App Service “Admin disabled” — [UnusualActivity] Full Deny assignment on tenant Root prevents app start

Question

My App Service was automatically disabled by Azure and cannot be started manually. When I try to start it, I get this error message:

Failed to start web app
The client '<mod note PII removed>' does not have permission to perform action 'Microsoft.Web/sites/start/action' 
because of a deny assignment named '[UnusualActivity] Full Deny assignment on tenant Root'.
Status: Admin disabled

I have full Owner permissions on the subscription, but the app status is stuck as Admin disabled and cannot be changed.

Details:

• App name: meuchadim.org.il

Resource group: website-prod

• Subscription ID: a9568817-1f70-4fb5-a308-f4a78cf0ba7c

Tenant admin account: <mod note PII removed>

It seems the issue is caused by an automated "[UnusualActivity] Full Deny assignment" that was applied at the tenant root level. Since this override denies even global admin permissions, I cannot remove it from the portal.

Can someone from Microsoft please help review this security lock and remove the deny assignment so we can re-enable our production website?

Thank you.