Cloud services interwork with each other. Roles of some services take effect only if they are assigned along with roles of other services.
For example, the DNS Administrator role contains the Depends parameter which specifies the dependency roles. When you assign the DNS Administrator role to a user group, you also need to assign the Tenant Guest and VPC Administrator roles to the group for the same project.