Auth Method locked for the single Global Admin account

Question

Auth Method locked for the single Global Admin account

Daniel Morrison 0

I'm trying to sign into my client's Microsoft tenant but it seems the only auth method I have available is locked. This is the only Admin account on the tenant and we don't have GDAP linked with our tenant.
The only active auth method is Phone/SMS, linked to my number.

https://learn.microsoft.com/en-us/answers/questions/2200691/unable-to-verify-identity-for-azure-login-error-39
I saw on this thread that the MFA could be unblocked via the Microsoft engineering team using the backend. Is anyone able to assist?
The account I'm logging the ticket with isn't linked to the tenant with the fault, if this information is needed, let me know what I can provide to help.

Error Code: 399287

Request Id: f39f9493-834d-45a1-999c-c9504b979000

Correlation Id: 64c103d5-3e68-400c-be26-ee18ddc42f64

Timestamp: 2025-09-15T08:18:02Z

Carolyne Milgo 1,151 Reputation points

2025-10-02T15:50:56.2633333+00:00
Reach out to Microsoft Support for assistance.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

When contacting support, provide your tenant ID and explain that no admin accounts (including partners) have access. Be prepared to verify your identity for security purposes.

The Microsoft data protection team typically will assist in regaining access or unlocking your account, depending on your scenario.

Plan to Prevent Future Lockouts

Create an Emergency Access Account (“Break Glass” Account):

Set up an emergency access account in Azure AD with permissions to bypass conditional access policies.
- This account should only be used in emergencies and monitored closely. - More details: [Microsoft Docs – Emergency Access](https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access)

Policy Best Practice: Always exclude at least one admin or emergency account from restrictive conditional access policies.

Your answer

Carolyne Milgo 1,151 Reputation points

2025-10-02T15:50:56.2633333+00:00

Reach out to Microsoft Support for assistance.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

When contacting support, provide your tenant ID and explain that no admin accounts (including partners) have access. Be prepared to verify your identity for security purposes.

The Microsoft data protection team typically will assist in regaining access or unlocking your account, depending on your scenario.

Plan to Prevent Future Lockouts

Create an Emergency Access Account (“Break Glass” Account):

Set up an emergency access account in Azure AD with permissions to bypass conditional access policies.
- This account should only be used in emergencies and monitored closely. - More details: [Microsoft Docs – Emergency Access](https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access)

Policy Best Practice: Always exclude at least one admin or emergency account from restrictive conditional access policies.