There is a command group 'az_network analytics_data product'. This group of commands could 'azure operator insights data product operations'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network analytics_data product_add user role'.The syntax is: az network-analytics data-product add-user-role --data-type-scope
                                                --principal-id
                                                --principal-type
                                                --role {reader, sensitivereader}
                                                --role-id
                                                --user-name
                                                [--data-product-name]
                                                [--ids]
                                                [--resource-group]
                                                [--subscription]. The 1th example of the child command would be to use it to 'add user role', the syntax is: az network-analytics data-product add-user-role --data-product-name <dpname> --resource-group <rgname> --data-type-scope " " --principal-id <userid> --principal-type user --role reader --role-id " " --user-name " ". The parameter '--data-type-scope' is required. It is used to data type scope at which the role assignment is created.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--principal-id' is required. It is used to object id of the aad principal or security-group.. The parameter '--principal-type' is required. It is used to type of the principal id: user, group or serviceprincipal.. The parameter '--role' is required. It is used to data product role to be assigned to a user.. The parameter '--role-id' is required. It is used to role id of the built-in role.. The parameter '--user-name' is required. It is used to user name.. The parameter '--data-product-name' is optional. the data product resource name.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. 