How do employees make changes/updates to the contacts?

All changes should be done in the Contact Source. CiraSync will then read these changes, update user mailboxes, and push these changes to users automatically.