There is a command group 'az_iot_dps_enrollment'. This group of commands could 'manage individual device enrollments in an azure iot hub device provisioning service'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_dps_enrollment_create'.The syntax is: az iot dps enrollment create --at {symmetrickey, tpm, x509}
                             --eid
                             [--allocation-policy {custom, geolatency, hashed, static}]
                             [--api-version]
                             [--auth-type {key, login}]
                             [--certificate-path]
                             [--device-id]
                             [--device-information]
                             [--dps-name]
                             [--edge-enabled {false, true}]
                             [--ek]
                             [--ih]
                             [--initial-twin-properties]
                             [--initial-twin-tags]
                             [--login]
                             [--pk]
                             [--provisioning-status {disabled, enabled}]
                             [--reprovision-policy {never, reprovisionandmigratedata, reprovisionandresetdata}]
                             [--resource-group]
                             [--scp]
                             [--secondary-key]
                             [--webhook-url]. The 1th example of the child command would be to use it to 'create an enrollment   enrollment_id   with attestation type  x509  in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name   with provisioning status  disabled   device id   device_id    initial twin properties    location    region   us      initial twin tags    version   1     and device information    color   red', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type x509 --certificate-path /certificates/Certificate.pem --provisioning-status disabled --initial-twin-properties "{'location':{'region':'US'}}" --initial-twin-tags "{'version':'1'}" --device-info "{'color':'red'}" --device-id {device_id}. The 2th example of the child command would be to use it to 'create an enrollment  myenrollment  with attestation type  tpm  in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type tpm --endorsement-key 14963E8F3BA5B3984110B3C1CA8E8B89. The 3th example of the child command would be to use it to 'create an enrollment  myenrollment  with attestation type  symmetrickey  in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type symmetrickey --primary-key {primary_key} --secondary-key {secondary_key}. The 4th example of the child command would be to use it to 'create an enrollment  myenrollment  with reprovision in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type tpm --reprovision-policy {reprovision_type} --endorsement-key 14963E8F3BA5B3984110B3C1CA8E8B89. The 5th example of the child command would be to use it to 'create an enrollment  myenrollment  with static allocation policy in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type tpm --allocation-policy static --endorsement-key 14963E8F3BA5B3984110B3C1CA8E8B89 --iot-hubs {iot_hub_host_name}. The 6th example of the child command would be to use it to 'create an enrollment  myenrollment  with hashed allocation policy and multiple hubs in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type tpm --allocation-policy hashed --endorsement-key 14963E8F3BA5B3984110B3C1CA8E8B89 --iot-hubs "{iot_hub_host_name1} {iot_hub_host_name2}". The 7th example of the child command would be to use it to 'create an enrollment  myenrollment  with custom allocation policy', the syntax is: az iot dps enrollment create -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --attestation-type symmetrickey --allocation-policy custom --webhook-url {webhook_url} --api-version {api_version}. The parameter '--at --attestation-type' is required. It is used to attestation mechanism used for authentication to the dps.. The parameter '--eid --enrollment-id' is required. It is used to individual device enrollment id.. The parameter '--allocation-policy --ap' is optional. type of allocation policy to determine how a device is assigned to an iot hub. if not provided, the allocation policy will be the current allocation policy default set for the device provisioning service instance.. The parameter '--api-version --av' is optional. the api version of the provisioning service types sent in the custom allocation request. minimum supported version: 2018-09-01-preview.. The parameter '--auth-type' is optional. indicates whether the operation should auto-derive a policy key or use the current azure ad session. if the authentication type is login and the resource hostname is provided, resource lookup will be skipped unless needed.you can configure the default using `az configure --defaults iotdps-data-auth-type=<auth-type-value>`.. The parameter '--certificate-path --cp' is optional. the path to the file containing the primary certificate. required when choosing x509 as attestation type and the secondary certificate path is not provided.. The parameter '--device-id -d' is optional. device id registered in the iot hub.. The parameter '--device-information --info' is optional. optional device information.. The parameter '--dps-name -n' is optional. name or hostname of the azure iot hub device provisioning service. required if --login is not provided.. The parameter '--edge-enabled --ee' is optional. flag indicating edge enablement.. The parameter '--ek --endorsement-key' is optional. tpm endorsement key for a tpm device. when choosing tpm as attestation type, endorsement key is required.. The parameter '--ih --iot-hubs' is optional. host name of target iot hub associated with the allocation policy. use space-separated list for multiple iot hubs.. The parameter '--initial-twin-properties --props' is optional. initial device twin properties.. The parameter '--initial-twin-tags --tags' is optional. initial device twin tags.. The parameter '--login -l' is optional. this command supports an entity connection string with rights to perform action. use to avoid session login via "az login". if both an entity connection string and name are provided the connection string takes priority. required if --dps-name is not provided.. The parameter '--pk --primary-key' is optional. the primary symmetric shared access key stored in base64 format.. The parameter '--provisioning-status --ps' is optional. enable or disable enrollment entry.. The parameter '--reprovision-policy --rp' is optional. policy to determine how device data should be handled on re-provision to a different iot hub.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--scp --secondary-certificate-path' is optional. the path to the file containing the secondary certificate. required when choosing x509 as attestation type and the primary certificate path is not provided.. The parameter '--secondary-key --sk' is optional. the secondary symmetric shared access key stored in base64 format.. The parameter '--webhook-url --wh' is optional. the azure function webhook url used for custom allocation requests.. 