Dynamics 365 Project Operations - Add support to import tasks from other projects

🚨 The Signal: Dynamics 365 Project Operations will allow importing tasks from other projects. This feature streamlines project setup but introduces a new vector for data propagation and potential information disclosure if not properly managed.

The Impact

Project managers and data owners are affected, with a low security risk related to unintended data exposure.

  • Project Managers: Risk of inadvertently importing sensitive task data.
  • Data Owners: Risk of sensitive project information being exposed to unauthorized projects.
  • Compliance Teams: Need to review data handling policies for project task data.

The Action

  1. Review existing Dynamics 365 Project Operations security roles and permissions to ensure appropriate access to project data.
  2. Communicate to project managers the implications of importing tasks, emphasizing data sensitivity and access controls.
  3. Update internal data governance policies to specifically address the sharing and importing of project tasks across projects.

Domain: M365-Apps · Impact: low · Workload: M365 Apps