[Freeipa-users] Permission to allow user to list DNS zones