Unable to Assign Global Admin Roles in Microsoft 365 due to GDAP Issues

TrygveSanda-9535 0 Reputation points
2024-10-29T05:39:18.4066667+00:00
  • None of our users in MS365 admin center has global admin rights.
  • We do not have the rights to assign global admin rights to ourselves in MS Admin Center
  • Our MS365 provider cannot help us since there is no active GDAP.
  • Our MS365 provider has tried contacting MS Data Protection Team, but don't have the necessary rights to get help directly from DPT.
  • We cannot approve a GDAP-request from MS365 provider since none of our users has global admin rights.
  • No help, whatsoever, from MS Data Protection Team. I've tried to call 10 times the last three days, but after talking to one, or two real persons, the call is terminated - they hang up.
  • Need to assign a global admin role to one of our accounts urgently
Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,197 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
835 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Bhasker Donthu 765 Reputation points Microsoft Vendor
    2024-10-30T07:07:00.54+00:00

    Hello @TrygveSanda-9535,

    Thank you for posting your query on Microsoft Q&A.

    Please verify that a Global Administrator was assigned when the tenant was created, as a tenant cannot be created without one. Additionally, users with other roles cannot delete the Global Administrator.

    In a situation where no one in the organization has Global Admin access to assign roles, Microsoft's Account Recovery and Elevation process is typically the path forward.

    Here are the steps you can take to regain Global Admin access:

    1.      Use the Microsoft 365 Admin center or Azure Portal for providing the Admin access. Please refer link: https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide

    2.      Utilize a Break-Glass Account

    If your organization has a break-glass account (an emergency account with global admin rights), you can use it to assign the global admin role to one of your users. If you don’t have one, it’s a good practice to set one up for future emergencies.

    3.      Please send me an email to 'AzCommunity@microsoft.com' with Sub - Attn: bhdonthu and following details in the email body: along with Tenant ID and Subscription ID.

    I hope this information is helpful. Please feel free to reach out if you have any further questions. If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.