Sole Microsoft 365 Global Administrator Locked Out – MFA Reset Required (Error 50089)

Question

Sole Microsoft 365 Global Administrator Locked Out – MFA Reset Required (Error 50089)

Renato Sousa 0

Hello Microsoft Support Team,

I am responsible for managing the Microsoft 365 business environment of my company, Joficonta – Gestão e Contabilidade, Lda., and I am currently unable to access its Global Administrator account.

Issue description:

I have lost access to the Global Administrator account due to a problem with Microsoft Authenticator and multi-factor authentication (MFA).

The following issues are occurring:

Microsoft Authenticator is installed on my iPhone, but the administrator account is no longer correctly configured. The application displays the message "Sign in to add your account".

When I attempt to sign in, Microsoft asks me to approve a notification or enter a verification code generated by Microsoft Authenticator. However, the application cannot generate the requested code because it requires me to sign in first. This creates an authentication loop.

I have attempted to use the alternative SMS verification method. The registered telephone number still belongs to me, and I have access to the device, but I do not receive the verification SMS.

During the authentication process, Microsoft displays Error Code 50089.

As far as I know, I am the only Global Administrator of this Microsoft 365 tenant.

Troubleshooting already performed:

Attempted authentication through Microsoft Authenticator.

Attempted to receive verification codes by SMS.

Attempted to access the Microsoft 365 Admin Center.

Attempted to use alternative sign-in methods.

Contacted Microsoft Support by telephone, without successfully opening a support case.

Attempted to obtain assistance through the Microsoft online support system, but was unable to complete the process because authentication was required.

Assistance requested:

I urgently need to recover access to my company's Microsoft 365 Global Administrator account.

Since I appear to be the only Global Administrator and cannot complete MFA verification, I cannot reset my own authentication methods.

I kindly request assistance with the following:

How can I open an official Microsoft support case without being able to authenticate as Global Administrator?

How can I request escalation to the Microsoft Data Protection or appropriate administrator account recovery team?

Can Microsoft initiate a secure identity verification process and reset the MFA registration for the Global Administrator account?

What documentation is required to prove ownership of the Microsoft 365 tenant and business subscription?

I am responsible for the company's Microsoft 365 administration and can provide company registration documents, subscription details, billing information, proof of payment and other evidence of ownership through a secure and private channel.

I am willing to complete any necessary identity verification procedure.

Please advise me on the appropriate official support channel and the steps required to restore administrative access as soon as possible.

This is a business account recovery issue, not a personal Microsoft account password reset request.

Thank you very much for your assistance.

Kind regards,

[Moderator note: Personally Identifiable Information removed]

0 comments

1 answer

Your answer

Answer 1

Hi @Renato Sousa,

I’m happy to point you in the right direction.

Based on your description, the best next step is to contact Microsoft Support by phone so that the frontline support team can create a support case and route it to the Microsoft Data Protection Team.

The Microsoft Data Protection Team has processes and verification procedures in place to help validate tenant ownership and restore access to administrator accounts when appropriate.

You can find the correct phone number for your region here: Contact Microsoft customer support

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?

Answer: Authenticator

What products do you use?

Answer: Office 365 for business

Is this for an education or company account?

Answer: For companies

Are you an administrator?

Answer: Yes

Are there any other administrators in your organization?

Answer: No. I am the only admin in my tenant

Do you need a... Service request?

Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

(Using a script similar to the above may help you get through the automated system and reach a live support agent more quickly, at which point you can explain your specific situation.)

During the phone call, be prepared to provide information associated with your subscription, such as your company name, billing details, contact number, and an alternate email address. The Data Protection Team may use this information as part of their ownership verification process.

If calling support hasn’t been effective so far, there is a workaround you might consider. You can create a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365

User's image

Once the new tenant is created, you’ll be able to sign in to the Microsoft 365 admin center and submit a support ticket from there. In your request, clearly explain that you need help with regaining access to an administrator account in your original tenant and ask to be routed to the Data Protection team. This approach typically ensures that the ticket is properly assigned and handled by a real support engineer rather than remaining stuck in automated flows or disconnected mid-process.

User's image

Note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

As this is a user-to-user forum and separate from Microsoft Support, I can't directly reset MFA, modify accounts, or create support cases. However, I hope the guidance above helps you reach the appropriate team and resolve this issue as quickly as possible.

Thank you for your patience.