Windows dns and sssd updates

I have my foreman server create a dns record for new hosts by nsupdate.
This works as intended.
However these are dynamic records and should be updated or are going to be
deleted by scavenging on the windows dns server.

I used the dyndns parameter in my sssd config on the client side, but this
doesn't work as my dns records, which is created by my foreman server, does
not have permissions configured for the client and therefore the sssd
update fails.

Is there another way to approach this?