Sole Global Administrator locked out of Entra ID tenant — Authenticator MFA loop / tenant lockout

Question

Sole Global Administrator locked out of Entra ID tenant — Authenticator MFA loop / tenant lockout

Wafiqah Raisa 20

Hi there,

I am the sole Global Administrator of a Microsoft 365 Business tenant and am locked out.

I changed phones and no longer have access to the working Microsoft Authenticator registration. I have confirmed that I can successfully reset the administrator password using my alternate/recovery email but immediately after entering my password Microsoft requires Authenticator MFA again which I cannot get past due to my change of phones. I have no other Global Administrator and no usable alternative verification method.

I therefore cannot access the Microsoft 365 Admin Center or billing center. There are no other admins and no alternate MFA methods, so the Entra and M365 admin portals are inaccessible for me.

I also currently have an outstanding Power BI Pro invoice that I cannot pay because my credit card has expired. As a result, the bill remains unpaid, and I cannot update my payment information because of the MFA lockout I am unable to access the billing center. It is important for me to pay it immediately.

Could this case please be escalated/referred to the Microsoft Data Protection / Tenant Recovery team. In my research across various forums and pages, it seems the constant loop I'm stuck in cannot be solved otherwise since I am locked out, and in this forum (https://learn.microsoft.com/en-us/answers/questions/5873279/sole-global-admin-locked-out-of-entra-id-tenant-au?page=1&orderby=Helpful&comment=answer-12746494&translated=false#newest-answer-comment) I noticed the user's issue was escalated to the Data Protection team. I have the same issue as them. I did try to call Microsoft support but to no avail.

Please help me resolve this issue.

Thank you.

Wafiqah Raisa 20 Reputation points

2026-08-19T19:33:06.3866667+00:00

Hi Bence,

Thank you for your detailed response. I followed the recommended phone support route and explicitly explained that I am the sole Global Administrator of the tenant and sole user and that I am locked out due to the Microsoft Authenticator MFA issue.

However, the automated support system told me that I am not the Global Administrator and therefore could not assist me. It then instructed me to contact an administrator in my organization and ended the call. However, there is no other administrator or other person in my organization. I am the only person who manages this tenant and the only person who has access to it. So I am effectively locked out completely. I am receiving invoices every month for the past couple of years and have been paying the bill, I am completely unsure where to go from here. I cannot recall any other email that would be the admin email other than the one I am locked out of, as I am the one that created the organization and the only person part of it.

Is there another way to get a tenant-recovery/Data Protection service request opened in this situation? In particular, can this case be escalated from this forum? In this forum the person who posted had their case escalated to the Data Protection team. I am happy to provide the tenant, subscription, billing, domain, order id, invoice numbers, and ownership information required for verification.

Please help me solve this issue as I need to update my payment method urgently and pay my outstanding invoice.

Thank you for your time.

Answer accepted by question author

Dora-T 715 Independent Advisor

Hi Wafiqah Raisa

I understand how frustrating this situation must be, especially since you are the only Global Administrator and have already tried contacting Microsoft Support but were unable to proceed because the automated system could not verify you as an administrator.

If you are unable to reach the appropriate support team by phone, you can consider directly submitting a support request as a helpful workaround:

-Create a temporary Microsoft 365 tenant using a trial license: Go to Microsoft 365 Business Plans and Pricing and click Try for free to set up a temporary Microsoft 365 tenant with a trial license.

-Use this new account to sign in to the Microsoft 365 Admin Center and submit a support request on behalf of the affected tenant.

-Select the Help & support (headset) icon >If Support Assistant is enabled, turn it off >Type contact support in the search box >Select Contact support, then choose Phone or Email to submit your request.

Note: This method doesn't require you to use your new account for your business. Instead, it allows you to create a temporary global administrator account so you can submit a support request, as your original global administrator account is locked out due to issues with multi-factor authentication. The trial account is free for one month. Be sure to delete it after submitting your support request to avoid any automatic renewals or charges from Microsoft.

For further instructions, you can refer to the following Microsoft guides:

Get support - Microsoft 365 admin | Microsoft Learn.

Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope this gives you another way to reach the appropriate support team.

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Wafiqah Raisa 20 Reputation points

2026-08-25T04:02:34.7633333+00:00

Hi there Dora, thank you, I have a couple of days earlier tried the method of creating a new account to log a ticket and that has resolved my issue of being locked out of MFA, I saw it posted on another forum. Thank you!

To anyone reading this that finds themselves in a similar issue as myself, creating another temporary tenant is the best way to fix the problem, it got me in direct contact with the Data Protection team who resolved my case within 2-3 business days.
Dora-T 715 Reputation points Independent Advisor

2026-08-25T04:30:08.1466667+00:00

Hi Wafiqah Raisa

I’m glad to hear that your issue has been resolved.

I really appreciate you taking the time to provide this update and confirm that the workaround helped you connect with the Data Protection team. This information will be helpful to other users who may encounter a similar situation.

If you have any other questions in the future, please feel free to reach out anytime.

Have a great day!

1 additional answer

Your answer

Wafiqah Raisa 20 Reputation points

2026-08-19T19:33:06.3866667+00:00

Hi Bence,

Thank you for your detailed response. I followed the recommended phone support route and explicitly explained that I am the sole Global Administrator of the tenant and sole user and that I am locked out due to the Microsoft Authenticator MFA issue.

However, the automated support system told me that I am not the Global Administrator and therefore could not assist me. It then instructed me to contact an administrator in my organization and ended the call. However, there is no other administrator or other person in my organization. I am the only person who manages this tenant and the only person who has access to it. So I am effectively locked out completely. I am receiving invoices every month for the past couple of years and have been paying the bill, I am completely unsure where to go from here. I cannot recall any other email that would be the admin email other than the one I am locked out of, as I am the one that created the organization and the only person part of it.

