IAM for Google Cloud DNS: Restrict permissions to one managedZone?
Google Cloud DNS does not support assigning IAM policies to managed zones.
At this time you can only assign an IAM policy at the project/folder/org resource level which grants rights to all managed zones within the resource (project/folder/org).