I recently set up a Drupal Multisite environment for a client where each of their departments needed their own subsites. The central IT team would maintain the Drupal core, but the departments would have full control over adding custom/contributed modules and themes, as well as, making configuration changes to their own site.