Sole Global Administrator locked out — no working MFA method — need account recovery

I'm the sole Global Administrator of my Microsoft Entra ID tenant and I'm completely locked out due to

losing access to my MFA device, with no other admin and no working alternate verification method.

Account details:

- User (UPN): email address removed for privacy reasons

- Custom verified domain: apip.dk

- Tenant ID: can be provided

- Azure Subscription ID: can be provided

What happened:

My phone (with Microsoft Authenticator installed — my only registered MFA method) was destroyed. I

know my password and secondary email, but:

- Phone-call verification during sign-in does not connect.

- I have a FIDO2 security key, but it is not currently enabled/registered as a sign-in method on this

account.

- There is no other Global Administrator in this tenant and no other active session I can use to

self-recover.

What I need:

An MFA/authentication-method reset on my account so I can sign back in and register a new MFA method,

or guidance on an alternative recovery path.

Proof of ownership I can provide:

- I own the custom domain apip.dk and can add/modify a DNS TXT (or CNAME) record to verify tenant

ownership.

- I can provide billing details for the subscription (card on file, recent invoice amounts, billing

address) if needed for verification.

Additional context:

I recently updated the payment method on this subscription, so I'm concerned about a billing failure

at the next payment date while this recovery is pending — I'd appreciate the account being flagged so

it isn't suspended during this process.

Please let me know what verification steps you need from me to proceed.

Thank you,

Andreas