Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Contact Microsoft Customer Support by phone and request a Microsoft Entra tenant-lockout case for the Data Protection/tenant recovery team, because a guest account without an administrator role cannot recover or delete the tenant.
Open the recovery case
- Use Microsoft’s regional customer-service directory to find the appropriate phone number: ^1^
- Tell the agent:
- No Global Administrator remains.
- The original administrator was deleted more than 30 days ago.
- The only accessible identity is a guest with no administrative role.
- Entra administration returns HTTP 401.
- The objective is to recover administrative access solely to delete the tenant.
- A service request must be escalated to the Data Protection/tenant recovery team.
- Provide the tenant’s initial
onmicrosoft.comdomain and tenant ID, if known. Do not post these or other account details publicly. - Supply a reachable email address and phone number that are independent of the locked tenant.
- Complete Microsoft’s ownership and identity-verification process. Microsoft uses high-assurance verification for tenant lockouts and, after validating ownership, helps a designated Global Administrator regain access to the existing tenant; it does not issue a replacement tenant.^2^
A Microsoft Q&A post cannot itself be redirected internally or grant roles. The support case is the appropriate recovery route when no administrator can access the portals. A comparable no-Global-Administrator case was directed to Global Support and the Data Protection team.^3^
Delete the tenant after access is restored
Tenant deletion requires a Global Administrator. The guest account cannot perform it in its current state.^4^
After Microsoft restores a tenant-native administrator:
- Sign in to the Microsoft Entra admin center using that recovered administrator.
- Select Microsoft Entra ID.
- On Overview, select Manage tenants.
- Select the affected tenant and choose Delete.
- Review the deletion checks and resolve every listed blocker.
- Select Delete again after all checks pass.
Typical blockers include:
- Users other than the Global Administrator performing the deletion.
- Applications or enterprise applications.
- Azure, Microsoft 365, or other Microsoft Online Services subscriptions.
- Outstanding invoices.
- Linked multifactor authentication providers.
Tenant deletion removes the organization and its resources, so verify that nothing in the practice tenant is still required. If a subscription exists, it must be canceled and reach the required deletion/deprovisioning state before the tenant can pass the deletion checks.^4^
References