I'm sometimes guilty of the latter, but not of the former. A manual change effected by a sysadmin typing into a shell is different from one embodied in a piece of code, and they're actually subject to different processes. Change/release management does (should!) indeed apply to sysadmin activities, but there are these things called 'standard changes' which cover the typically mundane things like user Add/Move/Changes, that you don't want to go to a Change Control Board each time to get the go ahead. However they also cover stuff your sysadmin does in his/her/(but probably his) day to day work. Like pretty much everything they do, in fact. The weakness is generally nobody knows how a sysadmin spends their day, which makes these things difficult to control. But anyway, one or two changes made by a sysadmin isn't what we're talking about here. We're talking about automation, which means complexity, which means unforeseen results. That must be held to a higher standard and policed accordingly.