Recovering access to my Azure tenant.

Question

Recovering access to my Azure tenant. I am the admin, but I lost my MFA and the subscription was deleted.

Directory ID: PII

Answer 1

Hello Lucas Fernandes da Conceição

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Answer 2

Because the MFA methods are lost and the subscription tied to the tenant was deleted, recovery depends on whether any other admin or support channel can still verify identity and reset authentication.

Use these steps, in order:

1. Check for any other admins or accounts
   • If any other Global Administrator or privileged admin account exists in the tenant, that admin can:
     1. Sign in to the Azure portal → Microsoft Entra ID → Users.
     2. Open the affected admin account.
     3. Go to Authentication methods and select Require re-register multifactor authentication so MFA can be set up again on a new device.
   • If this is possible, it immediately restores access without involving Microsoft support.
2. If there is no other Global Administrator (sole admin locked out)
   • This is a tenant lockout scenario where no one in the tenant can reset MFA.
   • In this case, recovery must go through Microsoft’s Data Protection / Tenant Recovery process. Community forums or normal support queues cannot bypass identity verification.
   Follow these options: Option A – Call Microsoft Data Protection / Tenant Recovery via business support
   1. Use the Microsoft 365 / Azure business support phone numbers for the region: see Find Microsoft 365 for business support phone numbers by country or region.
   2. When connected, clearly state:
      • This is a tenant lockout.
      • The caller is the only Global Administrator.
      • MFA is required and the only method was Microsoft Authenticator, which is no longer accessible.
      • The Azure subscription has been deleted but access to the tenant (directory) is required.
   3. Ask to be routed to the Microsoft 365/Azure Data Protection team or Tenant Recovery team.
   4. Be prepared to provide identity and ownership proof, such as:
      • Official business documentation.
      • Domain ownership details.
      • Public registration data for the organization.
   Option B – If unable to open a ticket from the locked tenant
   • If sign-in to the original tenant is impossible and normal support channels will not create a ticket without a signed-in admin, one documented workaround is:
     1. Create a new trial Microsoft 365/Azure tenant (separate from the locked one).
     2. Use that new tenant’s admin portal to open a support request.
     3. In the ticket, request contact with the Data Protection / Tenant Recovery team for the original tenant (provide the Directory ID and all ownership evidence).
3. Understand what Microsoft for Nonprofits / Partner channels can and cannot do (if applicable)
   • If the tenant is a nonprofit or was created via a partner:
     • Microsoft for Nonprofits or partners cannot bypass identity verification, change tenant ownership, or directly recover usernames/passwords.
     • They can help prepare documentation and direct to the correct Microsoft 365/Azure support channel, but all access decisions are made by the core Microsoft 365/Azure support and Data Protection teams.
4. If the account is a work/school account (not personal Microsoft account)
   • Self-service password reset or standard account recovery flows will not help if all MFA methods are lost and there is no other admin; only the Data Protection / Tenant Recovery process can reset MFA/SSPR in this scenario.
5. If the account were a personal Microsoft account (consumer)
   • Use the Microsoft Account Recovery form and related guidance, but this applies only to consumer accounts, not Azure AD/Microsoft Entra tenants.

In summary, with lost MFA and no other admin, and with the subscription already deleted, the only supported path to regain access to the Azure tenant is to work with Microsoft’s Data Protection / Tenant Recovery team through a support request and complete their identity verification process.

---

References:

• Tenant access recovery
• Troubleshoot sign-in issues and account access problems
• Preventing tenant lockouts
• Forgot password to sign in to Microsoft 365, Intune, or Azure
• Overview of Microsoft Entra ID Account Recovery
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• I can't sign in to my Microsoft account
• I need to reset my mfa methods - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A

Answer 3

1. If the account were a personal Microsoft account (consumer)
   • Use the Microsoft Account Recovery form and related guidance, but this applies only to consumer accounts, not Azure AD/Microsoft Entra tenants.