There is a command group 'az_dt_role assignment'. This group of commands could 'manage rbac role assignments for a digital twins instance'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_dt_role assignment_create'.The syntax is: az dt role-assignment create --assignee
                             --dt-name
                             --role
                             [--resource-group]. The 1th example of the child command would be to use it to 'assign a user  by email  the built in digital twins owner role against a target instance', the syntax is: az dt role-assignment create -n {instance_name} --assignee "owneruser@microsoft.com" --role "Azure Digital Twins Data Owner". The 2th example of the child command would be to use it to 'assign a user  by object id  the built in digital twins reader role against a target instance', the syntax is: az dt role-assignment create -n {instance_name} --assignee "97a89267-0966-4054-a156-b7d86ef8e216" --role "Azure Digital Twins Data Reader". The 3th example of the child command would be to use it to 'assign a service principal a custom role against a target instance', the syntax is: az dt role-assignment create -n {instance_name} --assignee {service_principal_name_or_id} --role {role_name_or_id}. The parameter '--assignee' is required. It is used to represent a user, group, or service principal. supported format: object id, user sign-in name, or service principal name.. The parameter '--dt-name --dtn -n' is required. It is used to digital twins instance name.. The parameter '--role' is required. It is used to role name or id.. The parameter '--resource-group -g' is optional. digital twins instance resource group. you can configure the default group using `az configure --defaults group=<name>`.. 