There is a command group 'az_network_nsg_rule'. This group of commands could 'manage network security group rules'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_nsg_rule_create'.The syntax is: az network nsg rule create --name
                           --nsg-name
                           --priority
                           --resource-group
                           [--access {allow, deny}]
                           [--description]
                           [--destination-address-prefixes]
                           [--destination-asgs]
                           [--destination-port-ranges]
                           [--direction {inbound, outbound}]
                           [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                           [--protocol {*, tcp, udp}]
                           [--source-address-prefixes]
                           [--source-asgs]
                           [--source-port-ranges]. The 1th example of the child command would be to use it to 'create a basic  allow  nsg rule with the highest priority', the syntax is: az network nsg rule create -g MyResourceGroup --nsg-name MyNsg -n MyNsgRule --priority 100. The 2th example of the child command would be to use it to 'create a  deny  rule over tcp for a specific ip address range with the lowest priority', the syntax is: az network nsg rule create -g MyResourceGroup --nsg-name MyNsg -n MyNsgRule --priority 4096 --source-address-prefixes 208.130.28.0/24 --source-port-ranges 80 --destination-address-prefixes '*' --destination-port-ranges 80 8080 --access Deny --protocol Tcp --description "Deny from specific IP address ranges on 80 and 8080.". The 3th example of the child command would be to use it to 'create a security rule using service tags  https   aka ms servicetags', the syntax is: az network nsg rule create -g MyResourceGroup --nsg-name MyNsg -n MyNsgRuleWithTags --priority 400 --source-address-prefixes VirtualNetwork --destination-address-prefixes Storage --destination-port-ranges '*' --direction Outbound --access Allow --protocol Tcp --description "Allow VirtualNetwork to Storage.". The 4th example of the child command would be to use it to 'create a security rule using application security groups  https   aka ms applicationsecuritygroups', the syntax is: az network nsg rule create -g MyResourceGroup --nsg-name MyNsg -n MyNsgRuleWithAsg --priority 500 --source-address-prefixes Internet --destination-port-ranges 80 8080 --destination-asgs Web --access Allow --protocol Tcp --description "Allow Internet to Web ASG on ports 80,8080.". The parameter '--name -n' is required. It is used to name of the network security group rule.. The parameter '--nsg-name' is required. It is used to name of the network security group.. The parameter '--priority' is required. It is used to priority of the rule. the value can be between 100 and 4096. the priority number must be unique for each rule in the collection. the lower the priority number, the higher the priority of the rule.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--access' is optional. network traffic is allowed or denied.. The parameter '--description' is optional. description for this rule. restricted to 140 chars.. The parameter '--destination-address-prefixes' is optional. space-separated list of cidr prefixes or ip ranges. alternatively, specify one of 'virtualnetwork', 'azureloadbalancer', 'internet' or '*' to match all ips. besides, it also supports all available service tags like 'apimanagement', 'sqlmanagement', 'azuremonitor', etc.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--destination-asgs' is optional. space-separated list of application security group names or ids. limited by backend server, temporarily this argument only supports one application security group name or id.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--destination-port-ranges' is optional. space-separated list of ports or port ranges between 0-65535. use '*' to match all ports.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--direction' is optional. direction of the rule. the direction specifies if rule will be evaluated on incoming or outgoing traffic.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--protocol' is optional. network protocol this rule applies to.. The parameter '--source-address-prefixes' is optional. space-separated list of cidr prefixes or ip ranges. alternatively, specify one of 'virtualnetwork', 'azureloadbalancer', 'internet' or '*' to match all ips. besides, it also supports all available service tags like 'apimanagement', 'sqlmanagement', 'azuremonitor', etc.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--source-asgs' is optional. space-separated list of application security group names or ids. limited by backend server, temporarily this argument only supports one application security group name or id.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--source-port-ranges' is optional. space-separated list of ports or port ranges between 0-65535. use '*' to match all ports.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 