Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Identity.SignIns Policies.tenant App Management Policy API

4 actions 4 updates phrasing extends openapi/azure-ad-policies-tenantappmanagementpolicy-api-openapi.yml

Generated by API Evangelist Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.

View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 4

$.info

$.paths['/policies/defaultAppManagementPolicy'].get

$.paths['/policies/defaultAppManagementPolicy'].delete

$.paths['/policies/defaultAppManagementPolicy'].patch

OpenAPI Overlay

# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.SignIns Policies.tenant App Management Policy API
  version: 1.0.0
extends: openapi/azure-ad-policies-tenantappmanagementpolicy-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 3
- target: $.paths['/policies/defaultAppManagementPolicy'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the tenant default app management policy
      effect: read
      questions:
      - What credential restrictions does my tenant enforce on apps by default?
      - Is the tenant-wide app management policy currently enabled?
      instructions:
      - text: Get the tenant's default app management policy.
      - text: Show the application and service principal restrictions in the default policy.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/defaultAppManagementPolicy'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete the tenant default app management policy
      effect: destructive
      questions:
      - Can I delete the tenant-wide default app management policy?
      - What happens to app credential restrictions if the default policy is removed?
      instructions:
      - text: Delete the tenant default app management policy.
      - text: Remove the default app management policy only if its ETag is {etag}.
        slots:
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/policies/defaultAppManagementPolicy'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update the tenant default app management policy
      effect: write
      questions:
      - How do I turn on tenant-wide restrictions for app secrets and certificates?
      - Can I set different credential restrictions for applications and for service principals?
      instructions:
      - text: Set the default app management policy enabled flag to {enabled}.
        slots:
          enabled: requestBody.isEnabled
      - text: Apply application restrictions {app_rules} to the tenant default policy.
        slots:
          app_rules: requestBody.applicationRestrictions
      - text: Apply service principal restrictions {sp_rules} to the tenant default policy.
        slots:
          sp_rules: requestBody.servicePrincipalRestrictions
      method: generated
      generated: '2026-10-01'

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this

find_overlaysBrowse and filter every overlay in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This overlay

curl "https://apis.io/api/v1/overlays/azure-ad-policies-tenantappmanagementpolicy-api-phrasing-overlay"

All openapi overlays

curl "https://apis.io/api/v1/overlays?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.