Error: "Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration." (4323253)

Scenario:

1. Membership of AADUser in group with OnPremisesSyncEnabled was read in by sync.
2.  AADUser is assigned to a person
3.  Person.IsInactive goes to True
4.  Provisioning job is triggered that tries to remove the membership
5. This fails because such groups are read-only via Graph API with the following error message:

[Exception]: ServiceException occured
Code: Request_BadRequest
Message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration.
[ServiceException]: Code: Request_BadRequest - Message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration.

This is a product defect (#34448).

WORKAROUND:

None

STATUS:

This will be fixed in a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID # 34448.