There is a command group 'az_storage_blob_access'. This group of commands could 'manage the access control properties of a blob when hierarchical namespace is enabled'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_blob_access_update'.The syntax is: az storage blob access update --blob-name
                              --container-name
                              [--account-key]
                              [--account-name]
                              [--acl-spec]
                              [--auth-mode {key, login}]
                              [--connection-string]
                              [--group]
                              [--if-match]
                              [--if-modified-since]
                              [--if-none-match]
                              [--if-unmodified-since]
                              [--lease-id]
                              [--owner]
                              [--permissions]
                              [--sas-token]
                              [--timeout]. The 1th example of the child command would be to use it to 'update the access permissions of a blob', the syntax is: az storage blob access update --permissions "rwxrwxrwx" -b MyBlob -c MyContainer --account-name MyStorageAccount. The 2th example of the child command would be to use it to 'update the owning user of a blob', the syntax is: az storage blob access update --owner [entityId/UPN] -b MyBlob -c MyContainer --account-name MyStorageAccount. The 3th example of the child command would be to use it to 'update the owning group of a blob', the syntax is: az storage blob access update --group [entityId/UPN] -b MyBlob -c MyContainer --account-name MyStorageAccount. The parameter '--blob-name -b' is required. It is used to the blob name.. The parameter '--container-name -c' is required. It is used to the container name.. The parameter '--account-key' is optional. storage account key. must be used in conjunction with storage account name. environment variable: azure_storage_key.. The parameter '--account-name' is optional. storage account name. related environment variable: azure_storage_account. must be used in conjunction with either storage account key or a sas token. if neither are present, the command will try to query the storage account key using the authenticated azure account. if a large number of storage commands are executed the api quota may be hit.. The parameter '--acl-spec -a' is optional. the acl specification to set on the path in the format "[default:]user|group|other|mask:[entity id or upn]:r|-w|-x|-,[default:]user|group|other|mask:[entity id or upn]:r|-w|-x|-,...". e.g."user::rwx,user:john.doe@contoso:rwx,group::r--,other::---,mask::rwx".. The parameter '--auth-mode' is optional. the mode in which to run the command. "login" mode will directly use your login credentials for the authentication. the legacy "key" mode will attempt to query for an account key if no authentication parameters for the account are provided. environment variable: azure_storage_auth_mode.. The parameter '--connection-string' is optional. storage account connection string. environment variable: azure_storage_connection_string.. The parameter '--group' is optional. the owning group for the directory.. The parameter '--if-match' is optional. an etag value. specify this header to perform the operation only if the resource's etag matches the value specified. the etag must be specified in quotes.. The parameter '--if-modified-since' is optional. alter only if modified since supplied utc datetime (y-m-d't'h:m'z').. The parameter '--if-none-match' is optional. an etag value or the special wildcard ("*") value. specify this header to perform the operation only if the resource's etag does not match the value specified. the etag must be specified in quotes.. The parameter '--if-unmodified-since' is optional. alter only if unmodified since supplied utc datetime (y-m-d't'h:m'z').. The parameter '--lease-id' is optional. required if the path has an active lease.. The parameter '--owner' is optional. the owning user for the directory.. The parameter '--permissions' is optional. the posix access permissions for the file owner,the file owning group, and others. both symbolic (rwxrw-rw-) and 4-digit octal notation (e.g. 0766) are supported.. The parameter '--sas-token' is optional. a shared access signature (sas). must be used in conjunction with storage account name. environment variable: azure_storage_sas_token.. The parameter '--timeout' is optional. request timeout in seconds. applies to each call to the service.. 