How do I give access to manage the DNS for boppbusch.com

Deborah Norton 0 Reputation points
2026-10-01T14:23:15.45+00:00

We have recently hired an IT company and they would like access to our email or DNS to be able to create a DMARC.

How do I give them access?

Deborah Norton

Azure DNS
Azure DNS

An Azure service that enables hosting Domain Name System (DNS) domains in Azure.

0 comments

2 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Megha Ramakrishnan 500 Reputation points
    2026-10-02T10:04:03.1966667+00:00

    Hi @Deborah Norton

    Welcome to Microsoft Q&A.

    To create a DMARC record, the IT company will need permission to manage your domain’s DNS records.

    It depends on where the DNS for boppbusch.com is hosted:

    If DNS is hosted in Azure DNS

    • Assign the IT company the DNS Zone Contributor role.

    • Steps:

    1. In the Azure portal, open the DNS zone for boppbusch.com.
    2. Go to Access control (IAM) → Add role assignment.
    3. Select DNS Zone Contributor.
    4. Assign it to the IT company’s Azure AD account.

    Note: This role allows them to add/edit DNS records (including DMARC) without giving full subscription access.

    If DNS is hosted at a domain registrar (GoDaddy etc)

    • Log in to your registrar’s portal.

    Either:

    • Add the IT company as a delegated user with DNS management rights, or

    • Ask for the DMARC TXT record details and add it yourself.

    If hosted in Microsoft 365

    • DMARC enforcement is still done via DNS.

    • You only need to update the DNS records at your registrar or Azure DNS zone — no direct changes in Microsoft 365.

    Help make this community better for everyone: if this answer resolved your issue, please accept it or leave an upvote. If not, share more details in a comment so we can continue the discussion and find the right solution.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-01T14:23:31.7966667+00:00

    If the DNS for the domain is hosted in Azure DNS, grant the IT company access by assigning them the DNS Zone Contributor role.

    Two common options:

    1. Access to all DNS zones in a resource group
      • In the Azure portal, open the resource group that contains the DNS zone.
      • Select Access control (IAM).
      • Select + Add.
      • Choose the DNS Zone Contributor role.
      • Select the user or group for the IT company.
    2. Access to only one DNS zone
      • In the Azure portal, open the specific DNS zone for the domain.
      • Select Access control (IAM).
      • Select + Add.
      • Choose the DNS Zone Contributor role.
      • Select the user or group for the IT company.

    This role lets them manage Azure DNS public DNS resources for the zone. It does not grant permissions to private DNS zones.

    If only a specific record needs to be managed, Azure RBAC can also be applied at the record set level from the record set page by using the Users button.

    For DMARC creation, the IT company typically needs permission to add or edit DNS records for the domain. If the domain is not hosted in Azure DNS, access must be granted at the domain registrar or current DNS hosting provider instead.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.