Unsure how to find global administrator

Question

I recently discovered we have a bit of a disjointed account/domain setup and hoping to clean it up. Problem is one of the domains I have yet to figure out who might be the global administrator for. Is there a way to find out? The one user I've so far found that has an account on that domain, gets an error trying to view the user/roles list in Azure. They're also listed as just a user in the AD tenant info.

Hoping once I figure this out, that I can consolidate us into a single domain setup, is that also possible?

Answer 1

You may be getting 403 if the user account is a guest. Recommended approach is to execute an External admin takeover.

Answer 2

Hi @AstroJeremy-0629,

You can find all Global Administrators by using the Azure portal.

Login to the Azure portal https://portal.azure.com.

Select Azure Active Directory in the left side.

Select Roles and administrators.

Click Global administrator and you will find all Global Administrators.

Answer 3

So far that doesn't work. I'm only aware of 1 person that's even in this domain, but they have no access to the relevant areas that list administrators. when he tries your suggestion he gets a no access (403) error.

my hope is to find out who if anybody is there so i can take over admin and ideally merge our disparate domains/azure accounts into one if that's possible, but yet to identify who might have access if at anybody.

Answer 4

external admin takeover looks promising, and looks like it'd bring in any resources/users/etc in? This might help sort at least some of the separate domains we have. The only issue with the one where the user gets a 403 is i'm not sure there's any domains we control on it, it might just be a "name.onmicrosoft.com" domain. if we don't find anybody else on that domain, I assume we can just have that user leave that domain to leave it be and just work on the ones we know we have control over.