IT 自动化解决方案的选择标准

如果您正在为您的公司寻找新的 IT 解决方案，通常会有不同的制造商提供不同的解决方案。您如何找到合适的 IT 解决方案来满足您的需求？如果要为您的公司提供真正的附加值，每个 IT 解决方案都应该满足一些基本标准。我们将它们收集在我们的系列中。

有一点很重要，这是最重要的标准：如果您正在寻找一种用于运营 IT 运营的解决方案，那么请确保新解决方案支持自下而上的方法（即“设置它”，即直接在运营中提供支持）业务）并且不按照自上而下的方法运作。

选择 IT 解决方案 - 自上而下与自下而上

在这里，我们让任何采用自上而下方法的解决方案与自下而上方法（以 ScriptRunner 为例）在不同类别（标准）中竞争。

第 1 部分：功能、可用性和成本

功能：IT 解决方案为您的公司带来了哪些附加值？

使用 ScriptRunner 自下而上：

The focus here is on solutions and products for the full automation of the entire IT infrastructure and its processes, i.e. above all complex IT service management (ITSM), orchestration, workflow or monitoring platforms. These are less specialized in scripting than in knowledge.

These approaches are driven to a large extent by visions and often leave out operational framework conditions.

通过使用 PowerShell 编写脚本，支持流程和日常任务变得更加高效，服务台或最终用户可以快速执行停用用户、重置密码和许多其他日常任务等操作，而不会影响安全性。

• ScriptRunner 从日常 IT 运营中开始，它会“伤害”并快速提供结果。
• 使用连接器可以轻松集成到上述具有复杂工作流程的基于知识的平台。因此，可以在工作流程中调用ScriptRunner。

可用性：IT 解决方案的操作容易程度如何（例如，用户界面设计是否直观、需要多少培训）？

使用 ScriptRunner 自下而上：

In the administrative area, such workflow or orchestration platforms in the UI are very multi-layered and complex, sometimes with several consoles that must/can mesh with each other.

End-user interfaces are designed for intuitive usability. However, user/key user training is required to map procurement processes or approval processes, for example.

• User interfaces complex and sometimes multi-layered
• Training efforts in the administrative area high, in the end-user area manageable

管理员和 DevOps 在团队中开发脚本，并由集成的 PowerShell ISE 应用程序提供支持。所有设置（例如执行策略和分配的配置）均通过管理应用程序定义，并分配或委托给不同的用户组（例如服务台）来执行。

借助 ScriptRunner Portal 应用程序，帮助台员工可以使用简单的图形界面通过浏览器安全地执行脚本，而无需具备脚本知识或对系统的管理访问权限。

• 用户界面的功能保持简单
• 授权区域的培训工作量很小，为零。

成本（一次性、持续）：IT 解决方案的总拥有成本 (TCO) 是多少？

使用 ScriptRunner 自下而上：

Projects usually take several months/years, high training and education costs in the administrative area, sometimes high dependencies on the manufacturer or service provider are given, because know-how is often not available in-house and has to be purchased. This can often be seen in the case of updates or upgrades of these solutions, where external support usually must be obtained.

• Very high costs due to the high complexity and the large scope, updates are complex, etc.

ScriptRunner可以逐步持续扩展，任何进展都可以立即使用。重复性任务和流程的总成本永久降低，您可以实现可持续的效率提升。对 ScriptRunner 的投资和用例的实施对日常任务的总成本产生了快速而积极的影响。

• 结果是分布式且成本更低，复杂性显着降低，并且自动化各个阶段的范围易于管理。

第 2 部分：性能、人力和可扩展性要求

IT 解决方案的性能 - IT 解决方案是否以所需的速度在（低成本）标准硬件上运行？

一般来说，这两个系统都在虚拟基础设施中运行，并且在 CPU、RAM 等性能方面都有标准要求。工作流、ITSM 或编排平台通常需要更高的性能。

使用 ScriptRunner 自下而上：

In addition, some systems from this environment are available as public cloud services. This means that the host systems and the application are operated entirely by the provider and do not have to be provided by the customer.

主机系统 通常在客户网络（私有云）中运行，不能作为公共云服务提供。

人力和知识/技能要求：IT解决方案是否需要高水平的人力（包括稀有知识/技能）？

使用 ScriptRunner 自下而上：

There is a high risk here due to overburdened requirements for a solution and a high workload for the IT teams. Broad skills and a lot of specialist know-how are required. The more complex a planned solution is, the more complex the project and operations become.

Often only very few employees are to be found in these process operating teams, which often do not possess the necessary in-depth know-how (AD, Exchange etc.). This results in long maintenance times and queries about requirements arising from IT operations.

