[CoE Starter Kit - BUG] Some compliance flows are not listed in the setup documentation.

[medicineshow]

Describe the issue

There is no flow that will send emails to users requesting compliance status for Flows. The only flow that appears to be available is Admin | Compliance request complete flows v3 which is triggered when the BPF is completed, but how are you able to complete the BPF when you have no information provided by the flow owners?
We cannot see how compliance request information is gathered.

Please can you clarify?
There is no mention in the current documentation regarding the Admin | Compliance Details Request eMail (Flows) but we assume that this is a legacy flow that you have not removed? But this is only triggered when a table is modified.

Really confused, would appreciate it if you could explain. Thanks.

Expected Behavior

As per the compliance request flow for apps, a flow runs and requests users to provide detail regarding their flow and then a risk assessment can be conducted.

What solution are you experiencing the issue with?

Governance

What solution version are you using?

2.21

What app or flow are you having the issue with?

Admin | Compliance Details Request eMail (Flows)

Steps To Reproduce

No response

Anything else?

No response

[manuelap-msft]

Hello,

we currently have no criteria on when to ask for compliance details for a flow - for apps, this is based on how many users the app is shared with and how often it's launched, details we do not have for flow. So automatic request of compliance details for flows does not exist and never has!

However we had asks from customers to be able to manually request compliance details for flows - e.g. you look at the Power Platform Admin View, spot a flow you'd like to know more about and request compliance details there and then. This is possible by changing the Admin Requirement - Risk Assessment State to Requested.

Changing this status to requested will send (a) an email to the maker to inform them that compliance details have been requested and (b) start the BPF for the admin to follow the process.

Apologies, we have not gotten around to documenting this manual way of requesting compliance details in our public documentation yet.

[medicineshow]

Thanks for this information. It has stopped us tearing more hair from the head :).
So should those flows all be turned on?
Admin | Compliance Details Request eMail (Apps)
Admin | Compliance Details Request eMail (Chatbots)
Admin | Compliance Details Request eMail (Custom Connectors)
Admin | Compliance Details Request eMail (Desktop Flows)
Admin | Compliance Details Request eMail (Flows)

[Jenefer-Monroe]

Yes. If you go to the Admin - Command Center you can see all the flows needed for a particular solution area.

[medicineshow]

Thanks for that. You need to update the documentation regarding those flows. I can't find them mentioned anywhere. Much appreciate the advice as always.

[Jenefer-Monroe]

Thanks I'll mark this as a documentation bug then. Appreciate it.

[CoEStarterKitBot]

@medicineshow This has been fixed in the latest release. Please install the latest version of the toolkit following the instructions for installing updates. Note that if you do not remove the unmanaged layers as described there you will not receive updates from us.