There is a command group 'az_dataprotection_backup instance'. This group of commands could 'manage backup instance with dataprotection'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_dataprotection_backup instance_update msi permissions'.The syntax is: az dataprotection backup-instance update-msi-permissions --datasource-type {azureblob, azuredatabaseformysql, azuredatabaseforpostgresql, azuredatabaseforpostgresqlflexibleserver, azuredisk, azurekubernetesservice}
                                                         --operation {backup, restore}
                                                         --permissions-scope {resource, resourcegroup, subscription}
                                                         --resource-group
                                                         --vault-name
                                                         [--backup-instance]
                                                         [--keyvault-id]
                                                         [--restore-request-object]
                                                         [--snapshot-resource-group-id]
                                                         [--target-storage-account-id]
                                                         [--yes]. The 1th example of the child command would be to use it to 'assign the required permissions needed to successfully enable backup for the datasource', the syntax is: az dataprotection backup-instance update-msi-permissions --backup-instance backup_inst.json --resource-group samarth_resource_group --vault-name samarthbackupvault --datasource-type AzureDisk --operation Backup --permissions-scope ResourceGroup. The 2th example of the child command would be to use it to 'assign the required permissions needed to successfully enable restore for the datasource', the syntax is: az dataprotection backup-instance update-msi-permissions --datasource-type AzureKubernetesService --operation Restore --permissions-scope Resource --resource-group sampleRG --vault-name samplevault --restore-request-object aksrestore.json --snapshot-resource-group-id /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sampleRG. The parameter '--datasource-type' is required. It is used to specify the datasource type of the resource to be backed up.. The parameter '--operation' is required. It is used to list of possible operations.. The parameter '--permissions-scope' is required. It is used to scope for assigning permissions to the backup vault.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--vault-name -v' is required. It is used to name of the backup vault.. The parameter '--backup-instance' is optional. request body for operation "backup" expected value: json-string/@json-file. required when --operation is backup.. The parameter '--keyvault-id' is optional. arm id of the key vault. required when --datasource-type is azuredatabaseforpostgresql.. The parameter '--restore-request-object' is optional. request body for operation "restore" expected value: json-string/@json-file. required when --operation is restore.. The parameter '--snapshot-resource-group-id --snapshot-rg-id' is optional. arm id of the snapshot resource group. required when assigning permissions over snapshot resource group and the --operation is restore.. The parameter '--target-storage-account-id' is optional. arm id of the target storage account. required when assigning permissions over target storage account and the --operation is restore.. The parameter '--yes -y' is optional. do not prompt for confirmation.. 