If they are not willing to give complete power to the user, it will not happen, ever. Linux isn't designed for granular permission management like Windows is. A Linux desktop administrator has to choose between all or never. Moreover there is no equivalent of Active Directory or Group Policies.