I'm well aware of sudo vs su. Where I work sudo ONLY allows you to run preapproved scripts or if you have permission the ability to su - someuser (- is necessary). Yes I'm an admin and can do "more", but not markedly.

In addition I have to type my password in each time I use sudo, also by policy thanks to things like PCI compliance.

You can show what parts of the system you are modifying, and provide scripts to automate it. They aren't mutually exclusive actions.