Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Because the tenant and global admin were created and are controlled by the third‑party company, Microsoft support must work with an authorized admin or with the verified tenant owner to change control. The normal self‑service tools will not work in this situation.
Use these steps to move forward:
- Check whether anyone in your company is already an admin
If the third party added any of your staff as admins, that person can sign in to the Microsoft 365 admin center and either:- Reset passwords for your user accounts, or
- Promote one of your company accounts to Global Administrator and then remove the third party.
- If there is no admin in your company, contact Microsoft Support as the tenant owner
Because the phone system and web support flows expect an authenticated admin, use the Data Protection / tenant‑recovery path that is designed for lockout and ownership issues:- Call the regional business support number listed under Support for Business Products / Get support for Microsoft 365 for business.
- When the IVR (automated system) starts, wait through the initial message and then choose the business/technical support options as described in the Q&A guidance:
- Indicate that this is an Office 365/Microsoft 365 for business issue.
- Indicate it is a company account, not education.
- Indicate that access to the global admin account is lost and there is no other admin.
- Ask to open a service request and to be connected to the Microsoft 365 Data Protection team.
- Reset the global admin credentials, or
- Assign global admin rights to an account that belongs to the business, not the third party.
- If your subscription is through a reseller/partner
If the Microsoft 365 subscription was purchased via a CSP or other partner, and that partner is the one refusing access:- Contact the provider listed on your invoices or contract and request that they open a support ticket with Microsoft on your behalf to resolve a tenant lockout / admin access issue.
- If they refuse, still proceed with step 2 and explain to Microsoft Support that the current partner is blocking access.
- If you cannot get through the phone IVR at all
As a workaround used in similar cases:- Create a new trial Microsoft 365 tenant (this is separate from your real tenant).
- Sign in to the Microsoft 365 admin center of the trial tenant.
- Use Help & support in that admin center to open a ticket. In the ticket, clearly state:
- You are locked out of a different, existing Microsoft 365 tenant.
- The domain name and admin email of that locked tenant.
- That the original global admin is a third‑party company refusing to provide access.
- That you are the business owner and need the Data Protection team to verify ownership and transfer or restore admin access.
- After resolution, cancel the trial subscription to avoid charges.
- Going forward once access is restored
After Microsoft restores or transfers global admin rights to an account controlled by the business:- Add at least one additional internal global admin to avoid future lockouts.
- Review and, if necessary, remove the third‑party’s admin roles or partner relationship.
- Ensure alternate contact info and security info (phone, email) are set for all admins so password/MFA recovery is possible.
References:
- Troubleshoot sign-in issues and account access problems
- Preventing tenant lockouts
- Get support for Microsoft 365 for business
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A