An AI Builder model or prompt owned by a disabled user

AI Builder model is owned by a disabled user account.

A published model keeps being callable from flows and agents regardless of its owner, while the paths that would retire or retrain it run through an account that cannot act. Models built during an experiment and never removed are the common case.

List msdyn_aimodel rows with their owner and join to systemuser, filtering to disabled accounts. Exclude the SYSTEM account, which owns Microsoft's prebuilt models and is disabled by design.

Reassign the model in the AI hub to an active owner, preferring a service account or a team; if it is no longer used, check what still calls it, then unpublish and delete it.

This is a security finding that carries no SOC 2, ISO 27001, NIST 800-53 or CMMC reference. That is a decision rather than an omission. Pathix maps a finding to a control only where the mapping is defensible to an assessor, and a stretched one would undermine every mapping that is real.

• A disabled user account that still holds security roles
• A disabled user who still has records shared with them
• A flow or workflow owned by a disabled user
• A Copilot Studio agent owned by a disabled user