Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Review Set…

78 actions 78 updates phrasing extends openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 78 · first 16 shown; the file carries all of them

$.info
$.paths['/identityGovernance/accessReviews'].get
$.paths['/identityGovernance/accessReviews'].delete
$.paths['/identityGovernance/accessReviews'].patch
$.paths['/identityGovernance/accessReviews/definitions'].get
$.paths['/identityGovernance/accessReviews/definitions'].post
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].put
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].delete
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].post
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].delete
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].patch
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].get
$.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].post

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.Governance Identity Governance.access Review Set…
  version: 1.0.0
extends: openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 77
- target: $.paths['/identityGovernance/accessReviews'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the tenant's access review container
      effect: read
      questions:
      - What does the top-level access reviews object in identity governance contain?
      - Can I expand the review definitions and history definitions from the access review root?
      instructions:
      - text: Show me the access reviews root object for our tenant.
      - text: Fetch the access review set with its definitions expanded.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete the access review container
      effect: destructive
      questions:
      - Is it possible to remove the whole access reviews navigation property from identity governance?
      - What happens if I delete the access review set itself rather than a single definition?
      instructions:
      - text: Delete the access reviews container from identity governance.
      - text: Remove the access review set only if its ETag still matches {etag}.
        slots:
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update the access review container
      effect: write
      questions:
      - Can I patch the access review set root in one call instead of each definition?
      - Which collections hang off the access review set that a patch can touch?
      instructions:
      - text: Update the access review set root object.
      - text: 'Patch the access review set with these schedule definitions: {definitions}.'
        slots:
          definitions: requestBody.definitions
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions'].get
  update:
    x-apievangelist-phrasing:
      intent: List access review schedule definitions
      effect: read
      questions:
      - Which access review series are set up in our Entra tenant?
      - Can I filter the access review schedule definitions by status or display name?
      instructions:
      - text: List all access review schedule definitions.
      - text: Show the first {top} access review definitions ordered by {orderby}.
        slots:
          top: query.$top
          orderby: query.$orderby
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a new access review series
      effect: write
      questions:
      - How do I schedule a recurring access review of a group's members?
      - Can I set fallback reviewers and stage settings when I create an access review?
      - What do I need to specify to start a new access review schedule definition?
      instructions:
      - text: Create an access review called {displayName} scoped to {scope} with reviewers {reviewers}.
        slots:
          displayName: requestBody.displayName
          scope: requestBody.scope
          reviewers: requestBody.reviewers
      - text: Set up a new access review series named {displayName} with settings {settings}.
        slots:
          displayName: requestBody.displayName
          settings: requestBody.settings
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one access review schedule definition
      effect: read
      questions:
      - How can I see the scope, reviewers and settings of a specific access review series?
      - What properties come back when I read a single access review definition?
      instructions:
      - text: Get access review definition {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
      - text: Show the reviewers and schedule settings of access review {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].put
  update:
    x-apievangelist-phrasing:
      intent: Replace an access review schedule definition
      effect: write
      questions:
      - Can I change the reviewers or recurrence of an access review series that already exists?
      - Is updating an existing access review definition a full replace rather than a patch?
      instructions:
      - text: Update access review definition {definition} to use reviewers {reviewers}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          reviewers: requestBody.reviewers
      - text: Rename existing access review series {definition} to {displayName}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          displayName: requestBody.displayName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an access review series
      effect: destructive
      questions:
      - How do I permanently remove an access review series from Entra?
      - Does deleting an access review schedule definition also get rid of its instances?
      instructions:
      - text: Delete access review definition {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
      - text: Remove access review series {definition} if its ETag is {etag}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].get
  update:
    x-apievangelist-phrasing:
      intent: List occurrences of an access review series
      effect: read
      questions:
      - Which recurrences have run so far for a given access review definition?
      - Can I filter an access review series' instances by status to find the in-progress one?
      instructions:
      - text: List the instances of access review definition {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
      - text: Show instances of review series {definition} matching {filter}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances'].post
  update:
    x-apievangelist-phrasing:
      intent: Add an instance to an access review series
      effect: write
      questions:
      - Can I create an access review instance directly under a schedule definition?
      - What start and end dates can I give a new occurrence of a review series?
      instructions:
      - text: Create an instance of access review {definition} starting {startDateTime} and ending {endDateTime}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          startDateTime: requestBody.startDateTime
          endDateTime: requestBody.endDateTime
      - text: Add a new occurrence to review series {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one occurrence of an access review
      effect: read
      questions:
      - How do I check the status and dates of one run of an access review?
