Mods
GCP

IAM Role: GCP/DNS/Admin

PermissionGrant
dns.changes.createAdmin
dns.managedZones.createAdmin
dns.managedZones.deleteAdmin
dns.managedZones.updateAdmin
dns.networks.bindPrivateDNSPolicyAdmin
dns.networks.bindPrivateDNSZoneAdmin
dns.policies.createAdmin
dns.policies.deleteAdmin
dns.policies.setIamPolicyAdmin
dns.policies.updateAdmin
dns.resourceRecordSets.createAdmin
dns.resourceRecordSets.deleteAdmin
dns.resourceRecordSets.updateAdmin
dns.networks.targetWithPeeringZoneOperator
compute.networks.getMetadata
compute.networks.listMetadata
dns.changes.getMetadata
dns.changes.listMetadata
dns.dnsKeys.getMetadata
dns.dnsKeys.listMetadata
dns.managedZoneOperations.getMetadata
dns.managedZoneOperations.listMetadata
dns.managedZones.getMetadata
dns.managedZones.listMetadata
dns.policies.getMetadata
dns.policies.getIamPolicyMetadata
dns.policies.listMetadata
dns.projects.getMetadata
dns.resourceRecordSets.listMetadata
resourcemanager.projects.getMetadata
resourcemanager.projects.getIamPolicyMetadata