Slack does this pretty well
If you want a plugin to be installed, you can click Install and if you don't have permission, it tells you it's been sent to an admin for approval, who can just approve or deny easily, and then you get notified. Very easy, and IT control it as well.