      - What does a single access review instance tell me about its scope and reviewers?
      instructions:
      - text: Get instance {instance} of access review definition {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show the status of review occurrence {instance} in series {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an access review instance
      effect: destructive
      questions:
      - Is it possible to delete one occurrence of an access review without deleting the series?
      - Can I guard deletion of an access review instance with an ETag?
      instructions:
      - text: Delete instance {instance} from access review series {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Remove review occurrence {instance} of {definition} only if the ETag is {etag}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Change reviewers on a running access review
      effect: write
      questions:
      - Can I add fallback reviewers to an access review instance that's already in progress?
      - Why can't I remove existing fallback reviewers from a review instance?
      - Which fields of an access review instance can actually be updated?
      instructions:
      - text: Add fallback reviewers {fallbackReviewers} to review instance {instance} of {definition}, keeping scope {scope}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          fallbackReviewers: requestBody.fallbackReviewers
          scope: requestBody.scope
      - text: Set the reviewers of in-progress instance {instance} in series {definition} to {reviewers} with scope {scope}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          reviewers: requestBody.reviewers
          scope: requestBody.scope
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].get
  update:
    x-apievangelist-phrasing:
      intent: List reviewers contacted for a review instance
      effect: read
      questions:
      - Who were the individual people asked to complete a particular access review run?
      - Does the contacted reviewer list include people who never got a notification?
      instructions:
      - text: List contacted reviewers for instance {instance} of review {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show who was asked to review occurrence {instance} in series {definition}, filtered by {filter}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a contacted reviewer record to a review
      effect: write
      questions:
      - Can I add an entry to the contacted reviewers of an access review instance?
      - What fields does a contacted reviewer record take, like user principal name?
      instructions:
      - text: Add {userPrincipalName} as a contacted reviewer on instance {instance} of review {definition}.
        slots:
          userPrincipalName: requestBody.userPrincipalName
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Record contacted reviewer {displayName} for review occurrence {instance} of {definition}.
        slots:
          displayName: requestBody.displayName
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one contacted reviewer of a review
      effect: read
      questions:
      - When a group owner is the reviewer, how do I see which actual person was contacted?
      - What details are stored for a single contacted reviewer on an access review?
      instructions:
      - text: Get contacted reviewer {reviewer} on instance {instance} of review {definition}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show the user principal name of contacted reviewer {reviewer} in occurrence {instance} of {definition}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Remove a contacted reviewer from a review
      effect: destructive
      questions:
      - Can I delete a contacted reviewer entry from an access review instance?
      - Is an ETag check supported when removing a contacted reviewer?
      instructions:
      - text: Delete contacted reviewer {reviewer} from instance {instance} of review {definition}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Remove contacted reviewer {reviewer} on occurrence {instance} of {definition} if the ETag is {etag}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a contacted reviewer record
      effect: write
      questions:
      - Can I correct the display name stored for a contacted reviewer?
      - Which contacted reviewer fields can be patched on an access review instance?
      instructions:
      - text: Change the display name of contacted reviewer {reviewer} on instance {instance} of {definition} to {displayName}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          displayName: requestBody.displayName
      - text: Update the user principal name of contacted reviewer {reviewer} in review occurrence {instance} of {definition} to {userPrincipalName}.
        slots:
          reviewer: path.accessReviewReviewer-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          userPrincipalName: requestBody.userPrincipalName
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count contacted reviewers on a review
      effect: read
      questions:
      - How many people were contacted to complete a given access review instance?
      - Can I count only the contacted reviewers that match a filter?
      instructions:
      - text: Count the contacted reviewers on instance {instance} of review {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Give me the number of contacted reviewers in occurrence {instance} of {definition} matching {filter}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions'].get
  update:
    x-apievangelist-phrasing:
      intent: List decisions in an access review instance
      effect: read
      questions:
      - Which approve and deny decisions have been recorded in an access review run?
      - Can I filter the decision items of a review instance to only the ones not yet reviewed?
      instructions:
      - text: List all decisions for instance {instance} of access review {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show decision items in review occurrence {instance} of {definition} where {filter}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a decision item to a review instance
      effect: write
      questions:
      - Can I create a new decision item directly on an access review instance?
