There is a command group 'az_ad_ds'. This group of commands could 'manage domain service with azure active directory'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_ad_ds_update'.The syntax is: az ad ds update [--domain-config-type {fullysynced, resourcetrusting}]
                [--external-access {disabled, enabled}]
                [--filtered-sync {disabled, enabled}]
                [--ids]
                [--ldaps {disabled, enabled}]
                [--name]
                [--no-wait]
                [--notify-dc-admins {disabled, enabled}]
                [--notify-global-admins {disabled, enabled}]
                [--notify-others]
                [--ntlm-v1 {disabled, enabled}]
                [--pfx-cert]
                [--pfx-cert-pwd]
                [--replica-sets]
                [--resource-forest {disabled, enabled}]
                [--resource-group]
                [--settings]
                [--sku {enterprise, premium, standard}]
                [--sync-kerberos-pwd {disabled, enabled}]
                [--sync-ntlm-pwd {disabled, enabled}]
                [--sync-on-prem-pwd {disabled, enabled}]
                [--tags]
                [--tls-v1 {disabled, enabled}]. The 1th example of the child command would be to use it to 'update sku', the syntax is: az ad ds update --name "TestDS.com" --resource-group "rg" --sku "Enterprise". The 2th example of the child command would be to use it to 'update domain security settings', the syntax is: az ad ds update --name "TestDS.com" --resource-group "rg" --ntlm-v1 "Enabled" --tls-v1 "Disabled". The 3th example of the child command would be to use it to 'update ldaps settings', the syntax is: az ad ds update --name "TestDS.com" --resource-group "rg" --external-access "Enabled" --ldaps "Enabled" --pfx-cert "MIIDPDCCAiSg..." --pfx-cert-pwd "<pfxCertificatePassword>". The 4th example of the child command would be to use it to 'update notification settings', the syntax is: az ad ds update --name "TestDS.com" --resource-group "rg" --notify-dc-admins "Enabled" --notify-global-admins "Disabled". The parameter '--domain-config-type' is optional. domain configuration type.. The parameter '--external-access' is optional. a flag to determine whether or not secure ldap access over the internet is enabled or disabled.. The parameter '--filtered-sync' is optional. enabled or disabled flag to turn on group-based filtered sync.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--ldaps' is optional. a flag to determine whether or not secure ldap is enabled or disabled.. The parameter '--name -n' is optional. the name of the domain service.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--notify-dc-admins' is optional. should domain controller admins be notified.. The parameter '--notify-global-admins' is optional. should global admins be notified.. The parameter '--notify-others' is optional. the list of additional recipients.. The parameter '--ntlm-v1' is optional. a flag to determine whether or not ntlmv1 is enabled or disabled.. The parameter '--pfx-cert' is optional. the certificate required to configure secure ldap. the parameter passed here should be the file path to the certificate pfx file or a base64encoded representation of the certificate pfx file.. The parameter '--pfx-cert-pwd' is optional. the password to decrypt the provided secure ldap certificate pfx file.. The parameter '--replica-sets' is optional. list of replicasets.. The parameter '--resource-forest' is optional. resource forest.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--settings' is optional. list of settings for resource forest. this can be either a json-formatted string or the location to a file containing the json object.. The parameter '--sku' is optional. sku type.. The parameter '--sync-kerberos-pwd' is optional. a flag to determine whether or not synckerberospasswords is enabled or disabled.. The parameter '--sync-ntlm-pwd' is optional. a flag to determine whether or not syncntlmpasswords is enabled or disabled.. The parameter '--sync-on-prem-pwd' is optional. a flag to determine whether or not synconprempasswords is enabled or disabled.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. The parameter '--tls-v1' is optional. a flag to determine whether or not tlsv1 is enabled or disabled.. 