Locked out of Entra ID P2 tenant - Conditional Access blocking all Global Admin accounts

Last Resort 45 Reputation points
2026-03-23T19:39:18.0866667+00:00

I am completely locked out of my Entra ID P2 tenant. I need a support engineer to intervene on the backend.

What happened: I was building out my tenant using Microsoft Copilot as a guide. During the process, conditional access policies were configured that were not explicit about their requirements and assumptions. The policies assumed a Microsoft 365 and Intune environment. My tenant is Entra ID P2 only — no Intune, no Microsoft 365. The policies require device compliance that cannot be met because Intune is not configured in my environment. As a result I am now locked out of my own tenant.

Current situation:

  • All Global Administrator accounts complete sign-in but are then blocked with a device compliance error
  • My break-glass account can sign in but was set up as a standard user with no admin role assigned, so it cannot modify policies
  • I cannot open a traditional support ticket because the only account I can access is a standard user with no admin privileges

What I need: A support engineer to either:

  1. Disable or delete the conditional access policies on the backend, OR
  2. Assign the Global Administrator role to my break-glass account so I can fix it myself

I have a Developer support plan active on this account. I can provide all tenant details, account names, and verification information privately to a support engineer.

Please escalate this to a support engineer as soon as possible.I am completely locked out of my Entra ID P2 tenant. I need a support engineer to intervene on the backend and can provide any documentation (domain ownership) if needed.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Answer accepted by question author
Rukmini 44,000 Reputation points Microsoft External Staff Moderator
2026-03-26T18:39:23.55+00:00

Hello Last Resort

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Was this answer helpful?

0 comments
Answer accepted by question author
Breno Portas Tribes 85 Reputation points Microsoft Employee
2026-03-24T14:26:52.9566667+00:00

Hello @Last Resort , in this case you need to call Microsoft Customer Service Phone and ask them to raise a ticket on the affected Tenant, let them know the TenantID, the issue, and why you can`t access the Tenant.

https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

As soon as you raise this ticket, Microsoft Data Protection Team can help you to get your access back.

Was this answer helpful?

0 comments

0 additional answers

Sort by: Newest
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.