Dynamics 365 Commerce: Store Commerce - Configure inline actions on transaction line items in Store Commerce

🚨 The Signal: Dynamics 365 Commerce Store Commerce now allows customisation of inline actions on transaction line items. This enables retailers to tailor point-of-sale operations, potentially affecting access control and operational workflows.

The Impact

Dynamics 365 Commerce administrators are affected by new configuration options that could introduce security risks if not properly managed.

  • D365 Administrators: Risk of misconfiguration leading to unauthorised operations.
  • Security Teams: Need to review and approve custom operations for compliance.
  • Store Associates: Potential for altered workflows, requiring updated training and awareness.

The Action

  1. Review existing Screen Layout Designer configurations in Dynamics 365 Commerce headquarters.
  2. Define a policy for approving and deploying custom inline actions, ensuring least privilege.
  3. Implement change management for all modifications to transaction line item actions.
  4. Conduct regular audits of configured inline actions to verify adherence to security policies.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898