Dynamics 365 Project Operations: Optimize Project Operations - Perform bulk reconciliation of bookings from UI

🚨 The Signal: Dynamics 365 Project Operations now allows bulk reconciliation of resource bookings. This streamlines administrative tasks but introduces a new vector for potential data manipulation if not properly governed.

The Impact

Admins and project managers are affected; the risk is unauthorized bulk changes to project data if permissions are not reviewed.

• Project Managers: Risk of erroneous or malicious bulk booking changes if permissions are too broad.
• Security Teams: Need to review existing Dynamics 365 roles and permissions for bulk action capabilities.
• Auditors: Increased scrutiny on change logs for bulk operations to ensure accountability.

The Action

1. Review existing Dynamics 365 security roles and privileges for Project Operations.
2. Identify roles with 'Resource Reconciliation' permissions and assess if bulk actions are appropriate.
3. Implement or refine custom security roles to apply the principle of least privilege for bulk operations.
4. Monitor audit logs for bulk reconciliation activities to detect anomalous behaviour.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898