Power Automate Flow Creation or Deletion with Permissions Set

Shadows VMB@Vemorian_Mort

•updated Aug 30, 2026•2•0•52

Detects instances where a specific user creates or deletes a Microsoft Power Automate flow that has active sharing permissions configured, potentially indicating unauthorized workflow manipulation or persistence attempts.