A user reports they can no longer send outbound email and receive a bounce message stating their account is blocked from sending. In the Microsoft Defender portal, you confirm the user's mailbox appears under Restricted entities because the account exceeded the outbound spam sending limits, likely due to a compromise. After the security team has reset the user's credentials, revoked sessions, and confirmed no further malicious activity, what should you do to restore the user's ability to send mail?