diff --git a/backend/apps/monitor/views.py b/backend/apps/monitor/views.py
index 54e337b..feeb4c8 100644
--- a/backend/apps/monitor/views.py
+++ b/backend/apps/monitor/views.py
@@ -645,6 +645,9 @@ def iam_user_enable_view(request, pk):
             except VolcengineAPIError as restore_err:
                 restore_errors.append(f"{p['name']}: {restore_err}")
 
+        # 3. 重建 Deny 策略（项目隔离）
+        _update_deny_policy(user)
+
         user.status = IAMUser.Status.ACTIVE
         user.saved_policies_on_disable = []
         user.volc_login_allowed = restore_login