Domain Admin on AWS lacking user rights to edit the top 200 using the Management Studio interface
OK, I think the Work Around mentioned at serverfault.com/questions/696804/... is a very valid answer so I am listing it directly here.  I have the exact same issue in Microsoft Azure (editing a table SQL Management Studio).

I fixed it by setting DWORD regkey ProtectionPolicy to 1 for the sub-key HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb