There is a command group 'az_security_va_sql_baseline'. This group of commands could 'view and manage sql vulnerability assessment baseline'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_security_va_sql_baseline_set'.The syntax is: az security va sql baseline set --database-name
                                --server-name
                                --vm-resource-id
                                --workspace-id
                                [--agent-id]
                                [--baseline]
                                [--latest {false, true}]
                                [--vm-name]
                                [--vm-uuid]. The 1th example of the child command would be to use it to 'sets sql vulnerability assessment baseline on an azure virtual machine  replaces the current baseline with latest scan results', the syntax is: az security va sql baseline set --vm-resource-id subscriptions/MySubscription/ResourceGroups/MyResourceGroup/Providers/Microsoft.Compute/VirtualMachines/MyVmName --workspace-id 00000000-0000-0000-0000-000000000000 --server-name MyServerName --database-name MyDbName --latest. The 2th example of the child command would be to use it to 'sets sql vulnerability assessment baseline on an azure virtual machine  replaces the current baseline with provided results', the syntax is: az security va sql baseline set --vm-resource-id subscriptions/MySubscription/ResourceGroups/MyResourceGroup/Providers/Microsoft.Compute/VirtualMachines/MyVmName --workspace-id 00000000-0000-0000-0000-000000000000 --server-name MyServerName --database-name MyDbName --baseline rule=VA9999 Line1_col1 Line1_col2 Line1_col3 --baseline rule=VA8888 Line1_col1 Line1_col2 --baseline rule=VA9999 Line2_col1 Line2_col2 Line2_col3. The 3th example of the child command would be to use it to 'sets sql vulnerability assessment baseline on an on premise machine  replaces the current baseline with latest scan results', the syntax is: az security va sql baseline set --vm-resource-id subscriptions/MySubscription/ResourceGroups/MyResourceGroup/Providers/Microsoft.OperationalInsights/Workspaces/MyWorkspaceName --workspace-id 00000000-0000-0000-0000-000000000000 --server-name MyServerName --database-name MyDbName --vm-name MyVmName --agent-id MyAgentId --vm-uuid MyVmUUID --latest. The 4th example of the child command would be to use it to 'sets sql vulnerability assessment baseline on an on premise machine  replaces the current baseline with provided results', the syntax is: az security va sql baseline set --vm-resource-id subscriptions/MySubscription/ResourceGroups/MyResourceGroup/Providers/Microsoft.OperationalInsights/Workspaces/MyWorkspaceName --workspace-id 00000000-0000-0000-0000-000000000000 --server-name MyServerName --database-name MyDbName --vm-name MyVmName --agent-id MyAgentId --vm-uuid MyVmUUID --baseline rule=VA9999 Line1_col1 Line1_col2 Line1_col3 --baseline rule=VA8888 Line1_col1 Line1_col2 --baseline rule=VA9999 Line2_col1 Line2_col2 Line2_col3. The parameter '--database-name' is required. It is used to the name of the scanned database.. The parameter '--server-name' is required. It is used to the name of the scanned server.. The parameter '--vm-resource-id' is required. It is used to resource id of the scanned machine. for on-premise machines, please provide your workspace resource id.. The parameter '--workspace-id' is required. It is used to the id of the workspace connected to the scanned machine.. The parameter '--agent-id' is optional. provide the id of the agent on the scanned machine, for on-premise resources only.. The parameter '--baseline -b' is optional. baseline records to be set. the following example will set a baseline for two rules: --baseline rule=va1111 line1_w1 line1_w2 --baseline rule=va2222 line1_w1 line1_w2 line1_w3 --baseline rule=va1111 line2_w1 line2_w2.. The parameter '--latest' is optional. use this argument without parameters to set baseline upon latest scan results.. The parameter '--vm-name' is optional. provide the name of the machine, for on-premise resources only.. The parameter '--vm-uuid' is optional. provide the uuid of the scanned machine, for on-premise resources only.. 