Tenant lockout — I am the only Global Admin and lost Microsoft Authenticator.

Efe Echerebor 20 Reputation points
2026-02-06T19:41:20.8066667+00:00

Dear Microsoft Support Team,

I am currently locked out of my Microsoft tenant and require urgent assistance to regain access.

I am the only Global Administrator on the tenant, and I no longer have access to the Microsoft Authenticator app that was configured for multi-factor authentication. As a result, I am unable to complete the sign-in verification process and cannot access the admin portal.

At this time, there are no alternative Global Admin accounts available to reset my authentication methods, which has left the entire tenant inaccessible.

Please advise on the identity verification steps required to restore administrator access or reset my MFA so I can securely regain control of the tenant.

Thank you for your prompt assistance.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Answer accepted by question author
Raja Pothuraju 47,820 Reputation points Microsoft Employee Moderator
2026-02-07T06:51:54.95+00:00

Hello @Efe Echerebor,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to re-register MFA.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

Was this answer helpful?

0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-02-06T19:41:34.8733333+00:00

    To regain access to your Microsoft tenant as the only Global Administrator without access to the Microsoft Authenticator app, you will need to follow these steps:

    1. Contact Microsoft Data Protection Support: Since you are locked out and do not have another Global Admin to assist you, your best option is to reach out to Microsoft Data Protection Support. You can do this by calling their customer service hotline. Make sure to explain that you are the only admin and that you need to reset your multi-factor authentication (MFA) methods.
    2. Provide Identity Verification: Be prepared to verify your identity. This may involve answering security questions or providing information related to your account, such as the email address associated with your admin account, the domain name of your tenant, and any other relevant details.
    3. Request MFA Reset: Specifically request a reset of your MFA settings so that you can re-register the Microsoft Authenticator app or set up an alternative method of authentication.
    4. Follow Up: If you do not receive immediate assistance, consider following up with the support team to expedite the process.

    If you are unable to reach a live agent, you might also consider creating a temporary account (trial tenant) to submit a support ticket on behalf of your original tenant, as outlined in some support scenarios.

    These steps should help you regain access to your tenant promptly.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.