Access Global Admin account

Question

How can I bypass the attenuator app for the global admin account?

Answer 1

Hi @Stephenson County Veterans' Assistance Commission,

Welcome to the Microsoft Q&A forum.

I would like to provide you with the following information:

To protect tenant data, Microsoft requires all Global Administrator accounts to configure and use Multi-Factor Authentication (MFA) when signing in. For security reasons, MFA cannot be bypassed for Global Admin accounts under any circumstances.

If you are unable to sign in to your Global Admin account due to MFA authentication issues, you must contact Microsoft’s Data Protection Team directly to request an MFA reset for your account. They will also guide you on how to avoid being locked out due to MFA issues in the future.

Please find the appropriate Microsoft Support phone number for your region and call the Microsoft frontline support team. Then, ask them to create a support ticket for you using the following link:

Customer service phone numbers – Microsoft Support

In this case, the Microsoft Data Protection Team is the only team with the necessary tools and specialized procedures to:

• Verify your identity
• Securely assist with restoring administrator account access

Please note that forum moderators do not have the authority to directly intervene in user accounts, especially for issues related to:

• Account sign-in
• Password reset
• MFA authentication
• Access changes or recovery

Tips for interacting with the IVR (automated phone system)

To help you navigate the IVR system more effectively, you may refer to the following guidance:

• When calling the support number, you may hear an introduction lasting about 30 seconds (for example: “You can visit the link…”). You can skip this part and wait until the system presents the options.
• Then follow these steps:
  • Press “1” – for business email users
  • Press “1” again – to select technical support

In some regions, the initial process may be fully automated. You can prepare your answers in advance, as shown below:

• What kind of problem are you experiencing? Answer: Authenticator
• What products do you use? Answer: Office 365 for business
• Is this for an education or company account? Answer: For companies
• Are you an administrator? Answer: Yes
• Are there any other administrators in your organization? Answer: No. I am the only admin in my tenant
• Do you need a service request? Answer: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

During the call, you may be asked to provide some tenant-related information, including:

• Company name
• Billing information
• Phone number
• Alternative email address

This information helps the Data Protection Team verify your identity and securely restore access.

Temporary workaround if phone support is unavailable

If you are unable to reach Microsoft Support by phone, you may consider the following temporary workaround:

• Register a new Microsoft 365 tenant (trial version) at: Microsoft 365 Business Plans and Pricing | Microsoft 365
• 
• After the new tenant is created, access the Admin Center, create a support ticket, and request to work with the Data Protection Team on behalf of your original tenant.
• 

When creating the ticket, it is recommended to use the following subject line to ensure your request is routed correctly and more quickly: Request to contact the Data Protection Team to restore administrator account access

Important notes

• This trial tenant does not grant access to any data or configuration of the locked original tenant. It is only used as a temporary method to contact Microsoft Support.
• You must be prepared to provide the necessary information to verify your identity and administrative ownership of the locked tenant.
• The resolution process may take longer, as you are contacting support from a different tenant.
• Once the issue with the original tenant is resolved, remember to cancel the trial subscription of the new tenant to avoid unexpected charges.

I hope this information is helpful. Please follow these steps and let me know if it works for you. If not, we can work together to resolve this.   

Thank you for your patience and your understanding. If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

---

 If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

To regain access to a Global Admin account when you are unable to use the Microsoft Authenticator app, you typically need to have another Global Administrator in your organization help you. Here are the steps they can follow:

1. Log in to the Azure portal.
2. Access Microsoft Entra ID.
3. Go to the user's blade on the left and select the account that is locked out.
4. Click on Authentication methods and select “Require re-register multifactor authentication.”
5. When you next attempt to log in, you will be prompted to register for MFA again, allowing you to set up a new method such as the Authenticator app or another verification method.

If you are the only Global Administrator and do not have access to another admin account, you will need to contact Microsoft Support for assistance in resetting your MFA registration. This may involve verifying your identity and ownership of the account.

---

References:

• Global Admin Locked out - Microsoft Q&A
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A