Emergency access accounts
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 2270fa1 · +2 −4 lines · also on GitHub
11
---
22
title: Manage emergency access admin accounts
33
description: This article describes how to use emergency access accounts to help prevent being inadvertently locked out of your Microsoft Entra organization.
4
−ms.date: 04/22/2026
4
+ms.date: 05/20/2026
55
ms.topic: how-to
66
ms.custom: it-pro, sfi-ga-nochange
77
ms.reviewer: mwahl
⋯ 21 unchanged lines
2929
3030
Create two or more emergency access accounts. These accounts should be cloud-only accounts that use the \*.onmicrosoft.com domain and that aren't federated or synchronized from an on-premises environment. At a high level, follow these steps.
3131
32
−1. Find your existing emergency access accounts or create new accounts with the Global Administrator role.
33
−
34
− :::image type="content" source="./media/security-emergency-access/create-emergency-access-account.png" alt-text="Screenshot of creating an emergency access account in Microsoft Entra ID." lightbox="./media/security-emergency-access/create-emergency-access-account.png":::
32
+1. Find your existing emergency access accounts or [create new cloud-only users](../../fundamentals/how-to-create-delete-users.md#create-a-new-user) and assign them the Global Administrator role.
3533
3634
1. Choose one of these passwordless authentication methods for your emergency access accounts. These methods satisfy the [mandatory multifactor authentication requirements](../authentication/concept-mandatory-multifactor-authentication.md).
3735
⋯ 200 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:17 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.