PathixDataverse Forensics

← All 40 findings

Identity lifecycle & offboarding

A flow or workflow owned by a disabled user

Severity High

What it is

Enabled automation is owned by a disabled user account.

Why it matters

A live flow or workflow owned by a disabled account authenticates and runs under that owner, so it stalls or refuses reactivation, and the process it drove silently stops.

Find it yourself

List active workflows and flows with their owner, then cross-reference the owners against disabled users. Worth running whenever an incident timeline lines up with somebody's last day, because the failure usually surfaces months after the departure.

How to fix it

Reassign to a service account, re-test its connections, and add reassignment to offboarding.

Related controls

SOC 2 CC6.2ISO 27001 A.5.18NIST AC-2 / PS-4

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

Pathix checks this across every environment you scan, along with 39 other conditions. Self-hosted in your own Azure, read-only, metadata-only.

More in identity lifecycle & offboarding

← Back to all 40 findings

Pathix

Forensics for Dynamics 365 and the Dataverse.

See it on sample data →
USE CASES
CAPABILITIES
  • What we check
  • Dataverse MCPsoon
  • Dependency analysissoon
  • Migration impactsoon
PRODUCT
COMPANY
© 2026 Pathix · self-hosted · metadata-onlyNot affiliated with Microsoft. Dynamics 365, Dataverse, and Power Platform are trademarks of Microsoft Corporation.