I recently encountered a problem with my business email through Zoho, which turned out to be linked to my DNS records—specifically, an issue with the SPF record. After contacting Zoho support, we identified that a TXT record had been mistakenly added that disrupted my email functionality. Currently, the marketing agency has exclusive access to my domain registrar, and their roles are as follows: Cache Domain Purge; Bot Management; Domain API Gateway Read; Domain API Gateway; Domain Page Shield Read; Domain Page Shield; Domain Waiting Room Admin; Domain Waiting Room Read; Zone Versioning; Zone Versioning Read; Domain DNS; Domain Administrator Read Only; Domain Administrator. I'm looking for advice on which roles I should consider adjusting or removing to prevent similar issues in the future.
2 Answers
You might want to look into restricting access for the Domain DNS and Domain Admin roles as well. They can make changes that directly affect your email functionality. It’s best to manage those settings yourself if you feel confident doing it.
It sounds like you should definitely consider removing access for the Domain DNS and Domain Administrator roles. Those roles can give them too much control over your DNS settings, which can lead to problems like what you experienced. Just a heads up, you might have to negotiate with them about revoking access, so be ready for that. Good luck getting things sorted out!

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures