Global Admin unable to login to Microsoft 365 due to MFA – phone lost and no other admin available

Question

I am facing an issue with Multi-Factor Authentication (MFA) in Microsoft 365.

We have only one Global Administrator account in our tenant. The admin has lost their mobile phone which was configured for MFA (Microsoft Authenticator). Because of this, we are unable to complete MFA verification and cannot sign in to the Microsoft 365 admin portal.

There is no other Global Admin or Privileged Admin available in the tenant to reset or disable MFA.

Current situation:

• Single Global Admin account
• MFA enabled
• Phone lost
• No backup authentication method
• No other admin account available

We are completely locked out of the tenant.

Please guide:

1. How can we regain access to the Global Admin account?
2. What is the official Microsoft-supported process to reset MFA in this scenario?
3. Is tenant recovery possible through Microsoft Support, and what documents are required?

Tenant is active and licensed.

Any help or guidance will be appreciated.

Answer 1

Hi @IT Admin,

Thank you for posting your question on the Microsoft Q&A forum.

In your case, if you are the only administrator in your organisation, but you are unable to access your account, you will need to contact the Microsoft Data Protection team for further assistance. Please locate the appropriate support phone number for your country or region and contact Microsoft Support so the frontline team can raise a service request on your behalf: Customer service phone numbers - Microsoft Support 

When calling the support number, the experience may vary depending on your country or region:

In some regions, you may hear an automated message for approximately 30 seconds. You can ignore this message and wait for the prompt, then select “1” for Business email user and “1” again for Technical support.

In other regions, you may be guided through an automated conversation similar to the following:

• The system asks what issue you are experiencing → Authenticator
• Product in use → Office 365 for Business
• Account type → Company account
• Administrator status → Yes
• Are there other administrators in the organisation? → No
• Proceed to create a service request → Yes

If your Office 365 Business or Education subscription was purchased through a partner or reseller, and you are unable to open a service request directly, please contact your reseller’s support provider and ask them to raise the service request on your behalf.

Alternatively, if you are unable to reach support by phone, you may create a temporary trial tenant to submit a support request for recovery access. You can start with a trial license here: Microsoft 365 Business Plans and Pricing | Microsoft 365

It is noted that as a community moderator, I do not have the permissions required to access or recover Global privileges on your behalf.

I hope the information above is helpful. If you have any further questions, please feel free to reach out.

---

If this answer resolves your issue, please click Accept Answer and consider upvoting it. If you have additional questions regarding this response, kindly click Comment. 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

Answer 2

To regain access to your Global Admin account in Microsoft 365 after losing the phone configured for Multi-Factor Authentication (MFA), you can follow these steps:

1. Contact Microsoft Support: Since you are locked out and there are no other Global Admins available, the best course of action is to contact Microsoft Support directly. You can explain your situation and request assistance for tenant recovery. They will likely require you to verify your identity and ownership of the account.
2. Official Process for MFA Reset: Microsoft Support can assist in resetting your MFA settings. They may ask for documentation to verify your identity, such as business registration documents or any information that proves your ownership of the tenant.
3. Tenant Recovery: Yes, tenant recovery is possible through Microsoft Support. They will guide you through the necessary steps and inform you about the specific documents required to verify your account ownership. It's essential to have any relevant business documentation ready when you contact them.

Since you are the only Global Admin, it is crucial to act quickly to avoid prolonged downtime for your organization.

---

References:

• Global Admin Locked out - Microsoft Q&A
• Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A