Expose a dns_admin role for full dns control