How do I regain access to my account when I am the only global administrator?

Question

How do I regain access to my account when I am the only global administrator?

RM Franks 0

I am writing to request immediate assistance with regaining access to our organization's Microsoft 365 business account. I am currently the only global admin for our domain.

Unfortunately, I am locked out of the account because I was unable to complete the Multi-Factor Authentication (MFA) setup, and I no longer have access to the previous authentication method. I am now unable to access the admin center or any company resources.

Actions Taken:

Attempted to use “Sign in another way” – No recovery options available.
Attempted password/MFA reset – Blocked due to lack of secondary methods.
No alternate global admins exist for this tenant.

Request: Please advance this case to the appropriate Microsoft team or a specialist capable of restoring admin access.

Please advise on the next steps as soon as possible.

Thank you for your urgent support.

0 comments

1 answer

Your answer

Answer 1

To regain access when being the only global administrator and locked out due to MFA, follow these supported recovery paths.

Confirm no other admin or partner can help

If there is any chance another global admin exists, that admin can reset MFA by signing in to the Azure portal → Microsoft Entra ID → Users → select the locked-out account → Authentication methods → Require re-register multifactor authentication. This forces MFA re-registration on next sign-in.
If a Cloud Solution Provider (CSP) or partner manages the tenant and has granular delegated admin privileges (GDAP) with password/MFA reset roles, they should restore access directly for the tenant admin without involving Microsoft.

Use Self-Service Password Reset (SSPR) if enabled

If self-service password reset is enabled and security info is still accessible, go to the Self-Service Password Reset tool at https://passwordreset.microsoftonline.com/ and follow the wizard.
If security info is lost but some methods still work, sign in to the Advanced security options page, add a new sign-in/verification method, verify it, then remove the old method.

If all security info and MFA methods are lost When the password is known but MFA cannot be completed and there are no other admins:

Begin sign-in to the work or school account.
At the “Verify your identity” prompt, select I don't have any of these (if available) and follow the instructions to replace security info.
If prompted that all security info is being replaced, note that access may be restricted for up to 30 days once replacement is submitted.

If password is also not usable and no security info is available:

Use the Microsoft account recovery form as documented in Help with the Microsoft account recovery form, then submit via the recovery link.

Escalate to Microsoft Data Protection / Tenant Recovery If there is truly only one global admin and no working MFA/security methods, Microsoft’s Data Protection team must verify identity and restore access:

Call Microsoft customer service using the regional phone numbers listed under Customer service phone numbers - Microsoft Support or Support for Business Products.
In the IVR/agent conversation, clearly state:
- The issue is with Authenticator / MFA for a Microsoft 365 for business / company account.
- The caller is the only global administrator on the tenant.
- There is no other admin who can reset MFA.
- A service request is needed and must be routed to the Data Protection team (or Microsoft 365 / Azure Data Protection team) for tenant admin MFA reset.
Be prepared to provide business documentation, domain ownership proof, and tenant details so Data Protection can verify ownership and perform the MFA reset or security info replacement.

Alternative path if unable to reach support from the locked tenant If direct phone support cannot be reached or agents cannot create a ticket:

Optionally create a new trial Microsoft 365 tenant (separate from the locked one) using a trial subscription.
Sign in to the new tenant’s Microsoft 365 admin center (https://admin.microsoft.com).
Go to Support → Help & support and open a ticket explaining:
- The issue is with a different existing tenant where the caller is the only global admin.
- MFA/Auth methods are lost and access to the original tenant is blocked.
- Request escalation to the Data Protection team for tenant admin MFA reset.
This trial tenant is only a channel to contact support; it does not give access to data in the locked tenant. Cancel the trial after resolution.

If tenant access is lost more broadly If tenant access is lost due to admin departure, unknown credentials, or invalid contact email, recovery must still go through Microsoft 365 support:

Go to the Microsoft 365 support page and choose I can't sign in or access my tenant.
Provide required identity and ownership documentation (business registration, domain ownership, nonprofit registration, etc.) as requested.

These processes are required because Microsoft for Nonprofits and forum moderators cannot bypass identity verification or directly change tenant ownership or admin access.

References: