# \#change-management **URL:** https://community.autommate.com/tag/change-management/49.md [Latest](https://community.autommate.com/latest.md) · [Categories](https://community.autommate.com/categories.md) · [Tags](https://community.autommate.com/tags.md) --- ## [Unblock standard changes with policy gates and governed runbooks](https://community.autommate.com/t/unblock-standard-changes-with-policy-gates-and-governed-runbooks/164)
**Author:** [@Caglayan](https://community.autommate.com/u/Caglayan)\ **Replies:** 0\ **Last updated:** [March 31, 2026, 12:35am UTC](https://community.autommate.com/t/unblock-standard-changes-with-policy-gates-and-governed-runbooks/164 "2026-03-31T00:35:13Z")
Scenario (from the Change Manager’s chair) Last quarter we tightened change control after a few bad outages. Now we have the opposite problem: routine, low-risk “standard changes” (like restarting a stuck Windows service… --- ## [Stop certificate expiry outages with governed ITSM renewals](https://community.autommate.com/t/stop-certificate-expiry-outages-with-governed-itsm-renewals/158)
**Author:** [@Caglayan](https://community.autommate.com/u/Caglayan)\ **Replies:** 0\ **Last updated:** [March 29, 2026, 12:27pm UTC](https://community.autommate.com/t/stop-certificate-expiry-outages-with-governed-itsm-renewals/158 "2026-03-29T12:27:55Z")
Stop “expired cert” outages with governed renewals from ITSM Certificate expirations are one of those problems everyone knows about… until a weekend outage proves the reminders weren’t enough. The recurring pattern: M… --- ## [Govern settlement file mapping drift with approvals and replay](https://community.autommate.com/t/govern-settlement-file-mapping-drift-with-approvals-and-replay/146)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 26, 2026, 12:31am UTC](https://community.autommate.com/t/govern-settlement-file-mapping-drift-with-approvals-and-replay/146 "2026-03-26T00:31:11Z")
Payment settlement file drift: governed mapping updates with approvals + replay Settlement reconciliation breaks in a very specific (and common) way: Your processor/marketplace changes a settlement report format withou… --- ## [Govern-dns-changes-from-servicenow-with-approvals-and-rollback](https://community.autommate.com/t/govern-dns-changes-from-servicenow-with-approvals-and-rollback/145)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 26, 2026, 12:28am UTC](https://community.autommate.com/t/govern-dns-changes-from-servicenow-with-approvals-and-rollback/145 "2026-03-26T00:28:00Z")
Problem: change approvals happen… but the DNS change never gets executed A recurring ITSM failure mode: a ServiceNow change request (or standard change) gets approved, the CAB notes are clean, but the actual DNS work (Ro… --- ## [Fix CMDB owner drift with governed, deterministic execution](https://community.autommate.com/t/fix-cmdb-owner-drift-with-governed-deterministic-execution/127)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 21, 2026, 12:27pm UTC](https://community.autommate.com/t/fix-cmdb-owner-drift-with-governed-deterministic-execution/127 "2026-03-21T12:27:58Z")
When the CMDB lies: governed CI-owner fixes that actually execute A recurring ITSM pain: incidents and changes get routed to the wrong team because the CMDB “support group / CI owner” fields drift after org changes, app … --- ## [Govern certificate renewals with approved, deterministic deployment runs](https://community.autommate.com/t/govern-certificate-renewals-with-approved-deterministic-deployment-runs/121)
**Author:** [@Caglayan](https://community.autommate.com/u/Caglayan)\ **Replies:** 0\ **Last updated:** [March 20, 2026, 12:28am UTC](https://community.autommate.com/t/govern-certificate-renewals-with-approved-deterministic-deployment-runs/121 "2026-03-20T00:28:03Z")
Problem: cert renewals still cause outages because the “ticket → action” gap is real SSL/TLS certificate expirations are still a classic SEV-1 trigger: monitoring fires, users report “connection not private,” and the ser… --- ## [Governed-maintenance-mode-to-prevent-monitoring-ticket-storms](https://community.autommate.com/t/governed-maintenance-mode-to-prevent-monitoring-ticket-storms/113)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 18, 2026, 12:28am UTC](https://community.autommate.com/t/governed-maintenance-mode-to-prevent-monitoring-ticket-storms/113 "2026-03-18T00:28:06Z")
