Settings IAMPolicies on DNS-zone is currently in preview: Roles and permissions | Cloud DNS | Google Cloud
Cloud DNS supports IAM permissions at the project level and individual DNS zone level (available in Preview).
Is this on the roadmap? When will it be supported by the “google(-beta)”-provider?