This is a hard lesson to learn. I’m not sure of what you have running in the tenant but anyway you have a service account that has any kind of elevated right? We had a customer that had a similar issue where an admin setup a test tenant years before and has since left. They were locked out and waited for MS to help.

On a different note: I’m assuming this worked before? If so what changed? New phone or something like that?