There should be a way, but I have not yet found it, and I've spent some time on this. I've installed/uninstalled Strava about a dozen times, rebooted each time, tried various permissions, but stood my ground on some of the permissions. Should I give Strava access to my photos and my microphone? I'll never go that far.
Regarding the photos, the "storage scope" feature on Graphene should make that a non-issue. Microphone would be rough, but at least you would see a "microphone icon" show up on the top of the phone if an app was actually listening.