There is a command group 'az_databricks_workspace'. This group of commands could 'commands to manage databricks workspace'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_databricks_workspace_update'.The syntax is: az databricks workspace update [--add]
                               [--disk-key-auto-rotation {0, 1, f, false, n, no, t, true, y, yes}]
                               [--disk-key-name]
                               [--disk-key-vault]
                               [--disk-key-version]
                               [--enable-no-public-ip {0, 1, f, false, n, no, t, true, y, yes}]
                               [--force-string {0, 1, f, false, n, no, t, true, y, yes}]
                               [--ids]
                               [--key-name]
                               [--key-source {default, microsoft.keyvault}]
                               [--key-vault]
                               [--key-version]
                               [--managed-services-key-name]
                               [--managed-services-key-vault]
                               [--managed-services-key-version]
                               [--name]
                               [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                               [--prepare-encryption {0, 1, f, false, n, no, t, true, y, yes}]
                               [--public-network-access {disabled, enabled}]
                               [--remove]
                               [--required-nsg-rules {allrules, noazuredatabricksrules, noazureservicerules}]
                               [--resource-group]
                               [--sa-sku-name]
                               [--set]
                               [--sku]
                               [--subscription]
                               [--tags]. The 1th example of the child command would be to use it to 'update the workspace s tags', the syntax is: az databricks workspace update --resource-group MyResourceGroup --name MyWorkspace --tags key1=value1 key2=value2. The 2th example of the child command would be to use it to 'clean the workspace s tags', the syntax is: az databricks workspace update --resource-group MyResourceGroup --name MyWorkspace --tags "". The 3th example of the child command would be to use it to 'prepare for cmk encryption by assigning identity for storage account', the syntax is: az databricks workspace update --resource-group MyResourceGroup --name MyWorkspace --prepare-encryption. The 4th example of the child command would be to use it to 'configure cmk encryption', the syntax is: az databricks workspace update --resource-group MyResourceGroup --name MyWorkspace --key-source Microsoft.KeyVault --key-name MyKey --key-vault https://myKeyVault.vault.azure.net/ --key-version 00000000000000000000000000000000. The 5th example of the child command would be to use it to 'revert encryption to microsoft managed keys', the syntax is: az databricks workspace update --resource-group MyResourceGroup --name MyWorkspace --key-source Default. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: --add property.listproperty <key=value, string or json string>.. The parameter '--disk-key-auto-rotation' is optional. indicate whether the latest key version should be automatically used for managed disk encryption.. The parameter '--disk-key-name' is optional. the name of keyvault key.. The parameter '--disk-key-vault' is optional. the uri of keyvault.. The parameter '--disk-key-version' is optional. the version of keyvault key.. The parameter '--enable-no-public-ip' is optional. flag to enable the no public ip feature.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--key-name' is optional. the name of keyvault key.. The parameter '--key-source' is optional. the encryption key source (provider).  allowed values: default, microsoft.keyvault.. The parameter '--key-vault' is optional. the uri of keyvault.. The parameter '--key-version' is optional. the version of keyvault key. it is optional when updating cmk.. The parameter '--managed-services-key-name --ms-key-name' is optional. the name of keyvault key.. The parameter '--managed-services-key-vault --ms-key-vault' is optional. the uri of keyvault.. The parameter '--managed-services-key-version --ms-key-version' is optional. the version of keyvault key.. The parameter '--name -n' is optional. the name of the workspace.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--prepare-encryption' is optional. flag to enable the managed identity for managed storage account to prepare for cmk encryption.. The parameter '--public-network-access' is optional. the network access type for accessing workspace. set value to disabled to access workspace only via private link.. The parameter '--remove' is optional. remove a property or an element from a list.  example: --remove property.list <indextoremove> or --remove propertytoremove.. The parameter '--required-nsg-rules' is optional. the type of nsg rule for internal use only.  allowed values: allrules, noazuredatabricksrules, noazureservicerules.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--sa-sku-name --storage-account-sku-name' is optional. storage account sku name, ex: standard_grs, standard_lrs. refer https://aka.ms/storageskus for valid inputs.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: --set property1.property2=<value>.. The parameter '--sku' is optional. the sku tier name.  allowed values: premium, standard, trial.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 