Azure Active Directory Domain Services (AD DS) change permissions on ADSI Containers without Enterprise / Domain Admin Rights
Solution 1:
Azure AD DS is offered as PaaS, and therefore it's only natural that Microsoft locks out what you can do with it. If you don't have the permission, then no, can't be done.
If this is something you really need, go for a DS inside a VM.