- release_tracks: [GA, BETA, ALPHA]

  help_text:
    brief: |
      Set the IAM policy for a Managed Microsoft AD domain.
    description: |
      Set the IAM policy associated with a Managed Microsoft AD domain.

      This command can fail for the following reasons:
        * The domain specified does not exist.
        * The active account does not have permission to access the given
          domain's IAM policies.

    examples: |
      To set the IAM policy for `my-domain.com`, run:

        $ {command} my-domain.com policy.json

      See https://cloud.google.com/iam/docs/managing-policies for details of the
      policy file format and contents.

  request: &request
    api_version: v1
    collection: managedidentities.projects.locations.global.domains

  arguments:
    resource:
      spec: !REF googlecloudsdk.command_lib.active_directory.resources:domain
      help_text: |
        Name of the Managed Microsoft AD domain you want to set the IAM policy for.