This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 5%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECA%3C/text%3E%3C/svg%3E)
Hi,
A previous admin setup our B2C tenants (x2) - one for prod and one for test. The test B2C tenant does not appear to be linked to any existing global admin accounts. User auth works, the logins are created correctly from our Dynamics test env - however we cannot get in to manage it. How would we achieve that?
Moved from: Microsoft 365 and Office | Subscription, account, billing | For business | Other
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 10%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Thank you for reaching out to Microsoft Q&A.
Azure AD B2C tenants are separate directories from your “normal” (workforce) Microsoft Entra ID tenant.
Key consequences:
Microsoft explicitly states this separation in the B2C FAQ and admin docs.
For your reference: https://docs.azure.cn/en-us/active-directory-b2c/faq?tabs=app-reg-ga
You effectively have two possible states. The correct resolution depends on whether any B2C admin account still exists.
Scenario 1: A B2C Global Admin still exists
Resolution: -
You must be added explicitly to the B2C tenant and assigned a directory role inside that tenant.
Option A – Invite your work account as a Guest Global Admin
******@company.com)For your reference: https://dori-uw-1.kuma-moon.com/en-us/azure/active-directory-b2c/tenant-management-manage-administrator
Scenario 2: NO Global Admin exists/No Global admin access in the B2C tenant (tenant lockout)
If there is no Global Admin/no GA access in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.
To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the requested details via private message only:
Please send me the detail via private message. So, we can assist you further.
Hello CYB Admin
Please let us know your availability in private message so that we can discuss this further and resolve the issue.
Thank you.
I think test‑b2c has its GA‑root gone, so just try switch‑dir→b2c→Users→add‑guest once; If it won’t bind, open a support ticket for that b2c, choose tenant lockout, and upload domain‑ownership proof so MS can restore a GA.
If even that fails, request a full tenant‑lockout recovery under that b2c.