HI,
MAy I know how do you interpret change request? I mean what do want to achieve with change type of request?
you can add only roles not system by configuring "provisioning settings". Plus you have to configure request type with "assign object" option. This will only allow you to select roles not system.
REgards,
FAisal