IMPLEMENT GOVERNANCE COMPONENTS
Use Governance Components The governance components in Power Platform help organizations enforce policies, monitor usage, and maintain compliance across all apps and flows. They provide visibility into environments, track user activities, and ensure that development aligns with organizational standards. By implementing governance components, administrators can control permissions, prevent unauthorized actions, and manage resources efficiently. These components also facilitate auditing, reporting, and risk mitigation. Proper use of governance tools ensures consistent practices across teams while maintaining security. Overall, governance components strengthen control and accountability in app and workflow management.
Compliance Processes Compliance processes ensure that all apps, flows, and solutions adhere to organizational policies and regulatory standards.
Flows
| Flow Name | Type | Trigger | Purpose | Status |
|---|---|---|---|---|
| Daily Inventory Update | Cloud Flow | Scheduled (Daily) | Automatically updates inventory records | Active |
| Approvals Notification | Cloud Flow | When a new item is submitted | Sends approval requests to managers | Active |
| Data Sync to CRM | Solution Flow | On record creation or update | Syncs data from Dataverse to CRM | Inactive |
| Chatbot Compliance | Desktop Flow | Manual / Triggered by user | Monitors chatbot usage and compliance | Active |
| User Onboarding Flow | Cloud Flow | When a new user is added | Automates onboarding tasks | Active |
| Monthly Reports Export | Cloud Flow | Scheduled (Monthly) | Exports reports to SharePoint or email | Active |
Admin | Compliance Detail Request v3 Admin | Compliance Detail Request v3 provides administrators with detailed insights into compliance-related data across environments, apps, and flows. It consolidates information about app ownership, sharing patterns, usage metrics, and adherence to organizational policies. This tool helps track whether apps and flows meet security, auditing, and governance requirements. It provides visibility into permissions, user counts, group sharing, and app launch frequencies. Administrators can identify apps or flows requiring remediation or republishing. It supports reporting, dashboards, and audit logs, ensuring accurate data for corrective actions.
Apps Apps are software solutions built on Power Platform that automate processes, manage data, and improve business productivity.
- Developer Compliance Centre
- Developer Compliance Centre is a centralized platform to monitor, enforce, and manage compliance across apps, flows, and integrations. It provides visibility into solution versioning, permissions, sharing patterns, and usage metrics to ensure adherence to organizational policies and regulatory standards.
- Permission: Defines user access rights, controlling actions such as create, edit, share, or delete. Proper permissions ensure security and compliance.
- Prerequisite: Refers to the required knowledge, tools, or conditions necessary to perform a task successfully.
- Users:
- Admins: Configure compliance rules, monitor dashboards, and take corrective actions.
- Developers/Makers: Review compliance status, republish apps, and ensure apps meet policies.
- Auditors: Access reports and logs for audits.
- Governance Teams: Track usage trends, app sharing, and policy adherence.
- Compliance Status
- Compliance Status indicates whether apps, flows, or systems adhere to policies, security standards, and regulatory requirements.
- Key Points:
- Monitoring: Tracks adherence to standards.
- Visibility: Provides insights into compliant and non-compliant components.
- Alerts: Flags items needing attention.
- Reporting: Supports auditing and governance.
- Risk Management: Helps reduce operational and compliance risks.
- Corrective Action: Guides admins in remediation.
- Trend Analysis: Identifies compliance patterns over time.
- User Accountability: Tracks responsible users.
- Environment Assessment: Evaluates compliance across environments.
- Policy Enforcement: Ensures automated enforcement of rules.
Business Process Flows (BPFs) BPFs guide users through predefined stages and steps in a process, ensuring consistency and compliance in workflows and data entry.
- Power Apps App Approval BPF
- Power Apps App Approval BPF standardizes app approval processes, ensuring each app meets organizational policies before deployment. It tracks approval stages and provides visibility into pending and completed approvals.
- Users:
- Admins: Review, approve, or reject apps.
- App Makers/Developers: Submit apps for approval and track progress.
- Business Stakeholders: Provide feedback or validation.
- Compliance Officers: Ensure regulatory compliance.
- Governance Teams: Monitor approvals and maintain audit logs.
- Flow Approval BPF
- Manages approval of Power Automate flows, ensuring adherence to organizational policies.
- Users:
- Approvers: Evaluate and approve/reject flows.
- Creators: Submit flows for approval.
- Reviewers: Provide input on flow functionality.
- Chatbot Approval BPF
- Manages review and approval of chatbots, ensuring compliance before deployment.
- Users:
- Admins/Approvers: Review and approve/reject chatbots.
- Bot Creators: Submit chatbots and monitor status.
- Business Stakeholders: Provide feedback.
- Compliance Officers: Ensure regulatory compliance.
- Governance Teams: Track approval stages and maintain audit logs.
Activate Business Process Flows Activating BPFs ensures workflows, apps, or approvals follow predefined stages consistently. Steps include: accessing the environment, selecting BPF, enabling activation, verifying connections, and testing processes.
Tables Tables are structured containers in Dataverse that store and organize data for apps, flows, and business processes.
- Inactivity Processes & Notifications
- Inactivity Processes: Trigger actions when a record, flow, or task remains idle for a defined period.
- Inactivity Notifications Approval: Alerts approvers about idle records or processes, prompting review.
Admin | Inactivity Notifications v2 (Start Approval for Apps) Monitors app usage and triggers approval when inactivity is detected, ensuring apps remain actively maintained and compliant. Provides visibility, tracks approval stages, and maintains audit trails.
Admin | Inactivity Notifications (Check Approval) Allows administrators to review and verify pending approvals triggered by inactivity, ensuring compliance and accountability. Generates audit trails for reporting purposes.
Admin | Inactivity Notifications (Clean Up and Delete) Enables systematic cleanup and deletion of inactive or obsolete apps, flows, and resources, maintaining an organized and efficient environment.
Admin | Email Managers Ignored Inactivity Notifications Approvals Sends automated notifications to managers when inactivity approvals are ignored, ensuring accountability and timely governance actions.
Cleanup Old Objects App Identifies and removes outdated or unused apps, flows, and data objects to maintain a clean and compliant environment.
Microsoft Teams Governance Effective governance ensures secure, compliant, and organized collaboration, managing team creation, permissions, and usage.
Microsoft Teams Admin | Ask for Business Justification Captures business justification for new Teams environments to prevent unnecessary or duplicate teams.
Microsoft Teams Admin | Weekly Clean Up Regular cleanup removes redundant or unused Teams environments, ensuring efficient resource usage. Note: Verify ownership and data relevance before deletion. Important: Document cleanup actions and notify owners in advance.
Microsoft Teams Admin | Send Reminder Mail Automates reminders to environment owners about pending actions, ensuring timely governance and compliance.
Cleanup for Orphaned Resources Identifies and removes apps, flows, or Teams environments without active owners to maintain governance and security.
Admin | Quarantine Non-Compliant Apps Quarantines apps that fail compliance standards, temporarily restricting execution until remediation. Notifies app owners and maintains audit logs.
Admin | Set App Quarantine Status Temporarily restricts non-compliant or risky apps, ensuring only safe applications are active. Provides notifications and tracks remediation actions.
Additional Resources Training: Provides guidance on best practices, governance, and effective use of Power Platform for secure and compliant app development.