Welcome! A framework for deciding what to automate, delegate, or hand to an AI agent
Hey all. Starting this place because the helpdesk automation conversation is currently spread across r/sysadmin, r/msp, r/ITManagers, r/AI_Customer_Support, vendor blogs, LinkedIn echo chambers, and nowhere in particular. Wanted a focused space for IT and support practitioners actually building, scripting, and deploying this stuff to compare notes without the marketing noise.
To seed the discussion, here's a frame I've found useful for triaging repetitive helpdesk work. Three buckets, and most teams get them confused:
1. Automate it (write the script). Best for deterministic tasks with clear inputs and outputs: password resets when the user is verified, license assignments based on group membership, mailbox creation from HRIS events, offboarding sequences. PowerShell, Logic Apps, Make, n8n, whatever fits. Failure mode: trying to script things with too many edge cases. You spend 40 hours building something that breaks the first time HR sends a malformed input.
2. Delegate it (give the right human safe access). Best for low-skill but judgment-required tasks like resetting a password after verifying the user really is who they say they are, creating a guest account for a contractor, restoring a deleted file. These don't need IT involvement, but giving HR or a manager global admin to do them is malpractice. The right answer is scoped, delegated access.. JIT permissions, custom admin roles, or a purpose-built delegation tool. Failure mode: over-delegating (too much access for convenience) or under-delegating (everything still funnels through IT because "we don't trust the controls").
3. Hand it to an AI agent. Best for tasks that need natural-language understanding or judgment that's hard to express in code. Things like routing tickets to the right team, drafting first-response replies, summarizing long ticket threads for handoff, answering "how do I…" questions against your KB. Failure mode: treating the agent as a deterministic system. When it's wrong, it's confidently wrong, and without a human review loop on the high-impact actions, you'll be writing a postmortem within 90 days.
Most failed helpdesk automation projects I've seen pick the wrong bucket - usually using AI for something that should've been a script, or scripting something that should've been delegated.
What's the worst bucket-mismatch you've cleaned up?