There is a command group 'az_site recovery_protected item'. This group of commands could 'manage protected item'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_site recovery_protected item_create'.The syntax is: az site-recovery protected-item create --fabric-name
                                       --name
                                       --protection-container
                                       --resource-group
                                       --vault-name
                                       [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                       [--policy-id]
                                       [--protectable-item-id]
                                       [--provider-details]. The 1th example of the child command would be to use it to 'protected item create for a2a', the syntax is: az site-recovery protected-item create -g rg --fabric-name fabric1_name -n protected_item_name --protection-container container1_name --vault-name vault_name --policy-id policy_id --provider-details '{a2a:{fabric-object-id:vm_id,vm-managed-disks:[{disk-id:os_disk,primary-staging-azure-storage-account-id:storage1_id,recovery-resource-group-id:rg_id}],recovery-azure-network-id:vnet2_id,recovery-container-id:container2_id,recovery-resource-group-id:rg_id,recovery-subnet-name:vnet2_subnet}}'. The 2th example of the child command would be to use it to 'protected item create for hyper v replica azure', the syntax is: az site-recovery protected-item create -g "rg" --fabric-name "fabric_name" -n "protected_item_name" --protection-container "container_name" --vault-name "vault_name" --policy-id "policy_id" --protectable-item-id "protectable_item_id" --provider-details '{hyper-v-replica-azure:{disks-to-include:["vhd_id"],enable-rdp-on-target-option:Never,os-type:Windows,target-azure-network-id:"vnet_id",target-azure-subnet-id:"subnet_id",target-azure-v2-resource-group-id:"rg_id",target-azure-vm-name:"hypervvm_name",target-storage-account-id:"storage_id",use-managed-disks:false,vhd-id:"vhd_id"}}'. The 3th example of the child command would be to use it to 'protected item create for v2arcm', the syntax is: az site-recovery protected-item create -g "rg" --fabric-name "fabric_name" -n "protected_item_name" --protection-container "container_name" --vault-name "vault_name" --policy-id "policy_id" --provider-details '{in-mage-rcm:{fabric-discovery-machine-id:"fabric_discovery_machine_id",process-server-id:"process_server_id",run-as-account-id:"run_as_account_id",target-resource-group-id:"rg_id",target-boot-diagnostics-storage-account-id:"storage_id",target-network-id:"vnet_id",target-subnet-name:MySubnet,target-vm-name:"target_vm_name",disks-default:{disk-type:Premium_LRS,log-storage-account-id:"storage_id"}}}'. The parameter '--fabric-name' is required. It is used to name of the fabric.. The parameter '--name --replicated-protected-item-name -n' is required. It is used to a name for the replication protected item.. The parameter '--protection-container --protection-container-name' is required. It is used to protection container name.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--vault-name' is required. It is used to the name of the recovery services vault.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--policy-id' is optional. the policy id.. The parameter '--protectable-item-id' is optional. the protectable item id.. The parameter '--provider-details --provider-specific-details' is optional. the replicationproviderinput. for hypervreplicaazure provider, it will be azureenableprotectioninput object. for san provider, it will be sanenableprotectioninput object. for hypervreplicaazure provider, it can be null.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 