Are the safety methods and the automatic identification of the mgmt range mutually exclusive?

I am trying to use Automatic Identity Range Management . However, the only way to ensure that my users can write INSERT to tables with identity columns is to do them db_owner. Did I miss something?

For a complete background, please refer to my previous question: Allow non-db_owner INSERT permissions in merge replication with mgmt automatic authentication range