Skip to main content
Use Cloud > Domains to see the domains synced from Microsoft 365, Google Workspace, and DNSimple (the registrar) for your companies. This page is for MSP staff and company users who need to check verification, primary domains, expiry dates, or email security.

​
Before you start

  • You need Cloud read access. In the role editor this is the Cloud resource with Read access. It covers all three providers on this page.
  • Company users see only their own company. MSP staff see the companies selected in the company selector.
  • Each provider must be connected in Settings > Integrations, and each domain must be mapped to a company. DNSimple domains that are not mapped to a company do not appear.
  • Domains are synced data. They are not a live registrar lookup.
  • The Email security and Problems columns appear only when your MSP has email domain security checks turned on and your role can read documentation domains or security. See Check email security.

​
Open the domain list

1

Open Cloud > Domains

Click Cloud in the sidebar, then click the Domains tab.
2

Pick the company

Use the company selector in the top bar. MSP staff can pick one company, Global View, or Assigned Companies if their access is limited. With one company selected, the Company column is hidden.
3

Read the summary

The row above the table shows Total domains, Verified, Primary domains, Secondary domains, and Companies. With one company selected, Primary domain shows that company’s primary domain name instead of a count.
4

Find a domain

Type in the filter box under the Domain column heading. If your scope has more than one provider, a Provider column appears. Open its filter to pick Microsoft 365, Google Workspace, or DNSimple.
Cloud Domains Provider filter with DNSimple, Google Workspace, and Microsoft 365 options.

The Provider filter lists only the providers that have domains in your current scope.

5

Page through the results

The table shows 50 domains per page. Use the page controls under the table to move between pages.
The same domain name can appear more than once. A Microsoft row describes the Microsoft 365 tenant, and a DNSimple row describes the registrar record. Compare Provider and Company before you treat two rows as duplicates. Company users see DNSimple rows labeled Managed by followed by their MSP name.

​
Show more columns

1

Open the column list

Click Columns above the table.
2

Turn on the columns you want

Check the columns to show. You can drag a column to change its order.
3

Save

Click Save Changes. Click Cancel to discard your changes.

​
What each column shows

DNSimple does not report a verification flag, so every DNSimple row shows Unverified. That label does not mean the domain failed verification. Check the matching Microsoft 365 or Google Workspace row for the real verification state.

​
Check email security

Branch preview: the email security columns, row selection and actions in this section, and their screenshots, show an upcoming Domains update. They may differ from your live portal until it is released.
Cloud > Domains shows the same email security results as Documentation > Domains. Results come from daily checks over public DNS, and each row is matched to the company’s domain inventory by company and domain name.
Cloud domains for Scaling Ops with Email security badges, Problems such as No DMARC record, and a star beside the primary domain scalingops.net.

Branch preview, MSPortal Demo: the star marks the primary domain, and Problems lists what to fix.

1

Read the results

Email security shows Passing, Needs attention, Failing, Domain not found or Not checked yet, with SPF, DMARC and DKIM badges. Problems lists what to fix, most serious first. Optional records most domains never publish, such as MTA-STS or BIMI, are left out of Problems.
2

Open the details

Click the status badge. The sheet shows the mail provider and each check (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DNSSEC and BIMI) with its explanation and DNS record.
Email security detail sheet for scalingops.net showing Failing, DMARC is not enforced, SPF Pass with its record, DMARC Not set up, DKIM Pass, and MTA-STS, TLS-RPT, DNSSEC and BIMI Not set up.

Branch preview: the detail sheet for scalingops.net.

3

Check again or plan the fix

Open a row’s … menu and select Check now or Create Planner item. For several domains, select their checkboxes and open Actions (N), then choose Check email security or Create Planner items. Up to 100 domains can be included at once.
Check now and Check email security need write or manage access to documentation domains. Create Planner item needs Write Planner or Manage Planner. Both need active billing. Rows with a dash under Email security cannot be selected. The Planner dialog and the notes it writes work as described in Create Planner items from the results.
Phone view of Cloud domains with the summary cards and a scalingops.net card showing a star, Email security badges and No DMARC record.

Branch preview: on a phone, each domain card shows Email security and Problems.

​
Tell the two kinds of Secondary apart

  • Primary = Secondary means the domain is not the primary domain in its cloud tenant. It is still a normal domain in Microsoft 365 or Google Workspace.
  • Cloud presence = Secondary domain means a DNSimple domain has no matching name in any synced Microsoft 365 or Google Workspace tenant under your MSP. The same name also gets a Secondary badge next to it.
  • In cloud tenant means the name was found in some Microsoft 365 or Google Workspace tenant under your MSP. It can be a different company’s tenant.

​
Summary counts and filters

The summary counts follow the company selector and the Provider filter. They do not follow the Domain, Verification, Primary, Cloud presence, or Authentication filters. The table can be empty while the summary still shows domains. The summary counts rows, not unique domain names.

​
Troubleshooting

​
Frequently asked questions

No. Domain records are read only here. Make domain changes in the provider, then wait for the next sync. The only actions are rechecking email security and creating Planner items.
Each provider and each company mapping creates its own row. Compare Provider and Company.
No. DNSimple rows always show Unverified because DNSimple does not report that flag.
The summary follows only the company selector and the Provider filter.
Open a ticket with the domain name, the provider, and what looks wrong.