There is a command group 'az_network_manager_security admin config_rule collection_rule'. This group of commands could 'manage admin rule with network'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_manager_security admin config_rule collection_rule_create'.The syntax is: az network manager security-admin-config rule-collection rule create --access {allow, alwaysallow, deny}
                                                                     --configuration-name
                                                                     --direction {inbound, outbound}
                                                                     --kind {custom, default}
                                                                     --name
                                                                     --priority
                                                                     --protocol {ah, any, esp, icmp, tcp, udp}
                                                                     --resource-group
                                                                     --rule-collection-name
                                                                     --rule-name
                                                                     [--description]
                                                                     [--dest-port-ranges]
                                                                     [--destinations]
                                                                     [--flag]
                                                                     [--source-port-ranges]
                                                                     [--sources]. The 1th example of the child command would be to use it to 'create security admin rules', the syntax is: az network manager security-admin-config rule-collection rule create --configuration-name "myTestSecurityConfig" --network-manager-name "testNetworkManager" --resource-group "rg1" --rule-collection-name "myTestCollection" --rule-name "SampleAdminRule" --kind "Custom" --protocol "Tcp" --access "Allow" --priority 32 --direction "Inbound" --destinations address-prefix="*" address-prefix-type="IPPrefix"  --dest-port-ranges 22. The parameter '--access' is required. It is used to indicates the access allowed for this particular rule.. The parameter '--configuration-name' is required. It is used to the name of the network manager security configuration.. The parameter '--direction' is required. It is used to indicates if the traffic matched against the rule in inbound or outbound.. The parameter '--kind' is required. It is used to required. whether the rule is custom or default.constant filled by server.. The parameter '--name --network-manager-name -n' is required. It is used to the name of the network manager.. The parameter '--priority' is required. It is used to the priority of the rule.. The parameter '--protocol' is required. It is used to network protocol this rule applies to.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--rule-collection-name' is required. It is used to the name of the admin rule collection.. The parameter '--rule-name' is required. It is used to the name of the rule.. The parameter '--description' is optional. a description for this rule. restricted to 140 chars.. The parameter '--dest-port-ranges' is optional. the destination port ranges.. The parameter '--destinations' is optional. the destination address prefixes. cidr or destination ip ranges.. The parameter '--flag' is optional. default rule flag.. The parameter '--source-port-ranges' is optional. the source port ranges.. The parameter '--sources' is optional. the cidr or source ip ranges.. 