可管理的额外工作量以及逐步的技能和经验培养有助于日常运营的实施和介绍。

ScriptRunner ActionPacks 还缩短了 PowerShell 自动化的介绍。 ActionPack 是面向产品和主题的脚本集合，其中包含 Active Directory、Exchange、Office 365、Windows Server 和客户端、VMware、Citrix 等日常任务的典型用例。

可扩展性：如果添加额外的资源来处理增加的负载，IT 解决方案能否增加其输出？

使用 ScriptRunner 自下而上：

Workflow, ITSM or orchestration platforms typically require a little more steam under the hood but scale up best when needed. With public cloud solutions, this point is completely omitted again. Most systems have an advantage due to their mature high availability options.

CPU 和内存通常不是 PowerShell 脚本并行执行的限制资源。每个脚本的执行需要很少的 RAM。

ScriptRunner 还有一个额外的优点，即可以配置 ScriptRunner 操作，以便 PowerShell 执行本身也可以在目标系统上进行，即不一定在 ScriptRunner 主机本地（PowerShell 远程、PowerShell 隐式远程）。这提供了额外的负载平衡。

第 3 部分：敏捷性、灵活性和适应性、可维护性和接口

敏捷性、灵活性、适应性：IT 解决方案能否轻松快速地适应新需求（例如无需编程）？

使用 ScriptRunner 自下而上：

The logic here lies in the very complex and complex workflows or processes, resulting in a lack of flexibility. This can only be compensated for by very high programming costs for new requirements or extensions to existing use cases. As already described above, operational framework conditions are left out of the equation.

Since the process teams cannot usually react agilely to the requirements of the specialist departments or IT operating teams, this leads to a poor cost/benefit ratio.

这里的逻辑在于PowerShell脚本本身，因此可以非常灵活地进行调整。 ScriptRunner 解释脚本参数并自动以图形方式显示它们。无需对 GUI 进行编程。

基于可以在操作技术执行级别上自动化的任务和流程，第二步可以包括进一步的相关系统，例如监控、服务应用程序、工作流程和编排解决方案。这种敏捷、快速、务实的方法能够在日常业务中快速取得成果，并具有非常好的成本效益比。

可维护性：IT 解决方案是否易于安装、操作、维护和升级？

使用 ScriptRunner 自下而上：

Updates and upgrades for IT Service Management (ITSM) and orchestration workflow solutions are often complex and time-consuming. The solutions usually involve a mixture of local applications installed on the clients and web applications.

In contrast to ScriptRunner, where the logic lies in the PowerShell script itself, in workflows you must pay special attention to where and in which places the manufacturer has tweaked the new versions by adding new features and changes.

If changes affect the workflow itself, extensive testing must be carried out both before and after the changes.

ScriptRunner 主机或 ScriptRunner 服务的更新和升级应始终与 ScriptRunner Web 应用程序的更新同步进行。更新本身很简单，新的安装文件将“安装在其上”。先前安装的设置将被接管，不应更改。

大多数用户通过浏览器使用管理和委托应用程序。 ScriptRunner 支持所有常见的 Web 浏览器（IE、Edge、Mozilla Firefox、Chrome）。因此，新版本的推出非常容易，因为只需在 Web 服务器上进行更改。因此，无需向客户端推出软件。

应考虑浏览器设置的缓存行为。要更新浏览器缓存中的 JavaScript 文件，您可以结合使用 CTRL-F5 和在浏览器中重新加载应用程序。

接口：IT 解决方案是否提供开放或专有接口来与其他 IT 解决方案连接？

使用 ScriptRunner 自下而上：

Complex IT service management (ITSM), orchestration workflow solutions usually have open interfaces such as REST. This basically allows the integration of the solution with other products.

The security plays a very important role here, required administrative credentials are usually transferred in plain text in a script, for example. This poses hurdles for many companies, as restrictive regulations often stand in the way of such use.

通过标准化连接器（WebService、电子邮件入站、SQL），许多不同的第三方系统可以快速、轻松地与 ScriptRunner 集成，以完成自动化解决方案。这允许第三方系统以受控且安全的方式调用 ScriptRunner，反之亦然。例子有：

• 任务和事件自动化
• 监控自动化
• 服务管理和服务自动化
• 编排和工作流程自动化
• 应用自动化

第 4 部分：企业 IT 架构的可持续性和一致性

可持续性：IT解决方案提供商是否会在中长期内进一步开发和支持IT解决方案？

使用 ScriptRunner 自下而上：

It can be observed that there are not very many providers on the market who often interlink several individual solutions under one flagship. As a result, there are many updates, which often bring only a few real new features with them.

