Mods
Azure

IAM Role: Azure/DNS/admin

PermissionGrant
microsoft.network/dnszones/writeadmin
microsoft.network/dnszones/deleteadmin
microsoft.network/dnszones/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.network/dnszones/a/writeadmin
microsoft.network/dnszones/a/deleteadmin
microsoft.network/dnszones/aaaa/writeadmin
microsoft.network/dnszones/aaaa/deleteadmin
microsoft.network/dnszones/ptr/writeadmin
microsoft.network/dnszones/ptr/deleteadmin
microsoft.network/dnszones/mx/writeadmin
microsoft.network/dnszones/mx/deleteadmin
microsoft.network/dnszones/txt/writeadmin
microsoft.network/dnszones/txt/deleteadmin
microsoft.network/dnszones/srv/writeadmin
microsoft.network/dnszones/srv/deleteadmin
microsoft.network/dnszones/cname/writeadmin
microsoft.network/dnszones/cname/deleteadmin
microsoft.network/dnszones/ns/writeadmin
microsoft.network/dnszones/ns/deleteadmin
microsoft.network/dnszones/soa/writeadmin
microsoft.network/dnszones/caa/writeadmin
microsoft.network/dnszones/caa/deleteadmin
microsoft.network/privatednszones/writeadmin
microsoft.network/privatednszones/deleteadmin
microsoft.network/privatednszones/virtualnetworklinks/writeadmin
microsoft.network/privatednszones/virtualnetworklinks/deleteadmin
microsoft.network/privatednszones/a/writeadmin
microsoft.network/privatednszones/a/deleteadmin
microsoft.network/privatednszones/aaaa/writeadmin
microsoft.network/privatednszones/aaaa/deleteadmin
microsoft.network/privatednszones/cname/writeadmin
microsoft.network/privatednszones/cname/deleteadmin
microsoft.network/privatednszones/mx/writeadmin
microsoft.network/privatednszones/mx/deleteadmin
microsoft.network/privatednszones/ptr/writeadmin
microsoft.network/privatednszones/ptr/deleteadmin
microsoft.network/privatednszones/soa/writeadmin
microsoft.network/privatednszones/srv/writeadmin
microsoft.network/privatednszones/srv/deleteadmin
microsoft.network/privatednszones/txt/writeadmin
microsoft.network/privatednszones/txt/deleteadmin
microsoft.network/privatednszones/join/actionadmin
microsoft.network/privatednszones/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.network/privatednszonesinternal/actionadmin
microsoft.resources/deployments/cancel/actionadmin
microsoft.resources/deployments/deleteadmin
microsoft.resources/deployments/validate/actionadmin
microsoft.resources/deployments/writeadmin
microsoft.network/dnszones/readmetadata
microsoft.network/dnszones/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.network/dnszones/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.network/dnsoperationresults/readmetadata
microsoft.network/dnsoperationstatuses/readmetadata
microsoft.network/dnszones/all/readmetadata
microsoft.network/dnszones/recordsets/readmetadata
microsoft.network/dnszones/a/readmetadata
microsoft.network/dnszones/aaaa/readmetadata
microsoft.network/dnszones/ptr/readmetadata
microsoft.network/dnszones/mx/readmetadata
microsoft.network/dnszones/txt/readmetadata
microsoft.network/dnszones/srv/readmetadata
microsoft.network/dnszones/cname/readmetadata
microsoft.network/dnszones/ns/readmetadata
microsoft.network/dnszones/soa/readmetadata
microsoft.network/dnszones/caa/readmetadata
microsoft.network/privatednszones/readmetadata
microsoft.network/privatednszones/virtualnetworklinks/readmetadata
microsoft.network/privatednszones/a/readmetadata
microsoft.network/privatednszones/aaaa/readmetadata
microsoft.network/privatednszones/cname/readmetadata
microsoft.network/privatednszones/mx/readmetadata
microsoft.network/privatednszones/ptr/readmetadata
microsoft.network/privatednszones/soa/readmetadata
microsoft.network/privatednszones/srv/readmetadata
microsoft.network/privatednszones/txt/readmetadata
microsoft.network/privatednszones/all/readmetadata
microsoft.network/privatednszones/recordsets/readmetadata
microsoft.network/privatednszones/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.network/privatednszones/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata