New Domain name owner. Global Admin Request

Question

New Domain name owner. Global Admin Request

James May 0

I recently purchased the company, and the individual currently assigned as the Microsoft 365 Global Administrator is no longer employed by or affiliated with the business.

As the new legal owner, I need to establish appropriate administrative control over our existing Microsoft 365 environment, including Outlook email accounts, user management, security settings, and subscription administration.

Thank you.

0 comments

2 answers

Your answer

Answer 1

Sign in at admin.microsoft.com with an existing company account and complete Request admin access or Become the admin if that option appears; if it does not, Microsoft Support must evaluate an administrator-recovery request.

1. Check for self-service administrator takeover

Open admin.microsoft.com and sign in using an existing account in the company’s Microsoft 365 environment.
Check Show all → Roles → Role assignments to determine whether the account already has an administrative role.
If Microsoft displays Request admin access or Become the admin, follow that process. It may require proving control of the company domain, commonly by adding a verification record through the domain’s DNS provider.
After verification, confirm that the account has been assigned the Global Administrator role.

This is the supported self-service route when the previous administrator has departed and the takeover prompt is available.^1^

Owning the domain does not automatically grant access to the existing Microsoft 365 tenant. Domain control can serve as evidence during verification, but a Global Administrator role must still be assigned through the takeover or support process.

2. If no takeover option appears

Contact Microsoft 365 business support using the official country/region telephone list.^2^

Tell the agent:

The company’s sole Global Administrator has left the organization. I am the new legal owner, there is no authorized Global Administrator available, and I need to open a tenant-access recovery request and complete identity and ownership verification.

Ask for the case to be routed to the team handling tenant access recovery/Data Protection. A closely matching Microsoft Q&A case recommends this escalation when the administrator cannot access the Admin Center.^3^

Prepare examples of evidence Microsoft may request:

Legal business-purchase or ownership documents.
Government-issued company registration records.
Proof that the requester is authorized to represent the company.
Control of the company’s public domain and DNS.
Microsoft 365 invoices, subscription details, or billing information.
Tenant name, company domain, affected administrator account, and working contact details.

The exact evidence is determined during Microsoft’s review. Support will evaluate the documentation and decide the appropriate recovery action; domain ownership alone does not guarantee reassignment.

3. Check whether an existing IT partner can help

If a reseller or managed service provider created or manages the tenant, ask whether it has an active Granular Delegated Admin Privileges (GDAP) relationship.

A partner holding the appropriate Global Administrator or Privileged Role Administrator permissions can promote an existing company user or create another Global Administrator.
If the partner lacks those permissions but holds the Service Support Administrator role through GDAP, it may open a support request on the company’s behalf.
Microsoft’s Data Protection team will still work directly with the company during identity verification.^4^

Do not create a replacement tenant or move the domain unless Microsoft Support specifically advises it; that would not recover the existing mailboxes, users, settings, or subscriptions.

After access is restored

Immediately:

Create at least two separate Global Administrator accounts with distinct credentials and MFA methods.
Create and securely maintain emergency-access accounts.
Review and remove the former administrator’s role assignments and sign-in access.
Review authentication methods, Conditional Access policies, billing contacts, subscriptions, partner relationships, and recovery information.
Document the tenant ID, administrative contacts, and recovery procedure.

Microsoft recommends Global Administrator redundancy and emergency-access accounts to prevent another tenant lockout.^4^

References

Answer 2

Hi James May,

Thank you for reaching out.

This happens because the Global Administrator role has the highest level of permissions in Microsoft 365. If the only Global Administrator has left the organization, other users cannot grant themselves Global Administrator access.

Here are a few options you can try to regain access to your admin account:

Option 1: Contact Microsoft Data Protection Support by phone

Since this is the only admin account in your organization, Microsoft's Data Protection team can help verify your identity and assist with restoring access to the account. Once access has been recovered, you can assign admin roles to other users in your tenant as needed.

You can try reaching out to the Global Customer Service phone: Customer service phone numbers - Microsoft Support.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

IVR: What kind of problem are you concerned about?

You: Lost Global Administrator access.

A: What products do you use?

You: Office 365 for business.

Verification: Education or company account?

You: For companies

IVR: Are you an administrator?

You: Yes.

IVR: Are there any other administrators in your organization?

You: No.

IVR: Do you need a... Service request?

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

Option 2: Create a new tenant to submit a support ticket

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription.

To set up a new tenant, please follow these steps:

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365.

This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.
Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.
In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.
Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here.

Hope you're able to get this resolved soon.