Who Actually Owns Your Microsoft 365 Account?

The owner of a 40-person HVAC company decides to change IT providers. The old one was slow, and the contract is up. The new provider asks a simple question on the first call: "Can you send us an administrator login for your Microsoft account?"

The owner does not have one. Nobody in the building does. The only people who can get into the settings for the company's email, files, and logins work for the provider they are leaving.

Most of the time, that provider hands things over without a fight. Sometimes it takes weeks of polite emails. Occasionally it turns into an argument over an unpaid invoice, with the company's email as the leverage. In every case, the business learns that something it assumed it owned was actually held by someone else.

Why this is worth checking now

Microsoft raised list prices on most of its business plans effective July 1, 2026. Microsoft says existing customers keep their current price until their next renewal. So for many companies, the higher bill is arriving this fall, one renewal at a time.

A renewal is the natural moment to ask what you are paying for and who you are paying. It is also the moment you have the most leverage. Once you sign another annual term, many plans cannot be reduced or canceled partway through.

What "owning it" actually means

Microsoft 365 is not just email. For most companies it is the email, the shared files, Teams, and the sign-in for every employee. When someone leaves, this is where you lock them out. When a laptop is stolen, this is where you protect the data on it.

Owning it comes down to three things.

The top administrator login. Microsoft calls it a global administrator. Whoever holds it can add and remove users, read settings, reset passwords, and change who else has access. If the only global administrator logins belong to your provider's staff, they control your account in practice.

The bill. Many small businesses buy Microsoft 365 through a reseller instead of directly from Microsoft. That is normal and often fine. But it means the reseller sets the price, holds the subscription, and decides how quickly a change happens.

The web address. Your email domain, the part after the @ sign, is registered separately, often years ago. Whoever controls that registration can redirect your email somewhere else entirely. It is common to find it registered under a former employee's personal email or an old web designer's account.

What actually goes wrong

The admin login is in someone's personal password manager. The provider set it up years ago. The technician who did it left. Nobody can find it, and the provider has to go through Microsoft's recovery process to get back in.

Your own staff have no admin rights at all. This is sold as a safety measure, and part of it is. But it means a weekend emergency waits for the provider's on-call phone to be answered.

The subscription belongs to the reseller. Moving it to a new provider is possible, but it takes cooperation from the old one, and timing around the renewal date matters.

The domain renews to a card nobody watches. A lapsed domain can take email down for days. A domain held by an outside company can turn a simple handoff into a negotiation.

Old providers still have a way in. Microsoft lets outside companies have ongoing partner access to your account. When you switch providers, that access often stays on long after the relationship ends.

What good looks like

None of this requires distrusting your IT provider. A good provider will want this setup, because it protects them too.

Two emergency admin logins that belong to the company. These are separate from any person's everyday account. They are protected with MFA (the extra code you get on your phone when you sign in). The details are stored somewhere a named owner or officer can reach, like a company password manager or a sealed envelope in the safe. Microsoft's own guidance is to keep the number of top administrators small, but never just one.

Your provider works through its own named logins. Each technician signs in as themselves, so you can see who did what, and you can switch them off in one step if the relationship ends.

You know who bills you, and when it renews. Write down the reseller, the renewal date, and the cancellation terms. Put the renewal on the calendar 60 days ahead.

The domain is registered to the company. It should be under a company email address, with auto-renew on and a card your office manager actually sees.

If you work with a managed IT provider, none of this should be controversial. If asking about it makes them uncomfortable, that tells you something too.

What to do about it this month

Ask your provider one question in writing. "Please confirm which global administrator accounts exist for our Microsoft 365, who holds each one, and set up an emergency admin login that our company controls." A good provider answers within a week.

Find out who you are actually buying from. Look at your last invoice. If it is not from Microsoft, it is from a reseller. Note their name and your renewal date.

Look up your domain. Ask your provider or whoever built your website which registrar holds it and which email address controls it. If the answer is a former employee, fix that first.

Remove partners you no longer use. Your provider can show you which outside companies have partner access to your account. Anyone you stopped working with should come off the list.

Use the renewal as a review. Before the new price takes effect, check how many licenses you pay for against how many people actually use them. Departed staff and duplicate accounts are common, and with higher prices they cost more each month. Our IT consulting work often starts with exactly this kind of cleanup.

Want to know where you stand?

Most companies we look at are in better shape than they fear. Usually the keys exist. They are just in the wrong pocket, with no paperwork to show it.

Our free IT assessment includes a plain check of who controls your Microsoft account, your bill, and your domain. You get a short list of what to move into your company's name and in what order. Then whether you stay with your current provider or change, the decision is yours to make.