Kind of confusing situation.

Can any user of my company install software on servers as they please?

Or to be NIST compliant do they need to follow a process to get approval and have a direct person that is listed to install it for them and keep the records for any future audits?