AADSTS5000228 – Access to newly created Microsoft Fabric tenant is denied

Kunal kantiwal 0 Reputation points
2026-09-14T04:05:04.2633333+00:00

Hello Microsoft Support/Community,

I recently created a Microsoft Fabric Free account for learning and using Power BI Desktop.

My work/school account is:

[Moderator note: Personally Identifiable Information removed]@Kantiwal.onmicrosoft.com

I am the only administrator of this newly created tenant. However, I am unable to sign in to Microsoft Fabric, Microsoft Entra admin center, or Power BI Desktop.

When I try to sign in, I get the following error:

AADSTS5000228: Access to tenant is denied. Please contact your administrator.

Error code:

interaction_required

Tenant ID:

[Moderator note: Personally Identifiable Information removed]

Trace ID:

[Moderator note: Personally Identifiable Information removed]

Correlation ID:

[Moderator note: Personally Identifiable Information removed]

Timestamp:

2026-09-13 13:28:27Z

I have already tried:

  • Clearing browser cache/cookies
  • Using another browser
  • Retrying the sign-in
  • Signing in without Web Account Manager in Power BI Desktop

However, the problem still occurs.

I also tried to access Microsoft Entra admin center, but I receive the same AADSTS5000228 tenant access denied error.

Could you please check whether my newly created tenant is restricted, blocked, or incompletely provisioned, and advise how I can restore access?

I am the only administrator and currently cannot access the tenant to make any changes.

Thank you.


Moved from Microsoft Security | Microsoft Entra | Microsoft Entra ID

Microsoft 365 and Office | Subscription, account, billing | For education | Other
0 comments No comments

1 answer

Sort by: Oldest
  1. Jade Ng 15,485 Reputation points Microsoft External Staff Moderator
    2026-09-14T04:35:10.52+00:00

    Dear Kunal kantiwal,

    Based on the information provided, the AADSTS5000228 "Access to tenant is denied" error can sometimes occur when a new tenant is not fully provisioned or when administrator access becomes unavailable due to an interrupted authentication setup process.

    If the tenant is confirmed to be in an administrator lockout state and there are no other Global Administrators available, recovery typically requires assistance from Microsoft's Data Protection team, which has identity verification processes available for tenant recovery scenarios.

    If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts.

    For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. 

    If you can reach Microsoft by phone, use the official Global Customer Service phone numbers list. Choose your region > your country > if your country lines fail or lack English support, select a nearby country or the United States number, Microsoft explicitly allows this.

    If you have difficulty reaching an agent by phone, there is a reliable workaround. This involves creating a new, temporary Microsoft 365 account to contact the support team online. 

    1.Visit the Microsoft 365 Enterprise Plans page: Go to Compare Office 365 Enterprise Pricing and Plans | Microsoft 365

    2.Choose a plan and start a free trial: Select any of the available plans and click "Try for free" to begin the trial setup process. 

    3.Follow the guided setup: Complete the steps to create a new Microsoft account and a new tenant. This will be a separate and independent Microsoft 365 environment. 

    4.Access the Microsoft 365 Admin Center: Once the new tenant is created, navigate to https://admin.microsoft.com/AdminPortal/Home#/homepage

    5.Go to Support: In the left-hand navigation menu, click on "Support" and then "Help & support." 

    6.Raise a support ticket: Describe your issue in detail. Crucially, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:  

    • Your administrator account email address for the tenant. 
    • The domain name of your tenant  
    • Any error messages you are receiving. 
    • Details about the issues you are experiencing 
    • Confirmation that you are the administrator of the tenant. 

    7.Submit your ticket:

    Follow the prompts to submit your support request. You will likely receive a ticket number for tracking. 

    Important notes:  

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support. 
    • Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant. 
    • The resolution time might be longer as you are contacting support from a different tenant. 
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" > "Your products." 

    I hope these steps will help resolve your issue. If you need further assistance, I am always here to help.   

    Thank you for your patience and understanding. I appreciate your continued trust. Hope you having a nice day and really much warm regards to you as well!

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.