Hi jskfan,
Sorry if I've misunderstood the question but this is what I would do. In the DNS console you can right click the server and go to properties, from there you have the security tab, which should allow you to give the user access to add zones and records. You can then just create a mmc and add the DNS console to it, which he should be able to run under his own credentials.
Let me know how you get on,
Richard
