Admin Lockout

Question

Admin Lockout

Hyunseok Lee 20

I have created an Entra External Id tenant. The tenant has only one admin user who created the tenant. The admin user currently has only one authentication method (via Microsoft Authenticator).

I tried to delete and reconnect the admin account in the Authenticator app but failed. Every time when I try to sign in as admin, I am asked to enter a code to the Authenticator but the Authenticator is now completely disconnected with the account and no longer working. I do not have any other authentication methods available. I want to disable or reset the current authentication methods.

익명

2025-05-19T04:51:00.0766667+00:00

Hello Hyunseok Lee,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.

In such scenarios, another Global Administrator can help to re-register MFA on a new mobile device. However, since you mentioned that you are the only Global Admin in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.

질문 작성자가 수락한 답변

익명

Hello Hyunseok Lee,

The issue relates to a tenant lockout situation where no other global admin in the tenant has the necessary admin rights to re-register MFA.

To resolve this, we engaged our Data Protection team through a support ticket. Please connect with our support team via the ticket, and they will assist you in resolving the issue.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Hyunseok Lee 20 평판 포인트

2025-05-19T11:19:47.1266667+00:00

I am being helped by the Microsoft Data Protection team on this issue now. I was told that it would take 1~3 days for the team to reach out to me and resolve the issue. Now I realized the importance of a backup or emergency admin account. Thank you.

1 추가 답변

답변

익명

2025-05-19T04:51:00.0766667+00:00

Hello Hyunseok Lee,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.

In such scenarios, another Global Administrator can help to re-register MFA on a new mobile device. However, since you mentioned that you are the only Global Admin in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.
Hyunseok Lee 20 평판 포인트

2025-05-19T11:19:47.1266667+00:00

I am being helped by the Microsoft Data Protection team on this issue now. I was told that it would take 1~3 days for the team to reach out to me and resolve the issue. Now I realized the importance of a backup or emergency admin account. Thank you.

Answer 1

삭제됨

이 답변은 당사의 사용 규정 위반으로 인해 삭제되었습니다. 작업을 수행하기 전에 자동화된 감지를 통해 답변이 수동으로 보고되거나 식별되었습니다. 자세한 내용은 사용 규정 을 참조하세요.

댓글 1개를 삭제함

댓글을 사용하지 않습니다. 자세한 정보

다음을 통해 공유

Admin Lockout

1 추가 답변

답변