DLP Policies for Active Flows

(0) Share

Report

Posted on by Tmach

Hi all,

Apologies if this has been asked before, I used the search but couldn't get any similar hits up.

I've been tasked to setup DLP for my organisation's environments and I just want to get a clear understanding of how things work, so I was doing some tests on basic flows but when I was creating some DLPs in a sandbox environment I noticed something strange.

I set up a simple flow using the template "Get The Weather Forecast Emailed to You Everyday" and I changed it to every minute.

The environment I created had no DLPs at the stage and started running fine - my email was getting spammed every minute :). I then added a DLP policy where the "MSN Weather" Connector remained in None Business Data but the "Office 365 Outlook" and "Office 365 Users" were moved to Business Data. The flow then continued to send me the weather for the next 15 minutes UNTIL I went to edit the flow at which point I was not able to enable the flow again due to the standard DLP error messages. The flow was then made inactive. I expected that I could not create new flows or change flows with the weather connector however I did not expect the flow to continue running until I made some kind of change to it. Is this expected behavior or a bug?

I can recreate this problem if anyone needs any futher info I'd be happy to provide

Categories:

Using connectors

I have the same question (0)

All responses (5)

Answers (1)

Sort by

Verified answer

Didi Chinda Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

@Tmach That is the expected behavior. When the Flow was created and running prior to the DLP policy being created, it does take a few minutes for the changes to sync over and a running flow will not be stopped or cancelled by the DLP policy. If you manually cancelled the flow or the flow completed and then you attempted to re-run it without making any changes, you would have gotten the error message.

Dejinmi

Was this reply helpful? Yes No
Tmach 10 on at

Like (0)

Report
Copy link

Link copied!

@Dejinmi Thanks for that clarification and the quick reply!

Was this reply helpful? Yes No
Tmach 10 on at

Like (0)

Report
Copy link

Link copied!

@Dejinmi Just so I'm sure, what do you mean by the definition of a "completed flow"? My only confusion is still that in my opion it completed every minute but the DLP was still picked up, is it only manual edits or runs of the flow which will resync the DLP?

Would a trigger from say a sharepoint list change pick up the DLP per run or until it was manually edited or run?

Was this reply helpful? Yes No
Didi Chinda Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

@Tmach Your flow "Get The Weather Forecast Emailed to You Every minute" is not triggered every minute nor does it complete every minute. It keeps running for 30 days and just keeps checking for updates to the weather forecast every minute. Yes, a trigger from a sharepoint list change will pick up the DLP. What i meant by complete is a flow run, so if SharePoint triggered a flow and while the flow was running changes were made to a DLP those changes will not disrupt the current flow run but once that completes successfully and SharePoint attempts to trigger another run of the Flow then that error message will be displayed.

I hope i explained it better :-).

Dejinmi

Was this reply helpful? Yes No
Tmach 10 on at

Like (0)

Report
Copy link

Link copied!

@Dejinmi wrote:
I hope i explained it better :-).

Dejinmi

You did great thanks a lot for your help! 😊

Was this reply helpful? Yes No