I am locked out of my Azure account and cannot raise an Azure support ticket

Contact Microsoft business support while signed out and request escalation for a complete Microsoft Entra tenant lockout involving the sole Global Administrator; Microsoft’s Data Protection team must verify ownership and restore administrative access when no other administrator can sign in.

Request the escalation

1. Open Contact Microsoft customer support and select the business support options for your country or region; the page provides regional telephone routes that do not depend on access to the locked tenant.^1^
2. State this clearly:

   “This is a complete Microsoft Entra tenant lockout. The only Global Administrator is locked, no other administrator can create a support request, and I need a support case escalated to the Data Protection team for tenant administrator recovery.”

3. Ask the representative to create a case on your behalf and provide its case number. Do not let the issue be routed only to password-reset self-help; sole-admin lockout requires tenant-level recovery.
4. Have the following non-secret information ready:
   • Tenant ID and primary tenant domain, if known
   • Azure subscription ID or Microsoft 365 subscription details
   • Locked administrator sign-in name
   • Organization name and your role
   • An accessible external email address and telephone number
   • Billing or ownership records requested during verification

This escalation resolved closely matching cases where the sole Global Administrator could not sign in or create a ticket: support engaged the Data Protection team, which then contacted the tenant representative by email or telephone to restore access.^2^ ^3^

Support cannot simply disclose credentials or bypass account protection. Expect an organizational-ownership verification process before access is changed.

Conditional alternatives

• If another Global Administrator exists: that administrator can reset the affected account’s authentication registration in Microsoft Entra admin center → Identity → Users → All users → affected user → Authentication methods → Require re-register multifactor authentication.^4^
• If a Microsoft cloud partner still has valid delegated administration: ask the partner to investigate. Access-related actions such as password or MFA reset require the Privileged Authentication Administrator role through the delegated relationship.^5^
• If neither exists—as indicated here—continue with the signed-out support escalation rather than creating a new tenant or subscription. A new tenant would not restore control of the existing tenant or its resources.

After access is restored

Create at least two cloud-only emergency-access accounts with permanent active Global Administrator assignments. Use the tenant’s .onmicrosoft.com domain, phishing-resistant authentication distinct from normal administrator authentication, secure credential storage, sign-in monitoring, and regular validation. Exclude these accounts from Conditional Access policies that could block sign-in during an emergency.^6^

References

1. Contact Microsoft customer support
2. Full Azure Tenant Global Admin Lockout — No Way to Open Support Ticket - Microsoft Q&A
3. Azure admin MFA Lockout - Microsoft Q&A
4. Only Global Admin locked out of Azure Portal due to missing MFA deadline - Microsoft Q&A
5. Preventing tenant lockouts
6. Manage emergency access accounts in Microsoft Entra ID