Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Because the account is the only global admin and MFA (Microsoft Authenticator) is not working, recovery must go through Microsoft support and the Data Protection team. Forum moderators and documentation-based guidance cannot reset or bypass MFA for an admin account.
Use these escalation paths, aligned with the documented guidance:
- Continue with the existing support case
- Keep the current case (Case 26 05 28 00 40 000 560) open and be ready to provide:
- The tenant domain and admin UPN (for example, ******@summa.law).
- Exact error messages when MFA fails (for example, no Authenticator prompt, SMS failure, or “Sorry, we’re having trouble verifying your account”).
- If a callback has not happened yet, call the Microsoft customer service phone number for the region and quote the case ID so the agent can locate and update it.
- Keep the current case (Case 26 05 28 00 40 000 560) open and be ready to provide:
- Escalate specifically to the Data Protection team
- When calling the Microsoft customer service phone number (Global Customer Service phone), follow the IVR path documented in the Q&A answers to reach a live agent and then the Data Protection team:
- Indicate this is an Office 365 for business / Microsoft 365 for business issue.
- Specify it is a company account, not education.
- Confirm being the administrator and that there are no other admins.
- Clearly state that access to the only global admin account is blocked by MFA and a service request is needed with the Data Protection team to reset MFA.
- Ask the frontline agent to attach this information to the existing case and escalate it rather than opening a generic support path.
- When calling the Microsoft customer service phone number (Global Customer Service phone), follow the IVR path documented in the Q&A answers to reach a live agent and then the Data Protection team:
- Optional: Use a temporary trial tenant to open a ticket (if phone escalation stalls)
- If phone support cannot be reached or does not progress the case, create a temporary Microsoft 365 trial tenant as described in the Q&A guidance:
- Sign up for a Microsoft 365 trial to create a new tenant.
- Go to the Microsoft 365 Admin Center for that new tenant and open a support ticket.
- In the ticket, clearly state:
- The locked tenant’s domain and admin UPN.
- That this is a different tenant used only to contact support.
- That the only global admin of the original tenant is locked out due to MFA (Authenticator not working) and needs MFA reset by the Data Protection team.
- After resolution, cancel the trial subscription to avoid charges.
- If phone support cannot be reached or does not progress the case, create a temporary Microsoft 365 trial tenant as described in the Q&A guidance:
- Prepare for MFA reset outcome
- The Data Protection team will verify identity and, once satisfied, can reset MFA for the admin account.
- After MFA reset, sign in again and re-register MFA methods (Authenticator, phone, etc.) so that:
- Admin access is restored in time to onboard the new joiner.
- A second global admin account can be created to avoid single-admin lockout in the future.
These are the only supported escalation paths for a sole global admin who is locked out by MFA; there is no self-service bypass.
References:
- I need to reset my mfa methods
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work.
- Requesting a Tenant Admin MFA Reset
- Microsoft authenticator sending me into a spiral
- "Account verification system is having trouble" error message when you try to sign in by using a work or school account
- You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
- Frequently asked questions about Microsoft Entra multifactor authentication
- Common problems with two-step verification for a work or school account