There is a command group 'az_storage_account'. This group of commands could 'manage storage accounts'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_account_update'.The syntax is: az storage account update [--access-tier {cool, hot}]
                          [--account-type]
                          [--add]
                          [--allow-blob-public-access]
                          [--allow-cross-tenant-replication]
                          [--allow-protected-append-writes]
                          [--allow-shared-key-access]
                          [--assign-identity]
                          [--azure-storage-sid]
                          [--bypass {azureservices, logging, metrics, none}]
                          [--custom-domain]
                          [--default-action {allow, deny}]
                          [--default-share-permission]
                          [--domain-guid]
                          [--domain-name]
                          [--domain-sid]
                          [--enable-files-aadds {false, true}]
                          [--enable-files-aadkerb]
                          [--enable-files-adds {false, true}]
                          [--enable-large-file-share]
                          [--enable-local-user]
                          [--enable-sftp]
                          [--encryption-key-name]
                          [--encryption-key-source {microsoft.keyvault, microsoft.storage}]
                          [--encryption-key-vault]
                          [--encryption-key-version]
                          [--encryption-services {blob, file, queue, table}]
                          [--federated-identity-client-id]
                          [--force-string]
                          [--forest-name]
                          [--https-only {false, true}]
                          [--identity-type]
                          [--ids]
                          [--immutability-period-since-creation-in-days]
                          [--immutability-policy-state]
                          [--key-expiration-period-in-days]
                          [--key-vault-user-identity-id]
                          [--min-tls-version]
                          [--name]
                          [--net-bios-domain-name]
                          [--public-network-access]
                          [--publish-internet-endpoints {false, true}]
                          [--publish-microsoft-endpoints {false, true}]
                          [--remove]
                          [--resource-group]
                          [--routing-choice {internetrouting, microsoftrouting}]
                          [--sam-account-name]
                          [--sas-expiration-period]
                          [--set]
                          [--sku {premium_lrs, premium_zrs, standard_grs, standard_gzrs, standard_lrs, standard_ragrs, standard_ragzrs, standard_zrs}]
                          [--subscription]
                          [--tags]
                          [--use-subdomain {false, true}]
                          [--user-identity-id]. The 1th example of the child command would be to use it to 'update the properties of a storage account   autogenerated', the syntax is: az storage account update --default-action Allow --name MyStorageAccount --resource-group MyResourceGroup. The 2th example of the child command would be to use it to 'use a user assigned managed identity instead of system assigned managed identity', the syntax is: az storage account update --name <storage-account-name> --resource-group <resource-group-name> --encryption-key-vault <keyvault-uri> --encryption-key-name <key-name-in-keyvault> --encryption-key-source Microsoft.Keyvault --key-vault-user-identity-id <user-assigned-identity-id> --identity-type UserAssigned --user-identity-id <user-assigned-identity-id>`. The parameter '--access-tier' is optional. required for storage accounts where kind = blobstorage. the access tier is used for billing. the "premium" access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.. 