There is a command group 'az_iot_hub_device identity'. This group of commands could 'manage iot devices'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_hub_device identity_create'.The syntax is: az iot hub device-identity create --device-id
                                  [--am {shared_private_key, x509_ca, x509_thumbprint}]
                                  [--auth-type {key, login}]
                                  [--device-scope]
                                  [--edge-enabled {false, true}]
                                  [--hub-name]
                                  [--login]
                                  [--od]
                                  [--pk]
                                  [--primary-thumbprint]
                                  [--resource-group]
                                  [--secondary-key]
                                  [--secondary-thumbprint]
                                  [--sta {disabled, enabled}]
                                  [--star]
                                  [--valid-days]. The 1th example of the child command would be to use it to 'create an edge enabled iot device with default authorization  shared private key', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --ee. The 2th example of the child command would be to use it to 'create an iot device with self signed certificate authorization  generate a cert valid for 10 days then use its thumbprint', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --am x509_thumbprint --valid-days 10. The 3th example of the child command would be to use it to 'create an iot device with self signed certificate authorization  generate a cert of default expiration  365 days  and output to target directory', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --am x509_thumbprint --output-dir /path/to/output. The 4th example of the child command would be to use it to 'create an iot device with self signed certificate authorization and explicitly provide primary and secondary thumbprints', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --am x509_thumbprint --ptp {thumbprint_1} --stp {thumbprint_2}. The 5th example of the child command would be to use it to 'create an iot device with root ca authorization with disabled status and reason', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --am x509_ca --status disabled --status-reason 'for reasons'. The 6th example of the child command would be to use it to 'create an iot device with a device scope', the syntax is: az iot hub device-identity create -n {iothub_name} -d {device_id} --device-scope 'ms-azure-iot-edge://edge0-123456789123456789'. The parameter '--device-id -d' is required. It is used to target device id.. The parameter '--am --auth-method' is optional. the authorization method an entity is to be created with.. The parameter '--auth-type' is optional. indicates whether the operation should auto-derive a policy key or use the current azure ad session. if the authentication type is login and the resource hostname is provided, resource lookup will be skipped unless needed.you can configure the default using `az configure --defaults iothub-data-auth-type=<auth-type-value>`.. The parameter '--device-scope' is optional. the scope of the device. for edge devices, this is auto-generated and immutable. for leaf devices, set this to create child/parent relationship.. The parameter '--edge-enabled --ee' is optional. flag indicating edge enablement.. The parameter '--hub-name -n' is optional. iot hub name or hostname. required if --login is not provided.. The parameter '--login -l' is optional. this command supports an entity connection string with rights to perform action. use to avoid session login via "az login". if both an entity connection string and name are provided the connection string takes priority. required if --hub-name is not provided.. The parameter '--od --output-dir' is optional. generate self-signed cert and use its thumbprint. output to specified target directory.. The parameter '--pk --primary-key' is optional. the primary symmetric shared access key stored in base64 format.. The parameter '--primary-thumbprint --ptp' is optional. self-signed certificate thumbprint to use for the primary thumbprint.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--secondary-key --sk' is optional. the secondary symmetric shared access key stored in base64 format.. The parameter '--secondary-thumbprint --stp' is optional. self-signed certificate thumbprint to use for the secondary thumbprint.. The parameter '--sta --status' is optional. set device status upon creation.. The parameter '--star --status-reason' is optional. description for device status.. The parameter '--valid-days --vd' is optional. generate self-signed cert and use its thumbprint. valid for specified number of days. default: 365.. 