Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
If you know an existing Global Administrator username, try self-service password reset first; if that fails or the former IT employee controlled the only administrator account, contact Microsoft Support and request escalation to the Microsoft 365 Data Protection team.
1. Try administrator account recovery
Open the Self Service Password Reset tool and enter the existing administrator account.
This works only if password reset and security information were configured previously. If it does not let you verify the account, stop there and proceed to tenant recovery—another Global Administrator, an appropriately authorized Microsoft partner, or Microsoft Support must restore access.^1^
2. Request a live agent and tenant recovery
- Open Microsoft’s country/region phone-number list and call the number for your location.^2^
- Describe the case as:
- Microsoft 365 for Business
- Company account
- Global Administrator access lost
- Former IT administrator is no longer employed
- No other Global Administrator is available
- Email service is affected
- Ask for a service request to be created and transferred to the Microsoft 365 Data Protection team.
- Give the agent:
- Your affected Microsoft 365 domain, such as
contoso.com - An accessible phone number and external email address
- Your Microsoft 365 billing or subscription information
- Any business-ownership information requested during verification
- Your affected Microsoft 365 domain, such as
A useful statement for the automated system or agent is:
I am the business owner and have lost Global Administrator access to our Microsoft 365 business tenant after our former IT administrator left. There is no other administrator available. I need a tenant-recovery service request transferred to the Microsoft 365 Data Protection team.
Microsoft must verify control of the organization before administrative access can be restored. Similar locked-out-tenant cases are handled through a support ticket escalated to Data Protection.^3^
3. Other available routes
- Microsoft partner: If the subscription was purchased through a reseller or Microsoft partner, contact that partner. Microsoft’s online support requires a subscription purchased directly from Microsoft; partner-purchased subscriptions are supported through the partner.^4^
- Another administrator: If any current employee has Global Administrator access, that person can create a new administrator account or restore your role.
- Temporary trial tenant: If telephone support cannot create the request, Microsoft Q&A describes creating a temporary Microsoft 365 trial tenant, opening Microsoft 365 admin center → Help & support, and requesting Data Protection assistance for the original tenant.^5^ This is a community-supported fallback and availability can vary by region or support channel. Cancel the trial after resolution to avoid unintended charges.
After administrator access is restored
Treat the email problem as a separate support issue:
- In the Microsoft 365 admin center, open Service health → View the service health and check Exchange Online.
- Run Diag: Troubleshoot Email Delivery with an affected sender and recipient.
- Open Exchange admin center → Mail flow → Message trace, search for a failed message, and review its status and How to fix it details.^6^
These diagnostics require administrator access, so tenant recovery should be completed first.
References
- Preventing tenant lockouts
- Contact Microsoft customer support
- Locked out of microsoft 365 business solution missing global admin rights - Microsoft Q&A
- Get support for Microsoft 365 for business
- How to reach a Microsoft Tech support human being - Microsoft Q&A
- Find and fix email delivery issues as a Microsoft 365 for business admin