Prevent AD Sync (Local AD Hybrid) from Overwriting Entra user settings

To prevent AD sync from a local AD overwriting user settings in the cloud Partners should review the following: AD Connect sync: Configure filtering 

By configuring filtering MSPs can control which accounts are synched to Azure AD and will prevent account changes made from within SaaS Alerts from being overwritten when the AD Sync occurs. SaaS Alerts cannot control any aspects of the Customer Organizations local AD (if present).  Therefore it is essential that MSP partners mange the LocalAD --> AzureAD sync parameters. 

Further helpful articles:

Microsoft Entra Connect Sync: Understand and customize synchronization

Enable Password Writeback