There is a command group 'az_policy_assignment'. This group of commands could 'manage resource policy assignments'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_policy_assignment_create'.The syntax is: az policy assignment create [--description]
                            [--display-name]
                            [--name]
                            [--not-scopes]
                            [--params]
                            [--policy]
                            [--resource-group]
                            [--scope]. The 1th example of the child command would be to use it to 'create a resource policy assignment at scope', the syntax is: Valid scopes are management group, subscription, resource group, and resource, for example
   management group:  /providers/Microsoft.Management/managementGroups/MyManagementGroup
   subscription:      /subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333
   resource group:    /subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup
   resource:          /subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM
     az policy assignment create --scope \
        "/providers/Microsoft.Management/managementGroups/MyManagementGroup" \
            --policy {PolicyName} -p "{ \"allowedLocations\": \
                { \"value\": [ \"australiaeast\", \"eastus\", \"japaneast\" ] } }". The 2th example of the child command would be to use it to 'create a resource policy assignment and provide rule parameter values', the syntax is: az policy assignment create --policy {PolicyName} -p "{ \"allowedLocations\": \
    { \"value\": [ \"australiaeast\", \"eastus\", \"japaneast\" ] } }". The 3th example of the child command would be to use it to 'create a resource policy assignment with a system assigned identity', the syntax is: az policy assignment create --name myPolicy --policy {PolicyName} --mi-system-assigned --location eastus. The 4th example of the child command would be to use it to 'create a resource policy assignment with a system assigned identity  the identity will have  contributor  role access to the subscription', the syntax is: az policy assignment create --name myPolicy --policy {PolicyName} --mi-system-assigned --identity-scope /subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --role Contributor --location eastus. The 5th example of the child command would be to use it to 'create a resource policy assignment with a user assigned identity', the syntax is: az policy assignment create --name myPolicy --policy {PolicyName} -g MyResourceGroup --mi-user-assigned myAssignedId --location westus. The 6th example of the child command would be to use it to 'create a resource policy assignment with an enforcement mode  it indicates whether a policy effect will be enforced or not during assignment creation and update  please visit https   aka ms azure policyassignment enforcement mode for more information', the syntax is: az policy assignment create --name myPolicy --policy {PolicyName} --enforcement-mode 'DoNotEnforce'. The parameter '--description' is optional. description of the policy assignment.. The parameter '--display-name' is optional. display name of the policy assignment.. The parameter '--name -n' is optional. name of the new policy assignment.. The parameter '--not-scopes' is optional. space-separated scopes where the policy assignment does not apply.. The parameter '--params -p' is optional. json formatted string or a path to a file or uri with parameter values of the policy rule.. The parameter '--policy' is optional. name or id of the policy definition. if not provided, a policy set definition parameter must be provided.. The parameter '--resource-group -g' is optional. the resource group where the policy will be applied.. The parameter '--scope' is optional. scope to which this policy assignment applies.. 