As an Admin, how to change user's Primary Email or add Secondary Emails when 'email editable' is off?

Do I understand that you are confused that when email_editable is turned off you are unable to edit emails?

It’s hard to imagine just why you want to edit emails and have edit-emails turned off, or why your SSO isn’t managing the email address. I’m not sure that I can help.