Salesforce asks to verify email domain ownership. I go to setup -> authorized email domain -> domain name "salesforce.com" -> edit -> check the box "Verify domain ownership". then I got a message saying "We could not verify this domain. Add a DNS TXT record for this domain with the verification code."
I sent this to our IT and asked them to create the DNS TXT record. They say "can't be done because we don't own salesforce.com or the other domains provided."
Did I misunderstand Salesforce requirement? If I am to give our IT permission to Salesforce, what kind of permission/profile should I give them? I don't really want to give them admin.
Yep should be good. Email Logs have DKIM and SPF columns also if you want to check each email. Support has told me and this article indicates you shouldn't need authorized email domains if you have DKIM setup for that domain. DKIM is the recommended method.
https://help.salesforce.com/s/articleView?id=xcloud.security_user_email_verification_domain_auth.htm&type=5
