All Admin accounts are blocked due to Conditional Access Policy and there is no glass break account

Question

All Admin accounts are blocked due to Conditional Access Policy and there is no glass break account

Mohammed AbdulHannan 0

We need to connect to Microsoft Support --> Data Protection / Tenant Recovery Team - so that they can help us to resolve this issue on urgent basis.

We need email or contact no for this type of support in Saudi Arabia.

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-04T01:01:07.0633333+00:00

Hello Mohammed AbdulHannan

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-05T10:14:59.29+00:00

Hello Mohammed AbdulHannan

Following up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!
ZeemCorporation-3613 0 Reputation points

2026-05-05T10:36:37.7766667+00:00
yes we have support ticket but they keep changing tracking nos

Latest Ticket is :

before :

before 2 - (this one they closed)

please let know to way to check the status of above ticket and what is its current positing - or if you can post the status here will be great

thanks and highly appreciated your valuable inputs & guides - above ticket set severity to A but very late on act.

can you please check this delay too

1 answer

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-04T01:01:07.0633333+00:00

Hello Mohammed AbdulHannan

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-05T10:14:59.29+00:00

Hello Mohammed AbdulHannan

Following up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!
ZeemCorporation-3613 0 Reputation points

2026-05-05T10:36:37.7766667+00:00

yes we have support ticket but they keep changing tracking nos

Latest Ticket is :

before :

before 2 - (this one they closed)

please let know to way to check the status of above ticket and what is its current positing - or if you can post the status here will be great

thanks and highly appreciated your valuable inputs & guides - above ticket set severity to A but very late on act.

can you please check this delay too

Answer 1

All administrator accounts are locked by Conditional Access and there is no emergency access (“break-glass”) account, so recovery must be handled by Microsoft support.

If any admin can still sign in (for example via a different device or method), that admin should immediately disable or modify the Conditional Access policy causing the lockout, as described in the troubleshooting guidance for Conditional Access lockouts.
If no admin can sign in at all, contact Microsoft support and ask to be connected to the Microsoft 365/Azure Data Protection team (Tenant Recovery). Use the regional support phone numbers listed under Customer service phone numbers - Microsoft Support for Saudi Arabia, then:
- Indicate this is a business/enterprise account.
- State that all Global Admins are locked out due to a Conditional Access policy and there is no other admin or break-glass account.
- Request a service request and escalation to the Data Protection team for tenant admin recovery.
If unable to open a ticket from the affected tenant, an alternative is to create a temporary Microsoft 365 trial tenant, sign in to its Admin Center, and open a support ticket from there, clearly stating that the issue is with a different existing tenant where all admins are locked out. The Data Protection team will then verify identity and help adjust Conditional Access or MFA so that admin access can be restored.

For future prevention, configure at least one emergency access (break-glass) account and exclude it from Conditional Access policies, as recommended in the Conditional Access documentation.

References: