How to Update a Microsoft 365 DKIM Record Without Administrator Access
Question details
The user needs to configure a Microsoft 365 DKIM record for a business domain hosted by Wix but only has access to a personal Microsoft account.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to set up email authentication (DKIM) for a business domain hosted on Wix without organizational administrator credentials.
- Observed behavior
- The system prevents DKIM configuration because a personal Microsoft account lacks the required Microsoft 365 administrator permissions to access the Microsoft Defender portal.
Ensure you have the login credentials for your Wix domain registrar account and contact your IT department to verify who holds the Global Administrator or Security Administrator role for your Microsoft 365 tenant.
Obtain Proper Administrator Access and Configure DKIM
To configure DKIM, you must use a work or school account with Microsoft 365 administrator permissions and update your DNS records in Wix.
Personal Microsoft accounts cannot be used to configure DKIM for business domains. Microsoft 365 requires specific administrative roles, such as Global Administrator or Security Administrator, to access the Microsoft Defender portal and generate the necessary DKIM keys.
Log out of your personal Microsoft account and sign in to the Microsoft Defender portal using a designated work or school account that has Microsoft 365 administrator privileges. If you do not have these privileges, you must contact your organization's IT administrator.
Navigate to Email & collaboration > Policies & rules > Threat policies > Email authentication settings > DKIM. Select your domain and click 'Create DKIM keys' to generate the CNAME records required for authentication.
Log into your Wix account, navigate to the Domain settings, and select 'Manage DNS Records'. Add the CNAME records generated by Microsoft 365 into your domain's DNS zone.
Return to the Microsoft Defender portal and toggle the DKIM setting to 'Enable' for your domain. The system will verify the CNAME records hosted on Wix.

Looking for a Hassle-Free Office Suite? Try WPS Office
While enterprise email configurations like Microsoft 365 DKIM require complex admin management, handling your daily documents shouldn't be. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Office, letting you create and edit documents, spreadsheets, and presentations with ease.
- 1. Download the software: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install and launch: Run the installer and open WPS Office. You can start creating documents immediately without complex administrative setups.
- 3. Open existing Office files: Open your Microsoft Office files directly in WPS Office; they will open seamlessly with original formatting preserved.

Frequently Asked Questions
Can I use a personal Microsoft account to set up DKIM for my business?
No, personal Microsoft accounts do not have access to the administrative centers required to configure enterprise email authentication. You must use a work or school account with admin privileges.
Where do I paste the DKIM records if my domain is hosted on Wix?
You need to log into your Wix dashboard, navigate to Domain Settings, select Manage DNS Records, and add the CNAME records provided by the Microsoft 365 Defender portal.
What specific admin roles do I need in Microsoft 365 to manage DKIM?
You typically need to be assigned the Global Administrator or Security Administrator role in your Microsoft 365 tenant to access and modify DKIM settings in the Microsoft Defender portal.




