A plugin step set to run as a disabled user

Plugin step impersonates a disabled user account.

A step set to always run as a disabled user fails every time it fires, because Dataverse cannot build a run-as context for a disabled principal.

In the Plugin Registration Tool, check the run-as user on every step. Steps with an impersonating user set are worth listing, then cross-reference those users against disabled accounts. This one fails loudly at runtime, so it is often already a known problem without anyone having identified the cause.

Repoint the impersonation to an active service account, or remove it so the step runs as the caller.

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

• A disabled user account that still holds security roles
• A disabled user who still has records shared with them
• A flow or workflow owned by a disabled user
• A plugin step that always runs as the same named user