I got so distracted trying to figure out how to create one I didn't notice there's already one there. The Read DNS Entries permission was just what I needed. Thanks!