How to grant permission to one zone no dns server