There is a command group 'az_iot_dps_enrollment'. This group of commands could 'manage individual device enrollments in an azure iot hub device provisioning service'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_dps_enrollment_update'.The syntax is: az iot dps enrollment update --eid
                             [--allocation-policy {custom, geolatency, hashed, static}]
                             [--api-version]
                             [--auth-type {key, login}]
                             [--certificate-path]
                             [--device-id]
                             [--device-information]
                             [--dps-name]
                             [--edge-enabled {false, true}]
                             [--ek]
                             [--etag]
                             [--ih]
                             [--initial-twin-properties]
                             [--initial-twin-tags]
                             [--login]
                             [--pk]
                             [--provisioning-status {disabled, enabled}]
                             [--rc {false, true}]
                             [--remove-secondary-certificate {false, true}]
                             [--reprovision-policy {never, reprovisionandmigratedata, reprovisionandresetdata}]
                             [--resource-group]
                             [--scp]
                             [--secondary-key]
                             [--webhook-url]. The 1th example of the child command would be to use it to 'update enrollment   enrollment_id   with a new x509 certificate in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --certificate-path /certificates/NewCertificate.pem --etag AAAAAAAAAAA=. The 2th example of the child command would be to use it to 'update enrollment   enrollment_id   with a new endorsement key in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --endorsement-key 14963E8F3BA5B3984110B3C1CA8E8B89 --etag AAAAAAAAAAA=. The 3th example of the child command would be to use it to 'update enrollment   enrollment_id   with a new primary key in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --primary-key {new_primary_key} --etag AAAAAAAAAAA=. The 4th example of the child command would be to use it to 'update enrollment   enrollment_id   with a new reprovision type in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --reprovision-policy {reprovision_type} --etag AAAAAAAAAAA=. The 5th example of the child command would be to use it to 'update enrollment   enrollment_id   with a new allocation policy in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --allocation-policy geolatency --etag AAAAAAAAAAA= --iot-hubs "{iot_hub_host_name1} {iot_hub_host_name2} {iot_hub_host_name3}". The 6th example of the child command would be to use it to 'update enrollment   enrollment_id   in the azure iot device provisioning service   dps_name   in the resource group   resource_group_name   with initial twin properties    location    region   usa      initial twin tags    version   2     and device information    color   red', the syntax is: az iot dps enrollment update -g {resource_group_name} --dps-name {dps_name} --enrollment-id {enrollment_id} --initial-twin-properties "{'location':{'region':'USA'}}" --initial-twin-tags "{'version1':'2'}" --device-info "{'color':'red'}". The parameter '--eid --enrollment-id' is required. It is used to individual device enrollment id.. The parameter '--allocation-policy --ap' is optional. type of allocation policy to determine how a device is assigned to an iot hub. if not provided, the allocation policy will be the current allocation policy default set for the device provisioning service instance.. The parameter '--api-version --av' is optional. the api version of the provisioning service types sent in the custom allocation request. minimum supported version: 2018-09-01-preview.. The parameter '--auth-type' is optional. indicates whether the operation should auto-derive a policy key or use the current azure ad session. if the authentication type is login and the resource hostname is provided, resource lookup will be skipped unless needed.you can configure the default using `az configure --defaults iotdps-data-auth-type=<auth-type-value>`.. The parameter '--certificate-path --cp' is optional. the path to the file containing the primary certificate.. The parameter '--device-id -d' is optional. device id registered in the iot hub.. The parameter '--device-information --info' is optional. optional device information.. The parameter '--dps-name -n' is optional. name or hostname of the azure iot hub device provisioning service. required if --login is not provided.. The parameter '--edge-enabled --ee' is optional. flag indicating edge enablement.. The parameter '--ek --endorsement-key' is optional. tpm endorsement key for a tpm device.. The parameter '--etag -e' is optional. etag or entity tag corresponding to the last state of the resource. if no etag is provided the value '*' is used.. The parameter '--ih --iot-hubs' is optional. host name of target iot hub associated with the allocation policy. use space-separated list for multiple iot hubs.. The parameter '--initial-twin-properties --props' is optional. initial device twin properties.. The parameter '--initial-twin-tags --tags' is optional. initial device twin tags.. The parameter '--login -l' is optional. this command supports an entity connection string with rights to perform action. use to avoid session login via "az login". if both an entity connection string and name are provided the connection string takes priority. required if --dps-name is not provided.. The parameter '--pk --primary-key' is optional. the primary symmetric shared access key stored in base64 format.. The parameter '--provisioning-status --ps' is optional. enable or disable enrollment entry.. The parameter '--rc --remove-certificate' is optional. flag to remove current primary certificate.. The parameter '--remove-secondary-certificate --rsc' is optional. flag to remove current secondary certificate.. The parameter '--reprovision-policy --rp' is optional. policy to determine how device data should be handled on re-provision to a different iot hub.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--scp --secondary-certificate-path' is optional. the path to the file containing the secondary certificate.. The parameter '--secondary-key --sk' is optional. the secondary symmetric shared access key stored in base64 format.. The parameter '--webhook-url --wh' is optional. the azure function webhook url used for custom allocation requests.. 