      - What goes into a decision item, like the principal, resource and justification?
      instructions:
      - text: Create a decision item on instance {instance} of review {definition} with decision {decision}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          decision: requestBody.decision
      - text: Add a decision for principal {principal} on resource {resource} to review occurrence {instance} of {definition}.
        slots:
          principal: requestBody.principal
          resource: requestBody.resource
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one decision in a review instance
      effect: read
      questions:
      - How do I see who reviewed a specific access decision and what they decided?
      - What does a single access review decision item include, like its recommendation?
      instructions:
      - text: Get decision {decision} from instance {instance} of review {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show the recommendation and outcome of decision {decision} in review occurrence {instance} of {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a decision from a review instance
      effect: destructive
      questions:
      - Can a decision item be deleted from an access review instance?
      - Is an If-Match ETag honoured when deleting a review decision item?
      instructions:
      - text: Delete decision {decision} from instance {instance} of review {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Remove decision item {decision} in occurrence {instance} of {definition} if its ETag matches {etag}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Record a decision on a review instance item
      effect: write
      questions:
      - How do I approve or deny one access decision directly on a review instance?
      - Can I add a justification when I update an instance-level decision item?
      instructions:
      - text: Set decision {decision} on instance {instance} of review {definition} to {outcome} with justification {justification}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          outcome: requestBody.decision
          justification: requestBody.justification
      - text: Mark decision item {decision} in review occurrence {instance} of {definition} as {outcome}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          outcome: requestBody.decision
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights'].get
  update:
    x-apievangelist-phrasing:
      intent: List insights behind a review decision
      effect: read
      questions:
      - What recommendations does Entra give reviewers for a specific access decision?
      - Can a single decision item have more than one governance insight?
      instructions:
      - text: Pull the instance-level insights behind decision {decision} of run {instance}, series {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show the approve-or-deny insights attached to decision {decision} of occurrence {instance} in {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights'].post
  update:
    x-apievangelist-phrasing:
      intent: Add an insight to a review decision
      effect: write
      questions:
      - Can I attach a new governance insight to an access review decision item?
      - What fields does creating a decision insight accept?
      instructions:
      - text: Attach an instance-level insight to decision {decision} of run {instance}, series {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Add an insight created at {insightCreatedDateTime} to decision {decision} of occurrence {instance} in {definition}.
        slots:
          insightCreatedDateTime: requestBody.insightCreatedDateTime
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one insight on a review decision
      effect: read
      questions:
      - How do I read a specific recommendation insight attached to an access decision?
      - When was a given governance insight on a review decision created?
      instructions:
      - text: Read instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Show when insight {insight} for decision {decision} in occurrence {instance} of {definition} was created.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an insight from a review decision
      effect: destructive
      questions:
      - Can I remove a governance insight from an access review decision item?
      - Does deleting a decision insight support an ETag precondition?
      instructions:
      - text: Drop instance-level insight {insight} attached to decision {decision} of run {instance}, series {definition}.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Delete the instance-level insight {insight} for decision {decision}, run {instance}, series {definition}, guarded by ETag {etag}.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update an insight on a review decision
      effect: write
      questions:
      - Can I patch the creation time of an insight on an access review decision?
      - Which fields of a decision insight on an instance can be updated?
      instructions:
      - text: Patch instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Set the created time of insight {insight} for decision {decision} in occurrence {instance} of {definition} to {insightCreatedDateTime}.
        slots:
          insight: path.governanceInsight-id
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          insightCreatedDateTime: requestBody.insightCreatedDateTime
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count insights on a review decision
      effect: read
      questions:
      - How many recommendation insights are attached to one access review decision?
      - Can I count only the decision insights that match a filter?
      instructions:
      - text: Count the insights on decision {decision} in instance {instance} of review {definition}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Give me the number of insights for decision {decision} of occurrence {instance} in {definition} matching {filter}.
        slots:
          decision: path.accessReviewInstanceDecisionItem-id
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count decisions in an access review instance
      effect: read
      questions:
      - How many decision items does an access review run contain?
      - Can I count how many decisions in a review instance match a filter such as not reviewed?
      instructions:
      - text: Tally all instance-level decision items for run {instance} of series {definition}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
      - text: Give me the number of decision items in occurrence {instance} of {definition} where {filter}.
        slots:
          definition: path.accessReviewScheduleDefinition-id
          instance: path.accessReviewInstance-id
          filter: query.$filter
      method: generated
      generated: '2026-10-01'


# --- truncated at 32 KB (79 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/overlays/azure-ad-identitygovernance-accessreviewset-api-phrasing-overlay.yaml