There is a command group 'az_storage_account'. This group of commands could 'manage storage accounts'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_account_create storage preview'.The syntax is: az storage account create --name
                          --resource-group
                          [--access-tier {cool, hot, premium}]
                          [--account-type]
                          [--action]
                          [--allow-append {false, true}]
                          [--allow-blob-public-access {false, true}]
                          [--allow-cross-tenant-replication {false, true}]
                          [--allow-shared-key-access {false, true}]
                          [--allowed-copy-scope {aad, privatelink}]
                          [--assign-identity]
                          [--azure-storage-sid]
                          [--bypass {azureservices, logging, metrics, none}]
                          [--custom-domain]
                          [--default-action {allow, deny}]
                          [--default-share-permission {none, storagefiledatasmbsharecontributor, storagefiledatasmbshareelevatedcontributor, storagefiledatasmbsharereader}]
                          [--dns-endpoint-type {azurednszone, standard}]
                          [--domain-guid]
                          [--domain-name]
                          [--domain-sid]
                          [--edge-zone]
                          [--enable-alw {false, true}]
                          [--enable-files-aadds {false, true}]
                          [--enable-files-aadkerb {false, true}]
                          [--enable-files-adds {false, true}]
                          [--enable-hierarchical-namespace {false, true}]
                          [--enable-large-file-share]
                          [--enable-local-user {false, true}]
                          [--enable-nfs-v3 {false, true}]
                          [--enable-sftp {false, true}]
                          [--encryption-key-name]
                          [--encryption-key-source {microsoft.keyvault, microsoft.storage}]
                          [--encryption-key-type-for-queue {account, service}]
                          [--encryption-key-type-for-table {account, service}]
                          [--encryption-key-vault]
                          [--encryption-key-version]
                          [--encryption-services {blob, file, queue, table}]
                          [--forest-name]
                          [--https-only {false, true}]
                          [--identity-type {none, systemassigned, systemassigned,userassigned, userassigned}]
                          [--immutability-period]
                          [--immutability-state {disabled, locked, unlocked}]
                          [--key-exp-days]
                          [--key-vault-federated-client-id]
                          [--key-vault-user-identity-id]
                          [--kind {blobstorage, blockblobstorage, filestorage, storage, storagev2}]
                          [--location]
                          [--min-tls-version {tls1_0, tls1_1, tls1_2}]
                          [--net-bios-domain-name]
                          [--public-network-access {disabled, enabled}]
                          [--publish-internet-endpoints {false, true}]
                          [--publish-microsoft-endpoints {false, true}]
                          [--require-infrastructure-encryption {false, true}]
                          [--routing-choice {internetrouting, microsoftrouting}]
                          [--sam-account-name]
                          [--sas-exp]
                          [--sku {premium_lrs, premium_zrs, standard_grs, standard_gzrs, standard_lrs, standard_ragrs, standard_ragzrs, standard_zrs}]
                          [--subnet]
                          [--tags]
                          [--user-identity-id]
                          [--vnet-name]. The 1th example of the child command would be to use it to 'create a storage account  mystorageaccount  in resource group  myresourcegroup  in the west us region with locally redundant storage', the syntax is: az storage account create -n mystorageaccount -g MyResourceGroup -l westus --sku Standard_LRS. The parameter '--name -n' is required. It is used to the storage account name.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--access-tier' is optional. required for storage accounts where kind = blobstorage. the access tier is used for billing. the "premium" access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.. The parameter '--account-type' is optional. specify the active directory account type for azure storage.. The parameter '--action' is optional. the action of virtual network rule. possible value is allow.. The parameter '--allow-append --allow-protected-append-writes -w' is optional. this property can only be changed for disabled and unlocked time-based retention policies. when enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. only new blocks can be added and any existing blocks cannot be modified or deleted.. The parameter '--allow-blob-public-access' is optional. allow or disallow public access to all blobs or containers in the storage account. the default value for this property is null, which is equivalent to true. when true, containers in the account may be configured for public access. note that setting this property to true does not enable anonymous access to any data in the account. the additional step of configuring the public access setting for a container is required to enable anonymous access.. The parameter '--allow-cross-tenant-replication -r' is optional. allow or disallow cross aad tenant object replication. the default interpretation is true for this property.. The parameter '--allow-shared-key-access -k' is optional. indicate whether the storage account permits requests to be authorized with the account access key via shared key. if false, then all requests, including shared access signatures, must be authorized with azure active directory (azure ad). the default value is null, which is equivalent to true.. The parameter '--allowed-copy-scope -s' is optional. restrict copy to and from storage accounts within an aad tenant or with private links to the same vnet.. The parameter '--assign-identity' is optional. generate and assign a new storage account identity for this storage account for use with key management services like azure keyvault.. The parameter '--azure-storage-sid' is optional. specify the security identifier (sid) for azure storage. required when --enable-files-adds is set to true.. The parameter '--bypass' is optional. bypass traffic for space-separated uses.. The parameter '--custom-domain' is optional. user domain assigned to the storage account. name is the cname source.. The parameter '--default-action' is optional. default action to apply when no rule matches.. The parameter '--default-share-permission -d' is optional. default share permission for users using kerberos authentication if rbac role is not