There is a command group 'az_acr_scope map'. This group of commands could 'manage scope access maps for azure container registries'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_acr_scope map_update'.The syntax is: az acr scope-map update --name
                        --registry
                        [--add-gateway]
                        [--add-repository]
                        [--description]
                        [--remove-gateway]
                        [--remove-repository]
                        [--resource-group]. The 1th example of the child command would be to use it to 'update the scope map  myscopemap  removing metadata read and content read actions for  hello world  repository  and message write action for  connectedregistry', the syntax is: az acr scope-map update -n MyScopeMap -r myregistry --remove-repo hello-world metadata/read content/read --remove-gateway connectedRegistry message/write. The parameter '--name -n' is required. It is used to the name of the scope map.. The parameter '--registry -r' is required. It is used to the name of the container registry. it should be specified in lower case. you can configure the default registry name using `az configure --defaults acr=<registry name>`.. The parameter '--add-gateway' is optional. gateway permissions to be added. use the format "--add-gateway gateway [action1 action2 ...]" per flag. valid actions are ['config/read', 'config/write', 'message/read', 'message/write'].. The parameter '--add-repository' is optional. repository permissions to be added. use the format "--add-repository repo [action1 action2 ...]" per flag. valid actions are ['content/delete', 'content/read', 'content/write', 'metadata/read', 'metadata/write'].. The parameter '--description' is optional. description for the scope map. maximum 256 characters are allowed.. The parameter '--remove-gateway' is optional. gateway permissions to be removed. use the format "--remove-gateway gateway [action1 action2 ...]" per flag. valid actions are ['config/read', 'config/write', 'message/read', 'message/write'].. The parameter '--remove-repository' is optional. repository permissions to be removed. use the format "--remove-repository repo [action1 action2 ...]" per flag. valid actions are ['content/delete', 'content/read', 'content/write', 'metadata/read', 'metadata/write'].. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. 