As an Admin, how to change user's Primary Email or add Secondary Emails when 'email editable' is off?

[Teafh]

Yes, we use SSO, but not the DiscourseConnect.

So, if this is the expected behavior, why emails can be edited when email editable is on, even we’re using SSO? Isn’t this cause confusion?