OSM's COSduty-SSA for automated operations, runbook, privileged user management, password vault Security, management, automation, compliance - for UNIX, Linux and Windows

Operations automation, duty scheduling and runbook support

The element of COSduty-SSA functionality which demonstrates most extensively the value of its OSM Toolset foundations is that of operations automation and duty scheduling. This is the area where operations' processes are captured and delegated for subsequent re-use. A collection of such processes can for the basis of an automated runbook. A good example is Sun Microsystems' i-Runbook Automated Edition, although many organizations create their own.

Procedures and delegation

As soon as processes have been captured, refined and equipped with a simple user interface, they may be delegated for use, under the supervision of the COSduty-SSA operations workflow engine.

Each procedure is delegated, typically to a group of individuals, by associating it with a 'role'. A procedure, once delegated, is known as a 'duty'. Duties may be delegated on a scheduled, automatic or 'at request' basis. Those that require no interaction are run by COSduty-SSA in the background, with COSduty-SSA acting as a simple job scheduler.

Duties requiring interaction with staff are delegated either as 'scheduled' or 'at request' types. Scheduled duties are those intended to be performed regularly, according to a calendar. 'At request' duties may be performed at any time by staff authorised to run them, namely those who are members of the designated 'role'.

Important characteristics of the delegation and execution mechanisms are:

  • Duties may be given any meaningful name which helps their identification and selection from an on-screen list
  • The procedure contained in a duty may operate on one or more systems
  • Duties containing procedures which require privileged user rights may be delegated to roles whose members do not have those rights
  • When a duty is executed, the user never logs in to a shell. Instead he/she interacts with one by means of the usual GUI objects — windows, menus, dialog boxes and forms.

Checking that procedures have been performed

All duties performed under the control of COSduty-SSA are logged for future review and audit.

For every execution, a record is kept of the date and time when the duty was performed and who performed it The system(s) affected are recorded, along with the exit status of the duty and any comments made by the operator. Later, reporting tools may be applied to the log file data so as to run any query.

Knowledge bases already available

COSduty-SSA makes it easy for site-specific routines can be captured by local administrators and built into the local knowledge base. Much of the work carried out by administrators, however, is generic so OSM has developed standard knowledge bases for the convenience of customers.

Other organisations have undertaken similar developments. For example, Sun Microsystems has enhanced its online runbook — the Sun i-Runbook Service — with an Automated Edition containing some 150 Solaris 10 operations procedures which may be run from the i-Runbook list with a single button-click. The AE is largely based on COSduty-SSA.

Benefits of procedures and delegation

Knowledge management  Routines normally carried out by technicians — systems administrators, DBAs, application administrators etc. — can be captured for unlimited re-use within a common menu and forms structure. The knowledge is retained and survives the departure of the original author

Common standards  Differences between managed operating systems, for example Solaris and Linux, are hidden by the user interface so that performing the same task on any system appears the same

Policy enforcement  Policy is enforced and best practice can be introduced in a controlled manner

Error control   Errors are reduced as the technical knowledge required to work with a difficult command-line interface is retained in duties and administrators work with a far more intuitive interface

SLA compliance   Service levels are improved as many more staff can perform procedures which were previously dependent on particular, skilled individuals

Reduced costs   Costs are reduced through automation and delegation

Full accountability  Accountability is ensured through monitoring of all tasks and security is improved through a reduction in privileged access events

Personnel retention   Skilled technicians are released from mundane, routine housekeeping tasks and made free for more productive and rewarding work

 

Privacy

Legal

Contact

Copyright© 2007  Open Systems Management Limited