What I want: I have a project on the Google Cloud Platform. I have a service in that project that needs access to my DNS records.

What my issue is: From the relevant Google Cloud DNS doc about permissions (source), I note that there seems to exists /roles/dns.admin and /roles/dns.reader roles that are exactly what I am interested in to set for my service. Albeit, accessing the "IAM" page of my project and looking through the "Role(s)" dropdown options, these two DNS-related roles are no where to be found.

What my question is: Is this a documentation inconsistency? Is there another way to set this role than through the "IAM" page UI?


  • The documentation is fine, nevertheless, the feature is not available yet. It should be released soon. Unfortunately I do not think there is currently a workaround. – Carlos Feb 2 '17 at 19:32

From Cloud Platform Support:

This is a known issue, and our engineering team has already been made aware of its existence. With that being said, there is currently no known time for the resolution of this issue. As a workaround, may I suggest creating custom roles for your project. You can create a custom role called DNS Admin and then assign only DNS related permissions to that role.

  • 1
    This open issue can be followed here – Carlos Feb 6 '17 at 20:27
  • 1
    Just an additional comment for the community, it is possible that Custom Roles is not yet available for all the projects. – Carlos Feb 10 '17 at 15:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.