Unable to update QAS configuration in AD
The AD admin had put a non-inheritable delete lock on the Licenses, Options and Schema containers. Deletion of children was still allowed.
Remove the delete lock on the licenses, options and schema containers.
1 - Uncheck “Protect object from accidental deletion” on the GUID container as well as the "Licenses, Options and Schema" container.
See attached screenshot
Whenever a command makes changes to the configuration everything under the GUID container is removed, then re-written. This approach simplifies some things and it was assumed that changes to the configuration would be infrequent.