Gatekeeping at the lower IT level comes from “responsibility.” Lots of people want unlimited power, but the minute there is an issue, they throw the problems back over the fence, fingers a’ pointin’.
If a different part of the org takes actual ownership, I’m always happy to let them fully control whatever. When you do the backup/monitoring/logging/provisioning/licensing/securing/load balacing/etc, go nuts.
It’s why shadow IT is fine by me, but if you want to fuck shit up and then try to tell me to clean it up, nope nope nope.