I don’t have access to the tenant admin account

Question

How to solve this problem? I already paying for Office 365 for my business, but cannot use. I don’t have access to the tenant admin account. Probably there is UPN conflict between Microsoft consumer account and Microsoft Entra ID or Soft-deleted or blocked user after consumer-to-business transition

How to solve this issue?

Answer 1

Hi @Bartosz Koczorowski, 

Thank you for posting your question in the Microsoft Q&A forum, and I’m really sorry to hear about the trouble you’re running into. Since you currently don’t have access to the tenant’s admin account, the quickest way to move forward is to reach out directly to Microsoft’s frontline support: Customer service phone numbers - Microsoft Support   

In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts. 

Please note that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc  Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)    

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:      

What kind of problem are you experiencing?         

Answer: Authenticator         

What products do you use?         

Answer: Office 365 for business         

Is this for an education or company account?         

Answer: For companies         

Are you an administrator?         

Answer: Yes         

Are there any other administrators in your organization?         

Answer: No. I am the only admin in my tenant          

Do you need a... Service request?          

Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.  

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.        

If you're still unable to get through to support, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365   

Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.   

Note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.  

I truly hope these steps help you regain access to your tenant.  

If you have any updates or further questions, feel free to reply here. I’ll do my best to support you however I can. Thank you again for your time and understanding. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

Answer 2

To regain access when the tenant admin account is unavailable, the only supported path is to work with Microsoft support so the Data Protection team can verify identity and restore or reset admin access.

Use the path that matches the situation:

1. If there is another global admin in the tenant
   • Ask that global admin to:
     • Reset the password for the locked/incorrect account, or
     • Assign the global admin role to a different user that can sign in.
   • This is the standard way to resolve sign‑in and UPN/account conflicts.
2. If there is no other global admin (only one admin and it is locked)
   • Microsoft’s Data Protection team must intervene; forum/community support cannot fix this.
   • Call Microsoft support using the business support phone numbers listed under Customer service phone numbers - Microsoft Support or Support for Business Products in the documentation.
   • When the IVR/bot asks what the problem is, clearly indicate:
     • The issue is with Authenticator / sign‑in / lost admin access.
     • The product is Office 365 for business / Microsoft 365 for business.
     • It is a company account, not education.
     • Confirm being an administrator and that there is no other admin.
     • Ask to open a service request and to be routed to the Microsoft Data Protection team.
   • The Data Protection team has tools and processes to:
     • Verify identity and ownership of the tenant.
     • Reset or restore access to the global admin account.
3. If direct hotline access is difficult
   • Create a temporary trial Microsoft 365 tenant:
     • Sign up for a Microsoft 365 business trial and complete tenant creation.
     • Go to the Microsoft 365 Admin Center for the new tenant and open Help & support.
     • Raise a support ticket explicitly stating:
       • Locked out of a different, existing Microsoft 365 tenant.
       • The admin UPN and domain of the locked tenant.
       • That there is no other global admin.
       • That there may be a UPN conflict or soft‑deleted/blocked account after consumer‑to‑business transition.
     • Ask support to escalate to the Data Protection team to restore access to the original tenant.
   • After resolution, cancel the trial subscription for the temporary tenant to avoid charges.
4. If the issue is a UPN or account mismatch (consumer vs. work account)
   • When signing in, ensure the work/school account is selected rather than a personal Microsoft account if both share the same UPN (for example, ******@contoso.com).
   • If still unable to access the correct tenant or admin capabilities, proceed with the Data Protection team route above, as they can correct blocked/soft‑deleted or mis‑mapped identities at the tenant level.
5. If repeated failed sign‑ins or MFA issues are involved
   • Multiple failed attempts or MFA problems can cause temporary lockouts.
   • If an IT admin is available in the tenant, they can:
     • Review Microsoft Entra sign‑in logs.
     • Reset MFA or authentication methods for the affected admin account.
   • If no admin is available, again the Data Protection team must handle this via a support case.

There is no self‑service way to fix a tenant‑level admin lockout or a soft‑deleted/blocked admin account when no other global admin exists. Resolution requires a support ticket and identity verification by Microsoft’s Data Protection team.

---

References:

• Troubleshoot sign-in issues and account access problems
• Common problems with two-step verification for a work or school account
• Error AADSTS50020 - User account from identity provider does not exist in tenant
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A