release_tracks: [ALPHA, BETA, GA]
help_text:
  brief: Add an IAM policy binding to a federation.
  description: |
    Add an IAM policy binding to a federation.

  examples: |
    To add an IAM policy binding for the role of `roles/metastore.admin` for the user
    `test-user@gmail.com`, run:

      $ {command} my-federation --member='user:test-user@gmail.com' --role='roles/metastore.admin'

    See https://cloud.google.com/dataproc-metastore/docs/iam-and-access-control for details of
    policy role and member types.

request:
  collection: metastore.projects.locations.federations
  ALPHA:
    api_version: v1alpha
  BETA:
    api_version: v1beta
  GA:
    api_version: v1

iam:
  enable_condition: false
  policy_version: 0

arguments:
  resource:
    help_text: Federation for which to add the IAM policy to.
    spec: !REF googlecloudsdk.command_lib.metastore.resources:federation