There is a command group 'az_storage_account'. This group of commands could 'manage storage accounts'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_account_update storage preview'.The syntax is: az storage account update [--access-tier {cool, hot, premium}]
                          [--account-type]
                          [--add]
                          [--allow-append {false, true}]
                          [--allow-blob-public-access {false, true}]
                          [--allow-cross-tenant-replication {false, true}]
                          [--allow-shared-key-access {false, true}]
                          [--allowed-copy-scope {aad, privatelink}]
                          [--assign-identity]
                          [--azure-storage-sid]
                          [--bypass {azureservices, logging, metrics, none}]
                          [--custom-domain]
                          [--default-action {allow, deny}]
                          [--default-share-permission {none, storagefiledatasmbsharecontributor, storagefiledatasmbshareelevatedcontributor, storagefiledatasmbsharereader}]
                          [--domain-guid]
                          [--domain-name]
                          [--domain-sid]
                          [--enable-files-aadds {false, true}]
                          [--enable-files-aadkerb {false, true}]
                          [--enable-files-adds {false, true}]
                          [--enable-large-file-share]
                          [--enable-local-user {false, true}]
                          [--enable-sftp {false, true}]
                          [--encryption-key-name]
                          [--encryption-key-source {microsoft.keyvault, microsoft.storage}]
                          [--encryption-key-vault]
                          [--encryption-key-version]
                          [--encryption-services {blob, file, queue, table}]
                          [--force-string]
                          [--forest-name]
                          [--https-only {false, true}]
                          [--identity-type {none, systemassigned, systemassigned,userassigned, userassigned}]
                          [--ids]
                          [--immutability-period]
                          [--immutability-state {disabled, locked, unlocked}]
                          [--key-exp-days]
                          [--key-vault-federated-client-id]
                          [--key-vault-user-identity-id]
                          [--min-tls-version {tls1_0, tls1_1, tls1_2}]
                          [--name]
                          [--net-bios-domain-name]
                          [--public-network-access {disabled, enabled}]
                          [--publish-internet-endpoints {false, true}]
                          [--publish-microsoft-endpoints {false, true}]
                          [--remove]
                          [--resource-group]
                          [--routing-choice {internetrouting, microsoftrouting}]
                          [--sam-account-name]
                          [--sas-exp]
                          [--set]
                          [--sku {premium_lrs, premium_zrs, standard_grs, standard_gzrs, standard_lrs, standard_ragrs, standard_ragzrs, standard_zrs}]
                          [--subscription]
                          [--tags]
                          [--use-subdomain {false, true}]
                          [--user-identity-id]. The parameter '--access-tier' is optional. required for storage accounts where kind = blobstorage. the access tier is used for billing. the "premium" access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.. The parameter '--account-type' is optional. specify the active directory account type for azure storage.. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: `--add property.listproperty <key=value, string or json string>`.. The parameter '--allow-append --allow-protected-append-writes -w' is optional. this property can only be changed for disabled and unlocked time-based retention policies. when enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. only new blocks can be added and any existing blocks cannot be modified or deleted.. The parameter '--allow-blob-public-access' is optional. allow or disallow public access to all blobs or containers in the storage account. the default value for this property is null, which is equivalent to true. when true, containers in the account may be configured for public access. note that setting this property to true does not enable anonymous access to any data in the account. the additional step of configuring the public access setting for a container is required to enable anonymous access.. The parameter '--allow-cross-tenant-replication -r' is optional. allow or disallow cross aad tenant object replication. the default interpretation is true for this property.. The parameter '--allow-shared-key-access -k' is optional. indicate whether the storage account permits requests to be authorized with the account access key via shared key. if false, then all requests, including shared access signatures, must be authorized with azure active directory (azure ad). the default value is null, which is equivalent to true.. The parameter '--allowed-copy-scope -s' is optional. restrict copy to and from storage accounts within an aad tenant or with private links to the same vnet.. The parameter '--assign-identity' is optional. generate and assign a new storage account identity for this storage account for use with key management services like azure keyvault.. The parameter '--azure-storage-sid' is optional. specify the security identifier (sid) for azure storage. required when --enable-files-adds is set to true.. The parameter '--bypass' is optional. bypass traffic for space-separated uses.. The parameter '--custom-domain' is optional. user domain assigned to the