release_tracks: [GA, BETA]
help_text:
  brief: Gets IAM policy for a workbench instance.
  description: |
    *{command}* displays the IAM policy associated with an instance.
    If formatted as JSON, the output can be edited and used as
    a policy file for *set-iam-policy*. The output includes an "etag"
    field identifying the version emitted and allowing detection of
    concurrent policy updates; see
    $ {parent} set-iam-policy for additional details.
  examples: |
    To print the IAM policy for a given instance, run:

        $ {command} my-instance --location=us-central1-a
request:
  collection: notebooks.projects.locations.instances
  api_version: v2

arguments:
  resource:
    help_text: The ID of the instance for which to display the IAM policy.
    spec: !REF googlecloudsdk.command_lib.workbench.resources:instance