Artifact Signing organization verification: matching primary email receives You need permission; recover existing request

An Australian public organization identity validation request in Azure Artifact Signing is in Action Required. The signing account is provisioned successfully in Japan East. The submitting Azure account is MFA-authenticated and has the Artifact Signing Identity Verifier role.

Microsoft's verification email was received at the request's primary company-domain mailbox. Both the email and Azure portal link lead to credentials.microsoft.com/verify. Signing in using that same email returns You need permission and says the account must be authorized in the Entra tenant used for the enrollment application or change. The Microsoft account selection identifies this sign-in as a personal Microsoft account, while Azure access is under the subscription's resource tenant.

The primary and secondary contact addresses are distinct and use the same company domain. The request's company/contact details are correct. We want to retain the existing corrected validation request; we have not created another request to work around this error.

Which exact account type and tenant must the organization representative use for this existing verification enrollment? Does a personal Microsoft account with the matching primary email support this organization verification flow? If the enrollment's authorization mapping is incorrect, how can Microsoft repair access without deleting or recreating the request?

The Azure support wizard blocks a technical ticket under the Basic support plan. Please provide the official recovery/escalation route. This is an access-repair question, not a request to expedite identity approval. Sensitive identifiers can be supplied privately through an official Microsoft channel if needed.