The update permissions graph PUT is now working. Issue was incorrectly wrapping the request body payload. See here. Per linked topic, revision number will be programmatically incremented only following CONFLICT (409) response. This topic is answered for now. Thanks.