Is there another way to get a tenant-recovery/Data Protection service request opened in this situation? In particular, can this case be escalated from this forum? In this forum the person who posted had their case escalated to the Data Protection team. I am happy to provide the tenant, subscription, billing, domain, order id, invoice numbers, and ownership information required for verification.

Please help me solve this issue as I need to update my payment method urgently and pay my outstanding invoice.

Thank you for your time.
Wafiqah Raisa 20 Reputation points

2026-08-25T04:02:34.7633333+00:00

Hi there Dora, thank you, I have a couple of days earlier tried the method of creating a new account to log a ticket and that has resolved my issue of being locked out of MFA, I saw it posted on another forum. Thank you!

To anyone reading this that finds themselves in a similar issue as myself, creating another temporary tenant is the best way to fix the problem, it got me in direct contact with the Data Protection team who resolved my case within 2-3 business days.
Dora-T 715 Reputation points Independent Advisor

2026-08-25T04:30:08.1466667+00:00

Hi Wafiqah Raisa

I’m glad to hear that your issue has been resolved.

I really appreciate you taking the time to provide this update and confirm that the workaround helped you connect with the Data Protection team. This information will be helpful to other users who may encounter a similar situation.

If you have any other questions in the future, please feel free to reach out anytime.

Have a great day!

Answer 1

Bence Weiszmann 1,560

Dear @Wafiqah Raisa

If there is no other Global Administrator available in the tenant, this needs to go through Microsoft's tenant recovery process.

I would recommend contacting Microsoft Support and explicitly describing this as a tenant lockout / no accessible Global Administrator case.

You can start here:

Microsoft Entra – Get support

If you prefer to call Microsoft Support, the exact phone menu depends on your country or region. In some countries, there is an initial message telling you to visit the online support page. You can simply wait for the menu options.

In other countries, the call may be handled by an automated conversation. For example:

What kind of problem are you concerned about?
1. Authenticator
What kind of product are you using?
1. Office 365 for business/Azure portal/Entra ID
Is this an education or company account?
1. Company
Are you an administrator?
1. Yes
Do you have another administrator in your organization?
1. No
You need to create a service request.
1. Yes

The exact wording may differ depending on the country and the current phone system, but the important part is to get the call converted into a support/service request.

Once you reach a support engineer, I would be very explicit:

“This is a Microsoft Entra tenant lockout. The only Global Administrator account is no longer accessible, and there are no other Global Administrators in the tenant. We need to recover administrative access to the tenant. Please escalate this case to the Data Protection / Tenant Recovery team.”

Have the following information ready for the ownership verification:

Tenant ID
Initial *.onmicrosoft.com domain
Custom domain name(s)
Proof of domain ownership / DNS access
Microsoft 365 subscription and billing information
Company information
Details about the previous Global Administrator
Any other information Microsoft requests to verify ownership

For future protection, I would also recommend having at least two independently managed Global Administrator accounts and dedicated emergency access accounts. This prevents losing access to the entire tenant when a single administrator account becomes unavailable.

If this answers your query, please click Accept Answer and Upvote if you found it helpful. If you have any further questions, feel free to let us know.

Wafiqah Raisa 20 Reputation points

2026-08-19T19:36:47.69+00:00

Hi Bence,

Thank you for your detailed response. I followed the recommended phone support route and explicitly explained that I am the sole Global Administrator of the tenant and sole user and that I am locked out due to the Microsoft Authenticator MFA issue.

However, the automated support system told me that I am not the Global Administrator and therefore could not assist me. It then instructed me to contact an administrator in my organization and ended the call. However, there is no other administrator or other person in my organization. I am the only person who manages this tenant and the only person who has access to it. So I am effectively locked out completely. I am receiving invoices every month for the past couple of years and have been paying the bill, I am completely unsure where to go from here.

I cannot recall any other email that would be the admin email other than the one I am locked out of and trying to sign in with, as I am the one that created the organization and the only person part of it.

Is there another way to get a tenant-recovery/Data Protection service request opened in this situation? In particular, can this case be escalated from this forum? In this forum the person who posted had their case escalated to the Data Protection team. I am happy to provide the tenant, subscription, billing, domain, order ID, invoice numbers, and ownership information required for verification.

Please help me solve this issue as I need to update my payment method urgently so I can pay my outstanding invoice.

Thank you for your time.
Bence Weiszmann 1,560 Reputation points

2026-08-19T20:10:55.56+00:00

Dear @Wafiqah Raisa

Unfortunately, I’m not able to open this type of ticket myself. @Sridevi Machavarapu rapu, would you be able to help with this case?

If this answers your query, please click Accept Answer and Upvote if you found it helpful. If you have any further questions, feel free to let us know.
Wafiqah Raisa 20 Reputation points

2026-08-19T20:15:00.8866667+00:00

Hi Bence,

Thank you so much for reaching out to Sridevi Machavarapu and helping me with this. I am happy to provide any information needed on my end and resolve the account access issue. I am also very concerned about the outstanding invoice and would like to resolve this soon.

Thank you again for your help.
Wafiqah Raisa 20 Reputation points

2026-08-20T16:47:17.5366667+00:00

Hi Bence,

It's been some time and I really appreciate your help in this matter. However this is a very urgent matter for me as my invoice is outstanding and I am unable to update my payment information because I am unable to sign in. Are you able to do anything else on your end to reach out to the Data Protection team to resolve the matter soon and begin the tenant recovery process? I found another thread that was posted in which someone else having the same issue as myself had their case escalated to the Data Protection team by @Raja Pothuraju . Do you know of any engineers that can take a look at my case and escalate it soon? I have been going in circles to solve this problem.

Please let me know of any updates.

Thank you