Orphaned Entra Tenant — No Global Administrator, Need Tenant Admin Recovery

Kane Dijkman 0 Reputation points
2026-03-11T04:44:58.41+00:00
Our tenant's only Global Administrator account was permanently deleted and is 
no longer in the soft-delete recycle bin. No other user has any admin roles.

Business impact: Active Azure subscriptions with running production workloads 
that require Entra app registration management and secret rotation.

What I can verify:
- I own and control DNS for our custom domain (can add TXT records)
- I have Azure subscription billing access

Already attempted:
- Internal admin takeover — blocked (managed tenant)
- elevateAccess API — requires existing GA
- Deleted users recycle bin — empty
- No other admin role holders exist

Request: Please escalate to the Data Protection / Tenant Recovery team. 
I can provide tenant ID and user details via private message.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.