You need to assign a user named User1 permission to add and delete records from the contoso.com zone only