Suspicious Login Issues

How to Unlock a Microsoft Entra Administrator Blocked by Risky Sign-In

Camila Milosovich Sep 28, 2026 869 views

Question details

The user needs to regain access to a Microsoft Entra administrator account that has been blocked by security policies due to a risky sign-in.

How to Unlock a Microsoft Entra Administrator Blocked by Risky Sign-In

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Attempting to log into a Microsoft Entra admin account but being prevented from doing so by at-risk user policies.
Observed behavior: The login attempt is blocked, displaying error code 530032, preventing the administrator from accessing the tenant.

Before you start

Verify if there is another active global administrator account in your organization, as having a secondary admin is the fastest way to resolve this issue without contacting support.

Solution 1Recommended

Dismiss User Risk via Another Administrator Account

If your organization has another active administrator, they can manually dismiss the risk flag on your account from the Entra admin center.

This is the most efficient method to regain access. It requires another user with Global Administrator or Security Administrator privileges in the same tenant.

Log in with alternative account

Have the other administrator log into the Microsoft Entra admin center using their active administrator credentials.

Navigate to Risky users

In the left-hand menu, go to 'Protection', and then select 'Risky users' to view accounts flagged by the system.

Select the blocked account

Locate and select your blocked administrator account from the list of risky users.

Dismiss user risk

Click on 'Dismiss user risk' at the top of the pane and confirm the action when prompted.

Wait and retry

Reset the password for the blocked account, wait 10 to 15 minutes for the changes to propagate across Microsoft's systems, and try logging in again.

Dismiss User Risk via Another Administrator Account

Propagation Time: It is crucial to wait the full 10-15 minutes after dismissing the risk and resetting the password before attempting your next login.

Solution 2

Contact Microsoft Business Support

If you are the sole administrator for the tenant and are completely locked out, you must contact Microsoft directly to regain access.

Free Microsoft Office alternative

Manage Your Documents Securely with WPS Office

While waiting to recover your Microsoft Entra administrator account, you can keep your business running smoothly with WPS Office. It's a free, lightweight, and highly compatible alternative to Microsoft Office that lets you edit local files without relying on complex cloud identity policies.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx)Free and lightweight, taking up minimal system resourcesEdit and manage documents offline without relying on cloud authenticationFamiliar user interface ensures a seamless transition from Microsoft Office

Frequently Asked Questions

What does Microsoft Entra error code 530032 mean?

Error code 530032 indicates that a sign-in attempt was blocked by Microsoft Entra Conditional Access because the user account was flagged for high risk, often due to anomalous or suspicious login patterns.

How long does it take to unlock the account after dismissing the risk?

After a secondary administrator dismisses the user risk and you reset your password, it typically takes 10 to 15 minutes for the system to synchronize and allow you to log in successfully.

How can I prevent locking myself out as an administrator in the future?

To prevent single-point-of-failure lockouts, it is highly recommended to create a dedicated 'break-glass' or emergency access administrator account that is excluded from specific risky sign-in Conditional Access policies.

Microsoft Office Security Issues