Dynamics 365 Project Operations: Optimize Project Operations - Resolve invoice proposal blocked in workflow

🚨 The Signal: Dynamics 365 Project Operations now allows project accountants and managers to reset failed invoice workflows. This reduces reliance on IT for operational issues, potentially bypassing established change management and security review processes for critical financial workflows.

The Impact

Project accountants and managers can now bypass IT for workflow resets, creating a risk of unapproved changes to financial processes.

• Project Accountants: Can alter financial workflows without IT oversight, risking unapproved process changes.
• Project Managers: Can alter financial workflows without IT oversight, risking unapproved process changes.
• Security Teams: Reduced visibility into changes made to critical financial system workflows.
• Audit Teams: Potential for unlogged or unreviewed changes to financial processes, complicating audits.

The Action

1. Review existing Dynamics 365 Project Operations roles for Project Accountant and Project Manager.
2. Assess if current role assignments align with the principle of least privilege for workflow reset capabilities.
3. Implement or update internal policies requiring documentation and approval for any workflow status resets, even if self-serviced.
4. Configure auditing and alerting for the 'Reset invoice proposal workflow status' action to monitor usage.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898