How do I contact my Entra tenant administrator?

Question

How do I contact my Entra tenant administrator?

Matthew Serwinowski 20 Microsoft Employee

I am trying to generate a client secret in Entra, but there is an error message saying this is blocked, contact your tenant administrator. I have no idea how to determine who that is

saleha mubeen 10 Reputation points

2026-07-04T09:57:23.6333333+00:00
If you're seeing a message that says creating a client secret is blocked, it usually means your account doesn't have the required permissions or there's a tenant policy preventing the action.

To find your Entra tenant administrator, you can:

Check with your organization's IT or help desk, as they typically manage Microsoft Entra ID.

Ask a colleague who has administrator access (such as a Global Administrator or Application Administrator).

If you're signed in to the Microsoft 365 portal, your organization's IT support contact may be listed under Help & Support or your account profile.

If this is a work or school account and you're unsure who manages it, your IT department is the best place to start. They can confirm your permissions and help you generate the client secret or assign the appropriate role if needed.

Answer accepted by question author

0 additional answers

Your answer

saleha mubeen 10 Reputation points

2026-07-04T09:57:23.6333333+00:00

If you're seeing a message that says creating a client secret is blocked, it usually means your account doesn't have the required permissions or there's a tenant policy preventing the action.

To find your Entra tenant administrator, you can:

Check with your organization's IT or help desk, as they typically manage Microsoft Entra ID.

Ask a colleague who has administrator access (such as a Global Administrator or Application Administrator).

If you're signed in to the Microsoft 365 portal, your organization's IT support contact may be listed under Help & Support or your account profile.

If this is a work or school account and you're unsure who manages it, your IT department is the best place to start. They can confirm your permissions and help you generate the client secret or assign the appropriate role if needed.

Answer 1

Nathan Roberts (SN) 13,616 Student Ambassador Volunteer Moderator

Hey there, Matthew Serwinowski

... but there is an error message saying this is blocked, contact your tenant administrator. I have no idea how to determine who that is

Please can you check which tenant you are currently on by signing into your account here: https://portal.azure.com/#settings/directory

Please look at the "Current directory" to see what directory you are currently in.

User's image

If you are in your own tenant, then you should be the global administrator. If the directory shown is your employer’s tenant, the tenant admin is your internal IT department. In your case, this would be Microsoft's IT department.

Some organisations enable an app management policy that blocks adding new client secrets. If that’s the case, only your tenant admin can change it.

I am trying to generate a client secret in Entra

Microsoft recommends using certificates instead of client secrets, as they’re more secure and avoid the risks of hard coded secrets being leaked. More info here: https://learn.microsoft.com/en-us/entra/identity-platform/how-to-add-credentials?tabs=certificate

Hope this helps,
Nathan

Matthew Serwinowski 20 Reputation points Microsoft Employee

2026-07-04T17:58:56.5033333+00:00

Thank you - I see yep it's Microsoft as the directory so I'll need to find the right IT contact.

I did end up going the certificate route, but I hit a different blocker which is

I assume this is a per user policy so I'll contact IT. Thanks again
Matthew Serwinowski 20 Reputation points Microsoft Employee

2026-07-04T17:59:26.8766667+00:00

Thank you - I see yep it's Microsoft as the directory so I'll need to find the right IT contact. I did end up going the certificate route, but I hit a different blocker which is I assume this is a per user policy so I'll contact IT. Thanks again
Nathan Roberts (SN) 13,616 Reputation points Student Ambassador Volunteer Moderator

2026-07-04T19:47:29.18+00:00

Hey there, Matthew Serwinowski

Yeah, that will be a policy set by your organisation. The certificate you’re trying to add has a longer lifetime than the maximum allowed by the policy assigned to your account, which is why it’s being blocked.

Your IT team can either adjust the policy or let you know the maximum certificate lifetime they permit so you can generate one that fits within their limits.

I see yep it's Microsoft as the directory so I'll need to find the right IT contact.

If you are struggling with this, I can ask someone to PM you with the contact details or method on reaching the team who manages the Microsoft tenant.

Hope this helps,
Nathan
Matthew Serwinowski 20 Reputation points Microsoft Employee

2026-07-06T04:40:39.2+00:00

Thank you Nathan, I would definitely appreciate contact details for the right team on this!

For curiosities sake I did create certificates that ranged from 10 minutes to a year so I think that block is just for any certificates on my end.