There is a command group 'az_storage_account_network rule'. This group of commands could 'manage network rules'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_account_network rule_add'.The syntax is: az storage account network-rule add --account-name
                                    [--action]
                                    [--ip-address]
                                    [--resource-group]
                                    [--resource-id]
                                    [--subnet]
                                    [--tenant-id]
                                    [--vnet-name]. The 1th example of the child command would be to use it to 'create a rule to allow a specific address range', the syntax is: az storage account network-rule add -g myRg --account-name mystorageaccount --ip-address 23.45.1.0/24. The 2th example of the child command would be to use it to 'create a rule to allow access for a subnet', the syntax is: az storage account network-rule add -g myRg --account-name mystorageaccount --vnet-name myvnet --subnet mysubnet. The 3th example of the child command would be to use it to 'create a rule to allow access for a subnet in another resource group', the syntax is: az storage account network-rule add -g myRg --account-name mystorageaccount  --subnet $subnetId. The parameter '--account-name -n' is required. It is used to the storage account name.. The parameter '--action' is optional. the action of virtual network rule.. The parameter '--ip-address' is optional. ipv4 address or cidr range. can supply a list: --ip-address ip1 [ip2].... The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. 