There is a command group 'az_iot_du_account'. This group of commands could 'device update account management'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_du_account_create'.The syntax is: az iot du account create --account
                         --resource-group
                         [--assign-identity]
                         [--location]
                         [--no-wait]
                         [--pna {disabled, enabled}]
                         [--role]
                         [--scopes]
                         [--sku {free, standard}]
                         [--tags]. The 1th example of the child command would be to use it to 'create a device update account in target resource group using the resource group location', the syntax is: az iot du account create -n {account_name} -g {resouce_group}. The 2th example of the child command would be to use it to 'create a free sku device update account in target resource group with specified location and tags without blocking', the syntax is: az iot du account create -n {account_name} -g {resouce_group} -l westus --tags a=b c=d --sku Free --no-wait. The 3th example of the child command would be to use it to 'create a device update account in target resource group with a system managed identity', the syntax is: az iot du account create -n {account_name} -g {resouce_group} --assign-identity [system]. The 4th example of the child command would be to use it to 'create a device update account in target resource group with a system managed identity then assign the system identity to a single scope with the role of contributor', the syntax is: az iot du account create -n {account_name} -g {resouce_group} --assign-identity [system] --scopes /subscriptions/a12345ea-bb21-994d-2263-c716348e32a1/resourceGroups/ProResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount. The 5th example of the child command would be to use it to 'create a device update account in target resource group with system and user assigned managed identities then assign the system identity to one or more scopes  space separated  with a custom specified role', the syntax is: az iot du account create -n {account_name} -g {resouce_group} --assign-identity [system] /subscriptions/a12345ea-bb21-994d-2263-c716348e32a1/resourcegroups/ProResourceGroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myIdentity --scopes /subscriptions/a12345ea-bb21-994d-2263-c716348e32a1/resourceGroups/ProResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount1
  /subscriptions/a12345ea-bb21-994d-2263-c716348e32a1/resourceGroups/ProResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount2
--role "Storage Blob Data Contributor". The parameter '--account -n' is required. It is used to device update account name. you can configure the default account name using `az config set defaults.adu_account=<name>`.. The parameter '--resource-group -g' is required. It is used to device update account resource group name. you can configure the default group using `az config set defaults.adu_group=<name>`.. The parameter '--assign-identity' is optional. accepts system or user assigned identities separated by spaces. use '[system]' to refer to the system assigned identity, or a resource id to refer to a user assigned identity. check out help for examples.. The parameter '--location -l' is optional. device update account location. if no location is provided the resource group location is used. you can configure the default location using `az configure --defaults location=<name>`.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--pna --public-network-access' is optional. indicates if the device update account can be accessed from a public network.. The parameter '--role' is optional. role name or id the system assigned identity will have.. The parameter '--scopes' is optional. space-separated scopes the system assigned identity can access. cannot be used with --no-wait.. The parameter '--sku' is optional. device update account sku.. The parameter '--tags' is optional. resource tags. property bag in key-value pairs with the following format: a=b c=d.. 