Sole Global Administrator locked out — Data Protection assistance required

Hi kef mali,

Based on what you've described, it sounds like you're experiencing a tenant lockout situation. Since you are the only Global Administrator for the tenant and Microsoft Authenticator is currently your only available verification method, you are unfortunately unable to access the tenant or create a support request from within the Microsoft 365 admin center.

In cases like this, the recovery process must be handled by Microsoft Support, specifically the Data Protection/Tenant Recovery team. They have the necessary tools and procedures to verify ownership of the tenant and help restore administrative access.

Although you've already contacted support and failed to create a trial tenant, I would recommend try calling again during your local business hours and clearly explaining from the beginning that this is a sole Global Administrator MFA lockout scenario. Providing that information early in the call may help ensure your case is routed to the appropriate team more efficiently.

You can find the Microsoft support phone number for your region here: Customer service phone numbers - Microsoft Support

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

• What kind of problem are you experiencing?        
• Answer: Authenticator        
• What products do you use?        
• Answer: Office 365 for business        
• Is this for an education or company account?        
• Answer: For companies        
• Are you an administrator?        
• Answer: Yes        
• Are there any other administrators in your organization?        
• Answer: No. I am the only admin in my tenant         
• Do you need a... Service request?         
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

Once you reach a support representative, I would suggest clearly explaining the situation, for example:

"I cannot sign in because Microsoft Authenticator is unavailable. I am the only Global Administrator in the tenant, and there is no other administrator who can reset my MFA. I need assistance with a tenant recovery or Data Protection case so that administrative access can be restored."

In addition, it would be helpful to have the following information ready, as Microsoft may require it during the verification process:

• Tenant domain name
• Administrator sign-in address (UPN)
• Subscription or billing details
• Domain ownership information
• Any additional documentation that can help confirm ownership of the tenant

If your Microsoft 365 subscription was purchased or is managed through a Microsoft partner/reseller/CSP, there is another possible route: contact that partner and ask them to open a Microsoft support case on behalf of the affected tenant. This can be particularly useful when the sole Global Administrator cannot access the admin center.

I understand that repeatedly calling support can be annoying, but given that you are the sole Global Administrator, creating the Data Protection/Tenant Recovery service request is the key next step.

Best regards,

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".