Dynamics 365 Customer Insights - Data: Elevate customer experiences - Use Microsoft Fabric OneLake as a data source

🚨 The Signal: Dynamics 365 Customer Insights - Data can now directly access customer data in Microsoft Fabric OneLake. This streamlines data ingestion, potentially exposing sensitive customer data if OneLake access controls are not robustly managed.

The Impact

Security teams and data owners are affected by new data access paths, increasing the risk of unauthorised data exposure if access controls are not rigorously applied.

• Security Teams: Increased risk of data exfiltration if OneLake access is not properly secured.
• Data Owners: New responsibility to ensure data classification and access policies extend to OneLake data sources.
• Compliance Teams: Need to verify that data residency and privacy controls are maintained across the new integration.
• IT Administrators: Must configure and monitor access permissions between Customer Insights - Data and OneLake.

The Action

1. Review and enforce least privilege access controls for Customer Insights - Data's service principal to OneLake.
2. Implement data classification and labelling policies within OneLake for sensitive customer data.
3. Audit existing Microsoft Fabric OneLake permissions to ensure only authorised entities can access customer data.
4. Verify data residency and compliance requirements are met for data flowing between OneLake and Customer Insights - Data.
5. Establish monitoring and alerting for unusual data access patterns from Customer Insights - Data to OneLake.

Domain: Other · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898