Editorial note
Carefully framed- Some examples are deliberately abstracted to keep the judgement useful without exposing private systems, people, weaknesses or operational detail.
- Access models, role logic, identity flows, approval steps and any joiner, mover or leaver workflow detail.
- Scripts, logs, exception patterns and named systems tied to live access relationships.
- Current control weaknesses, review gaps or environment-specific identity design.
1. Grounded opening
Automation is easy to praise for speed. That is rarely the most important part.
The more durable value often appears somewhere quieter: fewer routine access decisions made slightly differently, fewer avoidable variations between similar cases and less dependence on memory to recreate what should already be a standard pattern.
That may sound less exciting than time saved, but I think it is more important. In live environments, inconsistency creates more long-term friction than slowness does. People can usually tolerate a short delay. They struggle much more with unpredictable service setup, uneven entitlement and support questions caused by avoidable variation.
That is why I think automation matters most when it makes access more consistent.
2. What the issue actually is
The weak version of the argument is familiar: automation saves time and reduces manual effort.
That is true, but the deeper issue is standardisation. Routine access and service-starting activity often becomes noisy because the organisation has too many manual judgement points in places that should already be settled. Different people interpret the normal case slightly differently. Small variations accumulate. Support and governance both inherit the ambiguity.
Automation, at its best, does not remove judgement entirely. It removes repeated judgement where the organisation should already have decided what normal looks like. That is a control improvement as much as an efficiency improvement.
So the real question is not how many clicks disappeared. It is whether the normal case became steadier, easier to review and less dependent on individual memory or interpretation.
3. Why it matters in practice
This matters because inconsistent access creates noise in several directions at once. The organisation feels it when routine service starts do not behave consistently, when support inherits preventable variation and when similar cases produce outcomes that are harder to explain than they should be.
The leadership consequence is easy to underestimate. If routine access outcomes vary too much, confidence in ownership starts thinning out. What should be a standard service begins to look more ad hoc than it should. Even when the environment is functioning, avoidable inconsistency quietly increases operational drag.
At Head of IT level, this is not a scripting vanity project. It is part of deciding what the organisation believes a normal service start should look like and how much variation it is willing to tolerate around that standard.
That is one reason I think automation belongs inside infrastructure leadership and governance rather than sitting off to the side as a technical convenience.
4. What had to be balanced
Useful automation has to balance consistency against flexibility. If the organisation has not defined the normal case well enough, automation can simply harden weak assumptions more efficiently. The answer is not to avoid automation. It is to be stricter about what gets standardised and why.
There is also a balance between speed and oversight. The temptation is to celebrate reduced manual work as soon as it appears. That is fine up to a point, but the more important question is whether review, exception handling and accountability remain clear afterwards.
Another tension sits between local convenience and estate-wide discipline. Manual workarounds often survive because they feel helpful in the moment. Automation challenges that by asking the organisation to trust a common path more consistently. That is good for control, but only if the underlying path is actually worth trusting.
This is why I am more interested in the quality of the standard than in the visibility of the code.
5. What changed or what the work clarified
What this work clarified for me is that the real value of automation often appears in the questions it removes. If fewer routine cases need explaining, fewer preventable fixes are required afterwards and fewer exceptions are created accidentally, the service has probably improved in a meaningful way.
It also clarified how closely automation and governance are linked. The moment a routine action becomes repeatable, the organisation is making a statement about what it considers normal, acceptable and reviewable. That is not only a technical decision. It is a control decision.
I think differently now about the success test. I am less interested in whether the automation looks clever and more interested in whether the resulting service is calmer, more consistent and easier to own. If it is, the automation is doing useful work. If not, the script may still be efficient while the service remains weakly governed.
That is the standard I would keep returning to.
6. What stayed messy
Automation does not remove messy edges. Some cases remain exceptions. Some service decisions are still ambiguous because the wider organisation has not defined them firmly enough. Some inherited practice turns out to be harder to standardise than expected without forcing a more fundamental design conversation.
There is also a risk of mistaking automation for policy. It is not. If the underlying ownership and review model is weak, automation can simply reproduce that weakness more consistently. That is an improvement in one sense and a warning in another.
This is why I think public commentary on automation often drifts too quickly into tools and not quickly enough into governance. The hard part is not writing the repetitive action down. The hard part is deciding what the repetitive action should mean.
7. Broader lesson
The broader lesson is that the best automation work usually improves operational truth before it improves theatre.
If routine service-starting decisions become steadier, easier to review and less dependent on memory, the organisation has gained something more durable than a time-saving trick. It has improved its control environment.
That is why I treat automation as supporting proof of infrastructure leadership rather than as a separate technical hobby. It shows how clearly the normal case has been defined and how seriously the organisation takes consistency once people start depending on the service.
8. Closing
I do not think automation matters most when it moves fastest.
I think it matters most when it makes routine decisions harder to get wrong, easier to review and less dependent on whoever happened to be doing the work that day.
That is when automation stops being convenience and starts becoming control.
Contents
Read next
About the publication
I write about infrastructure, security, governance and service delivery in complex organisations, with a focus on how decisions hold up under real operational pressure.