The mod_security settings are pretty tough nowadays. I have to ask for exceptions whenever I set up any sort of CMS based site. Submit a ticket, give them an approximate time when you attempted to make some sort of update, they’ll investigate the logs at that time and determine which exception to make. It will take a few tries as various actions get blocked for various reasons. Eventually they always get it right for my sites, so I’m sure they can do it for you too.