Ideally one always has OOB (out of band) access to all devices to make sure one can always recover from any error, such as messing up firewall config or similar. But there are transactional network management tools that can automatically roll back changes in case one messes up.
But the colo techs can do pretty much anything you would do yourself.. Plenty of people run racks in locations they have never set foot into themselves..
