diff --git a/src/Compute/Compute/ChangeLog.md b/src/Compute/Compute/ChangeLog.md
index 8ed1372cbf8e..48f499d070ee 100644
--- a/src/Compute/Compute/ChangeLog.md
+++ b/src/Compute/Compute/ChangeLog.md
@@ -20,6 +20,7 @@
 
 -->
 ## Upcoming Release
+* Added `SecureVMGuestStateSAS` parameter to `Grant-AzSnapshotAccess`.
 
 ## Version 10.3.0
 * Fixed typo 'DeyAll' to 'DenyAll' in NetworkAccessPolicy description. 
diff --git a/src/Compute/Compute/Generated/Snapshot/SnapshotGrantAccessMethod.cs b/src/Compute/Compute/Generated/Snapshot/SnapshotGrantAccessMethod.cs
index 56e324a9089d..c9369c75c3de 100644
--- a/src/Compute/Compute/Generated/Snapshot/SnapshotGrantAccessMethod.cs
+++ b/src/Compute/Compute/Generated/Snapshot/SnapshotGrantAccessMethod.cs
@@ -48,6 +48,7 @@ public override void ExecuteCmdlet()
                     var grantAccessData = new GrantAccessData();
                     grantAccessData.Access = this.Access;
                     grantAccessData.DurationInSeconds = this.DurationInSecond;
+                    grantAccessData.GetSecureVMGuestStateSAS = this.SecureVMGuestStateSAS;
 
                     var result = SnapshotsClient.GrantAccess(resourceGroupName, snapshotName, grantAccessData);
                     var psObject = new PSAccessUri();
@@ -86,6 +87,14 @@ public override void ExecuteCmdlet()
             Mandatory = false)]
         public int DurationInSecond { get; set; }
 
+        [Parameter(
+            ParameterSetName = "DefaultParameter",
+            HelpMessage = "Set this flag to true to get additional SAS for VM guest state.",
+            Mandatory = false,
+            ValueFromPipelineByPropertyName = true)]
+        public SwitchParameter SecureVMGuestStateSAS { get; set; }
+
+
         [Parameter(Mandatory = false, HelpMessage = "Run cmdlet in the background")]
         public SwitchParameter AsJob { get; set; }
     }
diff --git a/src/Compute/Compute/help/Grant-AzSnapshotAccess.md b/src/Compute/Compute/help/Grant-AzSnapshotAccess.md
index eef653ad3193..39e0d2ec8638 100644
--- a/src/Compute/Compute/help/Grant-AzSnapshotAccess.md
+++ b/src/Compute/Compute/help/Grant-AzSnapshotAccess.md
@@ -14,8 +14,8 @@ Grants an access to a snapshot.
 
 ```
 Grant-AzSnapshotAccess [-ResourceGroupName] <String> [-SnapshotName] <String> [-Access] <String>
- [[-DurationInSecond] <Int32>] [-AsJob] [-DefaultProfile <IAzureContextContainer>]
- [-WhatIf] [-Confirm] [<CommonParameters>]
+ [[-DurationInSecond] <Int32>] [-SecureVMGuestStateSAS] [-AsJob] [-DefaultProfile <IAzureContextContainer>]
+ [-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -107,6 +107,21 @@ Accept pipeline input: True (ByPropertyName)
 Accept wildcard characters: False
 ```
 
+### -SecureVMGuestStateSAS
+Set this flag to true to get additional SAS for VM guest state.
+
+```yaml
+Type: System.Management.Automation.SwitchParameter
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: True (ByPropertyName)
+Accept wildcard characters: False
+```
+
 ### -SnapshotName
 Specifies the name of a snapshot.