Status: IN
`roles/dns.admin` can manage DNS records but cannot set IAM policies on zones (lacks `setIamPolicy` permission).
Source: entries/2026/03/10/dns-overview.md
JSON