v8.0.1 - AADUser Table permissions

Hello,

I'm writing some custom code to sync users into the AADUsers table, however I get permission denied on some columns (e.g. GivenName) when running the custom sync script 

I have also given all users full insert permissions on this table (in our lower dev env) but still no affect. I tried using the AAD connector in the sync editor and the tables were updated just fine albeit withe the synchronization user, and both sa and synchronization have the same permissions (QBM_BaseRight)

How can I give it write permissions for the "sa" user? 

Thanks

Kin

PS: We are unable to use the AAD connector for other reasons (i.e. inability to get extension attributes) hence I am writing a custom sync using the graph API directly.