This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 89%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDD%3C/text%3E%3C/svg%3E)
I have 4 directories that are listed when attempting to switch directories in Azure but am unable to access any but the current directory that I am logged into. All other directories are requiring 2FA but I do not have access to the authenticator app that hold the 2FA for those directories. I need to gain access to these, there are Azure subscriptions that have been shut down and are necessary for running the business.
I cannot add these domains to my current tenant to gain access because they are all .onmicrosoft.com domains not custom domains, so I would be unable to verify ownership of them with a record in DNS.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 30%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Hello @drop-devops ,
I Understand you have 4 directories that are listed when attempting to switch directories in Azure but you are unable to access any but the current directory that you are logged into.
All other directories are requiring 2FA but I do not have access to the authenticator app that hold the 2FA for those directories.
I recommend you to reset your MFA for the user account which you are trying to login with the help of any other Global Administrator in the tenant for the directories that you were not able to login.
They can achieve this by selecting the Require re-register multifactor authentication option.
For more details, you can refer to the following documentation: Manage user authentication options
If you don’t have another global administrators and you are the only global admin available to reset your registered MFA, then this situation would fall under a tenant lockout scenarios.
Let me know if you were able to reset the MFA for the tenants. If any additional queries do not hesitate to reach out us. Happy to assist you further.
Unfortunately we do not know of any GA's that are registered in those tenants or that would have been the first thing on my list to try. What is the best course of action in a tenant lockout scenario?
Hello @drop-devops ,
You can check the Private message and follow the process.
Now to proceed further give me the details of the one tenant as per the below information:
To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.
To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:
Contact phone number (add +Country code)
Contact email address
Global admin email address (affected account)
Country TimeZone
Please send me the detail via private message.
Let us know if you have any additional queries. Happy to assist you further.