https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/domains-admin-takeover https://docs.microsoft.com/en-us/azure/active-directory/user..

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/domains-admin-takeover https://docs.microsoft.com/en-us/azure/active-directory/user... It's still not well supported for "external" takeover but it's disappointing that your support queue didn't point you to the docs on this. Per below though, if someone made it "managed" through DNS verification, yeah, that's hard. Keywords to search in this scenario "viral admin takeover AAD"