Additional Microsoft Entra services and features related to identity, access, and network security
If the Microsoft 365 account still works but the Azure account is locked, the tenant is likely blocked or inactive.
Follow these steps:
- Try to access Azure using the tenant URL
- Go to
https://portal.azure.com/<TenantId>orhttps://portal.azure.com/<yourTenantName>.onmicrosoft.com>(replace with the actual tenant ID or tenant name) as described in the guidance. This can sometimes allow access to manage tenants or open support.
- Go to
- Check if the tenant is blocked due to inactivity
- The error
AADSTS5000225: This tenant has been blocked due to inactivityindicates the tenant is in an inactive state. - Tenants can be reactivated within 20 days of entering the inactive state. After 20 days, the tenant is deleted.
- If the tenant is inactive, the tenant administrator must contact Microsoft using the global support phone numbers to request reactivation. Refrain from submitting multiple requests while one case is in progress.
- The error
- If the tenant is still within the reactivation window
- As the tenant admin, contact Microsoft support (via the global support phone numbers) and request tenant reactivation, stating that the Azure tenant is blocked due to inactivity while the Microsoft 365 account is still active.
- If direct access to Azure Portal is not possible
- Sign in to
https://entra.microsoft.com/, go to Entra ID → Overview → Manage tenants. - If needed, create a new tenant and note its domain name.
- Then sign in to Azure Portal using
https://portal.azure.com/<newTenantName>.onmicrosoft.comto at least have a working tenant where a support ticket can be opened (if not on a free-only plan).
- Sign in to
- If the original tenant cannot be reactivated
- If the tenant has been inactive for more than 20 days and is deleted, it cannot be recovered. In that case, a new tenant must be used for Azure resources.
References: