HCL Launch makes securely managing deployments easier for a national retail company

The Solution

Making life easier with automation

With help from their client advocate, the retailer used HCL Launch, our enterprise-level continuous delivery platform, to implement a tight security model with auditing and traceability. Using “permissions” the DevOps team can define specific actions (like read, write, and delete) as they relate to specific entities (like environments and processes). With “roles” the DevOps team can define categories of individuals and assign those categories permissions. For example, an organization can create a deployment specialist role, which has access to run deployments but cannot edit any processes. The number of roles and permissions is unlimited in HCL Launch and can be organized by team, so it is completely customizable to each organization’s unique needs. HCL Launch’s roles and permissions feature creates a division of labor between those who can edit and modify your processes and those who run your deployments, ensuring solid process control and better security. In addition, all deployments and modifications are tracked through audit logs that can be saved within the tool or exported elsewhere for safe keeping.

To eliminate the need for a homegrown ServiceNow integration, the retailer’s DevOps team implemented HCL Launch’s external approvals feature. This feature automatically checks for an approved change approval ticket (such as ServiceNow or BMC Remedy) matching the request before a deployment can begin. External approvals apply best DevOps practices to the change approval boards’ requirements without sacrificing speed or control.

Saving time and resources

Once the DevOps team set up their roles and permissions in HCL Launch, they migrated several other teams into the HCL Launch server to allow them to interact directly with the UI and run their own deployments. Even though more teams are now involved, the organization’s cost did not increase because giving more users access to HCL Launch does not require additional licenses, resources, or infrastructure. With HCL Launch’s method of managing the who, what, and when of deployment activity, the DevOps team leaders no longer need to worry about users interrupting a process or manipulating a deployment. The organization is able to onboard new teams and users, allowing the DevOps pipeline to flow more smoothly and teams to work more autonomously with the necessary guardrails.

Since HCL Launch’s external approvals solved the ServiceNow integration issue, the retailer was able to reduce workload, costs, and infrastructure by eliminating the need for their homegrown stopgap. Now, the Middleware DevOps team can onboard more users and improve other DevOps services. Plus, external approvals provide another way of ensuring that the change approval board follows the company’s defined security requirements by seamlessly automating deployment validation.

Using HCL Launch, this retailer removed bottlenecks in their DevOps pipeline, reallocated development resources, and provided a more autonomous continuous delivery experience for more employees. With these benefits, the organization can deliver better quality applications faster for their customers.