Unable to login to Exchange admin with my EA account

The Exchange Administrator role does not create a separate “EA account” choice; open the Exchange admin center in a private browser session and sign in with the full work-or-school username of the user that holds that role.

Sign in with the intended administrator identity

1. Open an InPrivate or Incognito window:
   • Microsoft Edge or Google Chrome: Ctrl+Shift+N
   • Firefox: Ctrl+Shift+P
2. Go to the Exchange admin center.
3. Enter the complete user principal name (UPN) of the Exchange Administrator, such as [Email].
   • If the Exchange Administrator role is assigned to your normal user account, use that same account. There will be no separate role selector.
   • If the role is assigned to a dedicated administrator user, enter that dedicated user’s UPN.
4. Complete any multifactor authentication prompt.
5. Confirm that the EAC opens and displays administrative areas such as Recipients, Mail flow, and Roles.

Microsoft specifically recommends a private session for direct EAC access because it prevents an identity already cached in the regular browser session from being reused automatically.^1^

Alternatively, since the account can access the Microsoft 365 admin center:

1. Sign in there with the intended administrator identity.
2. Select Show all.
3. Select Admin centers > Exchange.^2^

If the EAC opens without administrative features

Have a Global Administrator verify that the role is assigned to the exact user being used:

1. In the Microsoft 365 admin center, go to Users > Active users.
2. Select the administrator user.
3. Select Manage roles.
4. Select Exchange Administrator—use Show all if it is not displayed.
5. Select Save changes.^3^
6. After the assignment has propagated, start a new private browser session and sign in again.

EAC access requires Microsoft 365 administrative permissions, and Exchange-specific access is provided through the Exchange Administrator role.^1^

If the role is already assigned to the correct identity but EAC still denies access, capture the complete error text, error code, timestamp, request ID, and correlation ID, then open Microsoft 365 admin center > Show all > Support > Help & support using the account that can already sign in. Those details are needed to distinguish an authorization or access-policy failure from browser identity reuse.

References

1. Exchange admin center (EAC) in Exchange Online
2. Exchange Online
3. Assign admin roles in the Microsoft 365 admin center