It sounds like the tag provider on the EDGE gateway has a Service Security policy configured on the gateway that is either set to Read/Write or Read Only. It would need to be set to Read/Write/Edit to allow for editing tags for whatever security zone the EAM controller gateway finds itself.