Only Global Admin Lost access to the tenant

Punit Kukreja 0 Reputation points
2026-10-11T18:51:22.62+00:00

Only Global Admin Lost access to the Microsoft Tenant, because I lost my phone which had the authenticator app. Please help me gain access to the account.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ivory 2,075 Reputation points Independent Advisor
    2026-10-11T19:12:34.0433333+00:00

    Hi Punit,

    From what you've described, it sounds like your Multi-Factor Authentication (MFA) setup may need to be reset. This can sometimes happen after switching to a new device, replacing a phone, or reinstalling the Microsoft Authenticator app. Since your new device hasn't been registered yet, the authentication requests may still be linked to your previous device, which can leave you stuck in a sign-in loop.

    Since your account is an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support 

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

    • What kind of problem are you experiencing?        
    • Answer: Authenticator        
    • What products do you use?        
    • Answer: Office 365 for business        
    • Is this for an education or company account?        
    • Answer: For companies        
    • Are you an administrator?        
    • Answer: Yes        
    • Are there any other administrators in your organization?        
    • Answer: No. I am the only admin in my tenant         
    • Do you need a... Service request?         
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

    During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.     

     

    I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

    In case you are unable to contact the frontline support:

    Consider signing up for a trial subscription to create a new tenant. Once set up, you can access the new tenant's admin console and submit a support ticket to speak with the data protection team on behalf of the previous tenant. Once your issue is resolved, please remember to cancel the trial subscription to avoid any unintended charges.

    If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

    I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

    If the answer is helpful, please click 'Yes' and kindly upvote it.

    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-11T18:52:06.6166667+00:00

    Because no other Global Administrator can reset your authentication methods, contact Microsoft 365 business support and request escalation to the Data Protection/Tenant Recovery team if the sign-in page offers no usable alternative verification method.

    1. Check for an existing alternative method

    At the MFA prompt, select Sign in another way or Other verification options. Use an available method such as SMS, voice call, passkey, or security key.

    If no working alternative appears, proceed directly to support. Reinstalling Authenticator on another phone does not by itself restore the registration tied to the lost device.

    2. Open a tenant-recovery case by phone

    1. Open Microsoft’s customer-support page.
    2. Select the Work account tab.
    3. Under Technical or Sales support phone numbers, select your region and call the listed number ^1^.
    4. Describe the issue as:
      • Microsoft 365 for business
      • Lost Microsoft Authenticator device
      • Sole Global Administrator
      • No other administrator can reset MFA
      • Locked out of the Microsoft 365 tenant
    5. Ask the agent to create a service request and route it to the Data Protection/Tenant Recovery team. This is the established escalation path for the matching sole-admin lockout scenario ^2^.

    For an automated phone system, use responses similar to:

    • Problem: Authenticator
    • Product: Office 365 for business
    • Account type: Company
    • Administrator: Yes
    • Another administrator available: No
    • Request: Create a service request and connect me to the Data Protection team

    Record the case number before ending the call.

    3. Prepare for ownership verification

    Have these details available:

    • Tenant’s initial onmicrosoft.com domain and custom domain
    • Locked administrator’s sign-in name
    • Organization’s legal and trading names
    • Subscription and billing information
    • Recent invoice or transaction details
    • Domain ownership information
    • An accessible alternate email address and phone number
    • Business registration or other organizational documents, if requested

    The recovery team must verify identity and organizational ownership before restoring administrative access; a matching recovery case identifies company, billing, contact, and subscription information as relevant evidence ^3^.

    If phone support cannot create the case

    Use Microsoft’s support workflow, enter that you cannot sign in to a Microsoft 365 business tenant, select Get Help, and then Contact Support when offered [^4^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Microsoft 365 for business").

    If every support route requires an authenticated administrator, the matching Q&A guidance suggests creating a temporary Microsoft 365 trial tenant, opening a support request from its admin center, and requesting Data Protection assistance for the original tenant. Cancel that trial afterward to avoid charges ^5^.

    After access is restored

    1. Re-register Microsoft Authenticator.
    2. Add at least one additional permitted verification method.
    3. Create and securely protect another emergency-capable administrator account.
    4. Test the new methods in a separate browser session before removing obsolete registration data.

    Microsoft 365 permits users to add, change, and remove verification methods from My Profile, subject to the organization’s authentication policies ^6^.

    References

    1. Contact Microsoft customer support | Microsoft Support
    2. lost access for Microsoft 365 owner administrator account - Microsoft Q&A
    3. Sole Global Administrator Locked Out – Lost Microsoft Authenticator Access After New Phone - Microsoft Q&A
    4. [Microsoft 365 for business](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
    5. Global admin locked out – lost Microsoft Authenticator – onmicrosoft.com tenant - Microsoft Q&A
    6. Set up multifactor authentication for your Microsoft 365 account | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.