New Domain name owner. Global Admin Request

James May 0 Reputation points
2026-11-06T15:41:48.5033333+00:00

I recently purchased the company, and the individual currently assigned as the Microsoft 365 Global Administrator is no longer employed by or affiliated with the business.

As the new legal owner, I need to establish appropriate administrative control over our existing Microsoft 365 environment, including Outlook email accounts, user management, security settings, and subscription administration.

Thank you.

Microsoft 365 and Office | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-06T15:42:56.2266667+00:00

    Sign in at admin.microsoft.com with an existing company account and complete Request admin access or Become the admin if that option appears; if it does not, Microsoft Support must evaluate an administrator-recovery request.

    1. Check for self-service administrator takeover

    1. Open admin.microsoft.com and sign in using an existing account in the company’s Microsoft 365 environment.
    2. Check Show all → Roles → Role assignments to determine whether the account already has an administrative role.
    3. If Microsoft displays Request admin access or Become the admin, follow that process. It may require proving control of the company domain, commonly by adding a verification record through the domain’s DNS provider.
    4. After verification, confirm that the account has been assigned the Global Administrator role.

    This is the supported self-service route when the previous administrator has departed and the takeover prompt is available.^1^

    Owning the domain does not automatically grant access to the existing Microsoft 365 tenant. Domain control can serve as evidence during verification, but a Global Administrator role must still be assigned through the takeover or support process.

    2. If no takeover option appears

    Contact Microsoft 365 business support using the official country/region telephone list.^2^

    Tell the agent:

    The company’s sole Global Administrator has left the organization. I am the new legal owner, there is no authorized Global Administrator available, and I need to open a tenant-access recovery request and complete identity and ownership verification.

    Ask for the case to be routed to the team handling tenant access recovery/Data Protection. A closely matching Microsoft Q&A case recommends this escalation when the administrator cannot access the Admin Center.^3^

    Prepare examples of evidence Microsoft may request:

    • Legal business-purchase or ownership documents.
    • Government-issued company registration records.
    • Proof that the requester is authorized to represent the company.
    • Control of the company’s public domain and DNS.
    • Microsoft 365 invoices, subscription details, or billing information.
    • Tenant name, company domain, affected administrator account, and working contact details.

    The exact evidence is determined during Microsoft’s review. Support will evaluate the documentation and decide the appropriate recovery action; domain ownership alone does not guarantee reassignment.

    3. Check whether an existing IT partner can help

    If a reseller or managed service provider created or manages the tenant, ask whether it has an active Granular Delegated Admin Privileges (GDAP) relationship.

    • A partner holding the appropriate Global Administrator or Privileged Role Administrator permissions can promote an existing company user or create another Global Administrator.
    • If the partner lacks those permissions but holds the Service Support Administrator role through GDAP, it may open a support request on the company’s behalf.
    • Microsoft’s Data Protection team will still work directly with the company during identity verification.^4^

    Do not create a replacement tenant or move the domain unless Microsoft Support specifically advises it; that would not recover the existing mailboxes, users, settings, or subscriptions.

    After access is restored

    Immediately:

    1. Create at least two separate Global Administrator accounts with distinct credentials and MFA methods.
    2. Create and securely maintain emergency-access accounts.
    3. Review and remove the former administrator’s role assignments and sign-in access.
    4. Review authentication methods, Conditional Access policies, billing contacts, subscriptions, partner relationships, and recovery information.
    5. Document the tenant ID, administrative contacts, and recovery procedure.

    Microsoft recommends Global Administrator redundancy and emergency-access accounts to prevent another tenant lockout.^4^


    References

    1. Our administrator has left the company and only I can access anything - Microsoft Q&A
    2. Contact Microsoft customer support
    3. Regaining Access to Admin Center After Global Admin Departure - Microsoft Q&A
    4. Preventing tenant lockouts
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.