How administrator recover password if he is the only admin and Self Service Recover not configured

%3CLINGO-SUB%20id%3D%22lingo-sub-1275728%22%20slang%3D%22en-US%22%3EHow%20administrator%20recover%20password%20if%20he%20is%20the%20only%20admin%20and%20Self%20Service%20Recover%20not%20configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1275728%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys%20how%20can%20I%20reset%20the%20password%20of%20admin%20user%20in%20azure%20AD%20if%20hi%20is%20the%20only%20one%20administrator%20and%20the%20self-service%20are%20not%20configured%20yet%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1284241%22%20slang%3D%22en-US%22%3ERe%3A%20How%20administrator%20recover%20password%20if%20he%20is%20the%20only%20admin%20and%20Self%20Service%20Recover%20not%20configu%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1284241%22%20slang%3D%22en-US%22%3ETry%20this%3A%3CBR%20%2F%3EIf%20you%20have%20a%20twitter%20account%2C%20go%20to%20%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2Fazuresupport%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftwitter.com%2Fazuresupport%3C%2FA%3E%20and%20expose%20your%20situation.%3CBR%20%2F%3EA%20Data%20Protection%20issue%20is%20needed.%3CBR%20%2F%3EMicrosoft%20will%20ask%20you%20some%20questions%20about%20the%20GA%20user.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1284755%22%20slang%3D%22en-US%22%3ERe%3A%20How%20administrator%20recover%20password%20if%20he%20is%20the%20only%20admin%20and%20Self%20Service%20Recover%20not%20configu%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1284755%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F606500%22%20target%3D%22_blank%22%3E%40murilourban%3C%2FA%3E%20you%20might%20have%20more%20luck%20posting%20this%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory%2Fct-p%2FAzureActiveDirectory%22%20target%3D%22_self%22%3EAzure%20AD%20section%3C%2FA%3E%20of%20the%20Tech%20Community%20instead%20of%20here%20in%20the%20Security%20Center%20area.%3C%2FP%3E%0A%3CP%3EGood%20luck!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1338010%22%20slang%3D%22en-US%22%3ERe%3A%20How%20administrator%20recover%20password%20if%20he%20is%20the%20only%20admin%20and%20Self%20Service%20Recover%20not%20configu%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1338010%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F606500%22%20target%3D%22_blank%22%3E%40murilourban%3C%2FA%3E%2C%26nbsp%3BI'm%20not%20sure%20if%20you've%20received%20assistance%20with%20this.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EDue%20to%20the%20nature%20of%20this%20request%20and%20to%20ensure%20the%20safety%20and%20security%2C%20I'd%20highly%20recommend%20reaching%20out%20to%20your%20Technical%20Account%20Manager%20or%20Business%20Account%20Manager%20(if%20you%20have%20one).%20Depending%20on%20the%20scale%20of%20your%20environment%2C%20it%20will%20require%20assistance%20from%20various%20teams.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20not%20sure%20what%20type%20of%20administrator%20role%20you're%20referencing%20but%2C%20if%20you%20have%20a%20Global%20Administrator%20within%20your%20Azure%20environment.%20They%20have%20the%20ability%20to%20reset%20the%20password%20for%20any%20user%20in%20Azure.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere%20is%20a%20document%20referencing%20the%20roles%20assigned%20to%20a%20Global%20Admin%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23company-administrator-permissions%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23company-administrator-permissions%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAlso%2C%20going%20forward%20I'd%20highly%20recommend%20ensuring%20you%20do%20not%20have%20a%20single%20point%20of%20failure%20regarding%20administrator%20access.%20It%20may%20be%20a%20matter%20of%20assigning%20particular%20roles%20based%20off%20a%20containerized%20system%20which%20will%20increase%20cross-team%20communication%2F%20coordination%20and%20limit%20one%20individual%20from%20having%20full-scope%20access%20to%20your%20entire%20environment.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EPlease%20review%20the%20following%20documentation%20regarding%20Azure%20Access%20Control%20and%20information%20regarding%20RBAC%2C%20User%20Account%20types%20and%20best%20practices.%26nbsp%3B%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Frole-based-access-control%2Frbac-and-directory-admin-roles%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Frole-based-access-control%2Frbac-and-directory-admin-roles%3C%2FA%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Ffundamentals%2Fidentity-management-best-practices%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Ffundamentals%2Fidentity-management-best-practices%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi Guys how can I reset the password of admin user in azure AD if hi is the only one administrator and the self-service are not configured yet?

 

Thanks in advance

3 Replies
Try this:
If you have a twitter account, go to https://twitter.com/azuresupport and expose your situation.
A Data Protection issue is needed.
Microsoft will ask you some questions about the GA user.

@murilourban you might have more luck posting this in the Azure AD section of the Tech Community instead of here in the Security Center area.

Good luck!

Hello @murilourban, I'm not sure if you've received assistance with this. 

Due to the nature of this request and to ensure the safety and security, I'd highly recommend reaching out to your Technical Account Manager or Business Account Manager (if you have one). Depending on the scale of your environment, it will require assistance from various teams. 

 

I'm not sure what type of administrator role you're referencing but, if you have a Global Administrator within your Azure environment. They have the ability to reset the password for any user in Azure. 

Here is a document referencing the roles assigned to a Global Admin: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-ro...

 

Also, going forward I'd highly recommend ensuring you do not have a single point of failure regarding administrator access. It may be a matter of assigning particular roles based off a containerized system which will increase cross-team communication/ coordination and limit one individual from having full-scope access to your entire environment.


Please review the following documentation regarding Azure Access Control and information regarding RBAC, User Account types and best practices. 
https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles
https://docs.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices