---
sourceDocument: Yokohama Build workflows
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/build-workflows

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Build workflows

ft:clusterId :

    - crworkflow

bundleId :

    - crworkflow

workflow :

    - Creator


---

# Create a flow with roles

# Create a flow with roles {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Create a flow or subflow that runs with assigned roles. Assigning roles enables you
to create a user-initiated flow that runs with its own roles rather than the user's
roles.

## Before you begin

Role required: flow_designer or admin

## About this task

Create a user-initiated flow that runs with its own roles and not the roles of the user. For more information about assigning roles to a flow, go to [Flow roles](https://www.servicenow.com/docs/UrPflPT1lnKO2S9Zs1iqvw "Create flows and subflows that run with specific roles. Assigning roles enables you to create user-initiated flows that run with their own roles rather than the user's roles."). For example, allow a flow to run with the itil role so that it can access data belonging to IT Service Management applications such as incidents and problems.

## Procedure

1. Navigate to AllProcess AutomationFlow Designer.
2. Click + NewFlow or + NewSubflow.
3. On the Flow Properties form, define the Name, Application, and Description for the flow.  
   For more information, see [Create a flow in Workflow Studio](https://www.servicenow.com/docs/yY82uZapEVc3O5SdguStOA "Run a sequence of actions and flow logic when the trigger conditions occur.").
4. Expand the Additional properties section.
5. In the Run As field, select User who initiates session.  
   Role selection is not available if the System User option is selected in the Run As field.
6. In the Run with roles field, select one or more roles that you want the flow to use while it runs.  
   The roles you select replace any roles that the user normally has. If you don't select any roles, then the flow runs with the roles normally associated with the user.  
   Tip:  
   If you have the Explicit Roles plugin (com.glide.explicit_roles) activated, add the snc_internal role to your flow.  
   For example, an inbound email flow normally runs as an existing user or as the Guest user when there is no existing user. Guest users don't have access to IT Service Management data such as incidents and problems. Running a flow without any roles may produce access errors when the flow tries to access restricted data on the guest user's behalf. Running a flow with a role such as itil ensures that the flow can access the data it needs.
7. Select Build Flow.

## What to do next

Continue to build and test your flow until you're ready to activate it. You can
modify your flow's roles at any time by updating the Flow Properties form.

*[\>]: and then