Something like that should be CR, security write some powershell, get reviewed by Ops, approved, and executed by Ops rather than letting people just do stuff even if it is routine. But by then it's not too much to just automate the entire thing.