Governed “maintenance mode” that actually stops ticket storms A recurring ITSM pain: you schedule maintenance, but monitoring still fires alerts (or auto-resolves them in weird ways), and the service desk gets flooded wi… --- ## [Governed SCIM key rotations before provisioning breaks](https://community.autommate.com/t/governed-scim-key-rotations-before-provisioning-breaks/108)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 16, 2026, 6:00am UTC](https://community.autommate.com/t/governed-scim-key-rotations-before-provisioning-breaks/108 "2026-03-16T06:00:30Z")
The problem: SCIM keys are about to start expiring (and nobody owns them) Atlassian has started rolling out SCIM API key expirations (keys will be set to expire between May 1, 2026 and May 1, 2027). That’s great for secu… --- ## [Governed Azure DevOps global PAT migration before March 15, 2026](https://community.autommate.com/t/governed-azure-devops-global-pat-migration-before-march-15-2026/105)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 2\ **Last updated:** [March 13, 2026, 6:22am UTC](https://community.autommate.com/t/governed-azure-devops-global-pat-migration-before-march-15-2026/105 "2026-03-13T06:22:48Z")
The problem: Azure DevOps global PAT retirement is about to break “quiet” automations Microsoft is retiring Global Personal Access Tokens (PATs) in Azure DevOps, and March 15, 2026 is a key cutoff: creation of new global… --- ## [Govern OIDC trust changes in CI/CD with deterministic approvals](https://community.autommate.com/t/govern-oidc-trust-changes-in-ci-cd-with-deterministic-approvals/102)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 10, 2026, 6:00am UTC](https://community.autommate.com/t/govern-oidc-trust-changes-in-ci-cd-with-deterministic-approvals/102 "2026-03-10T06:00:39Z")
The problem: CI/CD “tokenless” OIDC is safer… until it isn’t GitHub Actions OIDC is increasingly used to eliminate long‑lived secrets, and platforms are adding more OIDC-based publishing and provenance features (for exam… --- ## [Passkey migration without AI-driven auth policy drift](https://community.autommate.com/t/passkey-migration-without-ai-driven-auth-policy-drift/99)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 4, 2026, 6:14am UTC](https://community.autommate.com/t/passkey-migration-without-ai-driven-auth-policy-drift/99 "2026-03-04T06:14:15Z")
The current IT problem: passkey profile auto-migration + “AI helpdesk” risk Microsoft Entra ID is rolling out passkey profiles in March 2026, with automatic tenant migration starting April–May 2026 for orgs that don’t op… --- ## [Stop SMTP Basic Auth Breakage With Approved, Audited Automation](https://community.autommate.com/t/stop-smtp-basic-auth-breakage-with-approved-audited-automation/97)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 3, 2026, 2:03pm UTC](https://community.autommate.com/t/stop-smtp-basic-auth-breakage-with-approved-audited-automation/97 "2026-03-03T14:03:31Z")
The problem (happening right now) Microsoft 365 / Exchange Online is in the middle of retiring Basic auth for SMTP AUTH client submission, which breaks a lot of “quiet” automations (ticket notifications, approval emails,… --- ## [AI change risk vs approval drift: enforce guardrails with Autom Mate](https://community.autommate.com/t/ai-change-risk-vs-approval-drift-enforce-guardrails-with-autom-mate/95)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 3, 2026, 11:39am UTC](https://community.autommate.com/t/ai-change-risk-vs-approval-drift-enforce-guardrails-with-autom-mate/95 "2026-03-03T11:39:20Z")
The problem: AI-assisted change risk is here… but approvals still break Atlassian is actively rolling out AI capabilities around change risk assessment in Jira Service Management (JSM). That’s great for speed, but it als…