How to Fix Microsoft 365 Administrator Error 530035 After Sign-In
Question details
A newly assigned administrator successfully signs into Microsoft 365 but is blocked from accessing resources, receiving an error code 530035 with a message stating they do not have access, and their Windows 10 device appears as unregistered.

- Product
- Microsoft 365
- Device & OS
- Windows 10
- Scenario
- Attempting to access Microsoft 365 resources or the admin center after being granted a new administrator role.
- Observed behavior
- The user completes the sign-in process successfully but is immediately met with a 'You do not have access to this' message containing error code 530035, while the device is flagged as unregistered.
Ensure you have access to another active Global Administrator account that can manage user roles and investigate sign-in logs within the Microsoft 365 admin center.
Remove Conflicting Roles and Reassign the Administrator Role
Resolve potential role assignment conflicts caused by inactive or former administrators that might be triggering the access error for the new admin.
Error 530035 can sometimes be triggered by backend conflicts when multiple overlapping or legacy administrator roles remain active in the tenant. Clearing these conflicts and resetting the new administrator's role often resolves the access block.
Sign in to the Microsoft 365 admin center using a different Global Administrator account. Navigate to 'Users' and select 'Active users'.
Identify any inactive or former administrators who still hold conflicting roles. Select their accounts, go to 'Manage roles', and remove any unnecessary administrative privileges.
Locate the new administrator account experiencing error 530035. Click on their name, select 'Manage roles', remove their current administrator role, and click 'Save changes'.
Wait a few moments, then go back into 'Manage roles' for the affected user. Reassign the required administrator role and save the changes. Ask the user to attempt signing in again.

Contact Microsoft 365 Support for Log Investigation
If reassigning roles does not fix the unregistered device or access issue, Microsoft 365 Support must investigate the backend tenant and sign-in logs.
Maintain Productivity Locally with WPS Office
When Microsoft 365 cloud services or administrator access issues disrupt your workflow, a reliable local office suite ensures you never miss a deadline. WPS Office is a lightweight, fully compatible alternative that lets you edit your documents without relying on complex cloud tenant configurations.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for Windows.
- 2. Install and Launch: Run the installer. The lightweight setup takes only moments to complete. Once installed, launch the WPS Office application.
- 3. Open Your Microsoft Files: Click 'Open' within WPS Office and select your existing .docx, .xlsx, or .pptx files to continue working seamlessly while your Microsoft 365 admin issue is resolved.

Frequently Asked Questions
What does Microsoft 365 error code 530035 mean?
Error code 530035 generally occurs when a user successfully authenticates but is blocked from accessing the requested application or resource due to a Conditional Access policy, unregistered device status, or a role configuration conflict in the tenant.
Why is my Windows 10 device showing as unregistered in Microsoft 365?
Your device may appear as unregistered if it hasn't been properly joined or registered to your organization's Microsoft Entra ID (formerly Azure AD), or if a Conditional Access policy requires specific compliance criteria that the device currently fails to meet.
How long does it take for a Microsoft 365 administrator role change to take effect?
While most role assignments and revocations in Microsoft 365 apply within a few minutes, it can occasionally take up to a few hours for the new permissions to fully propagate and sync across all integrated services and administrative centers.




