We need Microsoft 365 tenant recovery / Global Admin recovery. We lost access to the only admin account and need ownership verification.”

Question

“We need Microsoft 365 tenant recovery / Global Admin recovery. We lost access to the only admin account and need ownership verification.”

Necesitamos recuperar el acceso al administradors de Microsoft 365 / la cuenta de administrador global. Perdimos el acceso a la única cuenta de administrador y necesitamos verificar la propiedad.

Answer 1

Since you posted your question in the en‑US locale and in English, I’ll respond in English as well. If you’d prefer another language, please feel free to let me know. I’d be happy to adjust my response to your preferred language.

---

Hello @Administració Esbart Català Dansaires,

I'm sorry to hear that your only admin account is locked out.

In this case, you will need to contact the Microsoft Data Protection team, as they are the only group authorized and equipped with the necessary tools and verification procedures to confirm your identity and restore administrator access. 

Please try to find the related hotline number to call the frontline (expand region under Business Users) and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

Please carefully follow this instruction to ask for Microsoft Data Protection team support:   

Depending on your country or region. For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

For some countries, it will be an automated conversation like:    

• First, when you call the hotline, it asks what kind of problem you are worried about.   
• Answered: authenticator.   
• A: What kind of product are you using?   
• B: Office 365 for business.   
• A confirmation: education or company account?   
• B: For companies   
• A: Are you an administrator?   
• B: Yes.   
• A: Do you have the other admin in your organization?   
• B: No.   
• A: You need one.... Service request?   
• B: Yes   

If your organization's Office 365 Business/Education subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.   

Please understand that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.   

If you encounter any difficulties in contacting the frontline support, please feel free to let me know. Thank you and I wish you a great day!  

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

To recover a Microsoft 365 tenant when access to the only Global Administrator account is lost, Microsoft requires identity and tenant ownership verification and this must be handled through official support channels. The process depends on whether any other admin or partner has privileged access.

1. Confirm there is truly no other admin

• If any other Global Administrator or privileged admin exists in the tenant, that admin can reset the locked-out admin’s password or MFA and restore access. See the guidance in:
  • “If you have administrator privileges: Reset your own password… Request another administrator in your company to reset your password.”
  • “To change your password, ask another admin to reset it. If there are no other admins in your organization, contact Technical Support.”

2. If there is no other Global Administrator (true tenant lockout) When there is only one Global Admin and that account is inaccessible (password/MFA lost, phone lost, etc.), the situation is treated as a tenant lockout / data protection case. In this case, tenant recovery and admin recovery must go through Microsoft Support with identity verification:

• Use Microsoft 365 / Azure commercial support channels to reach a live agent and clearly state:
  • This is a Microsoft 365 for business tenant.
  • There is a tenant lockout: the only Global Administrator has lost access.
  • A Data Protection / Tenant Recovery / Admin MFA reset is required.
• From the context, recommended actions:
  • Call Microsoft 365 for business support using the regional phone numbers: see “Find Microsoft 365 for business support phone numbers by country or region”.
  • When interacting with the IVR/agent, specify:
    • Product: Office 365 / Microsoft 365 for business.
    • Account type: company/education account.
    • Role: administrator.
    • There is no other administrator.
    • Request creation of a ticket and escalation to the Data Protection team for tenant/admin recovery.
• Be prepared to provide ownership/identity evidence as requested by Support, for example (per the tenant recovery and account recovery guidance):
  • Official business documentation.
  • Domain ownership proof.
  • Publicly listed registration data for the organization (for nonprofits, public registry data).
  • Any other information Support requests to verify that the organization legitimately owns the tenant.

3. If the tenant is nonprofit or managed by a partner

• Nonprofit tenants:
  • Microsoft for Nonprofits cannot bypass identity verification or directly grant tenant access.
  • All tenant ownership and access decisions are handled through standard Microsoft 365 support.
  • Microsoft for Nonprofits can help prepare documentation and direct to the correct support channel, but recovery still goes through Microsoft 365 Support.
• If a Microsoft partner (CSP/GDAP) manages the tenant:
  • If the partner has appropriate roles (Global Administrator or Privileged Role Administrator, or password reset roles), the partner can reset the admin password or promote another user to Global Administrator.
  • If the partner does not have sufficient roles, the end-customer Global Administrator (if any) must contact Microsoft Support; in a lockout scenario with no other admin, the same Data Protection / tenant lockout path applies.

4. If the problem is only password reset (not full tenant lockout)

• If the admin can still sign in somewhere or has alternate contact info configured:
  • Use the Microsoft 365 admin center → profile → View account → verify/update alternate email and mobile phone → sign out → sign in → Forgot password and follow the wizard.
• If the admin cannot sign in at all and there is no other admin:
  • Contact Microsoft Support as above; self-service options are not sufficient in a sole-admin lockout.

5. If the issue is MFA-only (password known, but no MFA method available)

• If another Global Administrator exists, that admin can:
  • Sign in to Azure portal → Microsoft Entra ID → Users → select the locked-out admin → Authentication methods → Require re-register multifactor authentication.
  • Then the admin can sign in again and re-register MFA.
• If there is no other Global Administrator, this again becomes a tenant lockout and must be handled by Microsoft Support / Data Protection team as described.

In summary, with no other Global Administrator and no access to the only admin account, tenant and Global Admin recovery cannot be completed self-service. The next step is to contact Microsoft 365 business support by phone or via a support ticket (if possible from another tenant) and request escalation to the Data Protection / Tenant Recovery team for ownership verification and admin recovery.

---

References:

• Tenant access recovery
• "We could not verify your account" error when you try to reset your admin password in Microsoft 365, Intune, or Azure
• Overview of Microsoft Entra ID Account Recovery
• Preventing tenant lockouts
• All about passwords
• Forgot password to sign in to Microsoft 365, Intune, or Azure
• I can't sign in to my Microsoft account
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• I need to speak with a real person and it seems impossible. - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A