- release_tracks: [ALPHA, BETA, GA]

  help_text:
    brief: Deny a Privileged Access Manager (PAM) grant.
    description: Deny a Privileged Access Manager (PAM) grant with a reason.
    examples: |
      The following command denies a grant with the full name ``GRANT_NAME'' and a reason
      of `denial reason`:

      $ {command} GRANT_NAME --reason="denial reason"

  request:
    ALPHA:
      api_version: v1alpha
    BETA:
      api_version: v1beta
    GA:
      api_version: v1
    method: deny
    collection:
    - privilegedaccessmanager.projects.locations.entitlements.grants
    - privilegedaccessmanager.folders.locations.entitlements.grants
    - privilegedaccessmanager.organizations.locations.entitlements.grants

  arguments:
    resource:
      spec: !REF googlecloudsdk.command_lib.pam.resources:grant
      help_text: |
        Name of the grant to deny.
    params:
    - api_field: denyGrantRequest.reason
      arg_name: reason
      help_text: |
        Reason for denying the grant.