Ad manager API Modify user access denied

Ad manager API Modify user access denied

Hi! Updated to the latest release but still have problem with modifying user's attributes. Please, help.

Have a special user in AD and a working authToken, it works with SearchUser method.
The user has a role in AD Manager to modify users and is a member of domain admins group in AD.
My input format in request for modifying looks like this:
inputFormat=[{"sAMAccountName":"login"}, {"AccountExpirationDate":"01/01/2022 00:00:00"}]
and i get access denied.
I tried to modify other fields with no success

Am I doing smth wrong?

                New to ADSelfService Plus?