If you deployed password writeback when installing Azure AD Sync, you can control whether or not this feature is enabled ...

If you deployed password writeback when installing Azure AD Sync, you can control whether or not this feature is enabled here.
    
  If set to "no", federated or password synchronized users will not be able to reset or change their passwords, even if password writeback has been configured.

  You can change this setting at any time.