Apple Wallet app "Restricted" after enrolling in Apple Business Manager

We're in the process of moving all our employees Apple ID's off of our domain to create a new Managed Apple ID for each of them, by changing their Apple ID to an unused domain of ours, then signing back in with our Office 365 credentials (logins are federated).

One of our users has reported that since we made the changes, they're no longer able to access the Apple Wallet app. The icon is missing from the home screens and when you find it in the App Store and press Open, is says "Restrictions Enabled".

There are no screen time restrictions on the device and I'm utterly baffled by this.

I checked on my device and sure enough, I find myself in the same situation. My language and country settings are English and Canada.

another question is none of users not able to install apps or custom apps. from Company portal we pushed some apps but unable to install. Apple devices are frustrating. We have recently enabled SCIM and Federation accounts can I revert back to my old system. Before I will able to push custom apps or not VPP apps to all our Intune devices.

Thanks