microsoft store blocked for new win11 machine

I have a new surface with windows 11. its AAD joined with intune but never part of our domain. I have an intune configuration policy to "Use private store only"  When I open the store I get Microso...