Hi Justin,
- It seems like we have smaller landscape than yours.
- I'm not sure how well would change management tool would work.
- We dont use Charm but as far as Charm exposes webservices/tags, it can be integrated with the SAP MII.
- For the security purposes, assign only SAP_XMII_User role to the User, so that the user will not have access to Workbench or will have only read access to administration screens.
Thanks
Anudeep KM