Lost access to Microsoft Entra tenant but still own the domain and OAuth application

Question

Lost access to Microsoft Entra tenant but still own the domain and OAuth application

Lancelot Girard 20

Hello,

We are trying to recover access to a Microsoft Entra tenant associated with our company domain.

Facts:

We still own and control the DNS zone for our domain.

Our production application uses Microsoft Login through an existing App Registration.

The Microsoft login flow is still working in production.

However, we no longer know who the tenant administrator is and no current employee has administrative access.

We need to update the Redirect URIs because we are migrating to a new application domain.

What we observe:

Our domain appears as "Managed" in Microsoft.

We can prove ownership of the domain through DNS records.

We cannot access Users, App Registrations, or Tenant settings.

We receive AADSTS50020 and authorization errors when trying to access Entra administration pages.

Questions:

What is the recommended recovery process when a company still owns the domain but has lost all known Global Administrators?
Can Microsoft restore administrative access after DNS ownership verification?
What is the correct support channel for this situation if we cannot access the tenant administration portal?

Lancelot Girard 20 Reputation points

2026-06-05T15:17:25.7166667+00:00

Thank you for the detailed explanation.

The challenge is that we currently have no accessible Global Administrator account, no accessible tenant administration portal, and no Azure subscription associated with an account we control.

We understand that the Data Protection team is the correct path, but we are unable to determine how to initiate a support request because:

We cannot access the tenant administration portal.

We do not have another tenant available.

We do not know whether the original tenant was created through a Microsoft partner.

The Microsoft support pages redirect us to Azure/Entra experiences that require tenant access.

Could you please clarify the exact support channel (URL, phone process, or escalation path) that should be used by an organization that still owns the domain but has completely lost tenant administrative access?

Thank you.

Answer accepted by question author

0 additional answers

Your answer

Lancelot Girard 20 Reputation points

2026-06-05T15:17:25.7166667+00:00

Thank you for the detailed explanation.

The challenge is that we currently have no accessible Global Administrator account, no accessible tenant administration portal, and no Azure subscription associated with an account we control.

We understand that the Data Protection team is the correct path, but we are unable to determine how to initiate a support request because:

We cannot access the tenant administration portal.

We do not have another tenant available.

We do not know whether the original tenant was created through a Microsoft partner.

The Microsoft support pages redirect us to Azure/Entra experiences that require tenant access.

Could you please clarify the exact support channel (URL, phone process, or escalation path) that should be used by an organization that still owns the domain but has completely lost tenant administrative access?

Thank you.

Answer 1

Sridevi Machavarapu 33,820 Microsoft External Staff Moderator

Hello Lancelot Girard,

Thank you for sharing the details over private message.

The issue relates to an unable to verify custom domain name as it is verified in different directory in Azure.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

0 comments