A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.
Hi Peter Flynn
According to my research, this is fully supported and is a standard Microsoft 365 configuration. You can update or add TXT records (such as domain verification, SPF, DKIM, or DMARC) without changing your MX records. Updating TXT records does not affect mail flow.
Email routing is controlled exclusively by MX records. As long as your MX record continues to point to <domain-com>.mail.protection.outlook.com, inbound email will continue to flow to Exchange Online (Microsoft 365).
Based on my understanding, Google will not take over your email unless Google MX records are added to your DNS settings. Simply adding TXT records for verification or authentication, whether requested by Google or another service does not move email away from Microsoft 365.
Note that if you are updating your SPF record to include another service, ensure Microsoft 365 remains included in a single SPF TXT record (for example: v=spf1 include:spf.protection.outlook.com include:_spf.google.com ~all) and do not create multiple SPF records, as this will cause authentication issues.
For more information, you can refer to:
External Domain Name System records for Microsoft 365 - Microsoft 365 Enterprise | Microsoft Learn
Set up SPF identify valid email sources for your Microsoft 365 domain - Microsoft Defender for Offi…
Connect your domain by adding DNS records - Microsoft 365 admin | Microsoft Learn
I hope this information helps and if you have any question, please feel free to ask via comment section.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.