Lost Tenant Access

Question

Lost Tenant Access

King Bautista 0

I tried logging in through these commands:
az login --allow-no-subscriptions
az account list --output table

It still shows that my subscription is there and tenantId, but I can no longer login and see my resources in my azure Cloud. This happened after I tried doing some things when I failed trying to login through SQL Server Management Studio as I try to upload another database to my account's server.

I need help because it seems I lost access after I turned my own account as guest in a directory in an attempt to allow myself to login into my SSMS database. Thank you.

King Bautista 0 Reputation points

2025-09-29T03:35:39.9433333+00:00

To add to my issue, this is the message I am prompted to when I open my resource group.

1 answer

Your answer

King Bautista 0 Reputation points

2025-09-29T03:35:39.9433333+00:00

To add to my issue, this is the message I am prompted to when I open my resource group.

Answer 1

Praveen Chivarla 2,005 Microsoft External Staff Moderator

Hi King,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it seems you lost access to your Microsoft Entra ID resources after converting your account to a guest in another directory, which causes permission limitations.

In Microsoft Entra ID, when a user is converted or invited as a guest in an external tenant, permissions and roles from the original tenant do not transfer. Guest users have restricted access compared to member users, which can result in inability to access subscriptions or resources, even if they appear in tools like Azure CLI.

Please follow these steps to resolve the issue:

Restore Member Access: Your account needs to be restored as a member user in the original Microsoft Entra ID tenant with the necessary access roles. This is typically done by your tenant’s Global Administrator.

Verify Tenant and Login Context: Ensure you are logged into the correct Microsoft Entra ID tenant in the portal. Use the directory switcher near your profile to verify you are in the right tenant context.

Request Role Assignment: Contact your organization’s Global Administrator in Microsoft Entra ID to assign you appropriate roles (such as Owner, Contributor) on subscriptions and resources.

Please refer to:

Elevate access to manage all Azure subscriptions and management groups | Microsoft Learn

How to troubleshoot sign-in errors - Microsoft Entra ID | Microsoft Learn

Convert external users to internal users (Preview) - Microsoft Entra ID | Microsoft Learn

Please click "Accept as Answer" if this resolves your issue. This will help others with similar challenges find the solution.

King Bautista 0 Reputation points

2025-09-25T13:31:19.32+00:00

Hello, thank you for the comment.

I just discovered that my tenant Id has no Global Administrator due to some reason that I do not know. May I ask if this is possible?

All I could say is that: My tenant has no Global Administrator. I am the verified domain owner and only user. My account is a Microsoft Account (MSA) and cannot access Entra ID. I need assistance assigning a Global Admin. I think. Thank you.
King Bautista 0 Reputation points

2025-09-25T13:47:47.0066667+00:00

I tried inviting myself to my own directory to remedy my issue with SSMS, but I failed to click the email on time, which I think is the cause of this subsequent issue of lost Global Administrator for my TenantId.
Praveen Chivarla 2,005 Reputation points Microsoft External Staff Moderator

2025-10-03T10:07:43.41+00:00
Hi King,

As per our understanding, you are currently locked out of your Azure Entra tenant because you no longer have access to a Global Administrator account. This can happen if the only Global Administrator has lost access or converted their user to a guest and failed to complete the invitation process, resulting in no active Global Admin in the tenant.

When a tenant has no Global Administrator, no user can assign roles or manage tenant resources, then this is a tenant lockout scenario.

To help you regain access, we’ll need to contact Microsoft’s Data Protection team by raising a support request.

To proceed, we will need a few details from you. As this information contains Personally Identifiable Information, please share the following details via private message:

Contact phone number

Contact email address

Email address of the affected admin account

Country

Time zone

Tenant ID

Subscription ID

Kindly share the requested details so we can assist you in the best possible way to resolve the issue.

Share via

Lost Tenant Access

1 answer

Your answer