No Global Administrator left in tenant: previous IT provider deleted the only GA account. How do we recover admin access?

Steve TM 0 Reputation points
2026-11-06T11:02:44.9533333+00:00

We're the new IT support provider for a small UK business. The previous IT company deleted the only Global Administrator account when they left. Nobody in the tenant now holds Global Administrator or Privileged Role Administrator.

Current position:

  • Two users hold limited admin roles, and neither can assign Global Administrator.
  • We can view users and role assignments but can't add or change them.
  • The two admins have never set up MFA or self-service password reset and don't know their passwords, because the previous provider set them. So they can't reset their own passwords, and they can't sign in to register MFA.
  • The business owns its custom domain and can add DNS records to prove ownership.
  • The previous provider is not cooperating.
  • The GA account was deleted a couple of months ago.
  • A director of the business is available to confirm authorisation and complete any identity or ownership verification Microsoft requires.

We've tried the Microsoft 365 help and support pages, but they keep looping back to "contact your administrator," and we can't find a UK phone number for business support.

Questions:

  1. What is the correct route to request Global Administrator recovery when no GA exists? Is this handled by the Data Protection team, and how do we reach them?
  2. Is DNS TXT verification on the custom domain still the accepted proof of ownership, and what other information should we have ready (tenant ID, billing details, company documents)?
  3. Is there a current UK phone number for Microsoft 365 business support that handles admin access recovery?

Thanks for any help.

Microsoft 365 and Office | Subscription, account, billing | For business | Windows
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alina Le 5,805 Reputation points Independent Advisor
    2026-11-06T12:56:47.7566667+00:00

    Hello

    If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.   

    For detailed guidance, to set up a new tenant, please follow these steps:    

    copyImage

    copyImage

    Once your tenant is created, you should be able to access the support portal and submit your ticket without further issues.

    Ticket Support: In the Microsoft 365 Admin Center->Support->Help & Support. You can raise support ticket In Microsoft Admin Center by this link:

    https://admin.microsoft.com/#/support/requests

    copyImage

    copyImage

    copyImagethe Support Assistant as shown in the screenshot, then type "Contact Support" into the search box and select "Contact Support" or the "earphone symbol" above..

    Choose "Phone" support and fill all the details of this issue.

    Click "Contact me"

    After completing them, you will receive an email appointment for a meeting to review this issue professionally together.

    *Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.   

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Mohammed Hamed 160 Reputation points
    2026-11-06T11:39:20.73+00:00

    @Steve TM This is a tenant lockout and must be handled by Microsoft Support. Ask the support agent to open a case and escalate it to the Data Protection or Tenant Recovery team, because no Global Administrator or Privileged Role Administrator remains.

    Be ready to provide:

    • The tenant ID and onmicrosoft.com domain
    • Access to the custom domain’s DNS
    • Billing or subscription information
    • Company registration documents
    • Written authorisation from a director

    Microsoft may ask you to add a DNS TXT record, but DNS control alone might not be sufficient. Since the original administrator was deleted more than 30 days ago, that user account is probably permanently deleted and cannot be restored. The recovery team will likely need to verify ownership and establish a new authorised administrator.

    There does not appear to be a dedicated public UK number for the Data Protection Team. Start through the Microsoft Support Contact Us page, select Can’t sign in and Microsoft 365 for business, and make sure you obtain a support case number .

    If my solution help you please marked as accepted solution .

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.