@Roo In case its an AEM as a Cloud Service instance, you would not be able to set permissions on a running instance on immutable areas.
 
/apps and /libs are considered immutable areas of AEM as they cannot be changed (create, update, delete) after AEM starts (i.e. at runtime). Any attempt to change...