You can assign permissions to admin roles which you then assign to admin groups, or you can assign permissions directly to an admin group. The following are permissions you can grant admin groups and roles:
...
Permissions for common tasks, as described in Administrative Permissions for Common Tasks.
Permissions for the Grid and Grid members, as described in Administrative Permission for the Grid.
Permissions for IPAM resources, such as IPv6 networks, as described in Administrative Permissions for IPAM Resources.
Permissions for DNS resources, such as DNS views and A records, as described in Administrative Permissions for DNS Resources.
Permissions for DNS resource with associated IP addresses in networks and ranges, as described in Administrative Permissions for DNS Resources with Associated IP addresses in Networks and Ranges.
Permissions for DHCP resources, such as network views and fixed addresses, as described in Administrative Permissions for DHCP Resources.
Permissions for file distribution services, as described in Administrative Permissions for File Distribution Services.
Permissions for certificate authentication services and CA certificates, as described in Administrative Permissions for Certificate Authentication Services and CA Certificates.
Permissions for object change tracking, as described in Administrative Permissions for Object Change Tracking.
Permissions for GLB and GLB objects, as described in Administrative Permissions for Load Balancers.
Permissions for Cloud objects, as described in Administrative Permissions for Cloud Objects.
...
When you select multiple objects with more than one object type, you can add permissions to the selected objects as well as to the sub object types that are common among the selected objects. For example, when you select three DNS forward-mapping authoritative zones and two DNS IPv4 reverse-mapping authoritative zones as illustrated in the below figure Multiple Objects with Common Sub Object Types, you can apply permissions to all the five DNS zones as well as to the CNAME, DNAME, and host records in these zones because CNAME, DNAME, and host records are the common sub object types in these zones.
Multiple Objects with Common Sub Object Types
When you select three DNS forward-mapping authoritative zones and two IPv4 reverse-mapping authoritative zones, you can apply object permissions to all the DNS zones as well as the CNAME, DNAME and Host records in these DNS zones.
...