assigned.. The parameter '--dns-endpoint-type --endpoint' is optional. allow you to specify the type of endpoint. set this to azurednszone to create a large number of accounts in a single subscription, which creates accounts in an azure dns zone and the endpoint url will have an alphanumeric dns zone identifier.. The parameter '--domain-guid' is optional. specify the domain guid. required when --enable-files-adds is set to true.. The parameter '--domain-name' is optional. specify the primary domain that the ad dns server is authoritative for. required when --enable-files-adds is set to true.. The parameter '--domain-sid' is optional. specify the security identifier (sid). required when --enable-files-adds is set to true.. The parameter '--edge-zone' is optional. the name of edge zone.. The parameter '--enable-alw' is optional. the account level immutability property. the property is immutable and can only be set to true at the account creation time. when set to true, it enables object level immutability for all the containers in the account by default.. The parameter '--enable-files-aadds' is optional. enable azure active directory domain services authentication for azure files.. The parameter '--enable-files-aadkerb' is optional. enable azure files active directory domain service kerberos authentication for the storage account.. The parameter '--enable-files-adds' is optional. enable azure files active directory domain service authentication for storage account. when --enable-files-adds is set to true, azure active directory properties arguments must be provided.. The parameter '--enable-hierarchical-namespace --hns' is optional. allow the blob service to exhibit filesystem semantics. this property can be enabled only when storage account kind is storagev2.. The parameter '--enable-large-file-share' is optional. enable the capability to support large file shares with more than 5 tib capacity for storage account.once the property is enabled, the feature cannot be disabled. currently only supported for lrs and zrs replication types, hence account conversions to geo-redundant accounts would not be possible. for more information, please refer to https://go.microsoft.com/fwlink/?linkid=2086047.. The parameter '--enable-local-user' is optional. enable local user features.. The parameter '--enable-nfs-v3' is optional. nfs 3.0 protocol support enabled if sets to true.. The parameter '--enable-sftp' is optional. enable secure file transfer protocol.. The parameter '--encryption-key-name' is optional. the name of the keyvault key.. The parameter '--encryption-key-source' is optional. the default encryption key source.. The parameter '--encryption-key-type-for-queue -q' is optional. set the encryption key type for queue service. "account": queue will be encrypted with account-scoped encryption key. "service": queue will always be encrypted with service-scoped keys. currently the default encryption key type is "service".. The parameter '--encryption-key-type-for-table -t' is optional. set the encryption key type for table service. "account": table will be encrypted with account-scoped encryption key. "service": table will always be encrypted with service-scoped keys. currently the default encryption key type is "service".. The parameter '--encryption-key-vault' is optional. the uri of the keyvault.. The parameter '--encryption-key-version' is optional. the version of the keyvault key to use, which will opt out of implicit key rotation. please use "" to opt in key auto-rotation again.. The parameter '--encryption-services' is optional. specifies which service(s) to encrypt.. The parameter '--forest-name' is optional. specify the active directory forest to get. required when --enable-files-adds is set to true.. The parameter '--https-only' is optional. allow https traffic only to storage service if set to true. the default value is true.. The parameter '--identity-type' is optional. the identity type.. The parameter '--immutability-period --immutability-period-in-days' is optional. the immutability period for the blobs in the container since the policy creation, in days.. The parameter '--immutability-state' is optional. defines the mode of the policy. disabled state disables the policy, unlocked state allows increase and decrease of immutability retention time and also allows toggling allow-protected-append-write property, locked state only allows the increase of the immutability retention time. a policy can only be created in a disabled or unlocked state and can be toggled between the two states. only a policy in an unlocked state can transition to a locked state which cannot be reverted.. The parameter '--key-exp-days --key-expiration-period-in-days' is optional. expiration period in days of the key policy assigned to the storage account.. The parameter '--key-vault-federated-client-id -f' is optional. clientid of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.. The parameter '--key-vault-user-identity-id -u' is optional. resource identifier of the userassigned identity to be associated with server-side encryption on the storage account.. The parameter '--kind' is optional. indicate the type of storage account.. The parameter '--location -l' is optional. location. values from: `az account list-locations`. you can configure the default location using `az configure --defaults location=<location>`.. The parameter '--min-tls-version' is optional. the minimum tls version to be permitted on requests to storage. the default interpretation is tls 1.0 for this property.. The parameter '--net-bios-domain-name' is optional. specify the netbios domain name. required when --enable-files-adds is set to true.. The parameter '--public-network-access' is optional. enable or disable public network access to the storage account. possible values include: `enabled` or `disabled`.. The parameter '--publish-internet-endpoints' is optional. a boolean flag which indicates whether internet routing storage endpoints are to be published.. The parameter '--publish-microsoft-endpoints' is optional. a boolean flag which indicates whether microsoft routing storage endpoints are to be published.. The parameter '--require-infrastructure-encryption -i' is optional. a boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.. The parameter '--routing-choice' is optional. routing choice defines the kind of network routing opted by the user.. The parameter '--sam-account-name' is optional. specify the active directory samaccountname for azure storage.. The parameter '--sas-exp --sas-expiration-period' is optional. expiration period of the sas policy assigned to the storage account, dd.hh:mm:ss.. The parameter '--sku' is optional. the storage account sku.. The parameter '--subnet' is optional. name or id of subnet. if name is supplied, `--vnet-name` must be supplied.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. The parameter '--user-identity-id' is optional. the key is the arm resource identifier of the identity. only 1 user assigned identity is permitted here.. The parameter '--vnet-name' is optional. name of a virtual network.. 