Restore the account of the only global administrator – Access to the MFA is lost, Please help!

Sergey Ivanov 20 Reputation points
2025-11-11T11:07:36.6466667+00:00

Hello,

I am currently locked out of one of my tenants as the only Global Administrator. My Microsoft Authenticator app was reset, and unfortunately, that was the only verification method configured for the account. Since there are no other Global Admin accounts, I no longer have access to the tenant.

Could someone from Microsoft please assist me in opening a case with the Data Protection Team to help regain access? @Raja Pothuraju , tagging you in case you are able to assist.

We are fully prepared to verify domain ownership by adding the required DNS or TXT records to our domain registrar if needed.

Also, I attempted to call the Data Protection Team at 1-866-807-5850, but the number does not appear to be working.

Thank you for your support.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Answer accepted by question author
Raja Pothuraju 47,615 Reputation points Microsoft Employee Moderator
2025-11-19T10:42:50.4366667+00:00

Hello @Sergey Ivanov,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to re-register MFA.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

Was this answer helpful?

1 person found this answer helpful.
0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2025-11-11T11:08:21.8466667+00:00

    To regain access to your tenant as the only Global Administrator, you will need to contact the Azure Data Protection team for assistance. Since you have lost access to your Microsoft Authenticator app and there are no other Global Admin accounts available, follow these steps:

    1. Contact the Azure Data Protection Team: You can reach them at +1 866-807-5850. If this number is not working, you may need to check for updated contact information through official Microsoft support channels.
    2. Verify Domain Ownership: Be prepared to verify domain ownership by adding the required DNS or TXT records to your domain registrar, as you mentioned you are ready to do.
    3. Alternative Support Options: If you are unable to reach the Data Protection Team by phone, consider submitting a support request through the Microsoft 365 support page or contacting Microsoft support through other channels listed in the support resources.

    It is crucial to act quickly to regain access, as being locked out can hinder your organization's operations.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.