Microsoft Entra tenant locked out by Conditional Access policy

Abhai Panichiyil 0 Reputation points
2026-09-19T20:56:21.3666667+00:00

My Microsoft Entra tenant is currently locked out because I accidentally created a Conditional Access policy that blocks access.

The situation is:

-The Conditional Access policy targets the tenant's only Global Administrator account.

-The policy uses Block access and targets all resources.

-The Global Administrator account is now unable to access the Microsoft Entra admin center.

-There are no other Global Administrators in this tenant.

-I have another Microsoft account that I can access, but it does not have sufficient permissions in the affected tenant to modify Conditional Access.

-This is a lab/learning tenant.

I need assistance with tenant recovery / disabling the blocking Conditional Access policy so that I can regain access to the existing Global Administrator account.

Could a Microsoft support employee advise on the correct tenant recovery, Data Protection process for this situation?

Thank you.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.