In Europe I believe they have centralized master data team, for various masters like they have centralized team of iShop OSR. In APAC we still have country specific master data teams.
Blocking the authorization at Company code/plants level is any how, very much possible. The need is also to check which specific masters they need to create/modify and can we give them authorization of only those specific T codes for each master.