Who this guide is for Tenant administrators helping an operator regain secure access.
Before you start Verify the requester's identity through your approved internal process. Never reset access based only on an unexpected email or message.
Steps 1. Open the tenant operator record from the operator list. 2. Review the account status, last login, active sessions, devices, and security settings before taking action. 3. Use the reset-password-to-email command when the verified operator can receive the registered email. 4. Use force logout when a session may be compromised or the person should sign in again on all devices. 5. Set a temporary custom password or adjust two-factor access only when your security procedure authorizes it, then record the reason.
Check your work The operator receives only the intended recovery action and prior sessions are ended when required.
When to stop and ask for help Stop and escalate a request that involves a privileged administrator, suspicious account takeover, or an unverified email change.