Hey Laurie,
For us, there's a field in SFDC called "Email Opt Out" (it's a standard field), and that fields is mapped to the Unsubscribe field in Marketo.
Sales, or anyone in relevant departments, can check that box and those individuals will be Unsubscribed in Marketo when the next sync occurs.