A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
Hello Richard Meaden, thank you for reaching out to the Q&A Forum.
Great to hear you’ve regained admin access. Please first confirm your account has Global Administrator rights: sign in at https://admin.microsoft.com/#/homepage > Users > Active users > select your account > Roles, and verify “Global administrator” is assigned.
Before making licensing or billing changes, please secure the tenant:
- Enable MFA for all admin accounts.
- Review admin role assignments and remove/downgrade any unfamiliar vendor/service accounts (least privilege).
- Maintain two emergency access (“break-glass”) Global Admin accounts (stored securely; used only for emergencies) to reduce lockout risk.
Then validate licensing and billing:
- Users > Active users > select each of your two mailboxes > Licenses and apps > confirm correct licenses; remove licenses from old Fin365 service accounts/unused users.
- Billing > Your products > confirm whether the subscription is Direct vs Reseller/CSP and verify active subscriptions.
- Billing > Bills & payments > review invoices and update Payment methods if needed (set recurring billing ON for auto-renew, or OFF for manual renewal).
If you want independent tenant control:
- Settings > Partner relationships > select Fin365 > remove delegated admin roles/permissions (GDAP/DAP).
- Note: If the subscription is Reseller/CSP-managed, Fin365 may also need to end the reseller relationship on their side.
To keep CRM email/calendar sync without ongoing Global Admin access: Use an app-based integration with least-privilege permissions (Enterprise Applications/App Registrations) and confirm the minimum permissions required with Fin365.
If you’re worried about mistakes or lockout risk, you can contact Microsoft Support via Admin Center (Help & support) or by phone to open a ticket. Detail steps: https://learn.microsoft.com/en-us/answers/questions/5698697/microsoft-365-tenant-locked-out-no-global-admin-ac
References:
- Protect your Microsoft 365 privileged accounts
- Understand customer-led removal of a GDAP relationship
- Manage Microsoft 365 payment information and billing for your business
Hope this information is helpful. If you have any other questions, please don’t hesitate to ask.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.