storage account. name is the cname source. use "" to clear existing value.. The parameter '--default-action' is optional. default action to apply when no rule matches.. The parameter '--default-share-permission -d' is optional. default share permission for users using kerberos authentication if rbac role is not assigned.. The parameter '--domain-guid' is optional. specify the domain guid. required when --enable-files-adds is set to true.. The parameter '--domain-name' is optional. specify the primary domain that the ad dns server is authoritative for. required when --enable-files-adds is set to true.. The parameter '--domain-sid' is optional. specify the security identifier (sid). required when --enable-files-adds is set to true.. The parameter '--enable-files-aadds' is optional. enable azure active directory domain services authentication for azure files.. The parameter '--enable-files-aadkerb' is optional. enable azure files active directory domain service kerberos authentication for the storage account.. The parameter '--enable-files-adds' is optional. enable azure files active directory domain service authentication for storage account. when --enable-files-adds is set to true, azure active directory properties arguments must be provided.. The parameter '--enable-large-file-share' is optional. enable the capability to support large file shares with more than 5 tib capacity for storage account.once the property is enabled, the feature cannot be disabled. currently only supported for lrs and zrs replication types, hence account conversions to geo-redundant accounts would not be possible. for more information, please refer to https://go.microsoft.com/fwlink/?linkid=2086047.. The parameter '--enable-local-user' is optional. enable local user features.. The parameter '--enable-sftp' is optional. enable secure file transfer protocol.. The parameter '--encryption-key-name' is optional. the name of the keyvault key.. The parameter '--encryption-key-source' is optional. the default encryption key source.. The parameter '--encryption-key-vault' is optional. the uri of the keyvault.. The parameter '--encryption-key-version' is optional. the version of the keyvault key to use, which will opt out of implicit key rotation. please use "" to opt in key auto-rotation again.. The parameter '--encryption-services' is optional. specifies which service(s) to encrypt.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--forest-name' is optional. specify the active directory forest to get. required when --enable-files-adds is set to true.. The parameter '--https-only' is optional. allows https traffic only to storage service.. The parameter '--identity-type' is optional. the identity type.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--immutability-period --immutability-period-in-days' is optional. the immutability period for the blobs in the container since the policy creation, in days.. The parameter '--immutability-state' is optional. defines the mode of the policy. disabled state disables the policy, unlocked state allows increase and decrease of immutability retention time and also allows toggling allow-protected-append-write property, locked state only allows the increase of the immutability retention time. a policy can only be created in a disabled or unlocked state and can be toggled between the two states. only a policy in an unlocked state can transition to a locked state which cannot be reverted.. The parameter '--key-exp-days --key-expiration-period-in-days' is optional. expiration period in days of the key policy assigned to the storage account.. The parameter '--key-vault-federated-client-id -f' is optional. clientid of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.. The parameter '--key-vault-user-identity-id -u' is optional. resource identifier of the userassigned identity to be associated with server-side encryption on the storage account.. The parameter '--min-tls-version' is optional. the minimum tls version to be permitted on requests to storage. the default interpretation is tls 1.0 for this property.. The parameter '--name -n' is optional. the storage account name.. The parameter '--net-bios-domain-name' is optional. specify the netbios domain name. required when --enable-files-adds is set to true.. The parameter '--public-network-access' is optional. enable or disable public network access to the storage account. possible values include: `enabled` or `disabled`.. The parameter '--publish-internet-endpoints' is optional. a boolean flag which indicates whether internet routing storage endpoints are to be published.. The parameter '--publish-microsoft-endpoints' is optional. a boolean flag which indicates whether microsoft routing storage endpoints are to be published.. The parameter '--remove' is optional. remove a property or an element from a list.  example: `--remove property.list <indextoremove>` or `--remove propertytoremove`.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--routing-choice' is optional. routing choice defines the kind of network routing opted by the user.. The parameter '--sam-account-name' is optional. specify the active directory samaccountname for azure storage.. The parameter '--sas-exp --sas-expiration-period' is optional. expiration period of the sas policy assigned to the storage account, dd.hh:mm:ss.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: `--set property1.property2=<value>`.. The parameter '--sku' is optional. note that the sku name cannot be updated to standard_zrs, premium_lrs or premium_zrs, nor can accounts of those sku names be updated to any other value.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. The parameter '--use-subdomain' is optional. specify whether to use indirect cname validation.. The parameter '--user-identity-id' is optional. the key is the arm resource identifier of the identity. only 1 user assigned identity is permitted here.. 