There is a command group 'az_networkfabric_acl'. This group of commands could 'manage access control list resource'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_networkfabric_acl_update'.The syntax is: az networkfabric acl update [--acls-url]
                            [--annotation]
                            [--configuration-type {file, inline}]
                            [--default-action {deny, permit}]
                            [--dynamic-match-configurations]
                            [--ids]
                            [--match-configurations]
                            [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                            [--resource-group]
                            [--resource-name]
                            [--subscription]
                            [--tags]. The 1th example of the child command would be to use it to 'update acl with inline configuration type', the syntax is: az networkfabric acl update -g "example-rg" --resource-name "example-acl" --configuration-type "Inline" --default-action "Permit"  --dynamic-match-configurations "[{ipGroups:[{name:'example-ipGroup',ipAddressType:IPv4,ipPrefixes:['10.20.3.1/20']}],vlanGroups:[{name:'example-vlanGroup',vlans:['20-30']}],portGroups:[{name:'example-portGroup',ports:['100-200']}]}]" --match-configurations "[{matchConfigurationName:'example-match',sequenceNumber:123,ipAddressType:IPv4,matchConditions:[{etherTypes:['0x1'],fragments:['0xff00-0xffff'],ipLengths:['4094-9214'],ttlValues:[23],dscpMarkings:[32],portCondition:{flags:[established],portType:SourcePort,layer4Protocol:TCP,ports:['1-20'],portGroupNames:['example-portGroup']},protocolTypes:[TCP],vlanMatchCondition:{vlans:['20-30'],innerVlans:[30],vlanGroupNames:['example-vlanGroup']},ipCondition:{type:SourceIP,prefixType:Prefix,ipPrefixValues:['10.20.20.20/12'],ipGroupNames:['example-ipGroup']}}],actions:[{type:Count,counterName:'example-counter'}]}]". The parameter '--acls-url' is optional. access control list file url.. The parameter '--annotation' is optional. description for underlying resource.. The parameter '--configuration-type' is optional. input method to configure access control list. example: file.. The parameter '--default-action' is optional. default action that needs to be applied when no condition is matched. example: permit.. The parameter '--dynamic-match-configurations' is optional. list of dynamic match configurations.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--match-configurations' is optional. list of match configurations.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--resource-name' is optional. name of the access control list.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tags' is optional. resource tags  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 