Can't deploy any app services to any regions, even free tier not working

I have a new subscription in Azure and this is the first time we are deploying app services. We are running into quota errors even making a single VM. Tried multiple different regions, so it doesn't appear to be specific to a region. I tried P0v4 and P0v3 and also tried the free tier. The out-of-the-box quota limit for All Regional VMs shows 0 of 0. Is there a subscription wide setting that I need to adjust to allow any App Services to be created? Here is what we are submitting via Terraform and the response:

Here's the exact error, pulled straight from the latest failed attempt (all three attempts — northeurope P0v4, eastus P0v4, eastus F1 — returned this identical text):

Operation cannot be completed without additional quota.

Additional details - Location:

Current Limit (Total VMs): 0

Current Usage: 0

Amount required for this deployment (Total VMs): 1

(Minimum) New Limit that you should request to enable this deployment: 1.

Note that if you experience multiple scaling operations failing (in addition to this one)

and need to accommodate the aggregate quota requirements of these operations, you will

need to request a higher quota limit than the one currently displayed.

Full API response envelope, in case they want the raw JSON:

{

"Code": "Unauthorized",

"Message": "Operation cannot be completed without additional quota. \r\nAdditional details - Location: \r\nCurrent Limit (Total VMs): 0 \r\nCurrent Usage: 0\r\nAmount required for this deployment (Total VMs): 1 \r\n(Minimum) New Limit that you should request to enable this deployment: 1. \r\nNote that if you experience multiple scaling operations failing (in addition to this one) and need to accommodate the aggregate quota requirements of these operations, you will need to request a higher quota limit than the one currently displayed.",

"Target": null,

"Details": [

{ "Code": "Unauthorized" },

{

  "ErrorEntity": {

    "ExtendedCode": "70007",

    "Code": "Unauthorized",

    "Parameters": ["", "Total VMs", "0", "0", "1", "1"]

  }

}

],

"Innererror": null

}

Worth including in the ticket:

• HTTP status: 401 Unauthorized (unusual for a quota error — normally 403 — worth flagging to Microsoft, it may hint at which internal check is firing)
• ExtendedCode: 70007
• Subscription ID: #################
• Resource type: Microsoft.Web/serverfarms (App Service Plan)
• Regions tried: North Europe and East US — same error in both, and it also occurred on an F1 Free-tier plan, not just P0v4 — worth stating explicitly, since it shows the block isn't specific to the P0v4 SKU family and their P0v4-to-31 approval didn't move this counter. That's the key fact to get in front of the support engineer: whatever bucket they raised, it isn't this one.