PathixDataverse Forensics

← All 72 findings

Identity lifecycle & offboarding

A flow or workflow owned by a disabled user

Severity High

What it is

Enabled automation is owned by a disabled user account.

Why it matters

A live flow or workflow owned by a disabled account authenticates and runs under that owner, so it stalls or refuses reactivation, and the process it drove silently stops.

Find it yourself

List active workflows and flows with their owner, then cross-reference the owners against disabled users. Worth running whenever an incident timeline lines up with somebody's last day, because the failure usually surfaces months after the departure.

How to fix it

Reassign to a service account, re-test its connections, and add reassignment to offboarding.

Related controls

SOC 2 CC6.2ISO 27001 A.5.18NIST AC-2 / PS-4

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

CMMC relevance

CMMC PS.L2-3.9.2

This condition produces evidence for PS.L2-3.9.2 (Level 2: protect systems containing CUI during and after personnel actions such as termination), for the Dataverse system in your assessment scope. A flow keeps running in its owner's context after that owner is disabled. The personnel action removed the person and left their access executing on a schedule.

Pathix is not a CMMC compliance platform. It does not assess the rest of your environment, mappings are indicative, and assessment outcomes rest with your assessor.

Pathix checks this across every environment you scan, along with 71 other conditions. Self-hosted in your own Azure, read-only, metadata-only.

More in identity lifecycle & offboarding

← Back to all 72 findings

© 2026 Pathix L.L.C. · self-hosted · metadata-only
Not affiliated with Microsoft. Dynamics 365, Dataverse, and Power Platform are trademarks of Microsoft Corporation.π