The security overview

In the portal, under Environments, click Development, and there Open. Flow opens in a new tab and you are signed in straight away.

Click Security in the bar on the left and choose Security. At the top is the score (100 is nothing found), the number of findings per severity and a score per module. Below are the findings, the most serious first. They are also in the Problems panel.

Below the score is one line about the audit log. Every entry of the audit log is sealed with the entry before it: whoever changes, removes or moves something afterwards breaks that chain. 'Chain intact' means everything is still as it was recorded. If something changed, this line says at which number the chain breaks (never what it said). Only people who may read the audit log see this line.

The dashboard Weekly sales overview is open to anyone with the link: whoever has the link sees it without signing in, and a forwarded link cannot be taken back. Every finding says in plain words why it matters. The same link has no end date either: that is a second, lighter finding.

Click Fix it: the dashboard opens. Click Share and choose Colleagues in this environment: only people who may view dashboards in this environment still see it, with their own rights. The open link stops working at once.

Back in the security overview, click Check again. The findings about the open link are gone and the score is higher.

In the explorer, under Home for colleagues, open Home and click Publish. First the check looks for anything left open. Here everyone's menu offers the HR colleague, who reads the confidential salary handbook: critical. Then you cannot just publish.

Best is to fix it: show the HR colleague only to the audience that needs it. If it really is intended, tick I accept the risk and write why. Only then is Publish anyway possible; who took the risk and why is in the audit log.