Dynamics 365 Project Operations - Customize the task details pane

🚨 The Signal: Dynamics 365 Project Operations now allows customization of task details panes. This introduces new avenues for data exposure and potential for malicious business flow triggers if not properly secured, impacting data integrity and access control.

The Impact

Admins and Security Teams are affected by new customization options that could introduce data integrity and access control risks.

• Admins: Must review and secure new customization options to prevent data exposure.
• Security Teams: Need to assess custom business flows for unauthorized data access or manipulation.
• End Users: Could inadvertently trigger insecure flows if not properly configured and governed.

The Action

1. Review the 'Customize task details pane' documentation for security implications.
2. Enable the feature flag in Project Parameters for each environment only after security review.
3. Implement strict change management for all custom task fields and business flows.
4. Conduct security assessments of all custom business flows before deployment.
5. Ensure user training on the secure use of customized panes and triggered flows.

Domain: M365-Apps · Impact: high · Workload: M365 Apps · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898