release_tracks: [ALPHA, BETA, GA]

help_text:
  brief: Remove IAM policy binding for a KMS import job.
  description: |
    Removes a policy binding from the IAM policy of a KMS import job. One binding consists of a
    member and a role.

  examples: |
    To remove an IAM policy binding for the role of 'roles/viewer' for the user
    'test-user@gmail.com' on the import job frodo with the keyring fellowship and location global,
    run:

      $ {command} frodo --keyring='fellowship' --location='global' --member='user:test-user@gmail.com' --role='roles/viewer'

    See https://cloud.google.com/iam/docs/managing-policies for details of
    policy role and member types.

request:
  collection: cloudkms.projects.locations.keyRings.importJobs

arguments:
  resource:
    help_text: The import job from which to remove the IAM policy binding.
    spec: !REF googlecloudsdk.command_lib.kms.resources:import_job

iam:
  policy_version: 3
  get_iam_policy_version_path: options_requestedPolicyVersion