All members of the wmf-officeit group were also added to the global renamer group so they can rename staff accounts if there's a need for it. I am proposing that the centralauth-rename permission be granted to the wmf-officeit group instead. I guess this'll need Trust and Safety and/or WMF-OIT approval, for which I'll contact the relevant groups.
Customize query in gerrit
|operations/mediawiki-config||master||+2 -1||[metawiki] Add `centralauth-rename` to WMF OIT staff|