Cannot delete a CIAM (External ID) tenant — no reachable Global Administrator

Question

A CIAM/External ID tenant in our subscription is stuck in a Failed delete state. Its only administrators are no longer reachable, so we cannot sign in to remove the remaining users and apps that block deletion (AADSTS50020 on any sign-in attempt). We are Owner of the host subscription and can prove control of the resource. We need Microsoft to either delete the tenant or restore admin access. Happy to provide the resource and tenant IDs privately once this moves to a support case.

Answer 1

Please understand that as forum moderators, we do not have the tools or sufficient access to make changes to user accounts, including logging in, resetting passwords, or modifying access rights. For your security, only Microsoft Support can assist with these requests.  

Hello Ferenczy Roland,

Because no Global Administrator can currently sign in to the CIAM/External ID tenant, you will first need to regain administrative access through Microsoft Support. This situation requires assistance from the Data Protection Team.

The Data Protection Team has the authority and specific security procedures required to verify that you are the legitimate owner or authorized administrator of the tenant. After ownership has been verified, the team can review the available options to restore administrative access or assist with the failed tenant deletion.

Please locate the appropriate Microsoft support telephone number for your country or region using the following page: Customer service phone numbers - Microsoft Support   

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:   

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)        

In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:   

• What kind of problem are you experiencing?           
• Answer: Authenticator           
• What products do you use?           
• Answer: Office 365 for business           
• Is this for an education or company account?           
• Answer: For companies           
• Are you an administrator?           
• Answer: Yes           
• Are there any other administrators in your organization?           
• Answer: No. I am the only admin in my tenant            
• Do you need a... Service request?            
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.        

During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

---

If you are unable to reach support via the phone numbers, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365    

Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.    

Important notes:     

• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.    
• The resolution time might be longer as you are contacting support from a different tenant.    
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.  

Warm regards, 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.