release_tracks: [GA, BETA]
help_text:
  brief: Adds IAM policy binding for a workbench instance.
  description: |
    Adds a policy binding to the IAM policy of an instance, given an instance ID and the binding.
  examples: |
    To add an IAM policy binding for the role of ``roles/notebooks.admin'' for the user 'test-user@gmail.com'
    on the instance 'instance-id', run:

      $ {command} --member='user:test-user@gmail.com' --role='roles/notebooks.admin' example-instance --location=us-central1-a

    See https://cloud.google.com/iam/docs/managing-policies for details of
    policy role and member types.
request:
  collection: notebooks.projects.locations.instances
  api_version: v2

arguments:
  resource:
    help_text: The ID of the instance to add the IAM binding.
    spec: !REF googlecloudsdk.command_lib.workbench.resources:instance