A cloud-based identity and access management service for securing user authentication and resource access
To restore access to an Azure/Microsoft Entra tenant, the contact path depends on why access is lost.
- Tenant blocked or inaccessible due to inactivity (error AADSTS5000225)
- If the error message indicates the tenant is blocked due to inactivity and it has been less than 20 days since it became inaccessible, a tenant administrator must contact Microsoft support to request reactivation.
- Use the global customer service phone numbers listed here: global support phone numbers.
- Do not open multiple requests; wait for a decision on the existing case.
- If the tenant has been blocked for more than 20 days, it is deleted and cannot be recovered.
- Locked out of tenant because no admin can sign in (for example, lost MFA, no other global admin)
- A support ticket must be opened so that Microsoft’s Data Protection Team can assist. They can help reset credentials of an administrator account and help regain access to the tenant.
- This is done via a Microsoft support request (phone or portal, depending on subscription). The Data Protection Team will then contact by email or phone.
- General guidance when tenant is inaccessible
- If the tenant is inaccessible due to inactivity, administrators should contact Microsoft using the global support phone numbers and request reactivation.
- Application owners and developers should minimize authentication requests to the deactivated tenant until it is reactivated and also avoid submitting multiple assistance requests.
In all tenant-lockout or tenant-inaccessible scenarios, the recovery path is through Microsoft Support, typically via the global support phone numbers or a support ticket, after which the Data Protection Team handles verification and recovery.
References:
- Tenant inaccessible due to inactivity
- Discover your Microsoft cloud footprint FAQ
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A