Honestly, I think you're boiling the ocean there.

Internal hosting teams ( cloud or on-prem ) should work more like public hosting environments and should focus on:

- Segregating workloads. If amazon can host a hacked service on their hosting stack without every tenant immediately being compromised, you can too.

- Self-Service. Teams should be able to just get accounts and do stuff without asking anyone.

- Building assurance. Now you've made it easy for teams to do small things, you're more likely to get more users and have less shadow-IT. You can now try and build organizational assurance without making teams suffer.

A team just needs petty cash and a cost code for a small amount of space in dev land.

What everyone does instead if ask for the planning to be done and completed upfront, which isn't realistic for a team you just stood up trying to do UR and a POC.