How to reset MFA for my Global Admin account when Microsoft Authenticator is lost

Question

How to reset MFA for my Global Admin account when Microsoft Authenticator is lost

Khaleel Ahmed 35

Hi Team,

I am the Global Administrator of my Microsoft Entra ID (Azure AD) tenant, and I have lost access to my Microsoft Authenticator app on my old phone.

Because MFA was enabled and Microsoft Authenticator was my only configured method, I am now completely locked out of my Global Admin account. I cannot approve sign-in requests, and the system does not give me any alternative MFA options.

I tried:

Signing in from multiple browsers
“I don’t have my Authenticator” option
Self-Service Password Reset (SSPR)

But all these still ask me for Authenticator approval, which I can’t access.

I do not have a second Global Admin or break-glass account in the tenant, so I cannot reset the authentication methods myself.

Could you please advise on how to reset or remove MFA for a Global Admin when the Authenticator app is lost and no other MFA method exists?

If needed, I can provide:

Proof of domain ownership
Subscription billing details
Organization verification
Any identity confirmation required for admin recovery

I need guidance on the correct process or escalation steps to recover my Global Admin access.

Thank you.

Khaleel Ahmed 35 Reputation points

2025-11-17T19:41:52.7033333+00:00

@Anonymous I have created the new Q&A post as recommended.

Here is the link: https://learn.microsoft.com/en-us/answers/questions/5625844/how-to-reset-mfa-for-my-global-admin-account-when

Requesting your assistance on the issue.
Sridevi Machavarapu 33,820 Reputation points Microsoft External Staff Moderator

2025-11-17T19:54:40.1833333+00:00
Hello Khaleel Ahmed,

To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us via private message only (do not post publicly):

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Tenant domain name (e.g., contoso.onmicrosoft.com or verified custom domain)

Tenant ID

Azure subscription ID or billing information associated with the tenant (this helps confirm ownership)

Locale

Once we receive this information, we will forward it to Microsoft’s Data Protection Team for further assistance.

Answer accepted by question author

0 additional answers

Your answer

Khaleel Ahmed 35 Reputation points

2025-11-17T19:41:52.7033333+00:00

@Anonymous I have created the new Q&A post as recommended.

Here is the link: https://learn.microsoft.com/en-us/answers/questions/5625844/how-to-reset-mfa-for-my-global-admin-account-when

Requesting your assistance on the issue.
Sridevi Machavarapu 33,820 Reputation points Microsoft External Staff Moderator

2025-11-17T19:54:40.1833333+00:00

Hello Khaleel Ahmed,

To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us via private message only (do not post publicly):

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Tenant domain name (e.g., contoso.onmicrosoft.com or verified custom domain)

Tenant ID

Azure subscription ID or billing information associated with the tenant (this helps confirm ownership)

Locale

Once we receive this information, we will forward it to Microsoft’s Data Protection Team for further assistance.

Answer 1

Sridevi Machavarapu 33,820 Microsoft External Staff Moderator

Hello Khaleel Ahmed,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to re-register MFA.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

Khaleel Ahmed 35 Reputation points

2025-11-21T14:55:56.4233333+00:00

Thank you @Anonymous Much appreciated. Your support helped resolve the issue, and I am now successfully able to access the Admin Portal.
Jurijs Bukovskis 0 Reputation points

2026-06-18T06:58:40.0933333+00:00

Hi **Sridevi Machavarapu,
**I'm in a similar situation, although with slightly different circumstances. My manager — now former manager, as he was recently fired — did not hand over the credentials for the Global Administrator account, and there are no other accounts with the same level of access. To make matters worse, he was managing the accounts for two of our organizations. What are we supposed to do now?