A DNS policy will be required to connect to external servers by their name, rather than their IP address. Such services could be AAA, RADIUS, or vCenter.
The DNS service policy is a shared policy, in that any tenant and VRF that uses this service must be configured with the particular DNS profile label.