Brings DNS in line with S3's admin/manager/user 3-tier role model;
previously only DnsManagerRole and DnsUserRole existed.