What I want: I have a project on the Google Cloud Platform. I have a service in that project that needs access to my DNS records.
What my issue is:
From the relevant Google Cloud DNS doc about permissions (source), I note that there seems to exists
/roles/dns.reader roles that are exactly what I am interested in to set for my service.
Albeit, accessing the "IAM" page of my project and looking through the "Role(s)" dropdown options, these two DNS-related roles are no where to be found.
What my question is: Is this a documentation inconsistency? Is there another way to set this role than through the "IAM" page UI?