RUN-PA-001 / SOURCE CONTROLLED
Orphaned Power Automate recovery runbook
Use this runbook when a production cloud flow has personal ownership or connections and the maker is unavailable or disabled.
● CONTROLLEDOWNER / SYSTEM 8REVIEW / MONTHLY
Zero gate: protect business state
- Name an incident lead and business decision owner.
- Choose one temporary intake channel; stop resubmission.
- Suspend financial, access or customer-changing side effects where integrity is uncertain.
- Record the last known-good transaction and export run evidence.
Dependency inventory
| OBJECT | CAPTURE |
|---|---|
| Flow | Environment, solution, definition, owners, child flows |
| Connections | Connector, identity, auth type, permission, expiry |
| Destinations | Mailbox, site/list, Dataverse table, API, gateway |
| Controls | DLP, licence, secret, certificate, business approval |
Controlled repair
- Copy/export before editing production.
- Select purpose-built identities and minimum rights.
- Move into a solution; use connection references and environment variables.
- Add accountable co-owners and a backup operator.
- Rebind and test one connector at a time.
- Introduce an idempotency key before replay.
Transaction reconciliation
Join source item, run ID, business identifier, approval and target record. Have the business owner classify each item as valid, duplicate, incomplete or externally executed. Replay from a reviewed queue and state which side effects will repeat.
Acceptance
- Normal, rejection and deliberate-failure tests pass.
- Duplicate protection holds.
- Connector audit shows the intended identities.
- A second operator can locate, test and recover the flow from this record.
- Owner/connection review is scheduled quarterly and at offboarding.