A cloud-based identity and access management service for securing user authentication and resource access
Microsoft Support must route this sole-Global-Administrator lockout to Data Protection/Tenant Recovery for tenant-ownership verification; nobody on Microsoft Q&A can reset the account or contact you privately.
Open the recovery request
- Try the Microsoft cloud administrator recovery address identified in the matching accepted Q&A answer: https://aka.ms/cloud-admin-recovery
- Enter the affected tenant and administrator details, then complete the requested ownership checks. The recovery process may request proof of domain control, such as a DNS TXT record, and subscription or billing evidence. If verification succeeds, the recovery team can determine the appropriate action for restoring administrative access.^1^
- If that address does not offer recovery for your tenant or cannot verify it, contact Microsoft customer support and request escalation using this wording:
Microsoft lists these South African numbers:^2^Microsoft 365 for business tenant lockout. I am the sole Global Administrator. My password works, but all registered MFA methods are unavailable. Self-service recovery cannot be completed. Please create a service request and route it to Data Protection/Tenant Recovery for tenant ownership verification.
- 0800 167 344 — toll-free
- 0860 225 567 — toll
Prepare for ownership verification
Have these available when a case is created:
- Tenant name and tenant ID, if known
- Affected administrator sign-in name
- Registered organization details
- Access to the custom domain’s public DNS
- Previous Microsoft invoices and subscription/billing information
- Approximate date of the last successful administrator sign-in
- A separate reachable email address and telephone number
Provide these details only through the private Microsoft support case. Remove the invoice number, personal contact details, and unmasked account information from the public Q&A post. A standard tenant member cannot reset a Global Administrator’s authentication methods or assign itself an administrative role.^4^
Do not continue repeated MFA or password-reset attempts: the password is not the blocked step, and Microsoft Entra can temporarily restrict further attempts after unusual or repetitive sign-in activity.^5^
After access is restored
Immediately:
- Register at least two independent authentication methods.
- Create and securely protect an additional emergency Global Administrator account.
- Test both administrator accounts before closing the recovery case.
- Review MFA, self-service password reset, and Conditional Access behavior.
References
- Locked out of my admin account due to multi-factor authentication (MFA) issues - Microsoft Q&A
- Contact Microsoft customer support
- lost access for Microsoft 365 owner administrator account - Microsoft Q&A
- Sole Global Administrator locked out due to unavailable MFA – no other admin in Microsoft 365 tenant - Microsoft Q&A
- Common problems with two-step verification for a work or school account