We also want people to be comfortable making these changes themselves, on their own time, without having to go to the help desk.
The part of that that I don't agree with, is "on their own time". What if the change that needs to be made an urgent security fix?