Account Locked & Blocked

How to Recover Microsoft 365 or Entra Admin Access After an Administrator Leaves

Bushra Parveen Sep 29, 2026 868 views

Question details

The organization needs to regain administrative access to Microsoft 365, Azure, or Microsoft Entra after a former administrator or owner left without providing their credentials.

How to Recover Microsoft 365 or Entra Admin Access When a Former Admin Leaves

Product: Microsoft 365 / Microsoft Entra
Device & OS: not provided
Scenario: A company owner or IT administrator leaves the organization, resulting in the loss of Global Administrator credentials and locking the organization out of the admin center.
Observed behavior: The remaining staff cannot sign in to the Microsoft 365 admin center, manage user accounts, update subscriptions, or configure Azure settings due to lacking Global Administrator privileges.

Before you start

Check if there is any other user in your organization who might have Global Administrator privileges, and gather legal documentation proving your business ownership (such as billing invoices or company registration) to prepare for Microsoft's identity verification process.

Solution 1Recommended

Request Role Assignment from Another Active Global Administrator

If another user in your organization still has Global Administrator rights, they can quickly grant you the necessary access without contacting Microsoft support.

Microsoft 365 allows multiple users to hold Global Administrator privileges simultaneously. If an active administrator is available, this is the fastest way to regain control of your organization's directory.

Log in with an active admin account

Have the existing Global Administrator sign in to the Microsoft 365 admin center using their credentials.

Navigate to active users

In the left-hand navigation menu, click on 'Users' and then select 'Active users'.

Select the target user

Find and click on the name of the user who needs to be granted administrative privileges.

Assign the Global Administrator role

In the user flyout pane, click on 'Manage roles'. Select 'Admin center access', check the box for 'Global Administrator', and click 'Save changes'.

Request Role Assignment from Another Active Global Administrator

Tip: Microsoft recommends having at least two, but no more than four, Global Administrators in an organization to prevent lockouts while maintaining security.

Solution 2

Contact Microsoft Business Support by Phone

If no other Global Administrator is available, you must contact Microsoft Support to initiate the Data Protection account takeover process.

Solution 3

Submit a Support Request via the Azure Portal

If you have limited access to the Azure portal through another account, you can submit a support ticket directly online.

Free Microsoft Office alternative

Need a Reliable Office Suite While Recovering Admin Access? Try WPS Office

If you are locked out of your Microsoft 365 cloud tools and need to keep your business running smoothly, WPS Office provides a powerful, offline-capable desktop suite. It features full compatibility with Word, Excel, and PowerPoint files without the complex admin center dependencies.

1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
2. Install the software: Run the setup file and follow the simple on-screen instructions to install the suite on your computer.
3. Open your documents: Launch WPS Office and instantly open your existing Microsoft Office files to continue working locally.

Completely free to download and use with a lightweight installationFully compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Familiar user interface requires zero learning curve for your teamAllows for seamless local document editing while your cloud admin access is being recovered

microsoft office alternative - wps office

Frequently Asked Questions

What proof of business ownership does Microsoft require for an admin takeover?

Microsoft typically requires rigorous documentation. This can include the ability to add a specific TXT record to your organization's DNS settings, domain purchase receipts, billing invoices, or official company registration documents.

How long does the Microsoft 365 tenant recovery process usually take?

The process can take anywhere from a few days to a couple of weeks. It depends heavily on how quickly you can provide the necessary proof of ownership and the current queue times of Microsoft's Data Protection team.

Can I perform an internal admin takeover if our directory is unmanaged?

Yes. If the directory is unmanaged (often called a shadow tenant), you can perform an internal admin takeover by verifying domain ownership through a DNS TXT record within the Microsoft 365 admin center.

What should we do if the former administrator refuses to provide the password?

Do not attempt to reset their personal password or hack the account. Instead, initiate the official account takeover process with Microsoft Business Support. Once business ownership is verified, Microsoft will securely reassign administrative privileges to a new user.

Login & Account Issues