Hi,
It sounds like you want to do MAB (MAC Authentication Bypass) on the switch interfaces. If you use Cisco ISE, this can store the MAC addresses in it's Endpoint database, you can then create authorisation rules based on MAC addresses being present in the database or group membership and permit network access.
Non-Admins can be delegated control to add MAC addresses to the database.
HTH
HTH