{"id":89,"date":"2020-06-08T10:00:00","date_gmt":"2020-06-08T08:00:00","guid":{"rendered":"https:\/\/klassen.digital\/?p=89"},"modified":"2021-10-27T11:40:42","modified_gmt":"2021-10-27T09:40:42","slug":"lowcode-nocode-blessing-or-curse-for-it","status":"publish","type":"post","link":"https:\/\/klassen.digital\/?p=89","title":{"rendered":"No Code apps built by users – Blessing or curse for IT?"},"content":{"rendered":"\n
\"D<\/figure>\n\n\n\n

With the public availability of the new AI supported Power Apps by Microsoft, enabling end users to do No Code application development, new opportunities and challenges arise for IT.<\/strong><\/p>\n\n\n\n

When I saw the keynote on new features of M365 during the M365 Virtual Marathon<\/a>, the first things that came to my mind were “who should support this?” and “That needs a completely new governance approach!”.<\/p>\n\n\n\n

To be clear about this: I am not talking about applications developed by IT or external partners – whatever methodology is used, a support concept is (or should be) part of the final product. In the ideal world the product will fit into the established processes like change and release management, service portfolio management and so on. Even in the real world, where not everything runs as ITIL would like it to, either IT or an external partner will provide support for the users and will take care for the application and its future. So, basically, nothing to worry about.<\/p>\n\n\n\n

From the old world…<\/h4>\n\n\n\n

The thing I want to shed some light on is applications developed by end users. In the Microsoft world, VBA macros in Office products were the standard playground for power users. Everyone who has done a Microsoft Office release upgrade has, I am sure, made some experiences with user built VBA code. In fact, VBA Office macros can be a real nightmare when it comes to release and language dependencies, and test and migration efforts during Office release upgrades are often underestimated during project preparations. <\/p>\n\n\n\n

Talking about ongoing support, as IT it is quite easy to write into your SLAs that VBA support will only be done up to certain point, for example as far as the skill set of the 1st level support reaches. Or you contract some external VBA developers to do the 2nd level support in case a user has a problem with an application that was inherited from a colleague who left the company. Costly, but manageable.<\/p>\n\n\n\n

When it comes to governance, there is not that much about it. Although you could use VBA to send mails around and automate mostly everything a user can do manually, it is still possible to restrict a lot of “evil” things by applying client GPOs. So, regardless of if you are in a small or enterprise grade business, user developed applications in the old MS world are something you could handle.<\/p>\n\n\n\n

…to the new world<\/h4>\n\n\n\n

Let’s get back to the keynote mentioned above. Have you ever implemented an automatic invoice recognition and processing solution? Quite a big project, especially when SAP is involved (what it usually is in bigger companies). What really impressed me in the keynote was a live demo, where exactly that (without SAP) was shown. Based on Power Tools, AI and SharePoint, within minutes an application was built that recognises scanned invoices and creates entries in a SharePoint list with columns holding key figures from the invoices. Building the application required basically nothing but the mouse, and some very few keystrokes for entering field names. Not a single line of code, no highly sophisticated middleware. And, most important: completely set up without IT being involved – provided that the tools had been made available to the end user beforehand. <\/p>\n\n\n\n

Regarding other governance topics such as data leakage prevention, Microsoft has learned a lot in the past months. With the standard, non-AI based security features you needed to set up dedicated rules, e.g. based on keywords. Nowadays you are able to define rules based on soft criteria like “contains financial data”, i.e. blocking everything that contains credit card numbers, account data, and so on. If you think this a bit further, you need to consult all business departments when setting up your new DLP rule set, and get a clear understanding of the communication requirements. I see this as a key topic for the future IT governance: Creating clear regulations on the use of the modern tools.<\/p>\n\n\n\n

A real life example: In Exchange Online you could apply a very granular rule set to define which kind of information flow is allowed and which not. But: these rules only worked for traffic through your own Exchange. As soon as a user set up a flow in MS Flow, the standard Microsoft mail environment outside your tenant was used to send mails, completely circumventing your EXO rule set. I have no information if that will change with the new AI based DLP.<\/p>\n\n\n\n

And beyond Microsoft?<\/h4>\n\n\n\n

Outside the MS world, an example for a no code development by the business is an application that was presented on a BMC user group meeting some time ago. Based on BMC’s Business Process solution, a logistics department was able to create a full blown driver and fleet management related application more or less on their own. It was a pilot project which was closely monitored and, where necessary, supported by IT, in a company where IT and the business had already been working closely together for quite some time.<\/p>\n\n\n\n

Power users: the new IT<\/h4>\n\n\n\n

The example above shows that if IT is involved in application development done by the business in a way that the same rules are applied to those applications as for the “classic” ones, application development by the business can be a benefit for both IT and the business. For IT, it is a chance to overcome the shortage of qualified developers. For the business, tailor made applications can be made available a very short notice, and with a high flexibility in rapidly changing market situations. And compared to the old times, where “the IT” delivered the applications “the users” worked with <\/em>but not on<\/em>, the Digital Natives <\/em>are now entering all kinds of companies, bringing in a completely different mind set and IT affinity, thus pushing the necessary cultural changes also into old fashioned, hierarchical structured “old economy” enterprises.<\/p>\n\n\n\n

The right amount of governance<\/h4>\n\n\n\n

The larger the company gets, the stronger the governance on IT use needs to be. This can be either in the direction of not allowing the business to develop their own applications, which is counter productive in times of rapid change and a lack of qualified IT staff. Or it can be in the direction of allowing the business to develop their own applications as far as technically possible, but at the same time clearly defining who is in charge of support and at which level, and from IT side fully understanding and utilising all means of data security, leakage prevention etc. <\/p>\n\n\n\n

Conclusion<\/h4>\n\n\n\n

If enabling the usage of the modern tools is done properly, it will be a benefit for all. If not, I see a strong risk of a rapidly growing shadow IT. In any case, the role of the classic IT has to change from a solution provider towards a solution enabler.<\/p>\n\n\n\n

Further reading<\/h4>\n\n\n\n

Power Apps: AI Builder<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

With the public availability of the new AI supported Power Apps by Microsoft, enabling end users to do No Code application development, new opportunities and challenges arise for IT. More → <\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pgc_sgb_lightbox_settings":"","footnotes":""},"categories":[13,8,9,12,6,11,10],"tags":[],"class_list":["post-89","post","type-post","status-publish","format-standard","hentry","category-ai","category-low-code","category-no-code","category-power-apps","category-role-of-it","category-shadow-it","category-user-support"],"_links":{"self":[{"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/posts\/89","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/klassen.digital\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=89"}],"version-history":[{"count":24,"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions"}],"predecessor-version":[{"id":371,"href":"https:\/\/klassen.digital\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions\/371"}],"wp:attachment":[{"href":"https:\/\/klassen.digital\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=89"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/klassen.digital\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=89"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/klassen.digital\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=89"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}