There is a command group 'az_functionapp_config_access restriction'. This group of commands could 'methods that show  set  add  and remove access restrictions on a functionapp'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_functionapp_config_access restriction_set'.The syntax is: az functionapp config access-restriction set [--default-action {allow, deny}]
                                             [--ids]
                                             [--name]
                                             [--resource-group]
                                             [--scm-default-action {allow, deny}]
                                             [--slot]
                                             [--subscription]
                                             [--use-same-restrictions-for-scm-site {false, true}]. The 1th example of the child command would be to use it to 'enable scm site to use same access restrictions as main site', the syntax is: az functionapp config access-restriction set -g ResourceGroup -n AppName --use-same-restrictions-for-scm-site true. The 2th example of the child command would be to use it to 'set default action to allow for main site', the syntax is: az functionapp config access-restriction set -g ResourceGroup -n AppName --default-action Allow. The 3th example of the child command would be to use it to 'set default action to deny for scm site', the syntax is: az functionapp config access-restriction set -g ResourceGroup -n AppName --scm-default-action Deny. The parameter '--default-action' is optional. configure default action for main site.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--name -n' is optional. name of the function app.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--scm-default-action' is optional. configure default action for scm site.. The parameter '--slot -s' is optional. the name of the slot. default to the productions slot if not specified.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--use-same-restrictions-for-scm-site' is optional. use same access restrictions for scm site.. 