All changes like config change, data patch or any activities (outside approved SOPs) should follow account specific / defined change control process. There should not be any exception to this.