Use the policy.yaml file to define additional access controls that apply to the DNS service:
policy.yaml
../../_static/designate.policy.yaml.sample