There is a command group 'az_iot_central_user'. This group of commands could 'manage and configure iot central users'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_central_user_update'.The syntax is: az iot central user update --app-id
                           --assignee
                           [--api-version {2022-06-30-preview, 2022-07-31}]
                           [--central-api-uri]
                           [--email]
                           [--object-id]
                           [--roles]
                           [--tenant-id]
                           [--token]. The 1th example of the child command would be to use it to 'update roles for a user by email or service principal in the application', the syntax is: az iot central user update --user-id {userId} --app-id {appId} --roles "org1\admin". The parameter '--app-id -n' is required. It is used to the app id of the iot central app you want to manage. you can find the app id in the "about" page for your application under the help menu.. The parameter '--assignee --user-id' is required. It is used to id associated with the user.. The parameter '--api-version --av' is optional. this command parameter has been deprecated and will be ignored.in the future release, we will only support iot central apis from latest ga version.if any api is not ga yet, we will call latest preview version.. The parameter '--central-api-uri --central-dns-suffix' is optional. the iot central dns suffix associated with your application.. The parameter '--email' is optional. email address of user to be added to the app. if this is specified, service principal parameters (tenant_id and object_id) will be ignored.. The parameter '--object-id --oid' is optional. object id for service principal to be added to the app. tenant id must also be specified. if email is specified this gets ignored and the user will not be a service principal user but a standard "email" user.. The parameter '--roles' is optional. comma-separated list of roles that will be associated with this user. you can specify one of the built-in roles, or specify the role id of a custom role. see more at https://aka.ms/iotcentral-customrolesdocs. organizations can be specified alongside roles when running with api version == 1.1-preview. e.g. "organization_id\role".. The parameter '--tenant-id --tnid' is optional. tenant id for service principal to be added to the app. object id must also be specified. if email is specified this gets ignored and the user will not be a service principal user but a standard "email" user.. The parameter '--token' is optional. if you'd prefer to submit your request without authenticating against the azure cli, you can specify a valid user token to authenticate your request. you must specify the type of key as part of the request. learn more at https://aka.ms/iotcentraldocsapi.. 