You can manage Lync from Control Panel URL https://admin.domain.local using a browser,
And only add DNS to resolve this FQDN from inside of your corporative network.
Hi,
Administration interface of Lync Server management can be controlled by RBAC Roles. For example, all options will available in left panel of Lync control Panel if you are member of CsAdministrator. However, only Monitoring and Archiving related options are available if the user is member of CsArchivingAdministrator. You can refer to RBAC section in the Chapter_15_Server_Administration.doc.
http://www.microsoft.com/en-us/download/details.aspx?id=22644