance-level insight to decision {decision} of run {instance}, series {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Add an insight created at {insightCreatedDateTime} to decision {decision} of occurrence {instance} in {definition}.
slots:
insightCreatedDateTime: requestBody.insightCreatedDateTime
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].get
update:
x-apievangelist-phrasing:
intent: Get one insight on a review decision
effect: read
questions:
- How do I read a specific recommendation insight attached to an access decision?
- When was a given governance insight on a review decision created?
instructions:
- text: Read instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Show when insight {insight} for decision {decision} in occurrence {instance} of {definition} was created.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].delete
update:
x-apievangelist-phrasing:
intent: Delete an insight from a review decision
effect: destructive
questions:
- Can I remove a governance insight from an access review decision item?
- Does deleting a decision insight support an ETag precondition?
instructions:
- text: Drop instance-level insight {insight} attached to decision {decision} of run {instance}, series {definition}.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Delete the instance-level insight {insight} for decision {decision}, run {instance}, series {definition}, guarded by ETag {etag}.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
etag: header.If-Match
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].patch
update:
x-apievangelist-phrasing:
intent: Update an insight on a review decision
effect: write
questions:
- Can I patch the creation time of an insight on an access review decision?
- Which fields of a decision insight on an instance can be updated?
instructions:
- text: Patch instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Set the created time of insight {insight} for decision {decision} in occurrence {instance} of {definition} to {insightCreatedDateTime}.
slots:
insight: path.governanceInsight-id
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
insightCreatedDateTime: requestBody.insightCreatedDateTime
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count'].get
update:
x-apievangelist-phrasing:
intent: Count insights on a review decision
effect: read
questions:
- How many recommendation insights are attached to one access review decision?
- Can I count only the decision insights that match a filter?
instructions:
- text: Count the insights on decision {decision} in instance {instance} of review {definition}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Give me the number of insights for decision {decision} of occurrence {instance} in {definition} matching {filter}.
slots:
decision: path.accessReviewInstanceDecisionItem-id
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
filter: query.$filter
method: generated
generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count'].get
update:
x-apievangelist-phrasing:
intent: Count decisions in an access review instance
effect: read
questions:
- How many decision items does an access review run contain?
- Can I count how many decisions in a review instance match a filter such as not reviewed?
instructions:
- text: Tally all instance-level decision items for run {instance} of series {definition}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
- text: Give me the number of decision items in occurrence {instance} of {definition} where {filter}.
slots:
definition: path.accessReviewScheduleDefinition-id
instance: path.accessReviewInstance-id
filter: query.$filter
method: generated
generated: '2026-10-01'
# --- truncated at 32 KB (79 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/overlays/azure-ad-identitygovernance-accessreviewset-api-phrasing-overlay.yaml