Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Because you are the sole administrator and cannot access the tenant, call Microsoft 365 business support and request a service request with the Data Protection team to recover the tenant and reset your authentication methods.
Contact Microsoft support
- Open the official country/region support directory and select the business-support number for your location: ^1^
- When prompted, identify the issue as:
- Product: Microsoft 365 or Office 365 for business
- Issue: Microsoft Authenticator/MFA lockout
- Role: Sole Global Administrator
- Other administrators available: No
- Request: Create a service request and route it to the Data Protection team
- State clearly:
I am the sole Global Administrator of a Microsoft 365 tenant. The only registered Microsoft Authenticator method was deleted, there are no alternative verification methods, and I cannot access the admin center. I need tenant ownership verification and recovery of my administrator access so that I can register MFA again.
- Have relevant ownership and subscription information available, such as:
- Administrator sign-in name and tenant domain
- Subscription and billing details
- Invoice or order information, if available
- A reachable telephone number and alternate email address
- Domain ownership or business documentation if requested
This is the recovery path used for the matching scenario in which the sole administrator has no usable MFA method and cannot open the admin portal.^2^
Microsoft Learn Q&A moderators cannot access or modify the tenant, so posting the tenant name publicly will not trigger an MFA reset. The support case must go through Microsoft’s identity-verification and recovery process.
If telephone support does not create the case
As the documented case-specific fallback, create a temporary Microsoft 365 Business trial tenant under a different account, sign in to that tenant’s admin center, and then:
- Select Help & support.
- Enter Sole Global Administrator locked out—lost all MFA methods.
- If the suggested results do not resolve it, select Contact Support.
- Ask for escalation to the Data Protection team for the original locked tenant.
The normal authenticated path is Microsoft 365 admin center → Help & support → Contact Support.^3^ A closely matching accepted answer documents using a temporary trial tenant when telephone escalation cannot be completed.^2^
Cancel the temporary trial after recovery to prevent unintended charges.
If the subscription was purchased entirely through a Microsoft partner, contact that partner instead; Microsoft’s business-support documentation states that customers whose subscriptions were all purchased through a partner should obtain support from the partner.^3^
After access is restored
- Register Microsoft Authenticator again and complete a test sign-in.
- Add at least one additional strong authentication method. Microsoft recommends multiple methods so losing one does not cause another lockout.^4^
- Create administrative redundancy. Microsoft recommends at least two emergency-access accounts and advises limiting ordinary Global Administrator assignments.^5^
- Assign a separate Privileged Authentication Administrator where appropriate; that role can provide a recovery path if a Global Administrator is locked out.^6^
References
- Contact Microsoft customer support
- Admin Account Locked Out: MFA Required but No Authentication Methods Configured - Microsoft Q&A
- Get support for Microsoft 365 for business
- Recover user authentication methods using Microsoft Entra Backup and Recovery
- Admin account security in Microsoft 365 for business
- About administrator roles in the Microsoft 365 admin center