- release_tracks: [BETA, GA]
  help_text:
    brief: Remove IAM policy binding for a secret.
    description: |
      Removes a policy binding from the IAM policy of a secret. One binding consists of a
      member and a role.

      See https://cloud.google.com/iam/docs/managing-policies for details of
      policy role and member types.

    examples: |
      To remove an IAM policy binding for the role of 'roles/viewer' for the user
      'test-user@gmail.com' on the my-secret, run:

        $ {command} my-secret --member='user:test-user@gmail.com' --role='roles/viewer'

  request:
    api_version: v1
    collection: secretmanager.projects.secrets

  arguments:
    resource:
      help_text: Name of the secret from which to remove IAM policy binding.
      spec: !REF googlecloudsdk.command_lib.secrets.resources:secret

  iam:
    enable_condition: true
    policy_version: 3
    get_iam_policy_version_path: options_requestedPolicyVersion