The dependencies between the individual solutions and the interaction of the interfaces are sometimes serious. Looking at last year (as of July 2018), it can be observed that more and more solutions are being purchased, resulting in consolidation to an even smaller number of providers. The extent to which or to which the purchased product is integrated is therefore always a black box and leaves customers feeling insecure.

Medium- and long-term support is very secure for large customers in the enterprise segment.

ScriptRunner 不是市场上的全新参与者，但拥有稳定的客户群，每年至少提供一个主要版本和 2-3 个功能/次要版本。大多数新功能都是基于客户的功能请求。

ScriptRunner 平台入门 - 五个按主题分开的 Web 会话，您不仅可以了解 ScriptRunner 的各个功能，还可以更深入地了解 PowerShell 和 ScriptRunner 的功能和交互 - 确保介绍顺利且伴随。

除了不断进一步开发并专门提供给客户的 ActionPack（针对各个主题领域的 ScriptRunner 优化的脚本集合）之外，还提供针对各个领域（集成到第三方系统等）的专业服务和研讨会。也可以预约。

与企业IT架构的一致性：IT解决方案是否符合贵公司企业IT架构设定的标准？

The solutions for full automation are located at the process or logic level.

This usually leads to very complex processes. The following figure shows the stages of transformation. The process level tries to cover the two upper levels “High Level” and “Fully automated”. The previously established stages often remain outside. If one tries to address these previously established levels, one realizes that the lack of agility delivers few and very late results for the actual day-to-day operations.

Approach to architecture for IT infrastructure transformation jouney. Source: IDC newsletter “Optimization drives digital transformation” 2017

ScriptRunner works exactly differently. The focus is on operational requirements that optimize day-to-day operations and quickly lead to results with low investment. Due to theopen architecture with suitable interfaces to various systems(including process level) of the enterprise architecture, ScriptRunner can be integrated quickly and easily.

If, for example, a leading workflow system is integrated with ScriptRunner, this has the enormous advantage that the workflows that ScriptRunner calls at one point remain lean. Changes are then made directly in the script. It is no longer necessary to touch the complete workflow.

第 5 部分：IT 治理、云功能和文档

IT 治理：IT 解决方案是否充分支持 IT 治理要求（例如基于角色的授权概念）？

首先澄清一下术语：

• 身份验证：将登录数据输入系统（断言身份）
• 验证：系统或上级对断言的验证以及验证结果（来自认证的断言验证）
• 授权：检查权利，然后授予或拒绝它们

使用 ScriptRunner 自下而上：

The systems usually have a very complex rights and role system, very finely granularly adjustable, which of course also leaves room for errors, since rights that were granted at a time are often no longer automatically removed. Coupling to one-time password systems or similar is usually possible. In the case of requirements or executions from self-service portals, etc., a release process for authorization can often also be triggered.

ScriptRunner 有两个角色 - 管理员和操作员。

管理员定义脚本执行的准则，并定义对操作员或第三方系统的委托，然后操作员或第三方系统按照其权利和角色执行操作。这样做的优点是可以简化管理帐户。即使管理员或子管理员也不再需要扩展权限来使用目标系统上的图形 UI 执行脚本。

为了防止管理员使用其他区域的适当凭据访问目标系统，实践中运行了多个 ScriptRunner 实例。门户应用程序的用户可以看到来自不同主机的操作，具体取决于他们是否获得授权。

在执行时释放进程或保护应用程序或命令提示符的登录。目前还无法输入额外的一次性密码。

云能力：IT 解决方案能否作为私有云或公共云解决方案运行？

使用 ScriptRunner 自下而上：

Some providers offer full public cloud functionality, the cloud infrastructure is usually always active. Multi-instance architecture, some manufacturers guarantee that not one customer instance is ever offline. This is a high-availability infrastructure that provides redundancy for the instances between two data center clusters.

Other manufacturers are only able to operate On-premise or in the private cloud.

ScriptRunner 是本地部署的，也可以在私有云中运行，目前没有公共云功能。

不同语言的文档和支持：IT 解决方案的文档对于用户和操作员来说有多好？文档有哪些语言版本？

使用 ScriptRunner 自下而上：

As a rule, several languages are supported in the user interface. The documentation is very detailed, and the customer often doesn’t get any further with deeper questions and configuration adjustments. This usually requires the involvement of the manufacturer or a service provider.

用户界面和文档有德语和英语版本。

预定义的 ActionPack 是根据 Microsoft 最佳实践在 GitHub 中开发的，并有详细记录。

有关配置查询、连接到第三方系统、创建脚本等的更多有用信息，请参阅知识库和 ScriptRunner 博客。