Tenant lockout: only Global Admin, lost MFA (Authenticator) – need tenant recovery

Question

Tenant lockout: only Global Admin, lost MFA (Authenticator) – need tenant recovery

Armando Duran 25

Hi, I’m locked out of our Microsoft 365 / Microsoft Entra tenant.

I’m the only Global Administrator.

MFA is required and my only registered method was Microsoft Authenticator on a phone I no longer have (reset).

I know the password, but I can’t complete MFA and I don’t have any other verification methods.

Because of this I can’t sign in to Entra/Azure/M365 admin portals to reset security info or open a support ticket.

Could a moderator please escalate this to Microsoft Support (Data Protection / Tenant Recovery) so they can verify ownership and help reset MFA registration?

Tenant domain and affected Global Admin UPN can be provided via private message (PII). Country: Chile Time zone: America/Santiago (UTC-3)

I also have access to the domain DNS and can add any required TXT record for verification.

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-06T10:57:09.5433333+00:00

Hello Armando Duran,

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.
Ivan 40 Reputation points

2026-01-12T11:04:30.1766667+00:00

I am the global administrator for my Microsoft 365 business tenant. My account is: ******@instalacijeleko.onmicrosoft.com

I lost access to my Microsoft Authenticator app and I do not have any backup authentication methods configured.

Because of this, I am completely locked out and cannot sign in to the admin center. When I try to sign in, it only asks for the Authenticator code and there are no other available options.

I need help with MFA reset for my global admin account.

I can verify ownership of the tenant through: – billing information (I pay the Microsoft 365 subscription) – company information – domain verification (instalacijeleko.onmicrosoft.com) – phone number – alternative email

Please escalate this to the Microsoft Data Protection / Account Recovery team.

Thank you.

Ivan Leko
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-12T11:17:11.25+00:00

Ivan I recommend creating a new thread on the same Q&A forum with as many details about your issue as possible. This will ensure better visibility within the community.

Please create a new Q&A post at https://learn.microsoft.com/en-us/answers/questions/ask/ and select the Microsoft Security | Microsoft Entra | Microsoft Entra ID tag when submitting your question and tag me over new post.

Answer accepted by question author

0 additional answers

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-06T10:57:09.5433333+00:00

Hello Armando Duran,

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.
Ivan 40 Reputation points

2026-01-12T11:04:30.1766667+00:00

I am the global administrator for my Microsoft 365 business tenant. My account is: ******@instalacijeleko.onmicrosoft.com

I lost access to my Microsoft Authenticator app and I do not have any backup authentication methods configured.

Because of this, I am completely locked out and cannot sign in to the admin center. When I try to sign in, it only asks for the Authenticator code and there are no other available options.

I need help with MFA reset for my global admin account.

I can verify ownership of the tenant through: – billing information (I pay the Microsoft 365 subscription) – company information – domain verification (instalacijeleko.onmicrosoft.com) – phone number – alternative email

Please escalate this to the Microsoft Data Protection / Account Recovery team.

Thank you.

Ivan Leko
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-12T11:17:11.25+00:00

Ivan I recommend creating a new thread on the same Q&A forum with as many details about your issue as possible. This will ensure better visibility within the community.

Please create a new Q&A post at https://learn.microsoft.com/en-us/answers/questions/ask/ and select the Microsoft Security | Microsoft Entra | Microsoft Entra ID tag when submitting your question and tag me over new post.

Answer 1

Rukmini 43,915 Microsoft External Staff Moderator

Hello Armando Duran,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Ivan 40 Reputation points

2026-01-07T15:57:23.44+00:00

Sorry wrong answer.
Martin Lindberg 25 Reputation points

2026-01-07T21:41:07.64+00:00

I have this problem. I need Micosoft Team to contact me. How do I tell them how to call me??
Gavin Bennett 0 Reputation points

2026-01-12T12:13:07.99+00:00

@ Rukmini I have the same problem. I am the only global administrator for my business accountPII. broke my phone and got a new one but the authenticator doesn't help much as I didn't have alternate methods set up. I essentially need to authenticate using my authenticator, in order to sign into the authenticator. It is an endless loop

I am able to get into my personal Microsoft email address though
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-12T12:14:42.17+00:00

Gavin Bennett

I recommend creating a new thread on the same Q&A forum with as many details about your issue as possible. This will ensure better visibility within the community.

Please create a new Q&A post at https://learn.microsoft.com/en-us/answers/questions/ask/ and select the Microsoft Security | Microsoft Entra | Microsoft Entra ID tag when submitting your question and tag me over new post.
Ivan 40 Reputation points

2026-01-13T07:41:11.78+00:00

Hello Rukmini, I have created a new thread for my issue; unfortunately, when tagging, Microsoft does not offer your profile. If you are unable to find the thread, please let me know.
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-13T08:57:44.8966667+00:00

Ivan, I have replied over the thread you posted please check