Unable to get into Azure Tenant, I am the only admin with personal account

Ankit Kotnala 1 Reputation point
2026-05-07T07:49:50.96+00:00

I am facing same issue as https://learn.microsoft.com/en-us/answers/questions/2259570/i-cannot-log-in-to-the-azure-portal-i-am-the-only .

I am locked out of my Azure tenant, I don't get any MFA notifications.

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-05-07T07:50:11.31+00:00

    Follow these steps depending on the exact situation in the tenant.

    1. If there is another global admin in the tenant
      • Ask that global admin to reset the multifactor authentication registration for the locked-out account.
      • The other admin should:
        1. Sign in to the Azure portal and open Microsoft Entra ID.
        2. Go to Users and select the affected user account.
        3. Open Authentication methods.
        4. Select Require re-register multifactor authentication.
      • After this, sign in again; the portal will prompt to set up MFA (for example, Microsoft Authenticator) from scratch.
    2. If there is no other global admin (only one admin on the tenant)
      • Use the official escalation path for locked-out global admins:
        • If this is a Partner/organization tenant, follow the guidance under Solve account access problems:
          • If the account is the only global admin, contact the Azure Data Protection team at the phone number listed in the documentation.
          • If the company has no global admin, contact the Microsoft 365 Data Protection team via the regional support number listed under Get support - Microsoft 365 admin and request help to reset the password or restore access.
      • These teams can verify ownership of the tenant and help reset access when self-service and in-tenant admin recovery are not possible.
    3. If the issue is that the account itself cannot sign in anywhere (password/MFA problems)
      • If self-service password reset (SSPR) is enabled, use the security info method to reset the work or school password: see "Reset your password using security information" in the documentation.
      • If SSPR is not enabled or does not work, use the Data Protection escalation paths described above.
    4. Prevent future lockouts once access is restored
      • Configure more than one MFA method (for example, Microsoft Authenticator plus phone or another method) so a single device loss does not block access.
      • Create an emergency access (break-glass) account in Microsoft Entra ID with appropriate protections so that administrative access is still possible if normal accounts lose MFA access.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.