release_tracks: [ALPHA, BETA, GA]
help_text:
  brief: Add an IAM policy binding to a service.
  description: |
    Add an IAM policy binding to a service.

  examples: |
    To add an IAM policy binding for the role of 'roles/metastore.admin' for the user
    'test-user@gmail.com', run:

      $ {command} my-service --member='user:test-user@gmail.com' --role='roles/metastore.admin'

    See https://cloud.google.com/dataproc-metastore/docs/iam-and-access-control for details of
    policy role and member types.

request:
  collection: metastore.projects.locations.services
  ALPHA:
    api_version: v1alpha
  BETA:
    api_version: v1beta
  GA:
    api_version: v1

iam:
  enable_condition: false
  policy_version: 0

arguments:
  resource:
    help_text: Service for which to add the IAM policy to.
    spec: !REF googlecloudsdk.command_lib.metastore.resources:service