There is a command group 'az_network_firewall_policy_rule collection group_collection'. This group of commands could 'manage and configure azure firewall policy rule collections in the rule collection group'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_firewall_policy_rule collection group_collection_add nat collection'.The syntax is: az network firewall policy rule-collection-group collection add-nat-collection --collection-priority
                                                                               --ip-protocols
                                                                               --name
                                                                               --policy-name
                                                                               --rcg-name
                                                                               --resource-group
                                                                               [--action {dnat, snat}]
                                                                               [--add]
                                                                               [--description]
                                                                               [--dest-addr]
                                                                               [--destination-ports]
                                                                               [--force-string {0, 1, f, false, n, no, t, true, y, yes}]
                                                                               [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                                                               [--remove]
                                                                               [--rule-name]
                                                                               [--set]
                                                                               [--source-addresses]
                                                                               [--source-ip-groups]
                                                                               [--translated-address]
                                                                               [--translated-fqdn]
                                                                               [--translated-port]. The 1th example of the child command would be to use it to 'add a nat collection into the rule collection group', the syntax is: az network firewall policy rule-collection-group collection add-nat-collection -n
nat_collection --collection-priority 10003 --policy-name {policy} -g {rg} --rule-collection-
group-name {collectiongroup} --action DNAT --rule-name network_rule --description "test"
--destination-addresses "202.120.36.15" --source-addresses "202.120.36.13" "202.120.36.14"
--translated-address 128.1.1.1 --translated-port 1234 --destination-ports 12000 12001 --ip-
protocols TCP UDP. The parameter '--collection-priority' is required. It is used to the priority of the rule in firewall policy rule collection group.. The parameter '--ip-protocols' is required. It is used to space-separated list of ip protocols. this argument is supported for nat and network rule.   support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--name -n' is required. It is used to the name of the firewall policy rule collection group.. The parameter '--policy-name' is required. It is used to the name of the firewall policy.. The parameter '--rcg-name --rule-collection-group-name' is required. It is used to the name of the firewall policy rule collection group.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--action' is optional. the action type of a rule collection.. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: --add property.listproperty <key=value, string or json string>.. The parameter '--description' is optional. the description of rule.. The parameter '--dest-addr --destination-addresses' is optional. space-separated list of destination ip addresses.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--destination-ports' is optional. space-separated list of destination ports. this argument is supported for nat and network rule.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--remove' is optional. remove a property or an element from a list.  example: --remove property.list <indextoremove> or --remove propertytoremove.. The parameter '--rule-name' is optional. the name of rule.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: --set property1.property2=<value>.. The parameter '--source-addresses' is optional. space-separated list of source ip ddresses.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--source-ip-groups' is optional. space-separated list of name or resource id of source ipgroups.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--translated-address' is optional. translated address for this nat rule collection.. The parameter '--translated-fqdn' is optional. translated fqdn for this nat rule collection.. The parameter '--translated-port' is optional. translated port for this nat rule collection.. 