There is a command group 'az_iot_dps_policy'. This group of commands could 'manage shared access policies for an azure iot hub device provisioning service instance'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_dps_policy_create'.The syntax is: az iot dps policy create --dps-name
                         --pn
                         --rights {deviceconnect, enrollmentread, enrollmentwrite, registrationstatusread, registrationstatuswrite, serviceconfig}
                         [--no-wait]
                         [--primary-key]
                         [--resource-group]
                         [--secondary-key]. The 1th example of the child command would be to use it to 'create a new shared access policy in an azure iot hub device provisioning service instance with enrollmentread right', the syntax is: az iot dps policy create --dps-name MyDps --resource-group MyResourceGroup --policy-name MyPolicy --rights EnrollmentRead. The parameter '--dps-name -n' is required. It is used to iot hub device provisioning service name.. The parameter '--pn --policy-name' is required. It is used to a friendly name for dps access policy.. The parameter '--rights -r' is required. It is used to access rights for the iot hub device provisioning service. use space-separated list for multiple rights.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--primary-key' is optional. primary sas key value.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--secondary-key' is optional. secondary sas key value.. 