Dynamics 365 Project Operations: Import tasks into a project from other projects

🚨 The Signal: Dynamics 365 Project Operations now allows importing specific tasks from existing projects into new ones. This streamlines project creation but requires vigilance to prevent accidental exposure of sensitive project data.

The Impact

Project managers and users are affected; the risk is unintentional data exposure if sensitive tasks are imported into less secure projects.

• Project Managers: Risk of inadvertently exposing sensitive project tasks to broader audiences.
• Users: Potential for misconfigured access to imported tasks if permissions are not reviewed.
• Security Teams: Need to ensure data classification and access policies are applied consistently to new projects.
• Compliance Officers: Risk of non-compliance if sensitive data is moved without proper controls.

The Action

1. Review existing Dynamics 365 Project Operations security roles and permissions for project data.
2. Educate project managers on the implications of importing tasks, especially regarding data sensitivity.
3. Implement data classification labels for project tasks to guide appropriate handling.
4. Regularly audit project access to ensure least privilege is maintained for imported tasks.

Domain: Other · Impact: medium · Workload: Other