How to Recover Admin Microsoft Account with Lost MFA Access? I am the only admin of my organization.

Question

I have got the same problem with this thread  

https://learn.microsoft.com/en-us/answers/questions/2156027/how-to-recover-admin-microsoft-account-with-lost-m

Please help me remove MFA 

I try to login and it keeps asking verify my identity with only 2 options which I can not answer

1.     Approve by Authenticator app

2.     With code from Authenticator app

Answer 1

Hello @Techinee Akkaragumtor,

Thank you for posting your query on Microsoft Q&A.

As we discussed over email. The issue relates to a tenant lockout situation where no other global admin in the tenant has the necessary admin rights to re-register MFA.

To resolve this, we engaged our Data Protection team through a support ticket. Please connect with our support team via the ticket, and they will assist you in resolving the issue.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Answer 2

Hello @Techinee Suksamran

To resolve this, you would have to raise a support ticket to the data protection team through the Azure portal.

Alternatively, If your subscription was acquired through, a Microsoft partner, you can reach out to them to help you sign into your tenant and create another Global Admin account.

As best practice, Microsoft recommends that organizations have two cloud-only emergency access accounts permanently assigned the Global Administrator role. These accounts are highly privileged and aren't assigned to specific individuals. The accounts are limited to emergency or "break glass" scenarios where normal accounts can't be used or all other administrators are accidentally locked out.

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/best-practices#5-limit-the-number-of-global-administrators-to-less-than-5

I hope this helps